$ rpki-client -vvf rpki.apnic.net/member_repository/A918770D/176D4114ED2311E6938FD318C4F9AE02/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.mft File: G6-CUdGhP0GIBgqxmgMNNsqnq9Q.mft (raw, json) Hash identifier: gD5Tn3rOaCe+RzIvrXhHhvmf/O9Tc7u3YK1miz700TA= Subject key identifier: 55:49:98:7D:E4:E2:13:B3:AC:35:3A:86:C9:B7:99:29:64:9B:5B:65 Authority key identifier: 1B:AF:82:51:D1:A1:3F:41:88:06:0A:B1:9A:03:0D:36:CA:A7:AB:D4 Certificate issuer: /CN=A918770D/serialNumber=1BAF8251D1A13F4188060AB19A030D36CAA7ABD4 Certificate serial: 1C3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918770D/176D4114ED2311E6938FD318C4F9AE02/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.mft Manifest number: 1C2F Signing time: Mon 04 Aug 2025 16:21:08 +0000 Manifest this update: Mon 04 Aug 2025 16:21:07 +0000 Manifest next update: Mon 11 Aug 2025 16:21:07 +0000 Files and hashes: 1: G6-CUdGhP0GIBgqxmgMNNsqnq9Q.crl (hash: NNTK4ekRCMshbPSDW/YMznLnKZOMiFb+QBGbz2aTowM=) 2: 6C5A7912ED2311E680140D19C4F9AE02.roa (hash: w+6iR/F583nwtLejN1ZMM4mivM5f0eBnZv1CsfpH8hw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918770D/176D4114ED2311E6938FD318C4F9AE02/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.crl rsync://rpki.apnic.net/member_repository/A918770D/176D4114ED2311E6938FD318C4F9AE02/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 16:21:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7229 (0x1c3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918770D, serialNumber=1BAF8251D1A13F4188060AB19A030D36CAA7ABD4 Validity Not Before: Aug 4 16:21:07 2025 GMT Not After : Aug 11 16:21:07 2025 GMT Subject: CN=6890ddf4-09a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:89:71:28:2f:57:19:1b:b9:c0:01:dd:01:ae: d6:11:99:7e:0a:eb:22:2c:5b:38:63:35:5e:3f:eb: 78:ba:cd:38:38:38:58:dd:96:5e:64:ed:7e:af:e9: 28:31:3b:66:95:f9:2a:53:c7:ff:36:d5:70:e8:a3: 11:78:34:3f:fb:63:26:1b:db:fe:17:cd:56:92:2b: 51:99:32:9c:f1:ff:a7:da:95:00:c4:8b:1c:3e:59: 3e:f5:aa:f0:b6:a1:99:7d:1f:b2:3a:7a:fa:95:75: a4:d7:b1:05:ea:3b:4c:e3:5e:0c:54:f3:b8:d4:65: f4:30:4f:5d:be:49:42:dc:5b:6a:c0:72:44:f3:5e: 5d:d0:0d:5f:0e:9c:2b:e4:65:2a:d7:73:30:0d:c4: 5c:2b:d7:49:78:10:a4:ae:1d:23:7d:88:c3:7c:ec: 70:5a:23:20:40:55:68:f0:50:12:f4:71:e1:fa:ee: 47:cf:ff:5c:1d:1b:b4:18:ba:b9:ca:ff:03:5f:5e: 08:21:00:ee:0d:69:32:a8:f7:4e:48:dd:06:0a:a5: 13:e0:a8:c9:49:ad:69:3a:6d:53:19:c1:ea:fd:d0: 90:b1:68:3d:ce:91:95:ce:9e:3d:1a:39:9e:26:3f: 71:72:2b:4b:03:4c:25:1c:78:c0:80:4a:bd:2f:dd: 66:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:49:98:7D:E4:E2:13:B3:AC:35:3A:86:C9:B7:99:29:64:9B:5B:65 X509v3 Authority Key Identifier: keyid:1B:AF:82:51:D1:A1:3F:41:88:06:0A:B1:9A:03:0D:36:CA:A7:AB:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918770D/176D4114ED2311E6938FD318C4F9AE02/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918770D/176D4114ED2311E6938FD318C4F9AE02/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:8b:52:43:11:1b:50:d9:5d:e2:b8:b4:4c:2d:03:a2:54:33: 5f:3d:f7:bd:72:3d:a5:77:49:d6:f8:70:63:4c:0a:8a:59:90: b6:af:f8:c9:ed:d6:5c:a5:d3:0d:27:16:9c:99:13:8c:6e:6f: b2:20:5b:61:1c:27:79:cc:0d:ef:a7:ce:ca:1f:67:71:e0:c9: 96:79:5e:ed:82:35:ee:87:48:7d:bd:f7:49:62:ae:cf:98:9a: 40:42:1a:03:fe:6d:20:94:d3:eb:04:fe:12:3e:9a:45:51:e3: d5:6f:dd:8d:1f:c6:ac:97:9c:89:32:ab:16:c5:94:8d:1e:d1: 42:5e:f8:a3:a6:29:2e:af:64:08:aa:42:3c:45:47:92:04:50: d5:e4:5c:bd:73:72:a2:bf:61:4a:bb:32:66:21:96:c6:79:33: cb:d9:42:c5:a9:11:49:a7:e5:aa:f1:53:77:fb:ff:7c:14:37: 8c:a0:b1:f6:cb:45:c1:4a:b3:ad:c4:dd:ec:85:fd:0e:4f:f5: bc:69:fe:2c:48:7b:43:86:5c:be:fd:6a:83:e2:57:af:22:a3: e6:2b:bb:ce:2a:f1:d0:87:69:ac:b6:98:af:f7:be:27:fe:06: 83:e5:f9:d4:6f:e0:e5:13:9c:71:4f:95:7c:c1:8d:61:25:75: f1:df:1a:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc3MEQxMTAvBgNVBAUTKDFCQUY4MjUxRDFBMTNGNDE4ODA2MEFCMTlBMDMwRDM2 Q0FBN0FCRDQwHhcNMjUwODA0MTYyMTA3WhcNMjUwODExMTYyMTA3WjAYMRYwFAYD VQQDEw02ODkwZGRmNC0wOWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvYlxKC9XGRu5wAHdAa7WEZl+CusiLFs4YzVeP+t4us04ODhY3ZZeZO1+r+ko MTtmlfkqU8f/NtVw6KMReDQ/+2MmG9v+F81WkitRmTKc8f+n2pUAxIscPlk+9arw tqGZfR+yOnr6lXWk17EF6jtM414MVPO41GX0ME9dvklC3FtqwHJE815d0A1fDpwr 5GUq13MwDcRcK9dJeBCkrh0jfYjDfOxwWiMgQFVo8FAS9HHh+u5Hz/9cHRu0GLq5 yv8DX14IIQDuDWkyqPdOSN0GCqUT4KjJSa1pOm1TGcHq/dCQsWg9zpGVzp49Gjme Jj9xcitLA0wlHHjAgEq9L91mTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFVJmH3k 4hOzrDU6hsm3mSlkm1tlMB8GA1UdIwQYMBaAFBuvglHRoT9BiAYKsZoDDTbKp6vU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzcwRC8xNzZENDExNEVE MjMxMUU2OTM4RkQzMThDNEY5QUUwMi9HNi1DVWRHaFAwR0lCZ3F4bWdNTk5zcW5x OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c2LUNVZEdoUDBHSUJncXhtZ01OTnNxbnE5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzcwRC8xNzZENDExNEVEMjMxMUU2OTM4RkQzMThDNEY5QUUwMi9HNi1DVWRHaFAw R0lCZ3F4bWdNTk5zcW5xOVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQi1JDERtQ2V3iuLRMLQOiVDNfPfe9cj2ld0nW+HBjTAqKWZC2r/jJ 7dZcpdMNJxacmROMbm+yIFthHCd5zA3vp87KH2dx4MmWeV7tgjXuh0h9vfdJYq7P mJpAQhoD/m0glNPrBP4SPppFUePVb92NH8asl5yJMqsWxZSNHtFCXvijpikur2QI qkI8RUeSBFDV5Fy9c3Kiv2FKuzJmIZbGeTPL2ULFqRFJp+Wq8VN3+/98FDeMoLH2 y0XBSrOtxN3shf0OT/W8af4sSHtDhly+/WqD4levIqPmK7vOKvHQh2mstpiv974n /gaD5fnUb+DlE5xxT5V8wY1hJXXx3xot -----END CERTIFICATE-----Generated at Wed Aug 6 16:17:36 2025 by rpki-client