$ rpki-client -vvf rpki.apnic.net/member_repository/A919BC3B/C6BD547C39EE11EFA43D6586C4F9AE02/6PdV5x9e1_kTRSz_zj7UIIgSGmg.mft File: 6PdV5x9e1_kTRSz_zj7UIIgSGmg.mft (raw, json) Hash identifier: CDAT7EvrpALdfGFNcYaRhAsynDS96ItsWcJlfdgYaxc= Subject key identifier: D5:4F:7C:87:57:DD:5B:47:30:56:87:3F:57:5B:2F:49:E0:45:58:C2 Authority key identifier: E8:F7:55:E7:1F:5E:D7:F9:13:45:2C:FF:CE:3E:D4:20:88:12:1A:68 Certificate issuer: /CN=A919BC3B/serialNumber=E8F755E71F5ED7F913452CFFCE3ED42088121A68 Certificate serial: D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6PdV5x9e1_kTRSz_zj7UIIgSGmg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919BC3B/C6BD547C39EE11EFA43D6586C4F9AE02/6PdV5x9e1_kTRSz_zj7UIIgSGmg.mft Manifest number: D1 Signing time: Sat 09 Aug 2025 06:05:09 +0000 Manifest this update: Sat 09 Aug 2025 06:05:08 +0000 Manifest next update: Sat 16 Aug 2025 06:05:08 +0000 Files and hashes: 1: 6PdV5x9e1_kTRSz_zj7UIIgSGmg.crl (hash: 1MPOhQR3sJYlC1TYUmVNW+QEMJYIOxtM7dHQ06amShA=) 2: 2C00BB1239EF11EFB6EE4687C4F9AE02.roa (hash: zJmy/7bWwOw3097+xOhmcdnCp+p0bjqozGeHRbB5Gck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919BC3B/C6BD547C39EE11EFA43D6586C4F9AE02/6PdV5x9e1_kTRSz_zj7UIIgSGmg.crl rsync://rpki.apnic.net/member_repository/A919BC3B/C6BD547C39EE11EFA43D6586C4F9AE02/6PdV5x9e1_kTRSz_zj7UIIgSGmg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6PdV5x9e1_kTRSz_zj7UIIgSGmg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919BC3B, serialNumber=E8F755E71F5ED7F913452CFFCE3ED42088121A68 Validity Not Before: Aug 9 06:05:08 2025 GMT Not After : Aug 16 06:05:08 2025 GMT Subject: CN=6896e515-7222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4e:6f:b9:cc:21:ad:5a:65:97:6e:63:12:a5: c8:d3:b0:0f:12:78:f3:4a:61:c8:05:3c:7d:bc:ee: d1:df:ab:8d:23:46:f7:70:d4:19:06:5b:5e:1c:52: 9b:95:de:c2:35:58:48:0b:c8:38:be:0e:55:10:f6: f4:7d:bf:e5:88:71:f1:35:6c:cf:58:bf:54:d2:cf: 48:63:e2:02:5f:1f:ec:2d:a3:ad:68:50:94:0e:f2: 0f:6d:83:29:5b:81:84:7f:43:05:49:37:07:18:ba: b9:1d:c3:b8:40:5f:97:e0:84:c6:76:b3:7a:ac:71: 1b:7c:74:df:04:87:68:97:86:53:f5:aa:df:84:57: 34:03:6b:e7:3d:9f:88:a2:c9:b5:ef:dc:56:52:66: a1:de:01:b6:1e:4b:76:a0:a9:0a:0a:79:03:4a:f3: e2:39:44:e9:16:56:b3:6a:97:d1:44:42:2e:d4:40: 79:8a:36:b7:a9:3e:ae:13:c4:91:73:17:4f:70:ac: 63:35:7b:36:63:70:66:22:51:95:60:df:31:f0:61: 20:bb:24:a7:f0:a2:ca:30:6e:bb:57:80:8c:44:15: 0d:02:57:2b:7c:03:8d:59:5c:c2:3d:ee:e4:49:86: 36:2d:06:7d:0d:dd:4d:b7:72:3c:9d:86:fa:88:38: de:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:4F:7C:87:57:DD:5B:47:30:56:87:3F:57:5B:2F:49:E0:45:58:C2 X509v3 Authority Key Identifier: keyid:E8:F7:55:E7:1F:5E:D7:F9:13:45:2C:FF:CE:3E:D4:20:88:12:1A:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919BC3B/C6BD547C39EE11EFA43D6586C4F9AE02/6PdV5x9e1_kTRSz_zj7UIIgSGmg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6PdV5x9e1_kTRSz_zj7UIIgSGmg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BC3B/C6BD547C39EE11EFA43D6586C4F9AE02/6PdV5x9e1_kTRSz_zj7UIIgSGmg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:0a:6f:b5:c9:89:ba:e1:30:72:5a:9f:53:6c:50:79:33:57: 38:69:19:d0:df:34:a1:93:4a:fb:8c:b9:d8:cd:20:d0:2d:f3: 45:10:f7:d0:cb:31:65:88:cc:bc:6a:69:7d:4e:ea:05:b6:04: 9f:7b:a1:36:e6:c6:16:ca:e5:c3:4f:4c:04:b6:43:1a:6d:b3: 1d:77:e8:a1:10:c9:52:03:a7:72:58:75:b0:f6:2d:9e:87:eb: 91:8a:1b:12:68:d2:fe:3d:54:8e:b8:05:04:5b:31:b6:95:ff: 37:0f:4d:76:3c:e7:0d:f2:8f:2c:e1:d9:04:2b:14:95:16:06: 68:a7:38:c6:70:19:b9:db:e9:d5:4e:15:1e:2f:d3:d5:30:79: 69:62:aa:e3:09:b8:ba:97:17:3f:fc:05:ac:dc:bd:7b:6c:b1: 56:79:ad:8c:38:e5:76:36:aa:18:f6:cd:63:eb:44:b5:7f:17: 88:88:ef:1c:2d:be:a9:33:02:e2:4c:f1:87:b7:a8:75:44:e5: d0:fb:7c:8f:52:11:9d:67:6a:d8:70:39:2a:a5:20:63:1e:50: 91:00:c4:05:3c:a4:a6:b5:49:12:f0:e5:bf:e8:7d:0f:d9:26: 62:15:bc:d8:ef:3d:14:15:33:4a:57:d3:40:60:bb:09:5e:45: 29:10:5a:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUJDM0IxMTAvBgNVBAUTKEU4Rjc1NUU3MUY1RUQ3RjkxMzQ1MkNGRkNFM0VENDIw ODgxMjFBNjgwHhcNMjUwODA5MDYwNTA4WhcNMjUwODE2MDYwNTA4WjAYMRYwFAYD VQQDEw02ODk2ZTUxNS03MjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvk5vucwhrVpll25jEqXI07APEnjzSmHIBTx9vO7R36uNI0b3cNQZBlteHFKb ld7CNVhIC8g4vg5VEPb0fb/liHHxNWzPWL9U0s9IY+ICXx/sLaOtaFCUDvIPbYMp W4GEf0MFSTcHGLq5HcO4QF+X4ITGdrN6rHEbfHTfBIdol4ZT9arfhFc0A2vnPZ+I osm179xWUmah3gG2Hkt2oKkKCnkDSvPiOUTpFlazapfRREIu1EB5ija3qT6uE8SR cxdPcKxjNXs2Y3BmIlGVYN8x8GEguySn8KLKMG67V4CMRBUNAlcrfAONWVzCPe7k SYY2LQZ9Dd1Nt3I8nYb6iDjetQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNVPfIdX 3VtHMFaHP1dbL0ngRVjCMB8GA1UdIwQYMBaAFOj3VecfXtf5E0Us/84+1CCIEhpo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QkMzQi9DNkJENTQ3QzM5 RUUxMUVGQTQzRDY1ODZDNEY5QUUwMi82UGRWNXg5ZTFfa1RSU3pfemo3VUlJZ1NH bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZQZFY1eDllMV9rVFJTel96ajdVSUlnU0dtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QkMzQi9DNkJENTQ3QzM5RUUxMUVGQTQzRDY1ODZDNEY5QUUwMi82UGRWNXg5ZTFf a1RSU3pfemo3VUlJZ1NHbWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtCm+1yYm64TByWp9TbFB5M1c4aRnQ3zShk0r7jLnYzSDQLfNFEPfQ yzFliMy8aml9TuoFtgSfe6E25sYWyuXDT0wEtkMabbMdd+ihEMlSA6dyWHWw9i2e h+uRihsSaNL+PVSOuAUEWzG2lf83D012POcN8o8s4dkEKxSVFgZopzjGcBm52+nV ThUeL9PVMHlpYqrjCbi6lxc//AWs3L17bLFWea2MOOV2NqoY9s1j60S1fxeIiO8c Lb6pMwLiTPGHt6h1ROXQ+3yPUhGdZ2rYcDkqpSBjHlCRAMQFPKSmtUkS8OW/6H0P 2SZiFbzY7z0UFTNKV9NAYLsJXkUpEFq0 -----END CERTIFICATE-----Generated at Sun Aug 10 10:34:47 2025 by rpki-client