$ rpki-client -vvf rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.mft File: 6GcXUDRPGMKvdH_68lWFDrx50B8.mft (raw, json) Hash identifier: uKmkt5R22/Dd99uKgySZWoxnB4tIXMSP1tPuOvvxrGo= Subject key identifier: 44:F3:DA:3A:65:F9:B7:2A:F6:88:12:F7:00:AF:D5:DC:73:0C:06:6E Authority key identifier: E8:67:17:50:34:4F:18:C2:AF:74:7F:FA:F2:55:85:0E:BC:79:D0:1F Certificate issuer: /CN=A9114DDF/serialNumber=E8671750344F18C2AF747FFAF255850EBC79D01F Certificate serial: 039A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GcXUDRPGMKvdH_68lWFDrx50B8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.mft Manifest number: 0392 Signing time: Thu 03 Jul 2025 01:11:42 +0000 Manifest this update: Thu 03 Jul 2025 01:11:42 +0000 Manifest next update: Thu 10 Jul 2025 01:11:42 +0000 Files and hashes: 1: 6GcXUDRPGMKvdH_68lWFDrx50B8.crl (hash: XmnujWnlsuGEomx5D9l4DY8GV9Wzvh4NU2NowkCocQQ=) 2: FFFC26F0A51C11EC8394365BC4F9AE02.roa (hash: lo57P9VBB46ycGdmIW/WQMt7Bnu1G5Vu55lF8eOkAJo=) 3: FF46137EA51C11EC8394365BC4F9AE02.roa (hash: pjuKTxitr3okr7uU46xmlWjTNZ4Ce4fMa5LiHSn7lO8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.crl rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GcXUDRPGMKvdH_68lWFDrx50B8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:11:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 922 (0x39a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114DDF, serialNumber=E8671750344F18C2AF747FFAF255850EBC79D01F Validity Not Before: Jul 3 01:11:42 2025 GMT Not After : Jul 10 01:11:42 2025 GMT Subject: CN=6865d8ce-7f76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f2:9b:1a:f0:70:0a:f5:ad:38:58:27:b9:ec: 46:9d:c4:f6:8b:63:78:2d:b5:a2:18:cd:ef:4f:6d: 8f:72:d2:c2:4b:37:9f:ff:51:67:c9:17:78:48:c5: ce:f4:b9:52:09:2c:89:40:80:73:d6:ba:f9:b3:fc: 37:5e:02:fe:30:dd:66:40:04:2f:10:e9:83:dc:c8: 86:8e:1d:33:6d:22:3b:40:91:e4:5e:29:db:8b:c3: 1c:2b:3f:78:5d:b0:8e:36:b7:9b:9f:02:9e:84:c8: ec:4e:a6:2a:7b:89:ae:0d:aa:e6:f4:e4:36:8c:b4: e1:5c:c9:fd:3f:ba:0c:0e:72:98:32:2f:91:dd:f3: c2:05:01:d9:5f:75:25:b5:be:06:2f:5d:3c:8a:2d: f6:75:6b:6d:82:19:e6:c5:18:25:05:c8:ff:a6:2a: fb:26:58:ae:92:9b:96:bc:c8:2e:00:c0:0d:8a:d5: bc:13:87:e3:b8:b1:c1:17:53:74:84:1c:c7:76:36: 73:2f:0e:b7:7a:10:f9:c0:9c:b9:c0:0a:e2:07:bf: 45:a0:3e:85:a9:39:46:85:f7:e3:3e:05:c0:2b:64: a0:07:fa:30:25:9a:66:ca:98:17:cf:d5:12:7a:bd: be:89:ec:92:34:33:3c:72:76:87:b9:78:a9:6a:22: 34:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:F3:DA:3A:65:F9:B7:2A:F6:88:12:F7:00:AF:D5:DC:73:0C:06:6E X509v3 Authority Key Identifier: keyid:E8:67:17:50:34:4F:18:C2:AF:74:7F:FA:F2:55:85:0E:BC:79:D0:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GcXUDRPGMKvdH_68lWFDrx50B8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:c9:28:2c:df:1b:37:bc:8b:38:6a:bc:a3:53:5e:b7:97:68: c2:6b:94:89:89:11:cd:15:68:2d:1a:e3:cd:f2:00:39:e0:be: 16:cb:7c:2c:ff:48:6e:d3:91:67:d9:ac:49:06:41:31:41:ec: f2:2f:a8:9d:4a:6f:22:63:2c:35:1e:a9:3b:3e:8e:e5:cb:80: 69:c8:07:98:ca:d2:c8:ad:df:c6:9c:a9:94:c6:53:08:38:1d: 96:ca:88:d9:46:31:90:3e:0a:fb:f7:36:67:fd:a0:c4:cd:6c: 7b:dd:3b:c3:ee:22:2a:49:2d:4d:bc:fa:9c:31:8c:0b:0d:e8: d5:67:62:a9:cb:a8:eb:d3:9a:c9:f8:2a:6d:d5:ff:1a:aa:63: 9f:fe:38:fa:cb:38:d7:bd:7f:ef:81:7c:1e:dd:8a:c5:05:82: 05:e2:4e:08:ed:47:14:f0:04:8f:73:72:be:ad:bc:eb:7f:1c: 86:cd:3a:42:44:0d:03:dd:78:67:9f:43:2f:7a:7e:79:a8:26: c9:16:2b:c7:3a:e2:01:42:f7:25:21:41:3c:20:e2:21:2b:22: 8a:84:cb:ab:e6:44:a6:03:b4:fc:1a:35:d9:37:e6:5f:c0:6d: 88:49:2a:c6:5c:5c:46:99:8d:65:49:3b:71:bf:11:ff:8f:47: 4e:0b:cb:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTREREYxMTAvBgNVBAUTKEU4NjcxNzUwMzQ0RjE4QzJBRjc0N0ZGQUYyNTU4NTBF QkM3OUQwMUYwHhcNMjUwNzAzMDExMTQyWhcNMjUwNzEwMDExMTQyWjAYMRYwFAYD VQQDEw02ODY1ZDhjZS03Zjc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzvKbGvBwCvWtOFgnuexGncT2i2N4LbWiGM3vT22PctLCSzef/1FnyRd4SMXO 9LlSCSyJQIBz1rr5s/w3XgL+MN1mQAQvEOmD3MiGjh0zbSI7QJHkXinbi8McKz94 XbCONrebnwKehMjsTqYqe4muDarm9OQ2jLThXMn9P7oMDnKYMi+R3fPCBQHZX3Ul tb4GL108ii32dWttghnmxRglBcj/pir7JliukpuWvMguAMANitW8E4fjuLHBF1N0 hBzHdjZzLw63ehD5wJy5wAriB79FoD6FqTlGhffjPgXAK2SgB/owJZpmypgXz9US er2+ieySNDM8cnaHuXipaiI0nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFETz2jpl +bcq9ogS9wCv1dxzDAZuMB8GA1UdIwQYMBaAFOhnF1A0TxjCr3R/+vJVhQ68edAf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNERERi81QjA2RkVGMkE1 MEExMUVDQjI3NzhENUNDNEY5QUUwMi82R2NYVURSUEdNS3ZkSF82OGxXRkRyeDUw QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZHY1hVRFJQR01LdmRIXzY4bFdGRHJ4NTBCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NERERi81QjA2RkVGMkE1MEExMUVDQjI3NzhENUNDNEY5QUUwMi82R2NYVURSUEdN S3ZkSF82OGxXRkRyeDUwQjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1ySgs3xs3vIs4aryjU163l2jCa5SJiRHNFWgtGuPN8gA54L4Wy3ws /0hu05Fn2axJBkExQezyL6idSm8iYyw1Hqk7Po7ly4BpyAeYytLIrd/GnKmUxlMI OB2WyojZRjGQPgr79zZn/aDEzWx73TvD7iIqSS1NvPqcMYwLDejVZ2Kpy6jr05rJ +Cpt1f8aqmOf/jj6yzjXvX/vgXwe3YrFBYIF4k4I7UcU8ASPc3K+rbzrfxyGzTpC RA0D3Xhnn0Mven55qCbJFivHOuIBQvclIUE8IOIhKyKKhMur5kSmA7T8GjXZN+Zf wG2ISSrGXFxGmY1lSTtxvxH/j0dOC8u2 -----END CERTIFICATE-----Generated at Thu Jul 3 21:07:37 2025 by rpki-client