$ rpki-client -vvf rpki.apnic.net/member_repository/A911945B/3ACF70C017FD11EF8C083063C4F9AE02/6zLfknQ0rG06hoR937o9LoEAETE.mft File: 6zLfknQ0rG06hoR937o9LoEAETE.mft (raw, json) Hash identifier: WS55pmB8xP9gNODpIwvjHPrT33gygdC1e1fjAodz3gM= Subject key identifier: CC:0B:BC:28:8F:F7:65:0D:8C:F3:71:A5:95:C9:46:4C:D6:76:3C:E4 Authority key identifier: EB:32:DF:92:74:34:AC:6D:3A:86:84:7D:DF:BA:3D:2E:81:00:11:31 Certificate issuer: /CN=A911945B/serialNumber=EB32DF927434AC6D3A86847DDFBA3D2E81001131 Certificate serial: D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zLfknQ0rG06hoR937o9LoEAETE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911945B/3ACF70C017FD11EF8C083063C4F9AE02/6zLfknQ0rG06hoR937o9LoEAETE.mft Manifest number: D3 Signing time: Tue 01 Jul 2025 06:12:42 +0000 Manifest this update: Tue 01 Jul 2025 06:12:42 +0000 Manifest next update: Tue 08 Jul 2025 06:12:42 +0000 Files and hashes: 1: 6zLfknQ0rG06hoR937o9LoEAETE.crl (hash: betRR8fVisAbbrqXS7e1WOdGqQcqC75WTIESXj5vgd8=) 2: C562775017FD11EF9A320864C4F9AE02.roa (hash: mT/xhxJVAPolN6BiWxF1pYh0qrq0TTClAYLDrh0UW5A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911945B/3ACF70C017FD11EF8C083063C4F9AE02/6zLfknQ0rG06hoR937o9LoEAETE.crl rsync://rpki.apnic.net/member_repository/A911945B/3ACF70C017FD11EF8C083063C4F9AE02/6zLfknQ0rG06hoR937o9LoEAETE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zLfknQ0rG06hoR937o9LoEAETE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 06:12:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 214 (0xd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911945B, serialNumber=EB32DF927434AC6D3A86847DDFBA3D2E81001131 Validity Not Before: Jul 1 06:12:42 2025 GMT Not After : Jul 8 06:12:42 2025 GMT Subject: CN=68637c5a-b459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:34:c2:1d:b2:de:1b:58:f7:23:8f:52:cf:7c: 11:56:4b:7c:65:6b:47:27:7a:a8:bd:03:53:f2:e6: b7:2e:51:46:d2:f6:88:90:a3:81:ca:32:b9:ab:22: c6:23:87:b7:31:02:ed:7f:0a:67:43:19:68:fb:42: 10:00:1d:65:17:07:2d:84:f2:1f:83:ef:f6:80:0e: c6:44:9f:e6:1a:c3:bd:f7:85:5c:1c:ad:4d:0c:a1: 70:e9:76:97:6d:18:e1:96:bd:8f:6c:59:6b:e5:28: 7b:b1:d0:a9:b5:34:d3:d6:3c:03:92:ae:c3:b8:2f: 6e:b5:bb:b9:07:1b:a1:98:d7:6a:ec:2f:da:ea:0a: ec:df:2f:03:60:df:f4:cd:b3:ce:23:bf:b9:42:68: c2:56:ce:52:7f:96:cd:e2:dd:de:07:93:92:14:7f: db:5a:fd:49:bc:17:22:b2:5d:7b:ae:af:ff:76:8f: ea:69:cc:16:2d:a8:3a:0c:cf:64:33:17:46:06:33: 35:40:58:7f:6c:3a:86:7e:47:33:57:13:dc:92:9d: 31:ea:e2:00:86:66:19:63:82:bc:aa:e3:68:13:02: 4d:84:dd:18:c6:7a:36:06:68:67:08:32:7a:ce:ff: 54:2d:13:a9:39:be:2c:8f:4a:63:6f:da:ce:d6:30: 6c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:0B:BC:28:8F:F7:65:0D:8C:F3:71:A5:95:C9:46:4C:D6:76:3C:E4 X509v3 Authority Key Identifier: keyid:EB:32:DF:92:74:34:AC:6D:3A:86:84:7D:DF:BA:3D:2E:81:00:11:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911945B/3ACF70C017FD11EF8C083063C4F9AE02/6zLfknQ0rG06hoR937o9LoEAETE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zLfknQ0rG06hoR937o9LoEAETE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911945B/3ACF70C017FD11EF8C083063C4F9AE02/6zLfknQ0rG06hoR937o9LoEAETE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:af:61:7b:8b:dc:57:38:f5:d8:88:e5:dd:ea:13:46:f0:a5: 85:f4:d4:ec:fc:62:84:8f:5a:f3:dd:b6:26:43:d2:42:ef:0a: 45:39:ee:e4:b4:70:d0:cc:7c:2e:57:af:db:06:8c:1a:20:15: 32:c2:cf:72:3d:c8:cc:64:85:47:03:6a:df:ed:c7:dc:96:ef: ae:19:22:fd:8c:76:f1:d7:f6:db:2f:b4:01:05:34:1a:fb:9c: 82:29:3d:9a:ec:dc:ba:84:6a:e3:77:f9:c5:3f:32:12:31:a0: 62:a9:af:72:4c:45:e8:3d:80:d7:fa:44:e7:37:3e:5b:e1:de: 60:04:c9:7c:27:ef:4a:08:0d:d6:8b:ac:78:5f:ec:ba:df:35: cd:55:bd:6c:e6:aa:72:af:15:db:a2:fe:22:f3:57:82:73:68: fc:78:cf:2f:dc:53:69:62:4a:39:87:73:28:26:b0:84:7e:99: b5:51:61:ad:ae:77:83:77:e7:99:57:a5:b1:30:f5:8d:ec:27: 6e:e0:65:77:46:86:a2:7d:4e:1e:16:aa:95:68:23:58:e2:8b: bf:55:76:26:9c:72:3d:1e:09:17:d1:8c:ba:bb:07:bc:4a:55: c2:64:83:ea:67:2e:75:b6:9a:04:b5:5a:b3:53:d8:16:16:79: 25:92:93:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk0NUIxMTAvBgNVBAUTKEVCMzJERjkyNzQzNEFDNkQzQTg2ODQ3RERGQkEzRDJF ODEwMDExMzEwHhcNMjUwNzAxMDYxMjQyWhcNMjUwNzA4MDYxMjQyWjAYMRYwFAYD VQQDEw02ODYzN2M1YS1iNDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvjTCHbLeG1j3I49Sz3wRVkt8ZWtHJ3qovQNT8ua3LlFG0vaIkKOByjK5qyLG I4e3MQLtfwpnQxlo+0IQAB1lFwcthPIfg+/2gA7GRJ/mGsO994VcHK1NDKFw6XaX bRjhlr2PbFlr5Sh7sdCptTTT1jwDkq7DuC9utbu5BxuhmNdq7C/a6grs3y8DYN/0 zbPOI7+5QmjCVs5Sf5bN4t3eB5OSFH/bWv1JvBcisl17rq//do/qacwWLag6DM9k MxdGBjM1QFh/bDqGfkczVxPckp0x6uIAhmYZY4K8quNoEwJNhN0Yxno2BmhnCDJ6 zv9ULROpOb4sj0pjb9rO1jBsXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMwLvCiP 92UNjPNxpZXJRkzWdjzkMB8GA1UdIwQYMBaAFOsy35J0NKxtOoaEfd+6PS6BABEx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTQ1Qi8zQUNGNzBDMDE3 RkQxMUVGOEMwODMwNjNDNEY5QUUwMi82ekxma25RMHJHMDZob1I5MzdvOUxvRUFF VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ6TGZrblEwckcwNmhvUjkzN285TG9FQUVURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTQ1Qi8zQUNGNzBDMDE3RkQxMUVGOEMwODMwNjNDNEY5QUUwMi82ekxma25RMHJH MDZob1I5MzdvOUxvRUFFVEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5r2F7i9xXOPXYiOXd6hNG8KWF9NTs/GKEj1rz3bYmQ9JC7wpFOe7k tHDQzHwuV6/bBowaIBUyws9yPcjMZIVHA2rf7cfclu+uGSL9jHbx1/bbL7QBBTQa +5yCKT2a7Ny6hGrjd/nFPzISMaBiqa9yTEXoPYDX+kTnNz5b4d5gBMl8J+9KCA3W i6x4X+y63zXNVb1s5qpyrxXbov4i81eCc2j8eM8v3FNpYko5h3MoJrCEfpm1UWGt rneDd+eZV6WxMPWN7Cdu4GV3RoaifU4eFqqVaCNY4ou/VXYmnHI9HgkX0Yy6uwe8 SlXCZIPqZy51tpoEtVqzU9gWFnklkpOc -----END CERTIFICATE-----Generated at Wed Jul 2 05:40:04 2025 by rpki-client