$ rpki-client -vvf rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft File: h6R_J-defCg5wTM1HaJRFILG-bQ.mft (raw, json) Hash identifier: Q9Q6FZeDsc3geu/r6qLEvCq3MHsqe794GBf348671qM= Subject key identifier: A1:31:6B:96:0F:C1:09:A5:0E:90:6F:E5:62:C9:A5:D2:51:11:F3:8F Authority key identifier: 87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4 Certificate issuer: /CN=A911C621/serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4 Certificate serial: 0214 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft Manifest number: 01F4 Signing time: Thu 03 Jul 2025 02:45:23 +0000 Manifest this update: Thu 03 Jul 2025 02:45:23 +0000 Manifest next update: Thu 10 Jul 2025 02:45:23 +0000 Files and hashes: 1: h6R_J-defCg5wTM1HaJRFILG-bQ.crl (hash: bMvu6AOiuMGhe3gHfD5+kWgp0+NHROTAtMGKCXp1gbA=) 2: 0863E3F642DA11F0AAB03C37C4F9AE02.roa (hash: Tf/IGi1ICXtoXaqQ78IcykbXi91E4+JpuO9PMd4skSo=) 3: 7E7B632E8D6611EDB7F20B1FC4F9AE02.roa (hash: kCFs9nmPiAnIcv8oJpJvtJLqB5yozfBXxDX1yoHDz3Q=) 4: 7D7547C48D6611EDB7F20B1FC4F9AE02.roa (hash: 15pVERijhw/wdJE16SjLjUvjRTutNcev/TWYcbcb+WY=) 5: 5D21607ADDF211EDA14C0C56C4F9AE02.roa (hash: qXl8VijXeUBq5YZGQbPFuyGm9qVJaEd0Hn4beaPuvSE=) 6: 1D956B9E858811ED9CDCC91BC4F9AE02.roa (hash: SS3DT3rVQ2RIIspyHG3PNw/Nkcbg7KmAnjQNkHYA/tU=) 7: E4DFE77CD77E11ED8E33F181C4F9AE02.roa (hash: 5xN+Wv93iJltArr43SjcRaq1i5ZKH/wlPD32n7ycLFk=) 8: 07A28E0E42DA11F0AAB03C37C4F9AE02.roa (hash: 6Dj2SuYopnU3KhVpEQsxoPjoZpbXyzCQPJ+pNdncb7g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 532 (0x214) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C621, serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4 Validity Not Before: Jul 3 02:45:23 2025 GMT Not After : Jul 10 02:45:23 2025 GMT Subject: CN=6865eec3-cd4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e6:b3:25:0e:5d:91:1e:1a:f0:2e:fc:9f:d3: 17:a7:a5:aa:68:02:01:86:1a:a2:3a:90:d3:4c:3e: 38:bc:ac:bd:57:da:62:da:ce:7a:05:b8:6b:f4:01: 87:45:65:09:97:1c:97:0b:f1:e3:49:95:d2:70:f4: 75:1c:08:fb:d6:98:38:dc:af:36:67:5c:d4:dc:a5: 28:f5:86:49:35:e6:41:81:98:2e:77:06:e3:6a:65: 31:ca:9c:74:7a:61:c1:18:81:f9:1d:6a:ca:93:b1: 2c:f6:ee:99:09:00:75:80:eb:0b:45:d6:28:00:1f: da:38:ec:7f:b9:a0:68:c7:51:93:37:e9:ff:4b:68: c4:f1:d8:8f:16:dd:44:d4:45:c5:6e:32:f0:c9:08: 61:73:d8:a4:a5:10:c5:31:70:dd:bd:ab:30:b6:ab: 49:24:42:ae:67:11:88:ea:d1:ef:88:63:05:5a:da: ea:36:b0:38:06:77:f3:53:b6:b1:c5:74:ac:54:5f: 42:92:67:1d:9e:04:45:74:01:20:6a:7b:21:f2:93: 25:96:98:b5:66:bb:72:67:e3:d1:f0:30:ac:dd:36: 4a:ef:b4:ee:51:5f:60:fc:f7:79:1b:a7:48:2f:5f: e2:8a:16:54:e8:c1:1d:7f:90:e1:69:15:74:00:45: 9b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:31:6B:96:0F:C1:09:A5:0E:90:6F:E5:62:C9:A5:D2:51:11:F3:8F X509v3 Authority Key Identifier: keyid:87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:d6:8a:cd:8c:a3:7b:1c:34:90:52:7e:ed:4e:cc:9f:e4:56: d0:ed:b6:11:f3:95:65:03:d0:e7:11:a3:0a:26:44:36:23:66: f9:ec:d5:14:b6:77:74:67:ea:cd:f2:d9:56:2c:68:36:9c:33: be:03:d1:e1:b0:4f:f8:bb:ee:67:5e:f9:4f:8b:60:ff:e5:64: 4b:c1:3c:ed:ac:3a:f1:6c:e1:2e:6d:6d:59:7e:2d:1d:ef:87: 16:aa:54:83:a3:b8:35:ac:62:21:59:29:e1:57:14:42:38:91: b2:05:cf:dd:36:2e:1e:fc:54:fa:e0:c7:56:f5:83:59:3b:57: e0:76:c2:a1:d3:8a:94:61:94:e9:16:54:27:a8:be:2f:9b:fb: be:0e:7e:60:88:f4:86:68:9c:dc:7f:7e:8c:32:9a:49:0c:67: c7:76:ef:f1:7c:02:c4:93:22:79:3b:95:b4:0b:02:c3:4b:20: ea:fe:2f:09:5a:1a:3a:70:da:dc:20:2e:91:07:4b:27:09:c0: d4:2b:ef:1f:e1:32:0c:df:0d:ff:c0:d9:6a:34:50:f4:38:a1: 91:92:42:2f:7b:ec:6f:60:08:23:e0:e1:c4:e6:14:31:5c:4f: 9b:20:40:d7:53:e1:52:63:35:69:5a:10:76:3f:7a:54:3c:e0: fc:09:92:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM2MjExMTAvBgNVBAUTKDg3QTQ3RjI3RTc1RTdDMjgzOUMxMzMzNTFEQTI1MTE0 ODJDNkY5QjQwHhcNMjUwNzAzMDI0NTIzWhcNMjUwNzEwMDI0NTIzWjAYMRYwFAYD VQQDEw02ODY1ZWVjMy1jZDRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr+azJQ5dkR4a8C78n9MXp6WqaAIBhhqiOpDTTD44vKy9V9pi2s56Bbhr9AGH RWUJlxyXC/HjSZXScPR1HAj71pg43K82Z1zU3KUo9YZJNeZBgZgudwbjamUxypx0 emHBGIH5HWrKk7Es9u6ZCQB1gOsLRdYoAB/aOOx/uaBox1GTN+n/S2jE8diPFt1E 1EXFbjLwyQhhc9ikpRDFMXDdvaswtqtJJEKuZxGI6tHviGMFWtrqNrA4BnfzU7ax xXSsVF9CkmcdngRFdAEgansh8pMllpi1ZrtyZ+PR8DCs3TZK77TuUV9g/Pd5G6dI L1/iihZU6MEdf5DhaRV0AEWbxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKExa5YP wQmlDpBv5WLJpdJREfOPMB8GA1UdIwQYMBaAFIekfyfnXnwoOcEzNR2iURSCxvm0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzYyMS9GN0QwMEJFRTc0 MzkxMUVEOTg2RDczODVDNEY5QUUwMi9oNlJfSi1kZWZDZzV3VE0xSGFKUkZJTEct YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g2Ul9KLWRlZkNnNXdUTTFIYUpSRklMRy1iUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzYyMS9GN0QwMEJFRTc0MzkxMUVEOTg2RDczODVDNEY5QUUwMi9oNlJfSi1kZWZD ZzV3VE0xSGFKUkZJTEctYlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCH1orNjKN7HDSQUn7tTsyf5FbQ7bYR85VlA9DnEaMKJkQ2I2b57NUU tnd0Z+rN8tlWLGg2nDO+A9HhsE/4u+5nXvlPi2D/5WRLwTztrDrxbOEubW1Zfi0d 74cWqlSDo7g1rGIhWSnhVxRCOJGyBc/dNi4e/FT64MdW9YNZO1fgdsKh04qUYZTp FlQnqL4vm/u+Dn5giPSGaJzcf36MMppJDGfHdu/xfALEkyJ5O5W0CwLDSyDq/i8J Who6cNrcIC6RB0snCcDUK+8f4TIM3w3/wNlqNFD0OKGRkkIve+xvYAgj4OHE5hQx XE+bIEDXU+FSYzVpWhB2P3pUPOD8CZKx -----END CERTIFICATE-----Generated at Fri Jul 4 08:05:22 2025 by rpki-client