$ rpki-client -vvf rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.mft File: 6XH_tEATQSECHGJem3DrGuWij2A.mft (raw, json) Hash identifier: SQIPIvzPUWg8uTQ+LXtuAy7ZdRlpItbQUrsGU6Peil8= Subject key identifier: 9C:D2:AE:C5:64:7A:53:49:A7:1D:A3:71:9C:55:6B:3D:73:19:12:A3 Authority key identifier: E9:71:FF:B4:40:13:41:21:02:1C:62:5E:9B:70:EB:1A:E5:A2:8F:60 Certificate issuer: /CN=A911EDE5/serialNumber=E971FFB440134121021C625E9B70EB1AE5A28F60 Certificate serial: 0D53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XH_tEATQSECHGJem3DrGuWij2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.mft Manifest number: 0D4A Signing time: Wed 02 Jul 2025 18:13:18 +0000 Manifest this update: Wed 02 Jul 2025 18:13:17 +0000 Manifest next update: Wed 09 Jul 2025 18:13:17 +0000 Files and hashes: 1: 6XH_tEATQSECHGJem3DrGuWij2A.crl (hash: 7k9FQ9MdSghs1KPk/lZEu5snmsbIsU3Bd5WYrYtQBC8=) 2: 89D124B6D51311E98A41293BC4F9AE02.roa (hash: mbBxOC4AR4Py/kqSr6p/HUSw4E4voxLVh0FwxIMWx+Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.crl rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XH_tEATQSECHGJem3DrGuWij2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:13:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3411 (0xd53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911EDE5, serialNumber=E971FFB440134121021C625E9B70EB1AE5A28F60 Validity Not Before: Jul 2 18:13:17 2025 GMT Not After : Jul 9 18:13:17 2025 GMT Subject: CN=686576bd-08dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:da:80:40:b3:50:3d:3e:bb:68:fb:27:45:70: 52:ab:83:97:20:18:fb:75:a6:59:a9:d9:4f:64:df: 3a:f6:02:d0:57:af:fc:a8:6d:9b:73:05:8b:d3:54: 6e:d4:c3:4a:93:a3:0d:85:b9:c4:59:8d:41:3d:d3: 99:d2:3c:4e:6d:8d:f8:ca:40:c1:4d:83:ad:1e:50: af:08:e4:78:bc:d0:81:16:8e:33:43:37:34:51:c1: 79:ce:2d:c2:e4:9e:4f:f9:7f:13:36:3b:20:e5:b3: 3d:35:05:3d:4c:9d:31:eb:cf:84:c3:fd:5b:79:28: f9:a2:1d:9b:f9:0a:15:55:68:a5:5d:c1:2b:b9:2c: 71:ab:9c:e0:48:7e:4f:86:7f:9b:f6:e9:ca:56:38: 01:94:f8:1b:18:fc:c6:6c:d0:66:bf:29:a7:1a:c6: 64:7a:e3:43:87:57:11:ba:5f:ce:25:19:d1:75:f8: 75:7c:b0:92:50:4b:97:57:cf:b2:bd:db:57:3f:7c: ec:04:bc:d6:2e:d4:36:b1:f4:5d:59:72:c4:de:a9: 83:53:a8:1f:21:ec:0c:65:d2:3a:c2:68:e3:45:71: 6c:ff:0e:30:ab:0c:15:e2:43:3d:0d:1f:95:10:59: 90:e5:43:8c:50:3a:d2:6e:9c:51:6c:2f:47:1d:b9: 0c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:D2:AE:C5:64:7A:53:49:A7:1D:A3:71:9C:55:6B:3D:73:19:12:A3 X509v3 Authority Key Identifier: keyid:E9:71:FF:B4:40:13:41:21:02:1C:62:5E:9B:70:EB:1A:E5:A2:8F:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XH_tEATQSECHGJem3DrGuWij2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:c6:f1:9c:cf:4b:5f:ef:4e:2f:be:4e:d9:1e:f3:33:c7:b0: 3f:b2:e4:f2:df:81:0e:9f:48:28:2b:ea:7c:9d:41:00:dc:a7: 44:98:ba:50:35:78:b9:07:85:01:db:1d:1d:a1:5d:52:24:da: c7:cf:ec:8c:b3:56:de:a3:23:a4:63:d5:cf:bc:6f:18:3f:15: e6:56:16:85:ea:db:20:4a:65:69:c4:6c:eb:1b:f7:4e:be:e5: 86:51:1c:32:c7:5c:64:6e:36:f8:f8:5f:fd:b9:22:3a:f6:a8: a0:72:b5:19:5f:9e:d5:ee:9c:e7:d3:31:45:d1:e6:95:31:d2: 0e:cc:13:dc:d8:80:5b:ef:70:b5:21:1d:e8:89:82:0c:de:e3: 54:ea:04:76:4e:68:71:1a:93:07:06:62:cc:aa:36:43:c2:b7: da:2e:89:48:b1:0b:bd:8d:c9:61:ae:46:9b:12:14:73:a2:2a: aa:ab:12:c2:44:b5:ed:b4:b1:2e:f4:59:bc:c6:04:c9:32:07: 0d:0a:ca:40:88:a6:f4:c1:29:86:77:d0:54:10:7f:76:f6:7b: 9e:e6:92:a4:79:90:c3:0c:e4:92:8d:57:ba:af:da:87:da:6d: 82:4f:b4:61:e2:e0:bb:20:86:12:39:45:74:cc:ab:20:80:43: c1:6c:80:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVERTUxMTAvBgNVBAUTKEU5NzFGRkI0NDAxMzQxMjEwMjFDNjI1RTlCNzBFQjFB RTVBMjhGNjAwHhcNMjUwNzAyMTgxMzE3WhcNMjUwNzA5MTgxMzE3WjAYMRYwFAYD VQQDEw02ODY1NzZiZC0wOGRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA79qAQLNQPT67aPsnRXBSq4OXIBj7daZZqdlPZN869gLQV6/8qG2bcwWL01Ru 1MNKk6MNhbnEWY1BPdOZ0jxObY34ykDBTYOtHlCvCOR4vNCBFo4zQzc0UcF5zi3C 5J5P+X8TNjsg5bM9NQU9TJ0x68+Ew/1beSj5oh2b+QoVVWilXcEruSxxq5zgSH5P hn+b9unKVjgBlPgbGPzGbNBmvymnGsZkeuNDh1cRul/OJRnRdfh1fLCSUEuXV8+y vdtXP3zsBLzWLtQ2sfRdWXLE3qmDU6gfIewMZdI6wmjjRXFs/w4wqwwV4kM9DR+V EFmQ5UOMUDrSbpxRbC9HHbkMywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJzSrsVk elNJpx2jcZxVaz1zGRKjMB8GA1UdIwQYMBaAFOlx/7RAE0EhAhxiXptw6xrloo9g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRURFNS9CM0JGNzU4QUQ1 MTIxMUU5QjY0M0VEMzlDNEY5QUUwMi82WEhfdEVBVFFTRUNIR0plbTNEckd1V2lq MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZYSF90RUFUUVNFQ0hHSmVtM0RyR3VXaWoyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RURFNS9CM0JGNzU4QUQ1MTIxMUU5QjY0M0VEMzlDNEY5QUUwMi82WEhfdEVBVFFT RUNIR0plbTNEckd1V2lqMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKxvGcz0tf704vvk7ZHvMzx7A/suTy34EOn0goK+p8nUEA3KdEmLpQ NXi5B4UB2x0doV1SJNrHz+yMs1beoyOkY9XPvG8YPxXmVhaF6tsgSmVpxGzrG/dO vuWGURwyx1xkbjb4+F/9uSI69qigcrUZX57V7pzn0zFF0eaVMdIOzBPc2IBb73C1 IR3oiYIM3uNU6gR2TmhxGpMHBmLMqjZDwrfaLolIsQu9jclhrkabEhRzoiqqqxLC RLXttLEu9Fm8xgTJMgcNCspAiKb0wSmGd9BUEH929nue5pKkeZDDDOSSjVe6r9qH 2m2CT7Rh4uC7IIYSOUV0zKsggEPBbIDu -----END CERTIFICATE-----Generated at Fri Jul 4 14:26:27 2025 by rpki-client