$ rpki-client -vvf rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft File: A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft (raw, json) Hash identifier: 8lt9VJlzH24CLyGyVjsGWvc2M2k7JJVozewRQEKlGbQ= Subject key identifier: 23:F4:98:78:4F:6F:DF:0C:08:DF:FC:41:79:9F:EF:D4:88:F5:00:1C Authority key identifier: 03:A8:56:6C:80:31:F5:62:19:9D:F9:9D:9B:99:B9:C7:E7:19:F8:90 Certificate issuer: /CN=A911FA99/serialNumber=03A8566C8031F562199DF99D9B99B9C7E719F890 Certificate serial: 0B58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft Manifest number: 0B50 Signing time: Fri 04 Jul 2025 19:27:50 +0000 Manifest this update: Fri 04 Jul 2025 19:27:50 +0000 Manifest next update: Fri 11 Jul 2025 19:27:50 +0000 Files and hashes: 1: A6hWbIAx9WIZnfmdm5m5x-cZ-JA.crl (hash: NkI523VviF/j2XBccg4msamWLegqHq3EwV7xNDAHaEs=) 2: 730BD0EC384011EAADE7134BC4F9AE02.roa (hash: EJy7DgILM8z1iO6xDPQ9fjq4rQed/FbUFf1TGO0uQ3M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.crl rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2904 (0xb58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FA99, serialNumber=03A8566C8031F562199DF99D9B99B9C7E719F890 Validity Not Before: Jul 4 19:27:50 2025 GMT Not After : Jul 11 19:27:50 2025 GMT Subject: CN=68682b36-0090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3d:3e:e6:a5:af:7e:63:3c:85:e7:7c:f4:da: 20:32:52:4a:74:33:22:db:f3:dc:6a:14:ed:73:15: 5d:53:c2:ff:aa:3a:e2:1f:ad:f4:96:bd:87:01:8b: b4:5e:14:e2:07:98:43:f3:5d:a3:96:5c:a6:2a:30: a2:cf:10:72:a4:b9:2f:69:d1:44:da:bf:d1:d0:15: 3d:a6:d6:0d:ac:57:0c:33:a8:ca:d9:de:11:6e:1b: ec:b4:53:89:fa:0c:c8:6c:f8:e1:60:cb:af:74:cf: 2e:4e:36:6a:2e:2a:46:ca:58:47:88:4c:18:7c:7d: 5a:02:ef:e0:91:af:20:94:75:d8:df:8b:38:8f:a2: 95:6e:cd:90:c8:08:cc:f0:81:42:00:3b:16:e0:9e: 66:79:80:9b:3d:fd:e1:9f:31:2c:36:f4:2d:0e:79: 5c:d1:e9:1d:6e:45:23:7d:2b:8e:61:7a:66:9e:97: 3a:aa:26:f1:cb:f7:af:84:58:6c:5a:00:c1:bb:e5: 8a:52:61:51:d5:08:28:ec:b9:02:79:44:6d:bc:3b: 9f:62:21:72:3a:92:48:72:96:cf:b5:9b:a2:b6:c3: 1d:88:90:69:87:78:1f:ef:81:33:1a:12:6f:b3:43: 5f:f9:37:c4:68:a0:27:1b:7f:18:0b:98:f6:0c:32: ba:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:F4:98:78:4F:6F:DF:0C:08:DF:FC:41:79:9F:EF:D4:88:F5:00:1C X509v3 Authority Key Identifier: keyid:03:A8:56:6C:80:31:F5:62:19:9D:F9:9D:9B:99:B9:C7:E7:19:F8:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:1f:64:d2:5d:20:bc:9c:58:bf:d7:fd:8a:ef:f7:24:fb:07: 92:76:e4:8b:fa:c7:99:d3:da:ad:39:01:13:0d:14:e9:5f:cd: c3:9c:6d:de:40:fa:75:cb:78:61:67:71:56:3f:c7:92:38:09: 7b:ed:72:04:a5:04:ac:fc:3e:bd:72:03:b2:f6:89:f3:b4:60: 4b:ee:e3:1f:5f:72:e6:2e:17:ff:0e:5c:99:78:92:21:31:b6: d1:cc:a2:48:3b:a0:4b:9f:c4:6a:88:c6:f7:89:11:43:9a:76: bc:1c:00:c7:2c:47:fe:3f:6e:8f:bc:d1:fe:6e:1f:10:de:a2: 2f:dd:b9:27:85:60:ec:30:d5:45:72:08:20:26:a3:fa:ce:38: 74:10:36:31:35:27:36:39:34:21:e1:3f:f5:26:29:92:9f:3a: c9:35:ec:96:62:6e:84:e5:61:d5:2f:ff:3f:bd:87:14:91:8b: c8:7e:a0:10:c5:1b:e2:73:67:c5:d7:af:9d:10:16:ab:51:55: 97:3e:c7:66:82:53:6d:f4:3c:e9:3b:36:d4:1e:eb:b2:27:d7: 05:8e:33:ad:2a:cf:54:87:2e:92:5e:98:e8:95:80:13:ff:58: 96:d1:1c:2d:18:c9:2c:52:d2:ec:68:2b:28:6e:0f:dd:40:97: 59:c5:b7:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZBOTkxMTAvBgNVBAUTKDAzQTg1NjZDODAzMUY1NjIxOTlERjk5RDlCOTlCOUM3 RTcxOUY4OTAwHhcNMjUwNzA0MTkyNzUwWhcNMjUwNzExMTkyNzUwWjAYMRYwFAYD VQQDEw02ODY4MmIzNi0wMDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqD0+5qWvfmM8hed89NogMlJKdDMi2/PcahTtcxVdU8L/qjriH630lr2HAYu0 XhTiB5hD812jllymKjCizxBypLkvadFE2r/R0BU9ptYNrFcMM6jK2d4RbhvstFOJ +gzIbPjhYMuvdM8uTjZqLipGylhHiEwYfH1aAu/gka8glHXY34s4j6KVbs2QyAjM 8IFCADsW4J5meYCbPf3hnzEsNvQtDnlc0ekdbkUjfSuOYXpmnpc6qibxy/evhFhs WgDBu+WKUmFR1Qgo7LkCeURtvDufYiFyOpJIcpbPtZuitsMdiJBph3gf74EzGhJv s0Nf+TfEaKAnG38YC5j2DDK6twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCP0mHhP b98MCN/8QXmf79SI9QAcMB8GA1UdIwQYMBaAFAOoVmyAMfViGZ35nZuZucfnGfiQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkE5OS8wNjAyM0M3NjM4 M0YxMUVBQUVFODk0NDVDNEY5QUUwMi9BNmhXYklBeDlXSVpuZm1kbTVtNXgtY1ot SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E2aFdiSUF4OVdJWm5mbWRtNW01eC1jWi1KQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkE5OS8wNjAyM0M3NjM4M0YxMUVBQUVFODk0NDVDNEY5QUUwMi9BNmhXYklBeDlX SVpuZm1kbTVtNXgtY1otSkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdH2TSXSC8nFi/1/2K7/ck+weSduSL+seZ09qtOQETDRTpX83DnG3e QPp1y3hhZ3FWP8eSOAl77XIEpQSs/D69cgOy9onztGBL7uMfX3LmLhf/DlyZeJIh MbbRzKJIO6BLn8RqiMb3iRFDmna8HADHLEf+P26PvNH+bh8Q3qIv3bknhWDsMNVF cgggJqP6zjh0EDYxNSc2OTQh4T/1JimSnzrJNeyWYm6E5WHVL/8/vYcUkYvIfqAQ xRvic2fF16+dEBarUVWXPsdmglNt9DzpOzbUHuuyJ9cFjjOtKs9Uhy6SXpjolYAT /1iW0RwtGMksUtLsaCsobg/dQJdZxbdr -----END CERTIFICATE-----Generated at Fri Jul 4 22:23:03 2025 by rpki-client