$ rpki-client -vvf rpki.apnic.net/member_repository/A9120208/BA8674263B9711F0A170C775C4F9AE02/S6E9VJoFZMMeqLIxX84wI7tiiKc.mft File: S6E9VJoFZMMeqLIxX84wI7tiiKc.mft (raw, json) Hash identifier: oIp/4kC1R0iZ08gIDVlIG6mLK8fOD06c7GvLatMFmlY= Subject key identifier: 8D:25:9D:5B:01:C6:D8:23:50:AE:76:DB:09:13:85:6F:2E:4C:2C:7A Authority key identifier: 4B:A1:3D:54:9A:05:64:C3:1E:A8:B2:31:5F:CE:30:23:BB:62:88:A7 Certificate issuer: /CN=A9120208/serialNumber=4BA13D549A0564C31EA8B2315FCE3023BB6288A7 Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S6E9VJoFZMMeqLIxX84wI7tiiKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120208/BA8674263B9711F0A170C775C4F9AE02/S6E9VJoFZMMeqLIxX84wI7tiiKc.mft Manifest number: 17 Signing time: Thu 03 Jul 2025 08:17:13 +0000 Manifest this update: Thu 03 Jul 2025 08:17:13 +0000 Manifest next update: Thu 10 Jul 2025 08:17:13 +0000 Files and hashes: 1: S6E9VJoFZMMeqLIxX84wI7tiiKc.crl (hash: y0DbXTRHEmSmuR5U71RYskENhQnl+MFE8ZEocaNEuWY=) 2: FB24C32041DC11F091D21255C4F9AE02.roa (hash: YkPIdT5pU6s6PBK/cXBQwdkKPPO1WquYP5q3kmQJuaw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120208/BA8674263B9711F0A170C775C4F9AE02/S6E9VJoFZMMeqLIxX84wI7tiiKc.crl rsync://rpki.apnic.net/member_repository/A9120208/BA8674263B9711F0A170C775C4F9AE02/S6E9VJoFZMMeqLIxX84wI7tiiKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S6E9VJoFZMMeqLIxX84wI7tiiKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120208, serialNumber=4BA13D549A0564C31EA8B2315FCE3023BB6288A7 Validity Not Before: Jul 3 08:17:13 2025 GMT Not After : Jul 10 08:17:13 2025 GMT Subject: CN=68663c89-d5bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1e:e6:b3:50:4d:08:ce:34:1d:2c:b1:c5:72: e9:6f:04:c6:67:91:db:f1:57:cc:d6:c9:eb:5c:a7: 30:61:d2:65:69:2f:5d:13:84:22:fa:12:16:bd:63: 91:35:af:9f:a6:03:bd:8e:a7:53:b0:05:e5:20:e2: 8f:60:94:1a:34:fd:1d:93:71:ce:dd:ab:6c:44:ab: b0:61:9e:e1:df:05:43:a6:2e:33:b8:48:94:d9:f9: 7c:8c:ce:b8:9f:9e:7c:93:74:24:38:a9:ce:20:96: 0b:df:a8:9e:89:98:1c:7b:58:62:85:23:53:bf:60: 36:e7:d8:b5:0d:30:31:20:9b:fc:86:32:63:a6:8c: c9:a6:d1:6e:e6:b1:0a:c1:6a:79:97:df:84:ba:85: 12:99:0a:ee:c4:cc:33:e3:b0:82:88:35:09:87:11: 64:19:f9:10:b1:42:20:b1:b5:01:6f:57:3a:a9:e4: e7:26:2c:f0:be:e7:e1:4d:e1:2f:49:ed:f5:9c:25: 4a:f0:d0:f1:04:37:2f:a6:82:73:b3:2f:c9:44:f0: d7:75:57:6c:fc:75:58:a6:00:65:fc:d3:2e:cf:46: 96:d3:af:7c:df:bb:8f:c2:9e:f4:a9:99:6d:14:1d: 6b:73:56:bf:cb:ac:d0:d3:ff:b9:fb:da:7e:e6:7d: 1d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:25:9D:5B:01:C6:D8:23:50:AE:76:DB:09:13:85:6F:2E:4C:2C:7A X509v3 Authority Key Identifier: keyid:4B:A1:3D:54:9A:05:64:C3:1E:A8:B2:31:5F:CE:30:23:BB:62:88:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120208/BA8674263B9711F0A170C775C4F9AE02/S6E9VJoFZMMeqLIxX84wI7tiiKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S6E9VJoFZMMeqLIxX84wI7tiiKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120208/BA8674263B9711F0A170C775C4F9AE02/S6E9VJoFZMMeqLIxX84wI7tiiKc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:d4:58:76:5d:d7:ea:36:f7:28:d2:88:0d:46:16:29:25:4a: 9f:39:1f:e7:ed:c3:ad:c3:a1:ea:f9:56:b0:fd:e9:30:cd:92: 5f:2c:4b:ea:89:0f:de:0d:f5:c1:2a:ea:ea:dd:20:80:a5:38: 78:4c:4c:ac:c2:19:83:1e:6f:92:d1:bb:99:8e:a4:37:bb:9e: 4f:4a:3f:10:07:70:70:bd:72:b4:29:ba:ff:5c:f3:9a:88:54: af:54:c6:6c:fc:e5:b7:6c:28:93:74:53:cc:8c:3e:cc:88:62: 16:b6:b2:73:7f:15:55:fb:21:6f:ed:07:4e:48:2f:d6:ed:f6: ed:5b:03:6e:45:fc:59:6c:18:b6:56:17:f1:95:0b:d3:f0:7a: 61:2b:87:20:e2:55:0b:6b:d7:b2:db:76:c4:57:9e:68:b3:fb: 9e:95:96:85:2c:c2:0d:a8:6e:0a:f7:22:87:da:3e:5e:86:52: 32:5a:d2:c2:61:bf:c8:a3:0f:4f:58:63:21:6d:36:c5:9b:5d: 8a:df:92:c6:18:9b:d2:9a:ab:fc:1c:71:dd:3d:7b:df:76:44: c1:c2:33:06:d4:c4:3b:f1:ce:9a:c7:11:8a:7b:5f:f8:21:e0: 40:52:79:b7:ff:64:d1:fe:de:7f:6a:2e:79:13:b9:75:fb:10: 21:a6:f0:8b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MDIwODExMC8GA1UEBRMoNEJBMTNENTQ5QTA1NjRDMzFFQThCMjMxNUZDRTMwMjNC QjYyODhBNzAeFw0yNTA3MDMwODE3MTNaFw0yNTA3MTAwODE3MTNaMBgxFjAUBgNV BAMTDTY4NjYzYzg5LWQ1YmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHHuazUE0IzjQdLLHFculvBMZnkdvxV8zWyetcpzBh0mVpL10ThCL6Eha9Y5E1 r5+mA72Op1OwBeUg4o9glBo0/R2Tcc7dq2xEq7BhnuHfBUOmLjO4SJTZ+XyMzrif nnyTdCQ4qc4glgvfqJ6JmBx7WGKFI1O/YDbn2LUNMDEgm/yGMmOmjMmm0W7msQrB anmX34S6hRKZCu7EzDPjsIKINQmHEWQZ+RCxQiCxtQFvVzqp5OcmLPC+5+FN4S9J 7fWcJUrw0PEENy+mgnOzL8lE8Nd1V2z8dVimAGX80y7PRpbTr3zfu4/CnvSpmW0U HWtzVr/LrNDT/7n72n7mfR05AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjSWdWwHG 2CNQrnbbCROFby5MLHowHwYDVR0jBBgwFoAUS6E9VJoFZMMeqLIxX84wI7tiiKcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIwMjA4L0JBODY3NDI2M0I5 NzExRjBBMTcwQzc3NUM0RjlBRTAyL1M2RTlWSm9GWk1NZXFMSXhYODR3STd0aWlL Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUzZFOVZKb0ZaTU1lcUxJeFg4NHdJN3RpaUtjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIw MjA4L0JBODY3NDI2M0I5NzExRjBBMTcwQzc3NUM0RjlBRTAyL1M2RTlWSm9GWk1N ZXFMSXhYODR3STd0aWlLYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFnUWHZd1+o29yjSiA1GFiklSp85H+ftw63Doer5VrD96TDNkl8sS+qJ D94N9cEq6urdIIClOHhMTKzCGYMeb5LRu5mOpDe7nk9KPxAHcHC9crQpuv9c85qI VK9Uxmz85bdsKJN0U8yMPsyIYha2snN/FVX7IW/tB05IL9bt9u1bA25F/FlsGLZW F/GVC9PwemErhyDiVQtr17LbdsRXnmiz+56VloUswg2obgr3IofaPl6GUjJa0sJh v8ijD09YYyFtNsWbXYrfksYYm9Kaq/wccd09e992RMHCMwbUxDvxzprHEYp7X/gh 4EBSebf/ZNH+3n9qLnkTuXX7ECGm8Is= -----END CERTIFICATE-----Generated at Fri Jul 4 19:17:32 2025 by rpki-client