$ rpki-client -vvf rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/6PktayopMPClvq9TBEyF2OreHro.mft File: 6PktayopMPClvq9TBEyF2OreHro.mft (raw, json) Hash identifier: OtrlTq24iLZ0UOAr1FL8PHs94kJSsb3xjra44vfzExI= Subject key identifier: 3D:26:8A:B6:68:2D:54:37:18:D3:38:CC:F0:39:92:04:D3:D4:F8:E1 Authority key identifier: E8:F9:2D:6B:2A:29:30:F0:A5:BE:AF:53:04:4C:85:D8:EA:DE:1E:BA Certificate issuer: /CN=A9129C87/serialNumber=E8F92D6B2A2930F0A5BEAF53044C85D8EADE1EBA Certificate serial: 0446 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6PktayopMPClvq9TBEyF2OreHro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/6PktayopMPClvq9TBEyF2OreHro.mft Manifest number: 0442 Signing time: Sat 28 Jun 2025 23:51:12 +0000 Manifest this update: Sat 28 Jun 2025 23:51:11 +0000 Manifest next update: Sat 05 Jul 2025 23:51:11 +0000 Files and hashes: 1: 6PktayopMPClvq9TBEyF2OreHro.crl (hash: m93VBkuB5y9TV6/vTtlnMG5WHdgQ6zZqauDP/9i5/OQ=) 2: 80A9DE56614C11EC9175DE54C4F9AE02.roa (hash: ygV29+CdpRjO1HlIMJ6Gkg3eEGxPeEnonRI3YwMUHgM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/6PktayopMPClvq9TBEyF2OreHro.crl rsync://rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/6PktayopMPClvq9TBEyF2OreHro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6PktayopMPClvq9TBEyF2OreHro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 23:51:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1094 (0x446) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129C87, serialNumber=E8F92D6B2A2930F0A5BEAF53044C85D8EADE1EBA Validity Not Before: Jun 28 23:51:11 2025 GMT Not After : Jul 5 23:51:11 2025 GMT Subject: CN=68607ff0-ecd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e8:8d:47:b2:ec:9c:1d:28:e0:16:52:68:ce: 77:9b:83:ac:58:ff:05:1d:6c:4d:dd:36:f3:ba:f4: 94:f6:f6:6a:3b:e5:55:04:29:90:3f:cf:22:4d:24: 77:19:3d:ac:8c:bc:1f:48:5d:2b:6f:cc:a4:23:1f: ea:a4:04:af:87:9f:02:e9:cb:e9:a7:ad:cc:df:ad: 7d:63:f4:46:5e:b6:c8:8b:9f:22:08:8f:6a:ea:68: b1:78:7e:92:72:51:5f:0b:f7:b8:01:04:5d:24:33: 86:f2:8d:a2:f7:71:f5:28:c4:db:17:37:9b:17:14: c5:c1:2a:d5:0c:b7:64:43:31:f2:1a:61:e7:eb:09: 5b:02:f4:9c:85:1b:20:59:80:bd:0d:aa:96:93:cb: 61:aa:c0:e6:06:88:55:32:cf:77:5c:63:6a:42:ab: 85:c1:8b:8d:ba:b3:6f:ea:03:e0:69:bc:87:29:4c: c6:2f:b9:f1:79:cf:be:fe:76:2d:57:7e:b9:d1:ec: a9:66:03:e0:96:68:6c:21:bf:61:2a:0f:46:bb:f9: 26:8d:6d:cb:5e:89:be:51:04:fa:57:be:73:18:9b: 1e:f7:42:ad:1b:90:89:ae:3d:f2:0d:aa:05:c7:ee: 67:22:b8:90:2e:45:ab:4d:d3:d3:27:76:c4:9c:78: 49:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:26:8A:B6:68:2D:54:37:18:D3:38:CC:F0:39:92:04:D3:D4:F8:E1 X509v3 Authority Key Identifier: keyid:E8:F9:2D:6B:2A:29:30:F0:A5:BE:AF:53:04:4C:85:D8:EA:DE:1E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/6PktayopMPClvq9TBEyF2OreHro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6PktayopMPClvq9TBEyF2OreHro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/6PktayopMPClvq9TBEyF2OreHro.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:d3:ad:1f:29:be:14:e8:e3:e6:fc:dd:eb:c8:21:d9:8f:e0: e1:61:8d:03:b2:0c:68:4f:99:85:a3:a9:55:d3:bd:cf:0a:60: de:62:0d:fa:b3:51:ff:9e:a3:87:25:88:30:95:8b:85:63:1b: 0b:76:64:b9:26:7f:6c:18:48:2f:76:de:07:c3:96:bc:f5:44: 7e:29:89:91:77:18:aa:1f:83:e2:8a:60:c7:b7:fb:4d:5a:41: 0a:c8:16:07:a7:d7:3f:5f:b4:60:04:9d:77:89:af:f8:cb:0d: e3:a3:bc:4c:39:e9:51:76:44:43:02:6b:e0:b4:16:4c:c4:90: 08:eb:c8:e5:30:96:8f:60:70:0e:64:74:97:ca:36:55:66:ab: 82:88:44:69:a1:b2:d0:08:e0:40:5a:e3:ca:9b:9e:60:8f:0f: 29:0b:b0:2f:f6:71:56:96:e1:11:1f:85:70:39:b1:79:f7:2f: ff:58:64:42:ec:59:11:63:9e:3e:5a:94:7a:9d:05:23:29:0c: af:8d:ae:be:4e:c5:b7:86:b2:24:63:63:3e:a0:68:d6:ea:a6: 5d:4b:e0:de:20:64:97:8e:22:d3:d5:7c:90:7d:22:5c:69:90: 8c:47:98:a2:bb:c8:5d:d2:60:d6:ae:f2:cf:a9:14:b8:18:2e: 3f:52:ed:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlDODcxMTAvBgNVBAUTKEU4RjkyRDZCMkEyOTMwRjBBNUJFQUY1MzA0NEM4NUQ4 RUFERTFFQkEwHhcNMjUwNjI4MjM1MTExWhcNMjUwNzA1MjM1MTExWjAYMRYwFAYD VQQDEw02ODYwN2ZmMC1lY2Q4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzeiNR7LsnB0o4BZSaM53m4OsWP8FHWxN3TbzuvSU9vZqO+VVBCmQP88iTSR3 GT2sjLwfSF0rb8ykIx/qpASvh58C6cvpp63M3619Y/RGXrbIi58iCI9q6mixeH6S clFfC/e4AQRdJDOG8o2i93H1KMTbFzebFxTFwSrVDLdkQzHyGmHn6wlbAvSchRsg WYC9DaqWk8thqsDmBohVMs93XGNqQquFwYuNurNv6gPgabyHKUzGL7nxec++/nYt V3650eypZgPglmhsIb9hKg9Gu/kmjW3LXom+UQT6V75zGJse90KtG5CJrj3yDaoF x+5nIriQLkWrTdPTJ3bEnHhJIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD0mirZo LVQ3GNM4zPA5kgTT1PjhMB8GA1UdIwQYMBaAFOj5LWsqKTDwpb6vUwRMhdjq3h66 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUM4Ny9GRDA4M0Y1ODVF RUQxMUVDOUE0OTZENTlDNEY5QUUwMi82UGt0YXlvcE1QQ2x2cTlUQkV5RjJPcmVI cm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZQa3RheW9wTVBDbHZxOVRCRXlGMk9yZUhyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OUM4Ny9GRDA4M0Y1ODVFRUQxMUVDOUE0OTZENTlDNEY5QUUwMi82UGt0YXlvcE1Q Q2x2cTlUQkV5RjJPcmVIcm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAh060fKb4U6OPm/N3ryCHZj+DhYY0DsgxoT5mFo6lV073PCmDeYg36 s1H/nqOHJYgwlYuFYxsLdmS5Jn9sGEgvdt4Hw5a89UR+KYmRdxiqH4PiimDHt/tN WkEKyBYHp9c/X7RgBJ13ia/4yw3jo7xMOelRdkRDAmvgtBZMxJAI68jlMJaPYHAO ZHSXyjZVZquCiERpobLQCOBAWuPKm55gjw8pC7Av9nFWluERH4VwObF59y//WGRC 7FkRY54+WpR6nQUjKQyvja6+TsW3hrIkY2M+oGjW6qZdS+DeIGSXjiLT1XyQfSJc aZCMR5iiu8hd0mDWrvLPqRS4GC4/Uu1i -----END CERTIFICATE-----Generated at Tue Jul 1 00:34:16 2025 by rpki-client