$ rpki-client -vvf rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft File: B6YH3KkzMh_3j-xozXpMFJVDel8.mft (raw, json) Hash identifier: kpRQkyWcdENK3uqgl4D0SPXpbQLmqhW28o+WmI2ezWM= Subject key identifier: CF:97:87:BD:00:4C:9B:08:2E:E0:8C:67:5A:BE:5D:E8:DD:B3:F0:40 Authority key identifier: 07:A6:07:DC:A9:33:32:1F:F7:8F:EC:68:CD:7A:4C:14:95:43:7A:5F Certificate issuer: /CN=A9129DCB/serialNumber=07A607DCA933321FF78FEC68CD7A4C1495437A5F Certificate serial: 09BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6YH3KkzMh_3j-xozXpMFJVDel8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft Manifest number: 09AD Signing time: Wed 02 Jul 2025 20:18:07 +0000 Manifest this update: Wed 02 Jul 2025 20:18:07 +0000 Manifest next update: Wed 09 Jul 2025 20:18:07 +0000 Files and hashes: 1: B6YH3KkzMh_3j-xozXpMFJVDel8.crl (hash: TWLu7nGHw4BISgiorUXv6HFDP+iw8eN/JldJfpl0TF8=) 2: BAA6E77E852D11ED9A1A8D47C4F9AE02.roa (hash: LpYZeCMqtoq3Zi6VrSOzNbUcfWQzSLEFLO1bEbqVHyo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.crl rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6YH3KkzMh_3j-xozXpMFJVDel8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:18:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2491 (0x9bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129DCB, serialNumber=07A607DCA933321FF78FEC68CD7A4C1495437A5F Validity Not Before: Jul 2 20:18:07 2025 GMT Not After : Jul 9 20:18:07 2025 GMT Subject: CN=686593ff-6a1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:d4:6a:dc:1f:ac:13:2c:00:99:60:0e:ea:ae: 24:f6:a0:fd:36:1f:a4:d5:ee:99:80:3c:8c:31:c9: de:6a:93:79:73:99:dc:5a:10:f1:b3:89:04:97:84: 85:70:6d:29:d4:c2:6d:0c:f0:33:42:69:b4:f6:8f: 42:f4:1a:5c:80:2b:44:ce:99:4a:cb:44:ab:60:9a: 7d:99:e7:93:58:22:e5:23:c6:16:6b:21:04:e3:03: 24:53:e5:73:c7:b7:20:b7:5d:c5:e9:60:a4:e0:ef: d4:67:12:65:28:a8:0d:f2:b8:36:76:49:73:e6:2b: 49:8f:34:91:08:77:e2:82:98:53:bb:4c:fb:5b:cb: 44:7d:57:58:92:ec:c0:e5:7a:9b:12:46:f3:b2:66: 5f:61:36:e3:33:39:f7:51:f6:3e:a8:9c:72:fd:d6: 30:19:1f:6c:be:0c:63:e0:fb:cf:6c:2d:06:80:a7: 63:1f:b8:df:b9:b7:f5:b1:94:ee:37:16:5a:e6:c4: e7:49:12:c9:3e:95:a2:b3:ee:6b:9e:99:cd:8e:86: ca:fa:84:d4:23:52:84:8d:51:1f:46:1e:59:35:72: 29:91:fc:7a:21:b2:7a:04:7e:5f:16:28:8d:20:2a: 28:c7:7f:68:6a:82:80:89:24:c6:bc:4d:74:d0:4d: 23:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:97:87:BD:00:4C:9B:08:2E:E0:8C:67:5A:BE:5D:E8:DD:B3:F0:40 X509v3 Authority Key Identifier: keyid:07:A6:07:DC:A9:33:32:1F:F7:8F:EC:68:CD:7A:4C:14:95:43:7A:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6YH3KkzMh_3j-xozXpMFJVDel8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:d1:b9:d1:7e:9c:88:06:a4:24:8a:0c:cb:da:4c:3f:af:bd: f2:b5:50:09:4f:c1:f1:dd:5d:a0:d1:e3:41:b4:51:18:31:c9: 77:12:18:db:0a:69:82:b1:a0:73:ee:72:ee:23:d3:8c:50:31: a6:33:be:82:e7:a3:8c:2c:f7:1a:1a:2a:88:30:ca:4f:5f:b5: 4e:31:c2:df:57:93:e5:bb:a8:08:c8:a3:76:79:b8:ba:b9:bc: f4:44:f2:09:2c:34:83:22:31:b8:f9:55:92:24:d8:c5:d8:17: a9:44:84:60:c1:62:2a:dd:91:e7:87:eb:ef:db:aa:1d:1e:30: 5a:9e:6b:ed:37:a2:62:cc:b1:8c:9b:5e:10:b3:d2:ac:eb:37: 40:20:77:ee:1d:e7:22:3d:14:17:d2:a8:01:24:c0:dc:c5:14: 40:95:ea:e2:08:2c:12:cb:18:4c:4f:42:43:8e:d3:79:cd:c8: 9d:b7:c3:b1:4e:b8:28:c8:51:65:c8:69:05:ae:46:ab:6e:67: 77:3f:10:03:0a:15:9a:78:74:52:97:9f:01:9e:36:f2:52:05: f8:06:0d:d5:69:7d:b8:cb:09:bd:8a:33:fb:a2:7a:8b:aa:25: 86:e3:77:f2:42:d7:ba:cf:8b:15:a8:c1:dd:58:d9:2d:d3:63: f5:8f:82:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlEQ0IxMTAvBgNVBAUTKDA3QTYwN0RDQTkzMzMyMUZGNzhGRUM2OENEN0E0QzE0 OTU0MzdBNUYwHhcNMjUwNzAyMjAxODA3WhcNMjUwNzA5MjAxODA3WjAYMRYwFAYD VQQDEw02ODY1OTNmZi02YTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9NRq3B+sEywAmWAO6q4k9qD9Nh+k1e6ZgDyMMcneapN5c5ncWhDxs4kEl4SF cG0p1MJtDPAzQmm09o9C9BpcgCtEzplKy0SrYJp9meeTWCLlI8YWayEE4wMkU+Vz x7cgt13F6WCk4O/UZxJlKKgN8rg2dklz5itJjzSRCHfigphTu0z7W8tEfVdYkuzA 5XqbEkbzsmZfYTbjMzn3UfY+qJxy/dYwGR9svgxj4PvPbC0GgKdjH7jfubf1sZTu NxZa5sTnSRLJPpWis+5rnpnNjobK+oTUI1KEjVEfRh5ZNXIpkfx6IbJ6BH5fFiiN ICoox39oaoKAiSTGvE100E0jBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM+Xh70A TJsILuCMZ1q+Xejds/BAMB8GA1UdIwQYMBaAFAemB9ypMzIf94/saM16TBSVQ3pf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOURDQi83QzlFQzlCQThD NEMxMUVBQTA1MTg1ODJDNEY5QUUwMi9CNllIM0trek1oXzNqLXhvelhwTUZKVkRl bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I2WUgzS2t6TWhfM2oteG96WHBNRkpWRGVsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OURDQi83QzlFQzlCQThDNEMxMUVBQTA1MTg1ODJDNEY5QUUwMi9CNllIM0trek1o XzNqLXhvelhwTUZKVkRlbDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZ0bnRfpyIBqQkigzL2kw/r73ytVAJT8Hx3V2g0eNBtFEYMcl3Ehjb CmmCsaBz7nLuI9OMUDGmM76C56OMLPcaGiqIMMpPX7VOMcLfV5Plu6gIyKN2ebi6 ubz0RPIJLDSDIjG4+VWSJNjF2BepRIRgwWIq3ZHnh+vv26odHjBanmvtN6JizLGM m14Qs9Ks6zdAIHfuHeciPRQX0qgBJMDcxRRAleriCCwSyxhMT0JDjtN5zcidt8Ox TrgoyFFlyGkFrkarbmd3PxADChWaeHRSl58BnjbyUgX4Bg3VaX24ywm9ijP7onqL qiWG43fyQte6z4sVqMHdWNkt02P1j4Ih -----END CERTIFICATE-----Generated at Thu Jul 3 18:55:25 2025 by rpki-client