$ rpki-client -vvf rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/6BH2N9bdhj5cdPMuKbziePqyWPc.mft File: 6BH2N9bdhj5cdPMuKbziePqyWPc.mft (raw, json) Hash identifier: fpAo3NNFz57NbkLkrGzq0FO2F21SZVkYyB9WVb+0KFo= Subject key identifier: 09:E4:D9:3F:43:EA:98:68:38:44:02:79:CC:61:A4:B8:55:0E:98:49 Authority key identifier: E8:11:F6:37:D6:DD:86:3E:5C:74:F3:2E:29:BC:E2:78:FA:B2:58:F7 Certificate issuer: /CN=A912B751/serialNumber=E811F637D6DD863E5C74F32E29BCE278FAB258F7 Certificate serial: 02BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6BH2N9bdhj5cdPMuKbziePqyWPc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/6BH2N9bdhj5cdPMuKbziePqyWPc.mft Manifest number: 02B4 Signing time: Tue 01 Jul 2025 02:08:07 +0000 Manifest this update: Tue 01 Jul 2025 02:08:07 +0000 Manifest next update: Tue 08 Jul 2025 02:08:07 +0000 Files and hashes: 1: 6BH2N9bdhj5cdPMuKbziePqyWPc.crl (hash: uBU2Kkq3R7uB+dKQv4TZhbk7q/B+GuWwPadBpBkMtk8=) 2: 96BC85E8145711EF8ED9C174C4F9AE02.roa (hash: r9L4CmzavsqqBK92JPFfdFnoYkrBESFuwdtJEjg40XU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/6BH2N9bdhj5cdPMuKbziePqyWPc.crl rsync://rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/6BH2N9bdhj5cdPMuKbziePqyWPc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6BH2N9bdhj5cdPMuKbziePqyWPc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 02:08:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 698 (0x2ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B751, serialNumber=E811F637D6DD863E5C74F32E29BCE278FAB258F7 Validity Not Before: Jul 1 02:08:07 2025 GMT Not After : Jul 8 02:08:07 2025 GMT Subject: CN=68634307-b37a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:db:aa:ab:58:f8:cc:8b:e9:97:af:96:39:5c: ea:87:2e:b1:3d:21:c6:5c:0b:53:66:f4:87:3e:0c: ad:bc:52:ef:04:6f:36:c2:07:16:d3:e3:30:a9:2b: 6b:b5:dd:08:aa:28:9c:76:83:04:31:b0:65:0d:ef: bf:d2:00:ad:2c:59:91:8c:f3:5c:04:fa:5e:52:39: 95:d7:33:81:5f:d6:64:ca:05:9f:87:9c:fe:d1:c6: 37:9e:1b:8d:4d:cc:8d:61:5c:40:90:0d:c0:e7:a7: 30:8c:0b:cc:8c:f6:51:04:83:4c:a9:45:18:fd:66: 72:df:48:db:e9:95:d7:60:87:6a:0a:66:66:4f:d3: 02:2f:9f:0a:62:9e:0e:56:1a:c3:71:3d:45:78:9f: a1:f2:62:31:f9:7d:e0:a4:34:9e:0f:97:f2:c1:c2: c1:45:0f:57:2b:37:6c:91:7c:e3:cb:6e:c3:e7:a4: 61:90:26:29:bf:c3:67:09:d4:b1:34:fb:fb:36:46: b5:3c:83:21:79:3b:df:ea:c2:34:49:bf:e0:72:57: 06:96:e0:b7:56:88:66:81:da:96:4a:39:07:ba:98: 2e:a8:ef:35:ba:79:02:4d:4e:d3:82:d6:bb:4a:64: 07:df:61:6b:50:fe:37:f8:b4:85:71:4a:76:53:8a: 8b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:E4:D9:3F:43:EA:98:68:38:44:02:79:CC:61:A4:B8:55:0E:98:49 X509v3 Authority Key Identifier: keyid:E8:11:F6:37:D6:DD:86:3E:5C:74:F3:2E:29:BC:E2:78:FA:B2:58:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/6BH2N9bdhj5cdPMuKbziePqyWPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6BH2N9bdhj5cdPMuKbziePqyWPc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/6BH2N9bdhj5cdPMuKbziePqyWPc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:0b:f2:0d:2d:e0:d4:2e:06:fc:21:5d:3f:ab:4b:65:94:03: 38:23:ac:81:9e:e3:60:4e:86:12:6b:83:fc:7b:32:9c:c0:31: 5c:d1:1e:02:89:53:ae:4a:9d:8a:98:b4:df:2b:e6:b9:30:e0: a9:34:4e:0e:db:33:03:08:65:19:26:ba:1a:fc:e7:13:1b:70: 3b:e0:12:ec:cc:d1:31:22:c0:82:94:f0:d5:d4:2f:2c:07:a8: f4:3d:64:f2:74:7c:a2:12:5c:67:51:69:96:7a:10:ce:2b:c0: 5f:88:e4:ae:95:c7:c3:1b:5c:ff:28:d7:3f:6c:dc:22:e1:ff: 21:a7:37:c2:99:8e:e2:9e:44:4b:2d:7a:7b:37:22:07:c8:92: c3:e4:ff:1a:73:90:06:59:dc:cc:a5:ff:d8:fb:94:b5:40:ef: 7c:f1:f7:5a:4b:97:21:3b:c8:86:b8:e5:f2:72:0c:39:ab:f3: 60:71:d7:59:65:83:a6:d6:8e:df:30:58:74:fe:c2:93:54:aa: 7d:bf:86:b0:05:7b:e0:21:ed:44:29:30:59:95:1a:ca:33:e0: 32:bc:37:2a:e1:08:96:f9:96:a1:b5:93:24:9d:1d:53:a0:b6: 29:8e:fe:e3:ef:e8:8b:cc:5f:23:f7:f7:21:fc:42:a9:ba:37: cd:7b:8a:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI3NTExMTAvBgNVBAUTKEU4MTFGNjM3RDZERDg2M0U1Qzc0RjMyRTI5QkNFMjc4 RkFCMjU4RjcwHhcNMjUwNzAxMDIwODA3WhcNMjUwNzA4MDIwODA3WjAYMRYwFAYD VQQDEw02ODYzNDMwNy1iMzdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx9uqq1j4zIvpl6+WOVzqhy6xPSHGXAtTZvSHPgytvFLvBG82wgcW0+MwqStr td0IqiicdoMEMbBlDe+/0gCtLFmRjPNcBPpeUjmV1zOBX9ZkygWfh5z+0cY3nhuN TcyNYVxAkA3A56cwjAvMjPZRBINMqUUY/WZy30jb6ZXXYIdqCmZmT9MCL58KYp4O VhrDcT1FeJ+h8mIx+X3gpDSeD5fywcLBRQ9XKzdskXzjy27D56RhkCYpv8NnCdSx NPv7Nka1PIMheTvf6sI0Sb/gclcGluC3VohmgdqWSjkHupguqO81unkCTU7Tgta7 SmQH32FrUP43+LSFcUp2U4qLTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAnk2T9D 6phoOEQCecxhpLhVDphJMB8GA1UdIwQYMBaAFOgR9jfW3YY+XHTzLim84nj6slj3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjc1MS83MkQ3RDhCNEZE RDcxMUVDOTBDQUVGNENDNEY5QUUwMi82QkgyTjliZGhqNWNkUE11S2J6aWVQcXlX UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZCSDJOOWJkaGo1Y2RQTXVLYnppZVBxeVdQYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Qjc1MS83MkQ3RDhCNEZERDcxMUVDOTBDQUVGNENDNEY5QUUwMi82QkgyTjliZGhq NWNkUE11S2J6aWVQcXlXUGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcC/INLeDULgb8IV0/q0tllAM4I6yBnuNgToYSa4P8ezKcwDFc0R4C iVOuSp2KmLTfK+a5MOCpNE4O2zMDCGUZJroa/OcTG3A74BLszNExIsCClPDV1C8s B6j0PWTydHyiElxnUWmWehDOK8BfiOSulcfDG1z/KNc/bNwi4f8hpzfCmY7inkRL LXp7NyIHyJLD5P8ac5AGWdzMpf/Y+5S1QO988fdaS5chO8iGuOXycgw5q/NgcddZ ZYOm1o7fMFh0/sKTVKp9v4awBXvgIe1EKTBZlRrKM+AyvDcq4QiW+ZahtZMknR1T oLYpjv7j7+iLzF8j9/ch/EKpujfNe4pX -----END CERTIFICATE-----Generated at Wed Jul 2 23:29:47 2025 by rpki-client