$ rpki-client -vvf rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.mft File: C6HFLWJbsbnkQzglDaPWTYBoego.mft (raw, json) Hash identifier: FDi37fpfQjMs8pezMG8DPQS8BpLy7Z+fYSgtRM5LLgE= Subject key identifier: F1:55:09:0F:D5:1C:A3:D8:0E:23:CC:54:F3:B7:9A:D2:F2:50:4C:E0 Authority key identifier: 0B:A1:C5:2D:62:5B:B1:B9:E4:43:38:25:0D:A3:D6:4D:80:68:7A:0A Certificate issuer: /CN=A9140E48/serialNumber=0BA1C52D625BB1B9E44338250DA3D64D80687A0A Certificate serial: 054C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6HFLWJbsbnkQzglDaPWTYBoego.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.mft Manifest number: 0546 Signing time: Mon 30 Jun 2025 23:51:12 +0000 Manifest this update: Mon 30 Jun 2025 23:51:12 +0000 Manifest next update: Mon 07 Jul 2025 23:51:12 +0000 Files and hashes: 1: C6HFLWJbsbnkQzglDaPWTYBoego.crl (hash: gNsGpa7Q8XukmDkorafJ/hhOHvXw7X9bgZydnbKVRH8=) 2: D5FFCB96F9D611EB8A9FCE34C4F9AE02.roa (hash: EHUc5Goa9nVY7SlTfmeqrv5ucf88hUBAHLp60F7iD50=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.crl rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6HFLWJbsbnkQzglDaPWTYBoego.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 23:51:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1356 (0x54c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140E48, serialNumber=0BA1C52D625BB1B9E44338250DA3D64D80687A0A Validity Not Before: Jun 30 23:51:12 2025 GMT Not After : Jul 7 23:51:12 2025 GMT Subject: CN=686322f0-beb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:74:27:9d:71:e1:c4:6d:a5:f7:48:ba:39:a9: 4a:ca:8e:9d:29:dd:d0:b5:47:fa:d8:0c:00:95:8e: 3a:97:d6:9c:c8:27:f4:e7:93:62:bf:94:de:f3:aa: 31:ca:12:26:4f:fa:3a:68:72:ad:21:13:99:74:46: 21:fe:be:58:9c:9f:70:9f:e8:4a:e6:f0:6e:09:b2: 9f:e7:64:9a:2f:f3:33:83:4d:5a:be:1e:a3:6f:4a: 4f:a9:82:58:8c:b7:1e:a7:d1:19:80:81:00:5a:1a: 7d:e9:2d:2c:22:83:9f:91:fc:73:33:96:2c:2a:bf: 56:04:5e:c7:49:78:a5:54:ac:49:94:5e:3d:46:17: f0:de:c2:12:28:1d:3e:25:b3:6a:db:dc:66:f7:be: e7:da:58:f3:61:94:c6:3d:c7:c5:62:34:c1:56:6e: 64:b5:b0:15:cc:d2:86:43:72:b7:25:31:65:7c:f7: 87:88:2d:e6:d7:c1:31:19:74:47:6c:8a:30:97:02: 4d:62:f3:81:94:90:87:27:cb:c0:f5:c1:3b:85:d2: 18:83:af:8f:1e:3e:d9:7f:20:4a:4d:d4:64:38:01: f1:f2:e6:9d:d6:fe:d0:89:84:d0:2f:ca:c7:62:6d: 6c:29:df:0f:12:80:eb:26:e3:af:7e:2a:90:20:a2: 03:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:55:09:0F:D5:1C:A3:D8:0E:23:CC:54:F3:B7:9A:D2:F2:50:4C:E0 X509v3 Authority Key Identifier: keyid:0B:A1:C5:2D:62:5B:B1:B9:E4:43:38:25:0D:A3:D6:4D:80:68:7A:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6HFLWJbsbnkQzglDaPWTYBoego.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:58:2c:7b:ca:b6:24:12:40:7d:a7:43:07:19:ff:b0:eb:4e: 21:5d:a5:67:68:92:cd:8f:69:f8:fb:5d:38:14:7b:da:71:34: 8f:80:fa:fc:6b:30:26:47:c8:cc:6c:c4:44:d3:09:ef:08:cf: 33:32:a2:ee:92:ac:2b:98:f5:c8:c5:bb:bf:ce:30:81:28:27: d4:b7:29:d7:92:0f:47:ba:28:7a:e7:67:7c:3d:f4:2a:05:71: 67:ac:aa:96:e3:19:d7:9e:e2:dd:15:ba:04:6f:18:f4:c4:8d: 39:30:96:8b:fd:e0:9e:ef:cf:10:22:10:58:dd:86:07:5f:3a: ac:c8:23:3b:36:1a:cb:2a:22:91:7e:af:5b:9b:82:d9:9d:9e: 3d:e5:5e:22:a8:2b:a2:ab:af:e7:65:ce:3f:b0:ef:39:1b:f7: 56:1a:d3:a9:f6:7b:47:54:be:41:13:53:88:2b:11:00:25:68: 69:85:48:5b:2c:e5:f8:02:c3:49:d6:ae:a5:f2:35:68:c1:01: b5:c0:ba:00:87:3c:9f:7e:01:38:4c:3a:89:e3:1e:03:31:e6: 9f:00:64:4a:9c:d3:89:4e:10:94:c5:85:b0:38:61:8b:12:59: b2:25:a4:b2:76:d1:e5:68:0a:b7:9f:53:e7:a2:50:f6:09:1f: cf:e1:23:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBFNDgxMTAvBgNVBAUTKDBCQTFDNTJENjI1QkIxQjlFNDQzMzgyNTBEQTNENjRE ODA2ODdBMEEwHhcNMjUwNjMwMjM1MTEyWhcNMjUwNzA3MjM1MTEyWjAYMRYwFAYD VQQDEw02ODYzMjJmMC1iZWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuXQnnXHhxG2l90i6OalKyo6dKd3QtUf62AwAlY46l9acyCf055Niv5Te86ox yhImT/o6aHKtIROZdEYh/r5YnJ9wn+hK5vBuCbKf52SaL/Mzg01avh6jb0pPqYJY jLcep9EZgIEAWhp96S0sIoOfkfxzM5YsKr9WBF7HSXilVKxJlF49Rhfw3sISKB0+ JbNq29xm977n2ljzYZTGPcfFYjTBVm5ktbAVzNKGQ3K3JTFlfPeHiC3m18ExGXRH bIowlwJNYvOBlJCHJ8vA9cE7hdIYg6+PHj7ZfyBKTdRkOAHx8uad1v7QiYTQL8rH Ym1sKd8PEoDrJuOvfiqQIKID7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPFVCQ/V HKPYDiPMVPO3mtLyUEzgMB8GA1UdIwQYMBaAFAuhxS1iW7G55EM4JQ2j1k2AaHoK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEU0OC81MEVGRDg3NkY5 RDQxMUVCOTc5NDgzMTFDNEY5QUUwMi9DNkhGTFdKYnNibmtRemdsRGFQV1RZQm9l Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M2SEZMV0pic2Jua1F6Z2xEYVBXVFlCb2Vnby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEU0OC81MEVGRDg3NkY5RDQxMUVCOTc5NDgzMTFDNEY5QUUwMi9DNkhGTFdKYnNi bmtRemdsRGFQV1RZQm9lZ28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChWCx7yrYkEkB9p0MHGf+w604hXaVnaJLNj2n4+104FHvacTSPgPr8 azAmR8jMbMRE0wnvCM8zMqLukqwrmPXIxbu/zjCBKCfUtynXkg9Huih652d8PfQq BXFnrKqW4xnXnuLdFboEbxj0xI05MJaL/eCe788QIhBY3YYHXzqsyCM7NhrLKiKR fq9bm4LZnZ495V4iqCuiq6/nZc4/sO85G/dWGtOp9ntHVL5BE1OIKxEAJWhphUhb LOX4AsNJ1q6l8jVowQG1wLoAhzyffgE4TDqJ4x4DMeafAGRKnNOJThCUxYWwOGGL ElmyJaSydtHlaAq3n1PnolD2CR/P4SOU -----END CERTIFICATE-----Generated at Wed Jul 2 23:22:03 2025 by rpki-client