$ rpki-client -vvf rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft File: a51l6unGl9ohy0vuv030zgpBkyE.mft (raw, json) Hash identifier: 2cYuMHqoRWAVRgiA5uBhvNKQxFn5eDJoVsxhZ+hZeO4= Subject key identifier: 2B:6F:F7:82:6C:FA:E7:18:E9:BC:B2:9E:08:63:35:C2:32:85:B2:66 Authority key identifier: 6B:9D:65:EA:E9:C6:97:DA:21:CB:4B:EE:BF:4D:F4:CE:0A:41:93:21 Certificate issuer: /CN=A9141FD6/serialNumber=6B9D65EAE9C697DA21CB4BEEBF4DF4CE0A419321 Certificate serial: 34D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a51l6unGl9ohy0vuv030zgpBkyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft Manifest number: 34B6 Signing time: Wed 02 Jul 2025 14:45:19 +0000 Manifest this update: Wed 02 Jul 2025 14:45:19 +0000 Manifest next update: Wed 09 Jul 2025 14:45:19 +0000 Files and hashes: 1: a51l6unGl9ohy0vuv030zgpBkyE.crl (hash: 7W72mQWvdcHiBXB8h9gr0gh6O0IWw4YRwDuznaSCGiw=) 2: 6215E9C089CF11ECA1DA1810C4F9AE02.roa (hash: o3Ceb2MSjRakfXXsxsrz1v3BRN+sMCeTig6Z0QGV2lg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.crl rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a51l6unGl9ohy0vuv030zgpBkyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 14:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13521 (0x34d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141FD6, serialNumber=6B9D65EAE9C697DA21CB4BEEBF4DF4CE0A419321 Validity Not Before: Jul 2 14:45:19 2025 GMT Not After : Jul 9 14:45:19 2025 GMT Subject: CN=686545ff-fcb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:eb:c3:98:0e:3f:9e:b1:02:64:98:26:ff:8e: 51:4f:6b:8d:20:a8:da:5b:ad:5c:88:0c:75:f7:af: c8:34:59:ea:eb:f2:6d:4f:ca:7d:bd:67:98:e7:37: 2e:8c:4a:1b:ae:c9:7e:ac:0f:14:99:d6:d3:b6:f5: 1b:18:d6:ac:34:1c:8d:bc:af:d1:2e:40:e8:c5:3c: cf:f2:8f:82:dc:80:c9:cb:7f:b1:c5:67:77:dc:38: 91:ce:7b:03:92:96:7d:49:15:bc:6a:e5:00:5f:46: 98:4d:98:35:f9:b5:37:99:46:23:e7:c2:b1:e1:da: 1f:1e:db:33:ad:b6:32:d6:71:5d:c1:a1:30:2e:1a: 09:ec:7b:ec:0e:f2:a5:fd:44:4c:3f:8c:68:39:8d: ca:09:df:f4:86:23:94:e6:b8:d7:47:88:85:a5:6e: ee:71:8d:59:7b:dd:38:43:6c:ad:47:55:27:3e:4b: 47:c4:24:83:00:66:31:a8:e0:65:22:dc:09:84:15: 2b:a8:e8:1c:bb:ce:11:82:5e:0c:91:e3:c2:0e:b9: 15:58:08:03:67:9b:86:58:ae:4b:1d:53:93:67:61: 31:4c:2b:cc:0c:d3:67:a8:7e:c0:d6:57:5a:9a:6c: 0e:4c:7b:f2:a3:af:1d:44:d6:a8:59:12:2c:b0:2c: 4c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:6F:F7:82:6C:FA:E7:18:E9:BC:B2:9E:08:63:35:C2:32:85:B2:66 X509v3 Authority Key Identifier: keyid:6B:9D:65:EA:E9:C6:97:DA:21:CB:4B:EE:BF:4D:F4:CE:0A:41:93:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a51l6unGl9ohy0vuv030zgpBkyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:2e:8b:7d:c8:f2:f8:70:d2:cc:8a:53:97:56:21:33:1a:27: 86:58:90:e6:a1:8c:ba:c0:ec:ae:40:dc:8a:3d:30:d0:f6:34: 31:1c:5b:48:c8:6e:ef:fa:0a:23:4e:b1:84:a2:ae:64:dd:c6: 1d:de:06:6a:c3:4e:ad:5a:f1:f4:75:cc:44:57:38:3f:39:6b: 63:36:f8:13:ef:97:6e:a6:86:8d:64:34:07:73:6b:f7:21:66: 75:8d:99:04:10:be:dc:97:f7:22:b6:49:4b:ea:d0:56:5f:a4: 99:12:4e:de:23:cb:82:53:da:d1:5e:38:02:fd:90:bd:0a:18: 06:7a:50:79:75:50:df:ac:0f:87:a1:be:ab:f7:0c:d4:f3:3b: 47:07:ab:c1:d4:fb:96:88:9b:b0:44:2b:80:8e:d5:8e:8f:c8: df:c9:62:1d:7d:8e:ce:54:2b:b1:c0:9a:be:e6:ca:22:dc:3a: 8e:ba:e1:63:d9:ff:c1:f9:52:ea:59:f3:db:64:b2:9d:de:f4: 04:35:c0:18:39:d6:1e:e8:66:10:b2:5b:bf:d0:2e:75:b5:ad: 86:d6:44:f6:fc:46:aa:a5:03:b1:a4:59:91:ae:f0:bb:8c:4b: 4d:6c:04:ba:34:bc:39:85:a9:93:2a:db:04:2e:ee:a5:1c:b2: 3c:31:ba:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDFGRDYxMTAvBgNVBAUTKDZCOUQ2NUVBRTlDNjk3REEyMUNCNEJFRUJGNERGNENF MEE0MTkzMjEwHhcNMjUwNzAyMTQ0NTE5WhcNMjUwNzA5MTQ0NTE5WjAYMRYwFAYD VQQDEw02ODY1NDVmZi1mY2IwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz+vDmA4/nrECZJgm/45RT2uNIKjaW61ciAx196/INFnq6/JtT8p9vWeY5zcu jEobrsl+rA8UmdbTtvUbGNasNByNvK/RLkDoxTzP8o+C3IDJy3+xxWd33DiRznsD kpZ9SRW8auUAX0aYTZg1+bU3mUYj58Kx4dofHtszrbYy1nFdwaEwLhoJ7HvsDvKl /URMP4xoOY3KCd/0hiOU5rjXR4iFpW7ucY1Ze904Q2ytR1UnPktHxCSDAGYxqOBl ItwJhBUrqOgcu84Rgl4MkePCDrkVWAgDZ5uGWK5LHVOTZ2ExTCvMDNNnqH7A1lda mmwOTHvyo68dRNaoWRIssCxMdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCtv94Js +ucY6byynghjNcIyhbJmMB8GA1UdIwQYMBaAFGudZerpxpfaIctL7r9N9M4KQZMh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUZENi82RUVDNjQzMDFE OTExMUUyQjY4N0E1RjMwOEIwMkNEMi9hNTFsNnVuR2w5b2h5MHZ1djAzMHpncEJr eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E1MWw2dW5HbDlvaHkwdnV2MDMwemdwQmt5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MUZENi82RUVDNjQzMDFEOTExMUUyQjY4N0E1RjMwOEIwMkNEMi9hNTFsNnVuR2w5 b2h5MHZ1djAzMHpncEJreUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPLot9yPL4cNLMilOXViEzGieGWJDmoYy6wOyuQNyKPTDQ9jQxHFtI yG7v+gojTrGEoq5k3cYd3gZqw06tWvH0dcxEVzg/OWtjNvgT75dupoaNZDQHc2v3 IWZ1jZkEEL7cl/citklL6tBWX6SZEk7eI8uCU9rRXjgC/ZC9ChgGelB5dVDfrA+H ob6r9wzU8ztHB6vB1PuWiJuwRCuAjtWOj8jfyWIdfY7OVCuxwJq+5soi3DqOuuFj 2f/B+VLqWfPbZLKd3vQENcAYOdYe6GYQslu/0C51ta2G1kT2/EaqpQOxpFmRrvC7 jEtNbAS6NLw5hamTKtsELu6lHLI8MbqC -----END CERTIFICATE-----Generated at Fri Jul 4 10:34:50 2025 by rpki-client