$ rpki-client -vvf rpki.apnic.net/member_repository/A914CC1C/D93252FCABF811EAB1FBD828C4F9AE02/6eDCCGLs2ANoFFu3z2LO3YARYzo.mft File: 6eDCCGLs2ANoFFu3z2LO3YARYzo.mft (raw, json) Hash identifier: Zii46iPG93oadkVyjn+kZkeXURT/TUAMVzsl68x7e7Q= Subject key identifier: CB:82:2B:FF:A4:90:E7:43:06:11:20:5A:7D:70:EF:4A:79:2B:8B:53 Authority key identifier: E9:E0:C2:08:62:EC:D8:03:68:14:5B:B7:CF:62:CE:DD:80:11:63:3A Certificate issuer: /CN=A914CC1C/serialNumber=E9E0C20862ECD80368145BB7CF62CEDD8011633A Certificate serial: 08F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6eDCCGLs2ANoFFu3z2LO3YARYzo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CC1C/D93252FCABF811EAB1FBD828C4F9AE02/6eDCCGLs2ANoFFu3z2LO3YARYzo.mft Manifest number: 08F6 Signing time: Sat 28 Jun 2025 20:03:02 +0000 Manifest this update: Sat 28 Jun 2025 20:03:01 +0000 Manifest next update: Sat 05 Jul 2025 20:03:01 +0000 Files and hashes: 1: 6eDCCGLs2ANoFFu3z2LO3YARYzo.crl (hash: fJ/nnlT7kxvPkRvoGccuK7ib7w9pCWO4DwpI0lhxs9U=) 2: 99CE159C912C11EFA67EA629C4F9AE02.roa (hash: uh+rzVJtvF4UI78w58itN+HR2kb9/ZhZdUQFw6xcuos=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CC1C/D93252FCABF811EAB1FBD828C4F9AE02/6eDCCGLs2ANoFFu3z2LO3YARYzo.crl rsync://rpki.apnic.net/member_repository/A914CC1C/D93252FCABF811EAB1FBD828C4F9AE02/6eDCCGLs2ANoFFu3z2LO3YARYzo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6eDCCGLs2ANoFFu3z2LO3YARYzo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 20:03:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2296 (0x8f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CC1C, serialNumber=E9E0C20862ECD80368145BB7CF62CEDD8011633A Validity Not Before: Jun 28 20:03:01 2025 GMT Not After : Jul 5 20:03:01 2025 GMT Subject: CN=68604a75-41a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:37:b9:c9:f4:3a:54:4d:5c:c2:9c:c8:94:e5: 8a:43:9a:69:ec:37:2e:02:ad:2e:dc:1f:1a:6a:26: 56:47:1b:72:b8:be:6c:49:75:13:d7:06:1a:2a:20: a2:d2:88:9d:83:d5:ae:49:2b:e9:cd:c7:b7:ce:7e: 66:a5:39:cd:7a:a7:36:c1:c8:6c:e1:1c:07:b0:76: bd:96:ed:86:52:5d:55:f0:af:19:4b:d8:c1:2a:da: 6d:39:56:7f:db:ed:aa:8f:30:59:7d:f8:11:5f:ca: 3f:ce:fa:9a:d7:6f:dc:ef:70:6f:5c:74:ab:bb:af: 26:0a:bb:1b:e1:b8:61:dc:49:c9:c3:d9:e0:d1:0f: 76:a4:4e:cc:ed:20:33:a9:5e:57:a9:b8:7b:53:4a: 8b:fb:6c:41:2b:7b:86:0c:23:65:0e:ab:16:4c:df: db:8c:8b:83:1a:9e:33:62:90:85:ee:b9:dc:52:4e: c6:ec:8b:0d:5e:f3:8d:bd:fb:f6:29:bb:1f:f1:0d: 10:34:e4:86:ce:50:f6:a7:64:46:fe:30:4d:18:00: 13:a5:cc:ef:4b:97:b2:4a:c0:81:be:67:b3:d5:5b: e9:43:cf:6a:fc:79:dd:f4:fa:36:23:a9:30:29:1a: 9d:48:98:46:84:4c:3d:d9:10:91:c4:43:b5:04:85: 05:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:82:2B:FF:A4:90:E7:43:06:11:20:5A:7D:70:EF:4A:79:2B:8B:53 X509v3 Authority Key Identifier: keyid:E9:E0:C2:08:62:EC:D8:03:68:14:5B:B7:CF:62:CE:DD:80:11:63:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CC1C/D93252FCABF811EAB1FBD828C4F9AE02/6eDCCGLs2ANoFFu3z2LO3YARYzo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6eDCCGLs2ANoFFu3z2LO3YARYzo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CC1C/D93252FCABF811EAB1FBD828C4F9AE02/6eDCCGLs2ANoFFu3z2LO3YARYzo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e9:10:c1:47:d8:13:37:91:0c:30:86:c5:f8:68:94:1b:f6:6f: 2c:9d:fa:ab:78:7c:2a:db:aa:24:a6:52:ab:a3:da:3c:b9:2f: 5c:39:48:36:d1:a6:af:97:17:39:99:53:2f:b2:23:be:bb:6b: c9:16:78:9c:d5:d8:62:a7:ef:33:78:5a:33:c5:85:09:70:32: 4b:13:76:a1:8b:3a:4c:be:cd:df:97:c4:cf:2b:e8:94:f3:84: 00:45:62:37:ea:78:f7:54:d9:16:fd:55:fa:65:0c:f1:da:e8: 2b:6e:1f:95:71:2d:47:c8:ed:c9:ea:91:02:32:fa:0f:60:ab: db:68:6d:42:b2:b2:ea:1d:e6:aa:58:86:c3:b2:fc:eb:1c:16: 26:a3:e7:87:de:17:73:68:b5:63:d1:11:a4:03:93:9b:47:3d: b8:d9:a6:57:60:0a:d6:72:08:c5:c0:73:e9:0a:b9:5f:67:1e: 98:27:a8:f6:23:b6:a7:52:65:9f:2b:6c:0a:6d:5e:9b:bb:55: 04:76:d7:e9:62:fd:a4:e6:1a:76:1a:22:f3:73:95:f6:45:a3: 9f:02:94:2d:0c:18:b7:bf:b9:19:6b:6e:96:19:6f:b5:6a:7a: 4f:92:10:56:4b:55:43:80:0b:82:ea:5c:dd:f1:07:16:26:a6: 4e:00:0a:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENDMUMxMTAvBgNVBAUTKEU5RTBDMjA4NjJFQ0Q4MDM2ODE0NUJCN0NGNjJDRURE ODAxMTYzM0EwHhcNMjUwNjI4MjAwMzAxWhcNMjUwNzA1MjAwMzAxWjAYMRYwFAYD VQQDEw02ODYwNGE3NS00MWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmTe5yfQ6VE1cwpzIlOWKQ5pp7DcuAq0u3B8aaiZWRxtyuL5sSXUT1wYaKiCi 0oidg9WuSSvpzce3zn5mpTnNeqc2wchs4RwHsHa9lu2GUl1V8K8ZS9jBKtptOVZ/ 2+2qjzBZffgRX8o/zvqa12/c73BvXHSru68mCrsb4bhh3EnJw9ng0Q92pE7M7SAz qV5Xqbh7U0qL+2xBK3uGDCNlDqsWTN/bjIuDGp4zYpCF7rncUk7G7IsNXvONvfv2 Kbsf8Q0QNOSGzlD2p2RG/jBNGAATpczvS5eySsCBvmez1VvpQ89q/Hnd9Po2I6kw KRqdSJhGhEw92RCRxEO1BIUFiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMuCK/+k kOdDBhEgWn1w70p5K4tTMB8GA1UdIwQYMBaAFOngwghi7NgDaBRbt89izt2AEWM6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0MxQy9EOTMyNTJGQ0FC RjgxMUVBQjFGQkQ4MjhDNEY5QUUwMi82ZURDQ0dMczJBTm9GRnUzejJMTzNZQVJZ em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZlRENDR0xzMkFOb0ZGdTN6MkxPM1lBUll6by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0MxQy9EOTMyNTJGQ0FCRjgxMUVBQjFGQkQ4MjhDNEY5QUUwMi82ZURDQ0dMczJB Tm9GRnUzejJMTzNZQVJZem8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDpEMFH2BM3kQwwhsX4aJQb9m8snfqreHwq26okplKro9o8uS9cOUg2 0aavlxc5mVMvsiO+u2vJFnic1dhip+8zeFozxYUJcDJLE3ahizpMvs3fl8TPK+iU 84QARWI36nj3VNkW/VX6ZQzx2ugrbh+VcS1HyO3J6pECMvoPYKvbaG1CsrLqHeaq WIbDsvzrHBYmo+eH3hdzaLVj0RGkA5ObRz242aZXYArWcgjFwHPpCrlfZx6YJ6j2 I7anUmWfK2wKbV6bu1UEdtfpYv2k5hp2GiLzc5X2RaOfApQtDBi3v7kZa26WGW+1 anpPkhBWS1VDgAuC6lzd8QcWJqZOAArW -----END CERTIFICATE-----Generated at Sun Jun 29 19:58:23 2025 by rpki-client