$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.mft File: 6CbZQgvPRaEIfTATu05KhJYNYcc.mft (raw, json) Hash identifier: QOhNPEB16+U95559FddsRy49b5HDogBYOrXvu4skofA= Subject key identifier: 82:46:C2:0B:3F:1A:6F:4D:6D:A3:73:35:34:F0:F0:39:92:64:F8:AD Authority key identifier: E8:26:D9:42:0B:CF:45:A1:08:7D:30:13:BB:4E:4A:84:96:0D:61:C7 Certificate issuer: /CN=A914EAE4/serialNumber=E826D9420BCF45A1087D3013BB4E4A84960D61C7 Certificate serial: 1B1E Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6CbZQgvPRaEIfTATu05KhJYNYcc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.mft Manifest number: 1B1C Signing time: Wed 02 Jul 2025 16:25:43 +0000 Manifest this update: Wed 02 Jul 2025 16:25:43 +0000 Manifest next update: Wed 09 Jul 2025 16:25:43 +0000 Files and hashes: 1: 6CbZQgvPRaEIfTATu05KhJYNYcc.crl (hash: 9vr7fyJzT+/Hhycyw71jXfKT93PGvwsr/1CcijT0+XQ=) 2: D810AAAAB60B11EFB476C022C4F9AE02.roa (hash: W3khPMeaOIIvZA6XChV502z9D4IWV/QOl7ps2nePO0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.crl rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6CbZQgvPRaEIfTATu05KhJYNYcc.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6942 (0x1b1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE4, serialNumber=E826D9420BCF45A1087D3013BB4E4A84960D61C7 Validity Not Before: Jul 2 16:25:43 2025 GMT Not After : Jul 9 16:25:43 2025 GMT Subject: CN=68655d87-394b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:86:d0:1a:36:ab:a8:a8:7a:68:e3:cd:84:7e: 20:86:94:85:7f:8a:65:60:0a:1e:91:c8:5b:b1:58: fa:d5:be:73:ca:e6:34:38:a5:de:a5:db:79:17:fc: aa:b3:cd:58:2b:77:f1:48:94:8c:d1:2d:fb:d8:1e: b7:0b:4a:ac:91:59:c0:b9:c5:a2:80:1f:dc:bd:f9: 9c:44:ef:29:73:1c:73:a9:fd:bc:10:75:56:33:33: b5:72:73:9d:ea:26:b6:db:76:0b:6f:35:36:b1:82: 3b:99:6f:4a:10:c4:2e:8c:fd:09:29:8b:75:d4:d3: c0:06:e4:b7:ec:fb:3c:da:e6:85:02:89:f5:d2:9f: 64:54:44:9d:1b:b7:52:3c:3b:b3:44:c6:50:74:0b: dd:b2:10:5e:6c:57:5a:f1:ee:7a:d6:76:f2:4c:16: d1:c0:7a:a9:35:c5:48:0e:b1:26:98:07:7a:ac:60: 22:c9:15:d5:d6:97:0a:69:ed:cf:81:cb:21:58:3c: 41:0e:ed:03:db:85:09:07:7b:20:fb:4b:fc:78:f6: 27:71:43:da:fe:dd:6c:19:2e:25:8d:33:d1:c5:1d: 10:dc:41:ef:ba:42:2e:c4:80:74:17:a4:be:c3:a3: ba:58:ae:b5:26:f9:6f:75:6a:ff:68:97:2c:5d:8d: 88:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:46:C2:0B:3F:1A:6F:4D:6D:A3:73:35:34:F0:F0:39:92:64:F8:AD X509v3 Authority Key Identifier: keyid:E8:26:D9:42:0B:CF:45:A1:08:7D:30:13:BB:4E:4A:84:96:0D:61:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6CbZQgvPRaEIfTATu05KhJYNYcc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:e6:18:1e:95:74:fa:f0:f5:7d:88:83:a1:66:2d:1d:41:03: de:83:43:43:34:32:ef:04:d7:b3:66:c7:03:01:2e:90:6e:68: 88:af:66:ec:23:98:7d:a2:18:93:e8:86:43:af:4d:ec:3c:38: 7e:b1:e5:90:45:07:dd:eb:79:ba:79:55:01:61:4b:2c:74:e4: f1:f0:81:87:f6:2b:02:21:d7:dd:c9:45:6f:6a:17:f2:a4:1c: 87:d0:99:44:b0:3d:77:48:ab:a8:49:d0:aa:a4:92:8f:a1:2e: 5c:7b:a4:6f:34:9b:02:20:69:45:d7:67:f6:54:14:56:7b:43: 79:ee:f4:68:62:ef:85:a9:4b:b4:82:d0:c2:ab:36:80:53:7f: f3:22:43:7a:7d:c5:5d:f9:09:e6:93:e1:69:2a:d9:40:1c:28: e8:00:40:1c:50:8a:e5:b4:33:dc:5b:5f:6a:14:e5:cc:0c:7d: d7:e3:eb:a2:47:40:cf:53:2c:59:51:1d:dd:33:ad:b3:9f:ab: 4a:b1:c5:4b:d4:ee:f8:f6:c1:11:a7:a8:95:82:40:3a:df:17: 34:1e:a8:9b:04:0f:ec:49:c3:c5:98:05:6f:7d:d3:b8:ee:be: a4:1c:1a:d7:b0:4a:23:67:b3:c1:34:58:d8:fc:9e:63:c8:5b: 7a:2a:f5:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGx4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVBRTQxMTAvBgNVBAUTKEU4MjZEOTQyMEJDRjQ1QTEwODdEMzAxM0JCNEU0QTg0 OTYwRDYxQzcwHhcNMjUwNzAyMTYyNTQzWhcNMjUwNzA5MTYyNTQzWjAYMRYwFAYD VQQDEw02ODY1NWQ4Ny0zOTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoIbQGjarqKh6aOPNhH4ghpSFf4plYAoekchbsVj61b5zyuY0OKXepdt5F/yq s81YK3fxSJSM0S372B63C0qskVnAucWigB/cvfmcRO8pcxxzqf28EHVWMzO1cnOd 6ia223YLbzU2sYI7mW9KEMQujP0JKYt11NPABuS37Ps82uaFAon10p9kVESdG7dS PDuzRMZQdAvdshBebFda8e561nbyTBbRwHqpNcVIDrEmmAd6rGAiyRXV1pcKae3P gcshWDxBDu0D24UJB3sg+0v8ePYncUPa/t1sGS4ljTPRxR0Q3EHvukIuxIB0F6S+ w6O6WK61JvlvdWr/aJcsXY2ImwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIJGwgs/ Gm9NbaNzNTTw8DmSZPitMB8GA1UdIwQYMBaAFOgm2UILz0WhCH0wE7tOSoSWDWHH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUFFNC83NjRBMDY2MDI1 NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi82Q2JaUWd2UFJhRUlmVEFUdTA1S2hKWU5Z Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzZDYlpRZ3ZQUmFFSWZUQVR1MDVLaEpZTlljYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUFFNC83NjRBMDY2MDI1NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi82Q2JaUWd2UFJh RUlmVEFUdTA1S2hKWU5ZY2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAl5hgelXT68PV9iIOhZi0dQQPeg0NDNDLvBNezZscDAS6QbmiIr2bs I5h9ohiT6IZDr03sPDh+seWQRQfd63m6eVUBYUssdOTx8IGH9isCIdfdyUVvahfy pByH0JlEsD13SKuoSdCqpJKPoS5ce6RvNJsCIGlF12f2VBRWe0N57vRoYu+FqUu0 gtDCqzaAU3/zIkN6fcVd+Qnmk+FpKtlAHCjoAEAcUIrltDPcW19qFOXMDH3X4+ui R0DPUyxZUR3dM62zn6tKscVL1O749sERp6iVgkA63xc0HqibBA/sScPFmAVvfdO4 7r6kHBrXsEojZ7PBNFjY/J5jyFt6KvXx -----END CERTIFICATE-----Generated at Thu Jul 3 21:00:56 2025 by rpki-client