$ rpki-client -vvf rpki.apnic.net/member_repository/A914EB9A/E4A65EDE23C311EF892DEB21C4F9AE02/g--P6e5IafC5SpX3RvWJS6H7MPA.mft File: g--P6e5IafC5SpX3RvWJS6H7MPA.mft (raw, json) Hash identifier: 8ECmMr2RAYIX9ZU7vsq9ZlcDHdhEQHjc2U2PP+YXoDg= Subject key identifier: 5D:A5:F8:17:5B:C7:F3:06:5E:B7:37:70:72:E7:79:DB:82:03:3E:19 Authority key identifier: 83:EF:8F:E9:EE:48:69:F0:B9:4A:95:F7:46:F5:89:4B:A1:FB:30:F0 Certificate issuer: /CN=A914EB9A/serialNumber=83EF8FE9EE4869F0B94A95F746F5894BA1FB30F0 Certificate serial: CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g--P6e5IafC5SpX3RvWJS6H7MPA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EB9A/E4A65EDE23C311EF892DEB21C4F9AE02/g--P6e5IafC5SpX3RvWJS6H7MPA.mft Manifest number: C8 Signing time: Sun 29 Jun 2025 04:47:54 +0000 Manifest this update: Sun 29 Jun 2025 04:47:53 +0000 Manifest next update: Sun 06 Jul 2025 04:47:53 +0000 Files and hashes: 1: g--P6e5IafC5SpX3RvWJS6H7MPA.crl (hash: 18TloQO4kY/MA2KqOzg9SPEmWrwAqKE1nCI3q21JRnY=) 2: A368B23623C411EFB7164123C4F9AE02.roa (hash: xksJk5Cwcy8+0Thge3EVjB2r6Pp+L19aLaysM6rp0MI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EB9A/E4A65EDE23C311EF892DEB21C4F9AE02/g--P6e5IafC5SpX3RvWJS6H7MPA.crl rsync://rpki.apnic.net/member_repository/A914EB9A/E4A65EDE23C311EF892DEB21C4F9AE02/g--P6e5IafC5SpX3RvWJS6H7MPA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g--P6e5IafC5SpX3RvWJS6H7MPA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 04:47:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EB9A, serialNumber=83EF8FE9EE4869F0B94A95F746F5894BA1FB30F0 Validity Not Before: Jun 29 04:47:53 2025 GMT Not After : Jul 6 04:47:53 2025 GMT Subject: CN=6860c579-3faf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a6:06:ca:59:81:0d:63:83:ff:33:fb:59:6f: 51:07:20:d2:65:92:92:51:39:ee:42:62:29:86:4e: 17:b3:29:f0:87:24:fa:fa:fe:b5:fc:dd:03:c8:84: 8b:32:ab:97:30:25:19:c4:f9:eb:5e:a8:e6:43:54: 27:b5:2a:b7:04:78:87:e0:1d:a0:f6:bf:f4:dd:1d: 31:c4:6e:83:ae:d5:52:da:b9:7b:1e:85:db:42:b4: fa:30:28:60:c4:3c:f4:07:f9:f1:76:bb:de:ec:b2: 1d:8e:8e:bb:8f:74:13:ee:f7:20:f1:03:41:53:9d: 62:ab:93:dc:a6:6e:86:b8:a4:a2:da:b2:2a:b8:15: 9f:38:69:84:8b:d3:1b:4d:29:ee:14:7c:c7:2e:ba: d2:da:fa:59:0e:49:13:11:c7:39:89:bb:0f:a6:f8: 8b:df:38:65:58:39:f9:41:66:0f:2f:aa:02:17:1a: 53:08:d0:c5:0c:bd:1a:0b:b2:90:87:b2:34:47:21: 4c:ea:22:00:e1:e1:a0:55:66:8e:56:47:f5:9d:86: 24:18:8f:52:d2:5a:3b:96:e9:71:00:1c:79:04:ab: c3:a2:e7:be:09:7f:47:3a:dd:22:fa:bd:1a:1f:ac: e0:21:f1:74:ef:19:a2:7e:b7:85:14:0e:8e:94:56: d2:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:A5:F8:17:5B:C7:F3:06:5E:B7:37:70:72:E7:79:DB:82:03:3E:19 X509v3 Authority Key Identifier: keyid:83:EF:8F:E9:EE:48:69:F0:B9:4A:95:F7:46:F5:89:4B:A1:FB:30:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EB9A/E4A65EDE23C311EF892DEB21C4F9AE02/g--P6e5IafC5SpX3RvWJS6H7MPA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g--P6e5IafC5SpX3RvWJS6H7MPA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EB9A/E4A65EDE23C311EF892DEB21C4F9AE02/g--P6e5IafC5SpX3RvWJS6H7MPA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:d4:07:d2:44:48:a6:07:6d:2e:8d:6d:5d:d5:59:69:fe:9e: 1b:a0:5c:31:5d:42:fb:a9:21:8f:f8:a9:42:7f:89:99:f1:94: d2:a6:90:2f:1b:92:48:c0:d4:c0:92:0b:05:72:12:30:ae:b1: f1:c3:09:53:71:9b:6b:3c:c7:fb:53:dc:90:d6:57:ae:14:34: d1:39:79:cd:58:3a:6a:7e:0d:0c:56:da:70:f1:bc:51:3e:93: 22:00:07:c2:81:91:02:86:18:56:e4:30:f7:db:ef:ec:e6:27: 96:aa:0f:b0:75:2c:47:f3:b8:7b:34:2b:86:07:6c:fe:c5:b9: db:38:40:9a:14:06:4f:24:0f:13:82:25:ec:25:5d:75:59:35: 6a:8b:d8:20:59:60:9d:92:b2:72:65:56:f2:7e:93:92:35:6f: bd:c5:2a:4f:3e:8f:fe:28:69:37:03:0c:e3:4e:b1:fc:18:8f: 58:c0:56:55:1d:a2:60:50:ec:4c:84:61:0c:5c:78:4a:d3:ec: 2e:59:42:f8:83:3b:14:d3:66:4a:ee:b5:6c:05:10:99:5f:3c: ce:7b:30:f3:00:db:f2:4f:21:59:ba:fb:75:13:26:6c:33:d2: 61:0d:82:c1:4e:63:60:0b:87:bd:50:78:36:f9:8f:ec:df:bd: 3a:4a:7d:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVCOUExMTAvBgNVBAUTKDgzRUY4RkU5RUU0ODY5RjBCOTRBOTVGNzQ2RjU4OTRC QTFGQjMwRjAwHhcNMjUwNjI5MDQ0NzUzWhcNMjUwNzA2MDQ0NzUzWjAYMRYwFAYD VQQDEw02ODYwYzU3OS0zZmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzKYGylmBDWOD/zP7WW9RByDSZZKSUTnuQmIphk4XsynwhyT6+v61/N0DyISL MquXMCUZxPnrXqjmQ1QntSq3BHiH4B2g9r/03R0xxG6DrtVS2rl7HoXbQrT6MChg xDz0B/nxdrve7LIdjo67j3QT7vcg8QNBU51iq5Pcpm6GuKSi2rIquBWfOGmEi9Mb TSnuFHzHLrrS2vpZDkkTEcc5ibsPpviL3zhlWDn5QWYPL6oCFxpTCNDFDL0aC7KQ h7I0RyFM6iIA4eGgVWaOVkf1nYYkGI9S0lo7lulxABx5BKvDoue+CX9HOt0i+r0a H6zgIfF07xmifreFFA6OlFbSEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF2l+Bdb x/MGXrc3cHLneduCAz4ZMB8GA1UdIwQYMBaAFIPvj+nuSGnwuUqV90b1iUuh+zDw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUI5QS9FNEE2NUVERTIz QzMxMUVGODkyREVCMjFDNEY5QUUwMi9nLS1QNmU1SWFmQzVTcFgzUnZXSlM2SDdN UEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ctLVA2ZTVJYWZDNVNwWDNSdldKUzZIN01QQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUI5QS9FNEE2NUVERTIzQzMxMUVGODkyREVCMjFDNEY5QUUwMi9nLS1QNmU1SWFm QzVTcFgzUnZXSlM2SDdNUEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAX1AfSREimB20ujW1d1Vlp/p4boFwxXUL7qSGP+KlCf4mZ8ZTSppAv G5JIwNTAkgsFchIwrrHxwwlTcZtrPMf7U9yQ1leuFDTROXnNWDpqfg0MVtpw8bxR PpMiAAfCgZEChhhW5DD32+/s5ieWqg+wdSxH87h7NCuGB2z+xbnbOECaFAZPJA8T giXsJV11WTVqi9ggWWCdkrJyZVbyfpOSNW+9xSpPPo/+KGk3AwzjTrH8GI9YwFZV HaJgUOxMhGEMXHhK0+wuWUL4gzsU02ZK7rVsBRCZXzzOezDzANvyTyFZuvt1EyZs M9JhDYLBTmNgC4e9UHg2+Y/s3706Sn0z -----END CERTIFICATE-----Generated at Sun Jun 29 13:40:27 2025 by rpki-client