$ rpki-client -vvf rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft File: 6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft (raw, json) Hash identifier: 7dfYZO0KPB46X73KYMvktK4rtxrlbouTCeOrxrps0gc= Subject key identifier: FF:31:77:80:4C:F2:8E:C9:E1:29:FC:2A:81:9F:DE:26:C3:36:9E:B4 Authority key identifier: E9:9F:F0:44:8B:0B:DA:37:71:CD:C4:A9:6C:59:F7:C9:F9:C8:79:44 Certificate issuer: /CN=A9157E9C/serialNumber=E99FF0448B0BDA3771CDC4A96C59F7C9F9C87944 Certificate serial: 0407 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft Manifest number: 03FC Signing time: Tue 01 Jul 2025 01:00:56 +0000 Manifest this update: Tue 01 Jul 2025 01:00:56 +0000 Manifest next update: Tue 08 Jul 2025 01:00:56 +0000 Files and hashes: 1: 6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.crl (hash: 0jAvyvvSJecARxVkbxcOk6t/zdajGR2Y4n5PGqLTYtk=) 2: E3CD40BE7D6611ECBA65C232C4F9AE02.roa (hash: NYWD2JqusfrB1Pm/fEvYX0+WP2e5BK0diIi0VyFEvIM=) 3: 438C7C387D6F11ECBCDC721DC4F9AE02.roa (hash: RYTGTaJo9tgeLfdLTz9lnkOel+5ud5H41Dw2zm5x3dM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.crl rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1031 (0x407) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157E9C, serialNumber=E99FF0448B0BDA3771CDC4A96C59F7C9F9C87944 Validity Not Before: Jul 1 01:00:56 2025 GMT Not After : Jul 8 01:00:56 2025 GMT Subject: CN=68633348-aada Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c3:6a:7e:95:1a:20:7d:4d:b4:d0:99:20:fe: 44:33:e1:4d:6d:7e:6b:6a:a5:7b:b5:e8:64:6d:03: b2:a6:ed:5a:71:e7:9a:cf:10:aa:fe:08:c4:58:55: be:89:44:a1:65:80:87:2e:a1:14:67:10:3e:73:c4: aa:10:b7:a6:30:d2:71:17:aa:25:37:e5:b8:07:62: 1c:f8:11:6b:0b:e4:b9:35:bf:f6:c5:8b:56:bc:be: cc:d9:0b:52:2d:1c:c7:db:04:f2:f5:15:4b:ee:0e: c7:37:cf:6b:47:24:e4:c5:ea:f0:9f:b1:f8:6e:c7: 7d:8d:75:c2:c4:5b:07:31:a1:3e:c1:df:ad:03:2a: bd:92:d4:bf:16:b8:a0:fe:9d:fa:de:f6:6c:ab:c1: 84:a2:e7:e3:cb:6d:dc:d4:45:ac:79:99:cc:00:f3: 77:40:d6:ab:37:fe:db:6e:71:ea:99:bb:22:34:b2: 22:2d:38:e0:30:ea:d8:34:97:d1:39:77:5a:84:e7: 7f:12:f8:ed:3e:f5:eb:cb:6a:86:a0:f1:64:b9:65: 9f:d3:09:e5:15:57:f8:11:f1:ef:16:9d:64:a4:61: b3:d9:7f:80:5e:7f:49:1b:cf:2c:b9:cd:dd:85:80: 14:a5:55:96:98:d3:91:1b:4d:59:e5:7e:36:5d:80: ba:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:31:77:80:4C:F2:8E:C9:E1:29:FC:2A:81:9F:DE:26:C3:36:9E:B4 X509v3 Authority Key Identifier: keyid:E9:9F:F0:44:8B:0B:DA:37:71:CD:C4:A9:6C:59:F7:C9:F9:C8:79:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:f6:d3:72:22:61:b6:c4:79:d3:3e:5d:f6:65:6d:4a:0b:cd: 34:33:ee:3a:db:9a:8b:a0:9a:4e:ee:1e:38:17:93:e9:90:a0: 72:c8:09:91:e9:38:5a:4f:11:36:cb:a4:7d:d9:67:f4:cb:55: 56:0d:5d:97:5b:c7:68:07:18:eb:80:c6:8a:9e:a6:65:60:1b: 68:17:76:80:21:90:51:8c:4b:36:42:c2:31:eb:3c:2f:53:1b: 94:e2:e3:c7:91:65:5f:4e:62:7b:a9:24:3f:66:45:d3:1b:55: 30:60:f9:24:38:de:ab:4c:c0:44:48:82:2c:71:86:5d:0b:ba: d2:b6:fd:ca:b2:77:e6:d6:64:ba:2e:22:a8:8c:51:0e:f4:14: 88:f1:e0:91:a1:ef:f2:b8:bd:c8:cc:b0:0a:cd:4b:b5:32:5a: e0:f8:ba:85:ab:7c:33:e9:2c:d3:a8:72:8c:a8:a3:e7:f4:74: 06:2b:f9:c3:6f:e6:67:71:d7:0e:00:c1:1b:b8:ad:42:dd:c2: 30:1d:91:31:cb:87:52:a1:ea:98:00:51:2e:5c:97:d5:9d:1a: 47:0b:1b:ca:24:5b:de:91:dd:7f:d4:6d:06:89:d3:f7:d0:f4: 43:f0:3e:e5:7f:92:50:49:a1:8e:a8:c3:c1:6f:10:47:b7:a1: a1:67:f7:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdFOUMxMTAvBgNVBAUTKEU5OUZGMDQ0OEIwQkRBMzc3MUNEQzRBOTZDNTlGN0M5 RjlDODc5NDQwHhcNMjUwNzAxMDEwMDU2WhcNMjUwNzA4MDEwMDU2WjAYMRYwFAYD VQQDEw02ODYzMzM0OC1hYWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3sNqfpUaIH1NtNCZIP5EM+FNbX5raqV7tehkbQOypu1aceeazxCq/gjEWFW+ iUShZYCHLqEUZxA+c8SqELemMNJxF6olN+W4B2Ic+BFrC+S5Nb/2xYtWvL7M2QtS LRzH2wTy9RVL7g7HN89rRyTkxerwn7H4bsd9jXXCxFsHMaE+wd+tAyq9ktS/Frig /p363vZsq8GEoufjy23c1EWseZnMAPN3QNarN/7bbnHqmbsiNLIiLTjgMOrYNJfR OXdahOd/EvjtPvXry2qGoPFkuWWf0wnlFVf4EfHvFp1kpGGz2X+AXn9JG88suc3d hYAUpVWWmNORG01Z5X42XYC6mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP8xd4BM 8o7J4Sn8KoGf3ibDNp60MB8GA1UdIwQYMBaAFOmf8ESLC9o3cc3EqWxZ98n5yHlE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0U5Qy81MEM5OTNDRTdE NjMxMUVDQUM1QzdGMUVDNEY5QUUwMi82Wl93UklzTDJqZHh6Y1NwYkZuM3lmbkll VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZaX3dSSXNMMmpkeHpjU3BiRm4zeWZuSWVVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0U5Qy81MEM5OTNDRTdENjMxMUVDQUM1QzdGMUVDNEY5QUUwMi82Wl93UklzTDJq ZHh6Y1NwYkZuM3lmbkllVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAh9tNyImG2xHnTPl32ZW1KC800M+4625qLoJpO7h44F5PpkKByyAmR 6ThaTxE2y6R92Wf0y1VWDV2XW8doBxjrgMaKnqZlYBtoF3aAIZBRjEs2QsIx6zwv UxuU4uPHkWVfTmJ7qSQ/ZkXTG1UwYPkkON6rTMBESIIscYZdC7rStv3Ksnfm1mS6 LiKojFEO9BSI8eCRoe/yuL3IzLAKzUu1Mlrg+LqFq3wz6SzTqHKMqKPn9HQGK/nD b+ZncdcOAMEbuK1C3cIwHZExy4dSoeqYAFEuXJfVnRpHCxvKJFvekd1/1G0GidP3 0PRD8D7lf5JQSaGOqMPBbxBHt6GhZ/ei -----END CERTIFICATE-----Generated at Tue Jul 1 16:56:58 2025 by rpki-client