$ rpki-client -vvf rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.mft File: ET6g_81su3s89UWrzSyWLYbh7LA.mft (raw, json) Hash identifier: pEO8ejGZyT1GH9X+LOdxwswszSYB6j7vac7w9aQiGRQ= Subject key identifier: 4B:63:DF:2B:8D:A8:E4:0F:62:F0:05:49:16:43:19:87:2C:0E:F5:54 Authority key identifier: 11:3E:A0:FF:CD:6C:BB:7B:3C:F5:45:AB:CD:2C:96:2D:86:E1:EC:B0 Certificate issuer: /CN=A915C6B7/serialNumber=113EA0FFCD6CBB7B3CF545ABCD2C962D86E1ECB0 Certificate serial: 0BD6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ET6g_81su3s89UWrzSyWLYbh7LA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.mft Manifest number: 0BCE Signing time: Wed 02 Jul 2025 19:06:42 +0000 Manifest this update: Wed 02 Jul 2025 19:06:41 +0000 Manifest next update: Wed 09 Jul 2025 19:06:41 +0000 Files and hashes: 1: ET6g_81su3s89UWrzSyWLYbh7LA.crl (hash: rk+9dCrL92VHwy3wsGJW4sTR1UJhtHrxzkp6dL5w1mY=) 2: 69683D8CC64D11EABD8FD32DC4F9AE02.roa (hash: ndk7WBwAom+jNCFlVWgXYFCEOWN+x873QVE3wv4MHH8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.crl rsync://rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ET6g_81su3s89UWrzSyWLYbh7LA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:06:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3030 (0xbd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C6B7, serialNumber=113EA0FFCD6CBB7B3CF545ABCD2C962D86E1ECB0 Validity Not Before: Jul 2 19:06:41 2025 GMT Not After : Jul 9 19:06:41 2025 GMT Subject: CN=68658342-1f04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9b:98:f4:36:07:60:01:34:a8:f3:ec:90:d1: 23:ab:16:e0:fe:61:eb:aa:61:2a:38:38:40:15:fc: 88:02:8c:a0:72:68:7c:23:74:9d:b8:17:cc:34:c3: 4d:72:bd:53:85:a8:ae:66:34:76:17:bc:39:d3:72: 05:4e:ca:fa:ce:85:43:16:aa:69:42:f7:2b:d2:40: e2:99:08:09:39:d8:17:09:79:c1:ec:84:64:f6:7e: ec:7a:12:fc:6e:d8:d0:1d:ce:1d:09:8b:33:40:2d: 5d:e5:72:77:62:80:67:a1:bc:e3:17:6f:f8:74:96: 63:03:bc:d8:99:2a:18:e2:c7:bf:35:67:56:f9:2d: 7a:62:cc:10:4c:8d:8f:76:49:25:8d:b2:af:0b:fa: fb:49:27:38:7c:d6:2d:8f:ca:41:ee:8d:67:8e:9f: c0:34:52:d5:0e:f9:e0:60:54:fc:b0:41:e9:3f:40: 3d:3b:c5:b2:fb:4a:83:dc:d0:ea:96:44:65:a1:9f: 11:32:0a:6a:c6:95:4c:10:e4:c9:2b:07:65:b3:48: de:e8:3f:04:86:13:ee:50:a0:b0:e1:ab:c6:d5:c9: fd:e2:4f:71:fb:3c:fa:25:1a:2c:2a:02:b4:c3:64: 36:0e:59:de:b1:fd:6f:ba:a7:07:e9:38:15:2d:55: cf:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:63:DF:2B:8D:A8:E4:0F:62:F0:05:49:16:43:19:87:2C:0E:F5:54 X509v3 Authority Key Identifier: keyid:11:3E:A0:FF:CD:6C:BB:7B:3C:F5:45:AB:CD:2C:96:2D:86:E1:EC:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ET6g_81su3s89UWrzSyWLYbh7LA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:7e:18:e9:ce:a3:ca:a0:50:6d:9a:00:a0:fb:c4:d3:4b:a6: b0:bd:0f:4d:69:79:12:ac:40:0e:64:15:65:f7:bf:15:8e:bd: 05:52:d6:0c:b3:59:8c:fa:4d:b8:5e:97:0f:c4:40:b2:60:a2: ac:eb:9c:6a:21:b6:b3:cd:ca:89:b6:c8:39:5b:a8:72:fc:e0: 2e:5f:05:5a:97:29:95:5f:d2:f1:70:fc:8f:bb:38:00:02:53: 25:2d:c9:1f:6b:7a:3f:ca:29:4c:f5:6c:c7:8f:19:52:1a:3c: 70:c7:ef:b0:2c:4e:be:78:45:25:55:bb:ee:0c:9a:5c:4b:c3: fe:4f:82:78:42:ae:3e:67:2f:c7:a3:0d:10:e2:12:d2:49:06: 4e:79:38:c2:29:45:b2:fc:8e:ba:7d:d8:6c:6d:55:22:5c:f6: 8d:56:62:ff:f3:a8:c9:dd:c8:68:90:aa:70:58:94:94:df:e9: 21:44:e2:34:10:f7:63:ad:6e:32:a5:dd:7f:70:16:ed:54:ff: cf:5e:91:f2:3d:54:75:c8:29:34:5f:a7:74:27:8b:93:7e:04: 08:db:9d:da:7b:6d:fe:63:43:48:88:47:e3:8a:05:be:4e:d5: f7:76:fc:7d:6b:6c:be:ce:39:bb:ef:12:78:87:f0:12:dc:ac: 89:9e:20:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUM2QjcxMTAvBgNVBAUTKDExM0VBMEZGQ0Q2Q0JCN0IzQ0Y1NDVBQkNEMkM5NjJE ODZFMUVDQjAwHhcNMjUwNzAyMTkwNjQxWhcNMjUwNzA5MTkwNjQxWjAYMRYwFAYD VQQDEw02ODY1ODM0Mi0xZjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAspuY9DYHYAE0qPPskNEjqxbg/mHrqmEqODhAFfyIAoygcmh8I3SduBfMNMNN cr1ThaiuZjR2F7w503IFTsr6zoVDFqppQvcr0kDimQgJOdgXCXnB7IRk9n7sehL8 btjQHc4dCYszQC1d5XJ3YoBnobzjF2/4dJZjA7zYmSoY4se/NWdW+S16YswQTI2P dkkljbKvC/r7SSc4fNYtj8pB7o1njp/ANFLVDvngYFT8sEHpP0A9O8Wy+0qD3NDq lkRloZ8RMgpqxpVMEOTJKwdls0je6D8EhhPuUKCw4avG1cn94k9x+zz6JRosKgK0 w2Q2Dlnesf1vuqcH6TgVLVXPXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEtj3yuN qOQPYvAFSRZDGYcsDvVUMB8GA1UdIwQYMBaAFBE+oP/NbLt7PPVFq80sli2G4eyw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzZCNy84MDI1REQ3QTFF RjcxMUVBQUQ0NDQ5NUJDNEY5QUUwMi9FVDZnXzgxc3Uzczg5VVdyelN5V0xZYmg3 TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VUNmdfODFzdTNzODlVV3J6U3lXTFliaDdMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzZCNy84MDI1REQ3QTFFRjcxMUVBQUQ0NDQ5NUJDNEY5QUUwMi9FVDZnXzgxc3Uz czg5VVdyelN5V0xZYmg3TEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCafhjpzqPKoFBtmgCg+8TTS6awvQ9NaXkSrEAOZBVl978Vjr0FUtYM s1mM+k24XpcPxECyYKKs65xqIbazzcqJtsg5W6hy/OAuXwValymVX9LxcPyPuzgA AlMlLckfa3o/yilM9WzHjxlSGjxwx++wLE6+eEUlVbvuDJpcS8P+T4J4Qq4+Zy/H ow0Q4hLSSQZOeTjCKUWy/I66fdhsbVUiXPaNVmL/86jJ3chokKpwWJSU3+khROI0 EPdjrW4ypd1/cBbtVP/PXpHyPVR1yCk0X6d0J4uTfgQI253ae23+Y0NIiEfjigW+ TtX3dvx9a2y+zjm77xJ4h/AS3KyJniDX -----END CERTIFICATE-----Generated at Thu Jul 3 17:11:00 2025 by rpki-client