$ rpki-client -vvf rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft File: n6yKuWoNopKfw9GHG-1vdD6MlXc.mft (raw, json) Hash identifier: tvKQQIdehjsDa5BRDOU8j6WTgu5ciUQkPiuwDj4ZV+0= Subject key identifier: AF:9A:BE:A4:A8:AA:25:8D:E3:74:CF:4D:30:D3:CA:FE:30:75:82:E0 Authority key identifier: 9F:AC:8A:B9:6A:0D:A2:92:9F:C3:D1:87:1B:ED:6F:74:3E:8C:95:77 Certificate issuer: /CN=A916E2DC/serialNumber=9FAC8AB96A0DA2929FC3D1871BED6F743E8C9577 Certificate serial: 0200 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6yKuWoNopKfw9GHG-1vdD6MlXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft Manifest number: 01F7 Signing time: Thu 03 Jul 2025 02:39:45 +0000 Manifest this update: Thu 03 Jul 2025 02:39:44 +0000 Manifest next update: Thu 10 Jul 2025 02:39:44 +0000 Files and hashes: 1: n6yKuWoNopKfw9GHG-1vdD6MlXc.crl (hash: +ORmXu0xW8rvz+CZRLGu+LKGrDSbJxBb+7H6gSCvp1s=) 2: 6993B4CCD43B11EDA821F80DC4F9AE02.roa (hash: ZSI/iXYWNqdEgciLkCgrj+0eyDroB8ECUVdL5jcas7g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.crl rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6yKuWoNopKfw9GHG-1vdD6MlXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:39:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 512 (0x200) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E2DC, serialNumber=9FAC8AB96A0DA2929FC3D1871BED6F743E8C9577 Validity Not Before: Jul 3 02:39:44 2025 GMT Not After : Jul 10 02:39:44 2025 GMT Subject: CN=6865ed71-0fe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9d:84:b6:f2:69:e5:2a:4e:86:25:26:04:dd: 17:50:87:ff:ef:69:87:93:4f:18:e3:bc:48:cd:34: f7:ba:a7:49:62:ce:d6:38:0d:8a:2f:7b:40:77:9c: e1:5e:7e:03:2c:1c:04:3b:09:53:e6:3b:85:73:98: 50:cd:97:47:0b:fc:a5:a8:07:e6:ec:dd:c9:fb:26: 0b:46:6c:28:df:68:2f:09:44:1e:50:87:ce:af:cf: 31:5c:19:5a:8e:37:83:12:b8:f6:b8:32:07:b3:e6: ae:a7:55:86:95:d7:dd:0b:77:59:ff:c7:3e:0b:dc: 71:8c:22:f3:94:a8:b9:f7:68:b8:e6:5f:59:09:0b: 65:eb:28:f5:b7:66:48:c4:07:d2:20:98:75:02:52: 40:af:cb:2d:6a:4a:d0:b1:5a:ae:f9:55:c5:77:1d: ee:97:15:a6:18:0e:ec:20:0d:42:d0:dc:07:c6:db: 7a:8a:a1:b4:79:fa:83:df:b5:29:26:29:76:70:27: 9a:62:57:ac:da:f1:75:61:b4:4e:7f:2f:6a:ce:28: 03:34:4e:22:df:68:b3:71:48:7d:0b:6d:c5:09:e6: 46:d9:26:14:56:9a:70:c4:cd:80:d5:cd:8a:e9:d9: 95:d1:ef:ce:2d:86:0f:b1:d4:b3:ed:90:e0:68:21: 93:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:9A:BE:A4:A8:AA:25:8D:E3:74:CF:4D:30:D3:CA:FE:30:75:82:E0 X509v3 Authority Key Identifier: keyid:9F:AC:8A:B9:6A:0D:A2:92:9F:C3:D1:87:1B:ED:6F:74:3E:8C:95:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6yKuWoNopKfw9GHG-1vdD6MlXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:cb:01:19:0f:55:75:be:dc:26:1d:88:e8:26:5a:97:d2:cb: b6:63:2b:f3:16:3f:93:e8:05:8b:53:2d:74:da:16:48:0c:af: f6:ff:53:9e:0e:9c:04:67:05:16:e8:db:e7:ca:87:d2:ba:1d: 1a:6e:69:85:c6:f1:52:ad:cd:0d:89:41:49:e7:78:25:8e:7e: 6a:81:8d:9c:a4:7d:ad:f8:46:fc:bd:68:fa:74:e4:a1:84:0d: 92:e8:3a:26:2c:db:a8:67:bd:d8:a4:56:62:dd:0f:2f:ca:e2: 6e:4e:4f:d1:6d:54:37:c7:f1:15:c5:50:d2:89:78:22:b2:12: 20:c3:c5:13:e8:a5:7b:dc:8f:03:6f:3c:ba:bd:e5:d4:8d:5d: 11:24:fa:35:ab:18:fa:08:10:1c:e7:ca:46:b1:fa:25:e6:fa: 73:5e:4e:6e:ab:61:a9:8e:6d:a6:76:81:85:fd:a7:27:d2:0f: d6:9e:d9:77:8a:9b:48:66:70:73:5c:5a:72:bf:c9:49:e4:a1: 47:0d:7c:55:82:ee:a9:ae:95:ad:4a:34:5e:b6:c1:da:db:fe: 12:d9:8c:92:d7:46:3b:13:0b:a5:ba:51:f7:7f:f4:74:26:5d: 7a:da:a0:5a:61:31:74:06:23:b0:8a:79:79:cc:af:6b:51:be: 59:89:24:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkUyREMxMTAvBgNVBAUTKDlGQUM4QUI5NkEwREEyOTI5RkMzRDE4NzFCRUQ2Rjc0 M0U4Qzk1NzcwHhcNMjUwNzAzMDIzOTQ0WhcNMjUwNzEwMDIzOTQ0WjAYMRYwFAYD VQQDEw02ODY1ZWQ3MS0wZmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZ2EtvJp5SpOhiUmBN0XUIf/72mHk08Y47xIzTT3uqdJYs7WOA2KL3tAd5zh Xn4DLBwEOwlT5juFc5hQzZdHC/ylqAfm7N3J+yYLRmwo32gvCUQeUIfOr88xXBla jjeDErj2uDIHs+aup1WGldfdC3dZ/8c+C9xxjCLzlKi592i45l9ZCQtl6yj1t2ZI xAfSIJh1AlJAr8stakrQsVqu+VXFdx3ulxWmGA7sIA1C0NwHxtt6iqG0efqD37Up Jil2cCeaYles2vF1YbROfy9qzigDNE4i32izcUh9C23FCeZG2SYUVppwxM2A1c2K 6dmV0e/OLYYPsdSz7ZDgaCGTgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK+avqSo qiWN43TPTTDTyv4wdYLgMB8GA1UdIwQYMBaAFJ+sirlqDaKSn8PRhxvtb3Q+jJV3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTJEQy82RDg5NjQ0QTZB RTcxMUVEOTRCNDRDODdDNEY5QUUwMi9uNnlLdVdvTm9wS2Z3OUdIRy0xdmRENk1s WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL242eUt1V29Ob3BLZnc5R0hHLTF2ZEQ2TWxYYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTJEQy82RDg5NjQ0QTZBRTcxMUVEOTRCNDRDODdDNEY5QUUwMi9uNnlLdVdvTm9w S2Z3OUdIRy0xdmRENk1sWGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCywEZD1V1vtwmHYjoJlqX0su2YyvzFj+T6AWLUy102hZIDK/2/1Oe DpwEZwUW6NvnyofSuh0abmmFxvFSrc0NiUFJ53gljn5qgY2cpH2t+Eb8vWj6dOSh hA2S6DomLNuoZ73YpFZi3Q8vyuJuTk/RbVQ3x/EVxVDSiXgishIgw8UT6KV73I8D bzy6veXUjV0RJPo1qxj6CBAc58pGsfol5vpzXk5uq2Gpjm2mdoGF/acn0g/Wntl3 iptIZnBzXFpyv8lJ5KFHDXxVgu6prpWtSjRetsHa2/4S2YyS10Y7EwululH3f/R0 Jl162qBaYTF0BiOwinl5zK9rUb5ZiSSA -----END CERTIFICATE-----Generated at Thu Jul 3 05:12:09 2025 by rpki-client