$ rpki-client -vvf rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft File: 6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft (raw, json) Hash identifier: XtjaAx7ZxhsvPowfF+N7ShNv83ktgB0zWPwDcRIG308= Subject key identifier: 42:6F:0A:57:3B:B8:AF:45:56:9D:7D:2B:D5:6D:2B:1D:5C:5E:AF:E0 Authority key identifier: E9:C4:10:C7:DD:D5:26:70:AB:8F:82:16:C8:76:14:B1:0E:C3:17:7A Certificate issuer: /CN=A9171560/serialNumber=E9C410C7DDD52670AB8F8216C87614B10EC3177A Certificate serial: 0D11 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft Manifest number: 0D06 Signing time: Wed 02 Jul 2025 18:18:19 +0000 Manifest this update: Wed 02 Jul 2025 18:18:19 +0000 Manifest next update: Wed 09 Jul 2025 18:18:19 +0000 Files and hashes: 1: 6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl (hash: bXlYItBAA+MXmBBGUjHiIh0R9BFhd56EAvTRnLFvrY4=) 2: 65AF30D422D211EAB3ABA447C4F9AE02.roa (hash: N5g6jdfkVyESUIZ9NbhjHN5A/zAKL0uPzj31oHqn/fU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:18:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3345 (0xd11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171560, serialNumber=E9C410C7DDD52670AB8F8216C87614B10EC3177A Validity Not Before: Jul 2 18:18:19 2025 GMT Not After : Jul 9 18:18:19 2025 GMT Subject: CN=686577eb-0796 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:61:33:f6:59:66:21:76:0a:90:85:5c:b5:f2: 21:c8:b2:ad:fe:84:31:1a:4c:9b:c8:23:b9:e9:7f: 0f:c9:68:c6:8b:52:bb:8a:d2:9d:e0:ae:58:10:22: 66:71:b1:8a:a3:20:5d:55:a3:6c:04:5b:6d:f3:b3: 89:01:ad:4e:18:6c:95:1a:7f:91:12:f6:0c:b0:8d: 5a:33:ff:fe:ae:bc:13:6b:ae:85:76:96:06:5b:0c: 27:3f:ae:1e:f2:8c:ec:c1:f2:d2:57:22:9e:54:83: 86:3b:dd:b2:0e:79:e0:e8:14:22:43:a6:8d:b1:0e: 6a:65:05:ca:60:aa:3f:f4:7f:da:b0:b4:2f:1b:73: 3a:fe:99:65:f4:fe:09:26:4f:06:ba:12:67:cb:67: f3:86:99:f0:ca:e6:52:e1:05:96:19:c9:7c:ad:d3: bb:71:2d:97:56:d9:62:65:eb:22:e5:c4:2e:a2:78: 99:68:a0:72:25:e0:c6:e4:18:3d:b1:0f:8c:43:17: aa:72:96:10:1c:be:57:43:b2:1e:00:75:02:5c:32: ce:fa:74:df:08:03:2c:c7:71:60:89:00:16:27:e7: 6b:a4:ec:70:83:4a:33:05:bc:36:9e:b8:92:4b:30: 1d:14:0a:35:e4:86:57:b6:b3:66:53:ec:51:51:54: 9d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:6F:0A:57:3B:B8:AF:45:56:9D:7D:2B:D5:6D:2B:1D:5C:5E:AF:E0 X509v3 Authority Key Identifier: keyid:E9:C4:10:C7:DD:D5:26:70:AB:8F:82:16:C8:76:14:B1:0E:C3:17:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:57:8e:07:8d:ab:8e:3c:67:31:dc:40:49:be:45:09:6e:19: ee:02:fb:dc:f6:1c:6e:2c:bd:c4:71:dd:14:71:a0:be:ee:77: 89:57:61:81:fe:ab:53:86:18:7a:46:d9:21:3a:ee:12:12:b4: 80:af:2a:23:71:8e:e2:01:22:7b:c5:69:d0:56:3e:ae:da:ab: 3e:0e:3e:df:fa:53:ef:1f:5a:ea:0d:ae:f4:e1:d1:ba:69:66: d8:3b:d7:ba:e5:aa:43:c2:6b:9e:ce:2f:69:12:63:43:5d:ac: 5e:37:ac:9f:b4:2b:0e:a5:da:74:67:4a:dd:f5:fe:fe:5d:7e: 68:be:d1:6e:c8:f8:3a:f3:1f:e9:e6:a7:d7:80:b1:ff:ab:96: 9b:48:1b:49:a8:8e:b6:3c:44:84:d8:96:d2:b3:a7:88:29:67: 6e:23:77:3e:70:90:cd:78:be:63:c6:97:2f:2a:81:23:42:75: 3f:18:e4:cd:d7:cf:86:de:cc:8c:0d:ac:f2:6d:35:ba:5a:39: 8e:1b:0f:31:00:13:f9:b7:2d:3a:b0:85:6c:62:01:3a:02:a7: 32:d4:36:25:74:50:17:f0:a3:d7:70:0b:32:96:da:80:1b:23: 27:1a:69:7b:65:01:6c:37:e6:05:45:e6:08:d0:b9:e4:1d:d8: 58:89:6c:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE1NjAxMTAvBgNVBAUTKEU5QzQxMEM3RERENTI2NzBBQjhGODIxNkM4NzYxNEIx MEVDMzE3N0EwHhcNMjUwNzAyMTgxODE5WhcNMjUwNzA5MTgxODE5WjAYMRYwFAYD VQQDEw02ODY1NzdlYi0wNzk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxGEz9llmIXYKkIVctfIhyLKt/oQxGkybyCO56X8PyWjGi1K7itKd4K5YECJm cbGKoyBdVaNsBFtt87OJAa1OGGyVGn+REvYMsI1aM//+rrwTa66FdpYGWwwnP64e 8ozswfLSVyKeVIOGO92yDnng6BQiQ6aNsQ5qZQXKYKo/9H/asLQvG3M6/pll9P4J Jk8GuhJny2fzhpnwyuZS4QWWGcl8rdO7cS2XVtliZesi5cQuoniZaKByJeDG5Bg9 sQ+MQxeqcpYQHL5XQ7IeAHUCXDLO+nTfCAMsx3FgiQAWJ+drpOxwg0ozBbw2nriS SzAdFAo15IZXtrNmU+xRUVSdgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEJvClc7 uK9FVp19K9VtKx1cXq/gMB8GA1UdIwQYMBaAFOnEEMfd1SZwq4+CFsh2FLEOwxd6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTU2MC9BNzcwM0U5RUU0 MUQxMUU5OEY1Qjk4MTlDNEY5QUUwMi82Y1FReDkzVkpuQ3JqNElXeUhZVXNRN0RG M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZjUVF4OTNWSm5Dcmo0SVd5SFlVc1E3REYzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTU2MC9BNzcwM0U5RUU0MUQxMUU5OEY1Qjk4MTlDNEY5QUUwMi82Y1FReDkzVkpu Q3JqNElXeUhZVXNRN0RGM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDTV44HjauOPGcx3EBJvkUJbhnuAvvc9hxuLL3Ecd0UcaC+7neJV2GB /qtThhh6RtkhOu4SErSAryojcY7iASJ7xWnQVj6u2qs+Dj7f+lPvH1rqDa704dG6 aWbYO9e65apDwmuezi9pEmNDXaxeN6yftCsOpdp0Z0rd9f7+XX5ovtFuyPg68x/p 5qfXgLH/q5abSBtJqI62PESE2JbSs6eIKWduI3c+cJDNeL5jxpcvKoEjQnU/GOTN 18+G3syMDazybTW6WjmOGw8xABP5ty06sIVsYgE6Aqcy1DYldFAX8KPXcAsyltqA GyMnGml7ZQFsN+YFReYI0LnkHdhYiWxL -----END CERTIFICATE-----Generated at Fri Jul 4 00:44:43 2025 by rpki-client