$ rpki-client -vvf rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.mft File: kQ8vQUCOE9rtfCHcRy3FxYxFiDY.mft (raw, json) Hash identifier: jCfOYjOkd0XTG+yPiLZnKCD3oFAoCxDm6ePgsL7Ef4M= Subject key identifier: 20:62:3B:14:62:71:30:EA:70:22:AE:FF:71:AF:F6:43:7E:69:8F:59 Authority key identifier: 91:0F:2F:41:40:8E:13:DA:ED:7C:21:DC:47:2D:C5:C5:8C:45:88:36 Certificate issuer: /CN=A917408F/serialNumber=910F2F41408E13DAED7C21DC472DC5C58C458836 Certificate serial: 6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.mft Manifest number: 6B Signing time: Thu 03 Jul 2025 07:13:05 +0000 Manifest this update: Thu 03 Jul 2025 07:13:05 +0000 Manifest next update: Thu 10 Jul 2025 07:13:05 +0000 Files and hashes: 1: kQ8vQUCOE9rtfCHcRy3FxYxFiDY.crl (hash: ZrEdi9HsNVYdd8EqdxqdxzQbQEMYZwwY7e/6ohF89nM=) 2: 9CEF2622B76E11EF8FCC9767C4F9AE02.roa (hash: 2R62YAvpAuupePKvyUwfJfetCOhCrZjNgarawDnuvxY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.crl rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917408F, serialNumber=910F2F41408E13DAED7C21DC472DC5C58C458836 Validity Not Before: Jul 3 07:13:05 2025 GMT Not After : Jul 10 07:13:05 2025 GMT Subject: CN=68662d81-fd64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:07:1e:f3:e0:4b:de:ba:06:d5:df:a6:ca:44: 3f:16:d6:cc:ac:ed:c4:f9:a6:c8:1a:07:70:63:57: f7:ce:17:47:f1:d0:a1:f3:b5:d7:bb:33:9e:c3:e8: 6f:ec:5a:a4:da:cf:0e:77:cd:de:d9:24:8d:9a:fc: 04:14:3f:3f:2e:b4:bb:0e:e7:ba:a1:1f:0f:b5:3c: a4:33:1a:81:45:67:b8:87:0a:18:29:46:5b:42:6a: b3:5e:4c:fb:49:72:90:d1:c1:d2:6d:74:18:48:7b: d5:0b:08:58:df:c8:50:81:52:36:f1:f1:21:2f:0f: 17:e1:21:f5:4c:e1:0d:86:b5:2f:86:98:02:ab:74: a8:6d:41:f1:fd:1c:8f:20:86:75:05:31:02:f8:0c: 45:e3:b5:63:f9:a9:3f:d0:51:6d:dc:dc:c4:74:c6: ec:62:88:68:ab:8d:95:64:fe:3b:62:2e:12:a8:69: a2:63:4e:0b:9d:b7:59:98:fc:88:f9:61:be:d1:bc: cb:ca:08:a3:55:64:10:f1:1e:22:7c:b6:5e:57:fd: 52:a8:78:72:d8:d6:a6:07:cf:9e:c8:98:9b:f2:c8: 50:12:12:5b:d9:a8:b5:63:94:ea:81:d8:e2:ca:78: f3:89:79:23:f0:d5:06:1d:79:88:f9:e0:30:fa:ec: 97:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:62:3B:14:62:71:30:EA:70:22:AE:FF:71:AF:F6:43:7E:69:8F:59 X509v3 Authority Key Identifier: keyid:91:0F:2F:41:40:8E:13:DA:ED:7C:21:DC:47:2D:C5:C5:8C:45:88:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:35:c6:b1:3b:9d:b5:82:2a:5e:55:21:bd:72:dd:f5:ec:24: 92:be:42:34:4c:9c:4e:36:11:f7:36:e3:91:db:13:5d:66:85: 9f:c5:a2:4f:34:aa:5f:3c:ad:03:6f:b4:b7:a6:06:85:52:c7: 14:e9:c3:ce:3f:21:db:c8:5f:2f:d6:5b:e9:ba:06:1e:b5:b1: 89:9e:3c:25:ac:04:89:72:8a:bb:3e:ae:37:18:c6:9e:a5:be: bb:98:58:d9:21:02:8a:18:59:43:5a:b8:07:68:93:47:af:a3: b0:2e:be:68:32:61:17:87:03:ba:9f:d8:89:13:2a:e2:ce:e9: 79:63:bf:29:92:66:1b:5e:09:60:88:66:64:99:0a:d6:b0:bd: 22:1e:43:8d:6d:d7:cc:43:73:36:3c:80:e3:9c:9a:18:89:92: 51:2c:01:7b:e6:8f:07:29:a2:c3:9a:68:e4:b9:33:c6:cd:ff: 0f:e2:29:c4:05:a6:30:db:e1:7f:86:9c:eb:f1:c1:dd:fe:b0: 49:a0:c9:b9:b8:74:67:89:eb:1b:ea:bb:cd:93:a2:4e:cb:48: e7:77:1e:1e:2b:b2:41:51:fd:b1:24:9a:0d:09:df:00:2c:0b: a4:c3:82:11:c4:98:a0:bb:46:06:49:1e:1c:e5:12:50:81:af: 61:f2:f3:2e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NDA4RjExMC8GA1UEBRMoOTEwRjJGNDE0MDhFMTNEQUVEN0MyMURDNDcyREM1QzU4 QzQ1ODgzNjAeFw0yNTA3MDMwNzEzMDVaFw0yNTA3MTAwNzEzMDVaMBgxFjAUBgNV BAMTDTY4NjYyZDgxLWZkNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSBx7z4EveugbV36bKRD8W1sys7cT5psgaB3BjV/fOF0fx0KHztde7M57D6G/s WqTazw53zd7ZJI2a/AQUPz8utLsO57qhHw+1PKQzGoFFZ7iHChgpRltCarNeTPtJ cpDRwdJtdBhIe9ULCFjfyFCBUjbx8SEvDxfhIfVM4Q2GtS+GmAKrdKhtQfH9HI8g hnUFMQL4DEXjtWP5qT/QUW3c3MR0xuxiiGirjZVk/jtiLhKoaaJjTgudt1mY/Ij5 Yb7RvMvKCKNVZBDxHiJ8tl5X/VKoeHLY1qYHz57ImJvyyFASElvZqLVjlOqB2OLK ePOJeSPw1QYdeYj54DD67Jc7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIGI7FGJx MOpwIq7/ca/2Q35pj1kwHwYDVR0jBBgwFoAUkQ8vQUCOE9rtfCHcRy3FxYxFiDYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0MDhGLzE2Q0Q5ODU4Qjc2 RTExRUZBQ0YwRjg2NUM0RjlBRTAyL2tROHZRVUNPRTlydGZDSGNSeTNGeFl4RmlE WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva1E4dlFVQ09FOXJ0ZkNIY1J5M0Z4WXhGaURZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0 MDhGLzE2Q0Q5ODU4Qjc2RTExRUZBQ0YwRjg2NUM0RjlBRTAyL2tROHZRVUNPRTly dGZDSGNSeTNGeFl4RmlEWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABk1xrE7nbWCKl5VIb1y3fXsJJK+QjRMnE42Efc245HbE11mhZ/Fok80 ql88rQNvtLemBoVSxxTpw84/IdvIXy/WW+m6Bh61sYmePCWsBIlyirs+rjcYxp6l vruYWNkhAooYWUNauAdok0evo7AuvmgyYReHA7qf2IkTKuLO6XljvymSZhteCWCI ZmSZCtawvSIeQ41t18xDczY8gOOcmhiJklEsAXvmjwcposOaaOS5M8bN/w/iKcQF pjDb4X+GnOvxwd3+sEmgybm4dGeJ6xvqu82Tok7LSOd3Hh4rskFR/bEkmg0J3wAs C6TDghHEmKC7RgZJHhzlElCBr2Hy8y4= -----END CERTIFICATE-----Generated at Thu Jul 3 14:51:01 2025 by rpki-client