$ rpki-client -vvf rpki.apnic.net/member_repository/A9175762/C343692AB85111EB9F80A81CC4F9AE02/l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.mft File: l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.mft (raw, json) Hash identifier: iedqGmIYP6saHbD5OW1nOXPIojLwi/7UHYpHBBuk6Ek= Subject key identifier: DB:E8:EE:AA:3B:90:0B:C5:92:68:3C:8E:8C:57:D3:4C:44:D7:CE:CD Authority key identifier: 97:A1:26:25:6F:96:96:6E:D4:CA:E1:DE:DD:0E:F9:40:D3:00:07:A6 Certificate issuer: /CN=A9175762/serialNumber=97A126256F96966ED4CAE1DEDD0EF940D30007A6 Certificate serial: 05F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175762/C343692AB85111EB9F80A81CC4F9AE02/l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.mft Manifest number: 05EA Signing time: Mon 30 Jun 2025 23:17:28 +0000 Manifest this update: Mon 30 Jun 2025 23:17:28 +0000 Manifest next update: Mon 07 Jul 2025 23:17:28 +0000 Files and hashes: 1: l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.crl (hash: k6ZLbVkn+TXQXuzeaMdt66YJeb2pgQqhtgg0QqbnQoU=) 2: 9DD99914B85311EBA5D4171FC4F9AE02.roa (hash: sA3Y6loeO+Du++cXdVYeey7TebrDsgcCCcYdqCjW+ns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175762/C343692AB85111EB9F80A81CC4F9AE02/l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.crl rsync://rpki.apnic.net/member_repository/A9175762/C343692AB85111EB9F80A81CC4F9AE02/l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 23:17:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1520 (0x5f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175762, serialNumber=97A126256F96966ED4CAE1DEDD0EF940D30007A6 Validity Not Before: Jun 30 23:17:28 2025 GMT Not After : Jul 7 23:17:28 2025 GMT Subject: CN=68631b08-a641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1a:db:3c:fd:2b:f0:01:fc:53:8d:f5:a2:06: e9:fa:ed:a7:5b:6a:a8:30:27:4a:c6:11:62:e9:c9: 81:c1:94:7a:fb:f2:c1:81:8f:b8:cd:55:aa:4c:dd: f0:21:cb:37:20:ba:61:0c:11:49:a1:8c:ea:71:4a: 17:af:64:69:57:0c:68:d6:dd:77:05:1d:8e:3a:ce: 0d:dd:43:64:56:c6:33:26:b1:29:e3:45:70:b8:f7: 7f:45:74:5c:0e:5c:8e:d6:9a:bd:4e:c9:ae:de:ca: 3d:66:d3:84:7a:50:65:87:80:e7:99:67:cb:fe:04: 6b:83:cd:a7:9e:58:bb:46:05:f2:0b:25:3b:3c:31: 2d:b0:e5:5a:c7:6e:fe:d0:ff:24:f3:13:54:f9:f6: 1b:9b:0d:51:84:95:b2:55:4c:30:8c:df:20:b6:00: 8c:2a:c0:b5:c1:63:f8:82:97:69:72:89:33:ca:93: 46:c4:29:f1:cd:a5:89:c3:b0:72:c1:7d:66:4e:f2: 15:9c:6d:c2:31:b2:ee:6d:39:93:15:c6:6d:e5:0e: 09:4b:84:25:ee:13:f6:74:f0:bb:2b:e5:a1:1f:9d: 38:1c:3d:90:e7:89:3a:0e:4c:b0:f7:04:c3:d3:5a: 88:e5:f0:b0:ec:4a:ce:f2:39:20:85:82:5c:4b:93: da:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:E8:EE:AA:3B:90:0B:C5:92:68:3C:8E:8C:57:D3:4C:44:D7:CE:CD X509v3 Authority Key Identifier: keyid:97:A1:26:25:6F:96:96:6E:D4:CA:E1:DE:DD:0E:F9:40:D3:00:07:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175762/C343692AB85111EB9F80A81CC4F9AE02/l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175762/C343692AB85111EB9F80A81CC4F9AE02/l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:d0:0c:e5:a7:6b:e7:7d:24:e9:c1:16:59:d9:f6:f3:01:a6: 5f:cc:52:b3:0a:b9:01:04:a2:92:7b:60:16:50:2b:4f:4f:4c: b7:90:9c:98:07:d8:c1:40:bf:cd:54:72:77:6b:d3:a7:d7:a3: b6:6d:7a:8f:fc:97:06:f9:03:ec:cc:d9:00:5a:24:75:4f:41: 7c:7a:fd:6e:4b:0e:f8:ff:2d:e3:3a:be:42:7c:36:bb:42:bf: 5c:b2:b8:cc:2a:fb:60:a9:70:4d:f1:ea:c5:79:b0:8f:cb:25: 2d:b8:6a:0e:e6:7e:11:26:e1:32:15:a7:dd:38:a3:d3:ce:b1: 79:ef:b3:bc:78:d3:7f:15:64:6e:f2:27:b3:2f:05:0c:93:d9: 2d:77:e4:71:df:54:e3:d8:f5:19:ee:18:a0:fc:7d:bc:55:bd: b3:21:c8:0a:24:dc:0a:18:fb:0e:77:dd:bc:53:c5:06:33:3f: fe:0f:9c:c7:8c:e2:79:ef:c5:51:47:be:4e:3e:27:db:eb:df: b7:cc:1e:fc:4d:3a:16:b7:f8:51:5b:9c:9b:89:ca:7c:7e:8a: 51:73:ec:46:03:31:50:22:a2:f4:05:03:8c:ce:30:94:fd:07: bb:65:82:03:d2:2b:a1:af:a3:26:a9:c3:b1:14:f1:a7:4c:ab: d0:e0:15:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU3NjIxMTAvBgNVBAUTKDk3QTEyNjI1NkY5Njk2NkVENENBRTFERUREMEVGOTQw RDMwMDA3QTYwHhcNMjUwNjMwMjMxNzI4WhcNMjUwNzA3MjMxNzI4WjAYMRYwFAYD VQQDEw02ODYzMWIwOC1hNjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvBrbPP0r8AH8U431ogbp+u2nW2qoMCdKxhFi6cmBwZR6+/LBgY+4zVWqTN3w Ics3ILphDBFJoYzqcUoXr2RpVwxo1t13BR2OOs4N3UNkVsYzJrEp40VwuPd/RXRc DlyO1pq9Tsmu3so9ZtOEelBlh4DnmWfL/gRrg82nnli7RgXyCyU7PDEtsOVax27+ 0P8k8xNU+fYbmw1RhJWyVUwwjN8gtgCMKsC1wWP4gpdpcokzypNGxCnxzaWJw7By wX1mTvIVnG3CMbLubTmTFcZt5Q4JS4Ql7hP2dPC7K+WhH504HD2Q54k6Dkyw9wTD 01qI5fCw7ErO8jkghYJcS5PaUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNvo7qo7 kAvFkmg8joxX00xE187NMB8GA1UdIwQYMBaAFJehJiVvlpZu1Mrh3t0O+UDTAAem MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTc2Mi9DMzQzNjkyQUI4 NTExMUVCOUY4MEE4MUNDNEY5QUUwMi9sNkVtSlctV2xtN1V5dUhlM1E3NVFOTUFC NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w2RW1KVy1XbG03VXl1SGUzUTc1UU5NQUI2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTc2Mi9DMzQzNjkyQUI4NTExMUVCOUY4MEE4MUNDNEY5QUUwMi9sNkVtSlctV2xt N1V5dUhlM1E3NVFOTUFCNlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAT0Azlp2vnfSTpwRZZ2fbzAaZfzFKzCrkBBKKSe2AWUCtPT0y3kJyY B9jBQL/NVHJ3a9On16O2bXqP/JcG+QPszNkAWiR1T0F8ev1uSw74/y3jOr5CfDa7 Qr9csrjMKvtgqXBN8erFebCPyyUtuGoO5n4RJuEyFafdOKPTzrF577O8eNN/FWRu 8iezLwUMk9ktd+Rx31Tj2PUZ7hig/H28Vb2zIcgKJNwKGPsOd928U8UGMz/+D5zH jOJ578VRR75OPifb69+3zB78TToWt/hRW5ybicp8fopRc+xGAzFQIqL0BQOMzjCU /Qe7ZYID0iuhr6MmqcOxFPGnTKvQ4BWp -----END CERTIFICATE-----Generated at Tue Jul 1 16:45:02 2025 by rpki-client