$ rpki-client -vvf rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.mft File: 6q7GCbncI1xGucXxvKPNvsf_7ig.mft (raw, json) Hash identifier: RPSbXmezHAE6xyCJOWjP/dUSDZr21Wd0n4b8cnzQlXo= Subject key identifier: 7E:0B:8C:E1:84:51:97:DD:55:D4:8A:76:EF:D2:6C:78:FD:10:23:1C Authority key identifier: EA:AE:C6:09:B9:DC:23:5C:46:B9:C5:F1:BC:A3:CD:BE:C7:FF:EE:28 Certificate issuer: /CN=A917A82D/serialNumber=EAAEC609B9DC235C46B9C5F1BCA3CDBEC7FFEE28 Certificate serial: 0C4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6q7GCbncI1xGucXxvKPNvsf_7ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.mft Manifest number: 0C2D Signing time: Mon 30 Jun 2025 18:51:41 +0000 Manifest this update: Mon 30 Jun 2025 18:51:41 +0000 Manifest next update: Mon 07 Jul 2025 18:51:41 +0000 Files and hashes: 1: 6q7GCbncI1xGucXxvKPNvsf_7ig.crl (hash: 6AV30EfWkawXcBk86qWMvGn4oSwvpjzAqWEqnJRLd9Q=) 2: 403FDDD0DF3511ED8FBA823DC4F9AE02.roa (hash: n02qcDfoz5xfgtE3pmF9DuTrufYGzGxNykq63R1mDas=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.crl rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6q7GCbncI1xGucXxvKPNvsf_7ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 18:51:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3147 (0xc4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A82D, serialNumber=EAAEC609B9DC235C46B9C5F1BCA3CDBEC7FFEE28 Validity Not Before: Jun 30 18:51:41 2025 GMT Not After : Jul 7 18:51:41 2025 GMT Subject: CN=6862dcbd-f9da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:82:7a:f0:18:9a:ae:9f:1e:14:12:e7:30:51: 91:77:8d:8e:dd:ca:85:af:9c:7b:a5:59:22:6f:49: a3:3d:fe:c3:72:8b:98:af:e1:47:ec:89:a2:fb:6d: 42:7c:b5:5a:3a:5e:6c:89:36:0b:3b:b9:b7:f7:15: 98:c6:81:43:c9:35:53:00:af:6a:e8:ca:e7:4d:39: 5d:dd:31:26:61:4d:f1:ad:81:b2:34:ab:65:f6:4b: b2:a4:2c:1f:e7:11:74:62:c7:8d:8e:5a:14:53:e8: 70:98:24:54:dd:a7:01:63:c4:1f:6a:c2:49:a7:35: a7:d0:1a:02:22:34:a2:c1:f4:5c:ae:f8:e8:5d:8a: 41:67:6e:e1:12:a1:3d:53:6e:ca:00:c3:5a:25:e9: 69:79:61:06:61:4c:6f:d5:63:4d:16:d6:95:24:02: d2:cd:82:ec:74:a8:ce:6d:51:da:37:51:e7:81:c5: c2:29:99:29:1d:0d:c1:96:09:57:64:b3:93:6b:bf: 5a:c4:90:ed:4f:32:00:e7:3a:7d:b1:6f:bb:c6:c3: 60:d9:d6:0a:04:2d:30:53:7f:c8:e3:fd:5c:05:c7: 95:05:32:44:30:08:a5:c1:64:76:6d:c2:63:39:de: 72:58:37:18:49:a0:df:28:b9:c7:21:e4:8d:d1:43: 8f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:0B:8C:E1:84:51:97:DD:55:D4:8A:76:EF:D2:6C:78:FD:10:23:1C X509v3 Authority Key Identifier: keyid:EA:AE:C6:09:B9:DC:23:5C:46:B9:C5:F1:BC:A3:CD:BE:C7:FF:EE:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6q7GCbncI1xGucXxvKPNvsf_7ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:07:2b:fa:2b:87:e9:db:7f:f1:c4:d2:e3:43:a2:f6:8d:50: 20:0a:3d:8b:50:54:a0:93:6e:44:9a:9f:40:cd:c4:b1:b7:14: da:b5:16:94:98:22:26:df:7c:c2:9b:6f:6c:ad:49:8e:59:ff: c4:1a:c3:dc:aa:b8:c8:f1:87:d8:e5:36:d2:d4:ad:2f:68:93: 03:f3:88:cc:8b:40:06:d0:ca:28:e1:fd:b0:9e:b5:ad:13:74: 4a:ce:f6:85:4e:38:c5:23:cf:9d:13:d0:d1:84:38:ec:83:a3: 3f:09:53:57:e2:f2:5a:75:53:b8:b7:6c:ea:54:8a:29:bd:37: 30:cb:fb:ec:32:76:c8:67:d7:9b:fe:f3:d7:00:ca:09:7c:66: c2:49:3d:55:09:2c:91:29:eb:67:70:e0:60:61:d0:18:f0:59: 8f:15:b6:1d:bc:97:eb:77:07:95:a0:3e:7b:e5:0b:4a:c6:1f: 5e:61:6e:00:aa:6d:19:52:90:e6:4d:c8:9f:a4:53:5e:8f:42: c7:21:c9:86:77:5d:a8:7c:56:d4:0d:bb:b5:45:ca:e9:89:72: 02:fc:6d:d7:08:d1:44:ad:46:d6:13:77:19:ef:db:bc:fc:2a: 25:ca:d7:06:94:ff:ab:69:fb:e4:8a:21:1e:11:35:b2:eb:3a: b8:16:5c:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E4MkQxMTAvBgNVBAUTKEVBQUVDNjA5QjlEQzIzNUM0NkI5QzVGMUJDQTNDREJF QzdGRkVFMjgwHhcNMjUwNjMwMTg1MTQxWhcNMjUwNzA3MTg1MTQxWjAYMRYwFAYD VQQDEw02ODYyZGNiZC1mOWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6IJ68Biarp8eFBLnMFGRd42O3cqFr5x7pVkib0mjPf7DcouYr+FH7Imi+21C fLVaOl5siTYLO7m39xWYxoFDyTVTAK9q6MrnTTld3TEmYU3xrYGyNKtl9kuypCwf 5xF0YseNjloUU+hwmCRU3acBY8QfasJJpzWn0BoCIjSiwfRcrvjoXYpBZ27hEqE9 U27KAMNaJelpeWEGYUxv1WNNFtaVJALSzYLsdKjObVHaN1HngcXCKZkpHQ3BlglX ZLOTa79axJDtTzIA5zp9sW+7xsNg2dYKBC0wU3/I4/1cBceVBTJEMAilwWR2bcJj Od5yWDcYSaDfKLnHIeSN0UOPKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH4LjOGE UZfdVdSKdu/SbHj9ECMcMB8GA1UdIwQYMBaAFOquxgm53CNcRrnF8byjzb7H/+4o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTgyRC9BREY2NjVDMDEy NzgxMUVBOUI4RUQwMzRDNEY5QUUwMi82cTdHQ2JuY0kxeEd1Y1h4dktQTnZzZl83 aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZxN0dDYm5jSTF4R3VjWHh2S1BOdnNmXzdpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTgyRC9BREY2NjVDMDEyNzgxMUVBOUI4RUQwMzRDNEY5QUUwMi82cTdHQ2JuY0kx eEd1Y1h4dktQTnZzZl83aWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOByv6K4fp23/xxNLjQ6L2jVAgCj2LUFSgk25Emp9AzcSxtxTatRaU mCIm33zCm29srUmOWf/EGsPcqrjI8YfY5TbS1K0vaJMD84jMi0AG0Moo4f2wnrWt E3RKzvaFTjjFI8+dE9DRhDjsg6M/CVNX4vJadVO4t2zqVIopvTcwy/vsMnbIZ9eb /vPXAMoJfGbCST1VCSyRKetncOBgYdAY8FmPFbYdvJfrdweVoD575QtKxh9eYW4A qm0ZUpDmTcifpFNej0LHIcmGd12ofFbUDbu1RcrpiXIC/G3XCNFErUbWE3cZ79u8 /ColytcGlP+rafvkiiEeETWy6zq4Flxa -----END CERTIFICATE-----Generated at Wed Jul 2 03:41:17 2025 by rpki-client