$ rpki-client -vvf rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft File: aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft (raw, json) Hash identifier: pTbxqTdb/e9+x0Bb4HUQJbucuJpG3e9Dfy1nGYKcAR4= Subject key identifier: 5F:85:1F:2F:B2:47:15:29:64:7F:80:88:83:5A:2D:35:C8:63:54:9D Authority key identifier: 69:69:D1:50:AD:03:48:20:81:BB:1B:D7:C1:3B:E5:F0:0D:C5:3A:38 Certificate issuer: /CN=A917C6D9/serialNumber=6969D150AD03482081BB1BD7C13BE5F00DC53A38 Certificate serial: 06FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnRUK0DSCCBuxvXwTvl8A3FOjg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft Manifest number: 06F4 Signing time: Wed 02 Jul 2025 22:13:07 +0000 Manifest this update: Wed 02 Jul 2025 22:13:07 +0000 Manifest next update: Wed 09 Jul 2025 22:13:07 +0000 Files and hashes: 1: aWnRUK0DSCCBuxvXwTvl8A3FOjg.crl (hash: +3dm9h0woDiNXseKQoMN7eXjj+YeP869Q34H+tPKm7w=) 2: 8F1629524FD411EB9F1A0673C4F9AE02.roa (hash: 0+1qqFR2dQAbs8bJZhkVHckF6TnHu8C+B8873r1KDqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.crl rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnRUK0DSCCBuxvXwTvl8A3FOjg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:13:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1788 (0x6fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C6D9, serialNumber=6969D150AD03482081BB1BD7C13BE5F00DC53A38 Validity Not Before: Jul 2 22:13:07 2025 GMT Not After : Jul 9 22:13:07 2025 GMT Subject: CN=6865aef3-d73e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:df:de:ec:10:99:e2:c6:5e:21:94:c1:5a:6a: 64:e9:9e:24:0e:ea:68:f6:2e:10:ba:a7:61:ec:b5: 2e:54:7c:64:d3:32:2d:05:d1:ff:bc:e3:57:bf:b4: ae:23:a3:b5:9c:9a:62:29:3a:f8:f0:54:a3:09:6c: ac:2e:73:75:5d:a4:6a:a9:ed:7d:01:9c:3f:87:51: 8f:88:ce:3f:ef:ef:b8:d1:b9:a1:66:b1:be:dd:36: 54:2d:09:df:b3:06:94:b3:b4:fc:d8:b0:04:10:32: 82:08:23:05:46:3c:09:ff:15:c5:cf:1c:19:a4:4b: be:db:ed:9d:23:1d:4f:22:93:05:ba:64:48:52:e4: 05:ba:dc:8b:0a:60:c6:80:88:82:98:d3:fe:f7:d5: 1f:3e:d1:f5:d9:95:5f:8b:94:48:a2:ea:47:5c:a5: 21:72:ce:1c:87:e7:a0:21:d8:14:fb:14:b7:35:f9: 08:7f:a2:d9:6a:5c:b2:77:84:de:7c:3a:0d:02:fc: ef:b3:44:3e:fa:e4:57:34:06:6b:0e:10:16:e2:4c: 36:21:c6:cb:0c:1c:0c:35:77:c3:bc:80:a1:68:61: 09:c3:dc:86:33:e2:9b:45:e5:cb:cc:db:b9:09:87: 28:57:ec:22:6e:55:4c:ab:27:de:2e:1a:1e:1d:65: 72:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:85:1F:2F:B2:47:15:29:64:7F:80:88:83:5A:2D:35:C8:63:54:9D X509v3 Authority Key Identifier: keyid:69:69:D1:50:AD:03:48:20:81:BB:1B:D7:C1:3B:E5:F0:0D:C5:3A:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnRUK0DSCCBuxvXwTvl8A3FOjg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:cc:73:f2:08:e0:0a:78:7e:32:cf:18:14:c4:3f:4d:f7:14: dd:fd:f0:cc:91:46:96:68:cf:13:0c:1d:2c:b9:83:a4:93:0a: 92:39:3b:86:78:8d:1f:b3:20:02:fa:32:34:b0:3a:4e:7d:eb: f5:59:e4:ee:a8:44:1a:e7:be:89:6a:a1:0f:42:ef:19:a6:31: b4:d0:1e:55:70:a6:97:4d:5d:28:25:b8:a2:73:43:d0:18:d7: 5d:b8:15:dc:15:73:82:55:73:b0:18:3a:db:bf:50:b1:a4:e2: 6a:ad:4f:30:27:97:56:cb:f6:bb:59:f2:11:1a:dd:aa:a8:55: e3:01:e9:59:cb:99:7d:bc:52:ff:3e:a9:95:73:e2:ed:19:2e: dc:62:54:c1:95:84:c0:67:82:97:0d:d7:21:1b:96:29:8b:a6: f8:38:9c:8f:d2:50:97:c1:3e:44:19:8c:60:10:0e:07:25:0a: ae:05:26:52:8b:1b:27:3a:ff:ff:5d:28:1f:09:13:09:ed:e3: 92:d1:56:38:10:4a:b2:1b:5a:fd:25:17:c4:9b:00:2d:05:d8: ce:b3:14:b6:ad:bf:56:da:ab:45:ad:a2:85:5f:1a:c6:fd:c6: 60:d9:53:33:e7:32:40:4c:12:f6:1b:09:2e:04:39:a8:a2:64: d7:82:7c:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M2RDkxMTAvBgNVBAUTKDY5NjlEMTUwQUQwMzQ4MjA4MUJCMUJEN0MxM0JFNUYw MERDNTNBMzgwHhcNMjUwNzAyMjIxMzA3WhcNMjUwNzA5MjIxMzA3WjAYMRYwFAYD VQQDEw02ODY1YWVmMy1kNzNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+d/e7BCZ4sZeIZTBWmpk6Z4kDupo9i4Quqdh7LUuVHxk0zItBdH/vONXv7Su I6O1nJpiKTr48FSjCWysLnN1XaRqqe19AZw/h1GPiM4/7++40bmhZrG+3TZULQnf swaUs7T82LAEEDKCCCMFRjwJ/xXFzxwZpEu+2+2dIx1PIpMFumRIUuQFutyLCmDG gIiCmNP+99UfPtH12ZVfi5RIoupHXKUhcs4ch+egIdgU+xS3NfkIf6LZalyyd4Te fDoNAvzvs0Q++uRXNAZrDhAW4kw2IcbLDBwMNXfDvIChaGEJw9yGM+KbReXLzNu5 CYcoV+wiblVMqyfeLhoeHWVyiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+FHy+y RxUpZH+AiINaLTXIY1SdMB8GA1UdIwQYMBaAFGlp0VCtA0gggbsb18E75fANxTo4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzZEOS82QTVGMTMyNDRG RDExMUVCQUZCMTY3NkJDNEY5QUUwMi9hV25SVUswRFNDQ0J1eHZYd1R2bDhBM0ZP amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FXblJVSzBEU0NDQnV4dlh3VHZsOEEzRk9qZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzZEOS82QTVGMTMyNDRGRDExMUVCQUZCMTY3NkJDNEY5QUUwMi9hV25SVUswRFND Q0J1eHZYd1R2bDhBM0ZPamcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOzHPyCOAKeH4yzxgUxD9N9xTd/fDMkUaWaM8TDB0suYOkkwqSOTuG eI0fsyAC+jI0sDpOfev1WeTuqEQa576JaqEPQu8ZpjG00B5VcKaXTV0oJbiic0PQ GNdduBXcFXOCVXOwGDrbv1CxpOJqrU8wJ5dWy/a7WfIRGt2qqFXjAelZy5l9vFL/ PqmVc+LtGS7cYlTBlYTAZ4KXDdchG5Ypi6b4OJyP0lCXwT5EGYxgEA4HJQquBSZS ixsnOv//XSgfCRMJ7eOS0VY4EEqyG1r9JRfEmwAtBdjOsxS2rb9W2qtFraKFXxrG /cZg2VMz5zJATBL2GwkuBDmoomTXgnyv -----END CERTIFICATE-----Generated at Thu Jul 3 09:11:07 2025 by rpki-client