$ rpki-client -vvf rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft File: 6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft (raw, json) Hash identifier: 1ZjshlioWzBDhfeAlXhsC76t2jlU9V4wuZxzlzSL28M= Subject key identifier: 4B:FE:3B:04:E5:8C:F1:76:41:35:2D:EE:74:AD:EF:33:87:37:26:12 Authority key identifier: E9:92:3B:AC:0F:5C:58:CA:BE:B9:32:86:CA:20:26:6F:1F:6E:FB:14 Certificate issuer: /CN=A917CBD7/serialNumber=E9923BAC0F5C58CABEB93286CA20266F1F6EFB14 Certificate serial: 0A9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft Manifest number: 0A7C Signing time: Wed 02 Jul 2025 19:51:16 +0000 Manifest this update: Wed 02 Jul 2025 19:51:16 +0000 Manifest next update: Wed 09 Jul 2025 19:51:16 +0000 Files and hashes: 1: 6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl (hash: FyYSkkUTXIn+tssgJOGuLlLIz1AIei3qvLoilJYXwxQ=) 2: BE633CD283A611EE804BB319C4F9AE02.roa (hash: NPIjvL++urku6C6DzlbI7Tjblbx8i4fhbfChdZsNErw=) 3: ACFA076483A611EE9C62DE0CC4F9AE02.roa (hash: iAsOrn+BfPbmaxKIym2huXek+8KrH7keNTNRSTAMeck=) 4: 8AD0E57C8FE311EB89767C78C4F9AE02.roa (hash: iGUFOWK6oRwPeEo+C87zciurGuoBwNOi2mVgrnihqBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:51:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2714 (0xa9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917CBD7, serialNumber=E9923BAC0F5C58CABEB93286CA20266F1F6EFB14 Validity Not Before: Jul 2 19:51:16 2025 GMT Not After : Jul 9 19:51:16 2025 GMT Subject: CN=68658db4-19a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:be:22:98:16:f3:11:98:57:6a:87:62:02:78: a1:85:37:78:e1:49:c3:97:59:42:bd:30:da:65:60: be:f5:58:1f:b8:c1:27:99:e4:59:b1:08:79:c1:be: fa:50:05:45:cd:6d:15:43:54:7c:a6:ed:6a:8d:54: fb:64:b6:f7:e9:bb:e3:58:f9:b1:26:3f:d6:07:e6: 6d:7f:54:52:54:c9:ab:14:4d:95:f3:e5:60:86:7e: c0:bf:fe:00:cd:59:86:e4:5b:a5:00:c7:b7:77:55: 8c:15:01:7a:06:e5:96:ef:20:6c:7d:c6:45:84:3b: b1:1c:47:b9:d8:fa:2c:79:7e:48:9b:24:45:5c:56: 31:a6:13:c1:42:d9:da:20:ff:ff:ad:61:2d:d7:15: ae:04:33:18:95:d6:ae:61:11:2c:ce:7f:77:39:f5: 1d:e1:66:d9:e1:be:40:3c:aa:f0:54:74:76:a4:43: 5a:e6:9c:51:da:62:3b:63:9c:d1:20:c6:3e:49:2d: 7e:24:22:4b:92:cc:57:31:f1:08:76:0d:f0:fe:92: fd:93:74:cd:32:ec:4d:f0:16:33:42:dc:e7:d6:55: 6b:a8:1b:be:ac:01:5d:b7:26:99:b7:91:e2:47:cc: 77:7e:e0:16:76:f8:42:46:77:e8:05:69:b7:ca:1f: a5:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:FE:3B:04:E5:8C:F1:76:41:35:2D:EE:74:AD:EF:33:87:37:26:12 X509v3 Authority Key Identifier: keyid:E9:92:3B:AC:0F:5C:58:CA:BE:B9:32:86:CA:20:26:6F:1F:6E:FB:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:2e:94:16:1a:03:dc:70:24:9d:f5:ed:03:ef:ed:36:0e:7a: cd:db:a2:5e:84:45:08:ac:20:c6:7d:af:b3:67:23:e6:de:67: b0:a8:7c:43:2b:72:40:4b:38:78:4c:4c:82:3d:bf:e6:31:cc: 3b:0e:f9:b2:63:30:48:33:62:0e:c0:e0:83:70:0e:30:f1:48: cc:b8:92:28:56:3a:31:62:9e:f2:f0:c2:76:2b:49:23:ee:97: 41:3e:97:b8:41:21:8e:d6:ea:f4:0d:79:fd:ad:74:d3:03:f4: d5:d8:db:0a:43:c1:4a:3d:67:e2:cc:3d:28:26:46:ff:f9:6d: 2e:66:dc:9f:1b:b8:2c:66:34:6b:7b:f4:f0:17:99:91:f0:c5: 25:56:6a:22:c2:cd:4d:fc:71:e3:37:a8:53:68:b1:9b:c1:2d: 47:22:3a:71:d5:49:d8:fb:e5:bc:20:2d:0e:7e:d6:45:32:46: 46:9e:80:00:77:ea:fb:c0:9a:74:c5:c2:17:00:83:ff:81:2c: df:77:76:83:e1:ea:a7:5a:48:0c:9b:f2:df:b4:63:8a:df:2c: 24:c7:36:9c:a5:24:ad:5c:13:a9:3f:94:88:8b:7b:70:c9:74: 2b:92:7f:7d:16:6b:b6:a7:89:35:86:f4:ad:56:cf:d2:0b:f9: 88:ea:19:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCpowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0NCRDcxMTAvBgNVBAUTKEU5OTIzQkFDMEY1QzU4Q0FCRUI5MzI4NkNBMjAyNjZG MUY2RUZCMTQwHhcNMjUwNzAyMTk1MTE2WhcNMjUwNzA5MTk1MTE2WjAYMRYwFAYD VQQDEw02ODY1OGRiNC0xOWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArL4imBbzEZhXaodiAnihhTd44UnDl1lCvTDaZWC+9VgfuMEnmeRZsQh5wb76 UAVFzW0VQ1R8pu1qjVT7ZLb36bvjWPmxJj/WB+Ztf1RSVMmrFE2V8+Vghn7Av/4A zVmG5FulAMe3d1WMFQF6BuWW7yBsfcZFhDuxHEe52PoseX5ImyRFXFYxphPBQtna IP//rWEt1xWuBDMYldauYREszn93OfUd4WbZ4b5APKrwVHR2pENa5pxR2mI7Y5zR IMY+SS1+JCJLksxXMfEIdg3w/pL9k3TNMuxN8BYzQtzn1lVrqBu+rAFdtyaZt5Hi R8x3fuAWdvhCRnfoBWm3yh+luwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEv+OwTl jPF2QTUt7nSt7zOHNyYSMB8GA1UdIwQYMBaAFOmSO6wPXFjKvrkyhsogJm8fbvsU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0JENy8xOTIzQkY2ODY0 MjgxMUVBQTcwNDFENDhDNEY5QUUwMi82Wkk3ckE5Y1dNcS11VEtHeWlBbWJ4OXUt eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZaSTdyQTljV01xLXVUS0d5aUFtYng5dS14US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Q0JENy8xOTIzQkY2ODY0MjgxMUVBQTcwNDFENDhDNEY5QUUwMi82Wkk3ckE5Y1dN cS11VEtHeWlBbWJ4OXUteFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFLpQWGgPccCSd9e0D7+02DnrN26JehEUIrCDGfa+zZyPm3mewqHxD K3JASzh4TEyCPb/mMcw7DvmyYzBIM2IOwOCDcA4w8UjMuJIoVjoxYp7y8MJ2K0kj 7pdBPpe4QSGO1ur0DXn9rXTTA/TV2NsKQ8FKPWfizD0oJkb/+W0uZtyfG7gsZjRr e/TwF5mR8MUlVmoiws1N/HHjN6hTaLGbwS1HIjpx1UnY++W8IC0OftZFMkZGnoAA d+r7wJp0xcIXAIP/gSzfd3aD4eqnWkgMm/LftGOK3ywkxzacpSStXBOpP5SIi3tw yXQrkn99Fmu2p4k1hvStVs/SC/mI6hmP -----END CERTIFICATE-----Generated at Fri Jul 4 01:11:49 2025 by rpki-client