$ rpki-client -vvf rpki.apnic.net/member_repository/A9185456/052E2C48D46211EDA7DC6E51C4F9AE02/6yX--P-P_HFEQDc2nK2vr2zYklI.mft File: 6yX--P-P_HFEQDc2nK2vr2zYklI.mft (raw, json) Hash identifier: USeRLv7JXya2QmgirLBiqi8p4gcO6dQ9W48rZGys8Qo= Subject key identifier: 62:FB:B6:B5:75:D1:BA:E4:7C:8D:18:2A:DB:22:FA:42:FE:B0:B4:BE Authority key identifier: EB:25:FE:F8:FF:8F:FC:71:44:40:37:36:9C:AD:AF:AF:6C:D8:92:52 Certificate issuer: /CN=A9185456/serialNumber=EB25FEF8FF8FFC71444037369CADAFAF6CD89252 Certificate serial: 01AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6yX--P-P_HFEQDc2nK2vr2zYklI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185456/052E2C48D46211EDA7DC6E51C4F9AE02/6yX--P-P_HFEQDc2nK2vr2zYklI.mft Manifest number: 01A7 Signing time: Sat 05 Jul 2025 03:34:58 +0000 Manifest this update: Sat 05 Jul 2025 03:34:57 +0000 Manifest next update: Sat 12 Jul 2025 03:34:57 +0000 Files and hashes: 1: 6yX--P-P_HFEQDc2nK2vr2zYklI.crl (hash: +DUWonaP7WLSgZOIZ2ZUND6g3Dvh82lAyj3g4rYG27E=) 2: 7E156BA0D46511EDBFC00C87C4F9AE02.roa (hash: FRRfK4hKeTw9lsBnsIsSbgs7rIXetSWQ2flb/qNJQ7k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185456/052E2C48D46211EDA7DC6E51C4F9AE02/6yX--P-P_HFEQDc2nK2vr2zYklI.crl rsync://rpki.apnic.net/member_repository/A9185456/052E2C48D46211EDA7DC6E51C4F9AE02/6yX--P-P_HFEQDc2nK2vr2zYklI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6yX--P-P_HFEQDc2nK2vr2zYklI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 427 (0x1ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185456, serialNumber=EB25FEF8FF8FFC71444037369CADAFAF6CD89252 Validity Not Before: Jul 5 03:34:57 2025 GMT Not After : Jul 12 03:34:57 2025 GMT Subject: CN=68689d62-ab4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:31:0a:6c:c4:37:e3:f4:ab:83:50:a1:49:84: 92:a9:ac:a1:d0:f4:97:0e:74:4b:1f:9e:3f:a9:38: 6a:34:0e:82:40:c5:7e:c7:91:cb:07:d5:e7:08:e1: 9c:b3:f7:ea:d8:5e:9f:cd:b2:66:79:65:3e:c4:09: aa:5b:a2:b9:da:d3:7e:03:58:0e:b0:47:2d:f5:78: 38:34:bc:11:00:7c:b5:52:3a:e5:ba:47:ea:7d:1e: e1:1b:4e:fd:ce:47:45:61:4c:69:e4:2d:52:d7:9d: cc:d9:86:64:62:ca:9f:97:20:c7:09:fd:ad:02:94: 4b:d3:23:5c:10:2d:cd:78:2c:50:2b:19:b3:10:c8: bb:ee:b5:20:90:56:fc:11:90:2e:d7:c2:c1:1f:02: 5e:c7:da:19:88:4b:f5:7e:51:d3:0a:fd:69:92:c2: 21:7e:43:f8:dd:34:5d:dd:a3:96:fd:c9:99:36:14: 4d:f5:0e:c9:38:3c:8a:bc:3f:82:36:5c:e1:ce:95: f3:36:02:c5:51:e9:0d:18:8e:54:d2:c7:79:8f:a6: e1:6e:d4:2b:86:6e:b4:41:25:1c:1d:59:5a:2e:d0: 36:0e:70:bc:6b:27:50:3a:26:80:78:45:c9:9a:1c: 6a:a9:35:38:8a:f6:37:e9:28:78:66:21:bd:d8:17: 01:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:FB:B6:B5:75:D1:BA:E4:7C:8D:18:2A:DB:22:FA:42:FE:B0:B4:BE X509v3 Authority Key Identifier: keyid:EB:25:FE:F8:FF:8F:FC:71:44:40:37:36:9C:AD:AF:AF:6C:D8:92:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185456/052E2C48D46211EDA7DC6E51C4F9AE02/6yX--P-P_HFEQDc2nK2vr2zYklI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6yX--P-P_HFEQDc2nK2vr2zYklI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185456/052E2C48D46211EDA7DC6E51C4F9AE02/6yX--P-P_HFEQDc2nK2vr2zYklI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:34:58:f2:9d:26:0e:cb:b5:23:a4:ab:09:9d:6f:6f:38:ff: 7f:a3:6b:98:a0:67:22:c5:8b:cb:dd:52:51:42:75:51:01:c1: 40:3a:5d:e8:20:5f:c4:18:db:b2:60:18:ce:c5:28:0e:bd:47: cd:cb:04:b1:30:89:d4:4a:30:3d:a0:e8:56:8f:7f:4c:58:c5: b4:db:5b:6d:0f:04:dc:21:1d:29:ec:d3:cc:1d:2b:c3:c8:1e: 46:c5:7f:8b:95:7e:d8:04:80:40:04:6e:ed:9a:89:c6:4f:ed: fe:e7:6e:41:b3:4c:7e:7d:75:8c:20:fe:6a:60:21:f4:49:d7: 4f:87:98:d3:34:2c:12:af:62:df:bc:a2:d9:86:27:d9:e3:2e: f4:57:8a:7c:48:e5:c4:32:fc:7d:52:cd:db:c1:fc:d2:5d:d2: 02:78:ea:87:80:34:8c:5d:67:d7:9c:6a:e8:f0:c1:15:85:1a: 39:d4:f9:ec:37:a4:f9:0e:48:12:d8:9e:a6:41:76:81:aa:a4: a5:e3:18:46:51:e1:6d:64:de:d4:0f:3c:32:84:00:76:5b:15: a8:ec:56:ae:b2:c0:6b:f1:79:17:2c:79:45:af:5c:cb:39:cd: 65:37:cd:2f:1a:0d:29:33:c9:7d:58:c2:f9:e2:47:5f:cf:90: e9:0d:5d:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU0NTYxMTAvBgNVBAUTKEVCMjVGRUY4RkY4RkZDNzE0NDQwMzczNjlDQURBRkFG NkNEODkyNTIwHhcNMjUwNzA1MDMzNDU3WhcNMjUwNzEyMDMzNDU3WjAYMRYwFAYD VQQDEw02ODY4OWQ2Mi1hYjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5DEKbMQ34/Srg1ChSYSSqayh0PSXDnRLH54/qThqNA6CQMV+x5HLB9XnCOGc s/fq2F6fzbJmeWU+xAmqW6K52tN+A1gOsEct9Xg4NLwRAHy1UjrlukfqfR7hG079 zkdFYUxp5C1S153M2YZkYsqflyDHCf2tApRL0yNcEC3NeCxQKxmzEMi77rUgkFb8 EZAu18LBHwJex9oZiEv1flHTCv1pksIhfkP43TRd3aOW/cmZNhRN9Q7JODyKvD+C NlzhzpXzNgLFUekNGI5U0sd5j6bhbtQrhm60QSUcHVlaLtA2DnC8aydQOiaAeEXJ mhxqqTU4ivY36Sh4ZiG92BcBOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGL7trV1 0brkfI0YKtsi+kL+sLS+MB8GA1UdIwQYMBaAFOsl/vj/j/xxREA3Npytr69s2JJS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTQ1Ni8wNTJFMkM0OEQ0 NjIxMUVEQTdEQzZFNTFDNEY5QUUwMi82eVgtLVAtUF9IRkVRRGMybksydnIyellr bEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ5WC0tUC1QX0hGRVFEYzJuSzJ2cjJ6WWtsSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTQ1Ni8wNTJFMkM0OEQ0NjIxMUVEQTdEQzZFNTFDNEY5QUUwMi82eVgtLVAtUF9I RkVRRGMybksydnIyellrbEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0NFjynSYOy7UjpKsJnW9vOP9/o2uYoGcixYvL3VJRQnVRAcFAOl3o IF/EGNuyYBjOxSgOvUfNywSxMInUSjA9oOhWj39MWMW021ttDwTcIR0p7NPMHSvD yB5GxX+LlX7YBIBABG7tmonGT+3+525Bs0x+fXWMIP5qYCH0SddPh5jTNCwSr2Lf vKLZhifZ4y70V4p8SOXEMvx9Us3bwfzSXdICeOqHgDSMXWfXnGro8MEVhRo51Pns N6T5DkgS2J6mQXaBqqSl4xhGUeFtZN7UDzwyhAB2WxWo7FaussBr8XkXLHlFr1zL Oc1lN80vGg0pM8l9WML54kdfz5DpDV0m -----END CERTIFICATE-----Generated at Sun Jul 6 01:06:55 2025 by rpki-client