$ rpki-client -vvf rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft File: 6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft (raw, json) Hash identifier: wMwqSIg23v3WUK+/9JvhfAkPZgkxJFlvs9bGvADTRE0= Subject key identifier: 72:EB:D6:C0:F6:0A:DA:B3:08:F1:61:2E:2F:9D:A4:B9:4C:BD:7E:B3 Authority key identifier: E9:36:74:B1:F3:B6:91:6B:2B:63:63:B8:61:D6:B7:7B:39:05:DD:D8 Certificate issuer: /CN=A91889B6/serialNumber=E93674B1F3B6916B2B6363B861D6B77B3905DDD8 Certificate serial: 349F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft Manifest number: 349B Signing time: Wed 02 Jul 2025 14:52:42 +0000 Manifest this update: Wed 02 Jul 2025 14:52:41 +0000 Manifest next update: Wed 09 Jul 2025 14:52:41 +0000 Files and hashes: 1: 6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl (hash: T1a1jb7WcDLBFrF7nSNWUOzA1+BTsdpXcwj45CfOreQ=) 2: 8D57E1664D0911EEA9837D4AC4F9AE02.roa (hash: ANRth1hLqzWtOuNRps1oUpwLuw2TshWbOFj4QYFgW9U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 14:52:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13471 (0x349f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91889B6, serialNumber=E93674B1F3B6916B2B6363B861D6B77B3905DDD8 Validity Not Before: Jul 2 14:52:41 2025 GMT Not After : Jul 9 14:52:41 2025 GMT Subject: CN=686547ba-62f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ab:dd:3e:40:96:63:a1:ba:f7:02:f1:0a:0e: 25:f8:af:5f:3b:d0:b9:ee:9e:d5:d8:f2:39:de:d9: ac:5e:f3:03:91:66:ec:7b:48:b8:d9:0a:42:a7:00: 74:52:6a:5c:7e:9e:6e:d4:26:6c:45:9a:b8:0d:3c: 07:cf:52:49:52:a8:2d:14:09:d1:67:aa:6e:63:9b: a3:c5:b3:98:9f:d7:5b:77:8e:12:cd:10:3c:35:73: 75:20:69:35:46:7e:4d:fc:6c:2a:de:cb:40:84:b8: 22:d3:b4:3b:a4:09:94:4b:8a:50:9a:46:1a:fb:9c: 6b:e5:99:eb:8c:ae:bf:8f:ed:a0:5f:90:4b:9d:52: 1e:4e:8c:62:f1:db:27:42:a7:e8:c7:7c:77:e9:9d: 0e:2e:8a:60:df:4f:45:44:e7:b3:e9:82:f2:de:f5: 68:20:79:9c:2f:91:85:40:8c:c3:5f:dd:d5:fe:ee: be:a1:c4:ee:3b:c1:b8:78:d0:c6:dc:cf:74:36:2b: 0f:10:6b:e4:45:3b:f1:a8:b2:e6:a1:5c:68:c0:47: 4e:a7:db:d1:ce:5a:2b:9b:3e:ff:39:34:dc:0d:9a: d9:b1:1b:b0:72:1f:87:57:a5:30:1b:30:1f:1b:c7: 36:94:21:be:2c:25:aa:8f:50:e9:dd:d2:ce:f4:ae: 74:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:EB:D6:C0:F6:0A:DA:B3:08:F1:61:2E:2F:9D:A4:B9:4C:BD:7E:B3 X509v3 Authority Key Identifier: keyid:E9:36:74:B1:F3:B6:91:6B:2B:63:63:B8:61:D6:B7:7B:39:05:DD:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:97:e1:a4:9b:f5:42:b1:a1:16:98:65:fb:4c:a2:7e:10:c6: 28:63:a1:a8:ef:f2:d6:04:c3:16:bd:fc:8f:bf:df:30:a0:da: 5a:e0:4d:fd:64:9d:f6:16:07:b2:49:73:61:11:8d:6f:f4:ce: 73:52:e0:19:9f:42:7b:3b:6d:41:67:92:79:a9:3b:a6:38:22: 6a:17:b1:41:0e:88:96:ec:f9:4c:6b:34:c7:8a:e8:c7:33:d0: d0:92:27:7a:26:4f:ca:ce:3f:43:28:00:52:15:2c:86:f4:25: 22:c3:33:01:2e:e0:30:05:88:5d:c5:31:6e:75:ac:ce:a2:b5: b2:fe:94:94:26:1b:a3:8c:20:a3:9f:22:08:c6:23:dc:70:a8: 82:57:cb:58:cd:b8:8b:b3:bf:7a:15:08:40:49:36:e3:23:a0: 41:cf:67:c9:4d:a7:07:53:0c:a1:7b:61:98:8f:ef:d5:0a:95: 00:d3:40:16:68:4e:6a:a9:54:9d:9e:1c:7a:73:4d:7d:ae:cc: e4:f0:ca:db:f7:f7:57:5d:13:e2:59:9e:2e:86:1e:14:52:6f: 6f:4c:8b:76:42:2c:90:24:4d:14:22:67:2b:2d:57:eb:9e:99: 28:76:dc:8b:71:da:7e:45:23:25:f0:d3:cb:77:78:2f:aa:2d: e3:e8:e9:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5QjYxMTAvBgNVBAUTKEU5MzY3NEIxRjNCNjkxNkIyQjYzNjNCODYxRDZCNzdC MzkwNURERDgwHhcNMjUwNzAyMTQ1MjQxWhcNMjUwNzA5MTQ1MjQxWjAYMRYwFAYD VQQDEw02ODY1NDdiYS02MmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqqvdPkCWY6G69wLxCg4l+K9fO9C57p7V2PI53tmsXvMDkWbse0i42QpCpwB0 Umpcfp5u1CZsRZq4DTwHz1JJUqgtFAnRZ6puY5ujxbOYn9dbd44SzRA8NXN1IGk1 Rn5N/Gwq3stAhLgi07Q7pAmUS4pQmkYa+5xr5ZnrjK6/j+2gX5BLnVIeToxi8dsn Qqfox3x36Z0OLopg309FROez6YLy3vVoIHmcL5GFQIzDX93V/u6+ocTuO8G4eNDG 3M90NisPEGvkRTvxqLLmoVxowEdOp9vRzlormz7/OTTcDZrZsRuwch+HV6UwGzAf G8c2lCG+LCWqj1Dp3dLO9K50YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHLr1sD2 CtqzCPFhLi+dpLlMvX6zMB8GA1UdIwQYMBaAFOk2dLHztpFrK2NjuGHWt3s5Bd3Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODlCNi8yQzRFRjk3NjFE OTYxMUUyQTY1NDhFN0UwOEIwMkNEMi82VFowc2ZPMmtXc3JZMk80WWRhM2V6a0Yz ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZUWjBzZk8ya1dzclkyTzRZZGEzZXprRjNkZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODlCNi8yQzRFRjk3NjFEOTYxMUUyQTY1NDhFN0UwOEIwMkNEMi82VFowc2ZPMmtX c3JZMk80WWRhM2V6a0YzZGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAl+Gkm/VCsaEWmGX7TKJ+EMYoY6Go7/LWBMMWvfyPv98woNpa4E39 ZJ32FgeySXNhEY1v9M5zUuAZn0J7O21BZ5J5qTumOCJqF7FBDoiW7PlMazTHiujH M9DQkid6Jk/Kzj9DKABSFSyG9CUiwzMBLuAwBYhdxTFudazOorWy/pSUJhujjCCj nyIIxiPccKiCV8tYzbiLs796FQhASTbjI6BBz2fJTacHUwyhe2GYj+/VCpUA00AW aE5qqVSdnhx6c019rszk8Mrb9/dXXRPiWZ4uhh4UUm9vTIt2QiyQJE0UImcrLVfr npkodtyLcdp+RSMl8NPLd3gvqi3j6OkO -----END CERTIFICATE-----Generated at Thu Jul 3 08:06:09 2025 by rpki-client