$ rpki-client -vvf rpki.apnic.net/member_repository/A918BFA2/137678201D9611E2B3FB577E08B02CD2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.mft File: 6wSl6qrVHVvys-1-Z1_U1Ka2QFk.mft (raw, json) Hash identifier: gjaGnplwxQ6B++8HVpo8ksJuQ9shO3rWcE8OLnU1DMI= Subject key identifier: A3:FE:46:C3:14:A5:C3:80:8F:CD:62:5C:C1:2A:76:1F:E5:0A:FB:B4 Authority key identifier: EB:04:A5:EA:AA:D5:1D:5B:F2:B3:ED:7E:67:5F:D4:D4:A6:B6:40:59 Certificate issuer: /CN=A918BFA2/serialNumber=EB04A5EAAAD51D5BF2B3ED7E675FD4D4A6B64059 Certificate serial: 3495 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BFA2/137678201D9611E2B3FB577E08B02CD2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.mft Manifest number: 3495 Signing time: Wed 02 Jul 2025 14:52:31 +0000 Manifest this update: Wed 02 Jul 2025 14:52:30 +0000 Manifest next update: Wed 09 Jul 2025 14:52:30 +0000 Files and hashes: 1: 6wSl6qrVHVvys-1-Z1_U1Ka2QFk.crl (hash: 79H5eIW7AFuu9SkqQBQXlgF8bqKWpqmX+9PBHIiRtNw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BFA2/137678201D9611E2B3FB577E08B02CD2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.crl rsync://rpki.apnic.net/member_repository/A918BFA2/137678201D9611E2B3FB577E08B02CD2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 14:52:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13461 (0x3495) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BFA2, serialNumber=EB04A5EAAAD51D5BF2B3ED7E675FD4D4A6B64059 Validity Not Before: Jul 2 14:52:30 2025 GMT Not After : Jul 9 14:52:30 2025 GMT Subject: CN=686547af-39ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:71:17:fb:84:60:c7:57:b1:cd:e3:c2:4d:a2: 23:ef:29:c6:58:04:f7:aa:72:7a:ea:bf:71:ee:54: 52:a5:2b:d2:91:13:2d:65:7f:96:aa:62:6c:cf:33: 97:2f:ba:6c:79:4f:6a:eb:2e:9b:58:9c:ff:d2:78: 29:fd:2d:7e:4e:8e:6b:96:35:ef:a0:42:47:e5:b2: 4b:98:81:bb:bd:d2:49:e2:88:68:2b:a4:31:25:ad: bc:17:ad:cc:e0:cd:5e:1d:6c:99:90:fa:44:08:48: cc:37:74:42:c2:fe:3f:4b:10:97:fa:36:8f:a9:17: 38:44:12:22:79:a4:52:86:b3:ae:a8:5a:8e:a5:f6: 59:17:ec:58:91:df:82:33:d8:c5:6b:03:5c:45:1a: 46:b3:06:b8:fa:8e:d7:af:e1:56:8d:ec:77:98:49: f1:bf:e4:32:68:ba:b3:3e:b2:e6:54:9a:27:65:99: d0:95:3a:4e:07:84:7f:c1:b0:81:f6:1d:ee:81:f1: d3:e8:c7:79:bd:b7:02:cf:82:3a:0e:2b:8d:9d:6e: 11:fd:da:3f:96:63:36:92:fd:65:cf:4b:8d:5c:d0: e6:95:72:81:53:7b:27:2e:54:c8:05:cf:18:3e:07: 3a:f1:21:cc:74:11:a5:99:e0:4c:19:f6:6b:c6:4a: 66:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:FE:46:C3:14:A5:C3:80:8F:CD:62:5C:C1:2A:76:1F:E5:0A:FB:B4 X509v3 Authority Key Identifier: keyid:EB:04:A5:EA:AA:D5:1D:5B:F2:B3:ED:7E:67:5F:D4:D4:A6:B6:40:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BFA2/137678201D9611E2B3FB577E08B02CD2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BFA2/137678201D9611E2B3FB577E08B02CD2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:c8:af:57:a7:41:bd:71:5a:f6:83:cd:86:c7:76:53:a2:db: 13:aa:36:8b:ea:c5:d9:78:f3:85:9e:97:a6:c7:6b:d6:cf:97: 50:33:a8:e5:5c:a3:ae:e6:43:7f:18:55:6a:7f:c3:16:c7:f0: f6:3c:23:79:b4:b8:fb:51:39:80:95:3d:56:8f:84:12:6c:6a: 38:ac:7a:57:c0:b0:37:de:f2:b0:ea:fe:6c:7d:1e:22:48:ec: 22:8a:87:b3:e4:d1:0d:76:81:93:bc:97:bd:a2:47:64:a5:f4: 72:42:f9:86:d9:f6:37:5e:96:8c:00:22:d1:0d:e5:db:da:00: e8:75:12:96:b7:dd:51:5d:ac:57:1d:66:bb:b3:2a:2e:ba:34: 5a:03:11:b3:ae:fc:b4:e3:40:e4:1b:12:b9:c8:09:f7:44:2b: 45:8c:c4:f7:33:b0:86:75:33:71:55:e1:0b:94:7a:9b:19:30: bc:73:b5:1c:3d:90:32:6c:db:05:04:80:9b:01:85:0c:d1:77: 33:f1:f4:b8:d7:7e:0f:d9:3f:e0:f7:ef:13:f2:ed:59:98:ea: 42:e3:6f:70:06:72:38:80:d8:d7:f9:ce:24:9b:10:b4:54:1a: c6:a8:bf:da:96:7f:62:ef:e1:38:9a:4e:43:4f:d5:9c:6e:f4: 8e:71:1c:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJGQTIxMTAvBgNVBAUTKEVCMDRBNUVBQUFENTFENUJGMkIzRUQ3RTY3NUZENEQ0 QTZCNjQwNTkwHhcNMjUwNzAyMTQ1MjMwWhcNMjUwNzA5MTQ1MjMwWjAYMRYwFAYD VQQDEw02ODY1NDdhZi0zOWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqHEX+4Rgx1exzePCTaIj7ynGWAT3qnJ66r9x7lRSpSvSkRMtZX+WqmJszzOX L7pseU9q6y6bWJz/0ngp/S1+To5rljXvoEJH5bJLmIG7vdJJ4ohoK6QxJa28F63M 4M1eHWyZkPpECEjMN3RCwv4/SxCX+jaPqRc4RBIieaRShrOuqFqOpfZZF+xYkd+C M9jFawNcRRpGswa4+o7Xr+FWjex3mEnxv+QyaLqzPrLmVJonZZnQlTpOB4R/wbCB 9h3ugfHT6Md5vbcCz4I6DiuNnW4R/do/lmM2kv1lz0uNXNDmlXKBU3snLlTIBc8Y Pgc68SHMdBGlmeBMGfZrxkpmvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKP+RsMU pcOAj81iXMEqdh/lCvu0MB8GA1UdIwQYMBaAFOsEpeqq1R1b8rPtfmdf1NSmtkBZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkZBMi8xMzc2NzgyMDFE OTYxMUUyQjNGQjU3N0UwOEIwMkNEMi82d1NsNnFyVkhWdnlzLTEtWjFfVTFLYTJR RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ3U2w2cXJWSFZ2eXMtMS1aMV9VMUthMlFGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkZBMi8xMzc2NzgyMDFEOTYxMUUyQjNGQjU3N0UwOEIwMkNEMi82d1NsNnFyVkhW dnlzLTEtWjFfVTFLYTJRRmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPyK9Xp0G9cVr2g82Gx3ZTotsTqjaL6sXZePOFnpemx2vWz5dQM6jl XKOu5kN/GFVqf8MWx/D2PCN5tLj7UTmAlT1Wj4QSbGo4rHpXwLA33vKw6v5sfR4i SOwiioez5NENdoGTvJe9okdkpfRyQvmG2fY3XpaMACLRDeXb2gDodRKWt91RXaxX HWa7syouujRaAxGzrvy040DkGxK5yAn3RCtFjMT3M7CGdTNxVeELlHqbGTC8c7Uc PZAybNsFBICbAYUM0Xcz8fS4134P2T/g9+8T8u1ZmOpC429wBnI4gNjX+c4kmxC0 VBrGqL/aln9i7+E4mk5DT9WcbvSOcRzB -----END CERTIFICATE-----Generated at Fri Jul 4 14:18:51 2025 by rpki-client