$ rpki-client -vvf rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.mft File: 6FKljehxn4vGvWSUmFS0dEe4nN4.mft (raw, json) Hash identifier: c/2VVBtl2Yi16rmvxpA2zz5nPQuvGV7h33ziPWGQ1ug= Subject key identifier: 42:0D:08:72:5F:99:82:01:1E:DB:C5:69:C4:51:C9:EB:05:0B:22:11 Authority key identifier: E8:52:A5:8D:E8:71:9F:8B:C6:BD:64:94:98:54:B4:74:47:B8:9C:DE Certificate issuer: /CN=A918F862/serialNumber=E852A58DE8719F8BC6BD64949854B47447B89CDE Certificate serial: 1146 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6FKljehxn4vGvWSUmFS0dEe4nN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.mft Manifest number: 1139 Signing time: Mon 30 Jun 2025 17:28:33 +0000 Manifest this update: Mon 30 Jun 2025 17:28:32 +0000 Manifest next update: Mon 07 Jul 2025 17:28:32 +0000 Files and hashes: 1: 6FKljehxn4vGvWSUmFS0dEe4nN4.crl (hash: n9ZHdfy1snEMURg1YgZyJtRIEGoClNYNYTtg0xV5IPY=) 2: D1D7F9AE0FF911E9B45E3B10C4F9AE02.roa (hash: 3Wqu6xOv+Yqgn98imVoKo0C/3S3sn8xVZaKt7qUGL5g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.crl rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6FKljehxn4vGvWSUmFS0dEe4nN4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 17:28:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4422 (0x1146) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F862, serialNumber=E852A58DE8719F8BC6BD64949854B47447B89CDE Validity Not Before: Jun 30 17:28:32 2025 GMT Not After : Jul 7 17:28:32 2025 GMT Subject: CN=6862c940-226d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:4e:ad:39:23:7b:a9:d8:ad:bf:b0:7d:ad:80: a9:ad:c1:54:f2:bc:9a:19:d3:74:e9:50:1c:3a:17: 6a:de:cc:77:dd:a5:05:da:5f:47:35:aa:00:2c:24: 23:4a:88:42:f0:45:96:84:bc:7d:7e:51:e6:04:97: cc:5b:b4:8e:a9:6d:0d:d2:85:67:29:58:6d:d6:ff: 07:a9:a5:98:31:94:43:97:ce:2d:7c:c8:79:dd:0b: d0:31:dc:7d:8b:e6:26:9d:92:18:c9:52:1d:83:f3: c3:4f:41:58:66:e1:f9:73:71:a6:c3:f8:d9:3f:3e: a0:6f:df:3d:7f:7b:3a:58:d9:b5:82:27:ec:fc:3c: d6:d1:fe:02:e0:7e:12:97:2e:73:e8:42:d5:6d:ea: 93:c3:f0:0b:41:1f:6f:77:ed:07:34:b2:83:03:6f: c3:fd:64:d5:88:1b:88:74:26:cf:78:2e:36:8e:02: 1e:b3:15:a7:bf:7a:bc:85:6e:2e:0d:47:b4:84:ea: d9:2b:91:ca:57:7b:92:02:d3:91:fe:4c:49:75:72: 6e:cb:14:87:4c:0c:dc:85:2a:20:4f:72:6c:9f:73: ed:53:9a:8d:54:11:c4:a3:1b:e2:6e:6e:c6:27:41: 73:d5:fb:82:f7:42:4e:91:45:27:e8:3c:74:e7:75: 73:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:0D:08:72:5F:99:82:01:1E:DB:C5:69:C4:51:C9:EB:05:0B:22:11 X509v3 Authority Key Identifier: keyid:E8:52:A5:8D:E8:71:9F:8B:C6:BD:64:94:98:54:B4:74:47:B8:9C:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6FKljehxn4vGvWSUmFS0dEe4nN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:88:fc:cd:94:e1:af:2d:a3:37:cd:d4:2a:76:93:8f:93:de: 0a:bf:99:6d:79:31:7d:53:76:27:b5:f6:2a:6d:82:29:cc:59: 64:d3:db:1a:06:9e:9b:77:0c:6a:cb:0d:4d:78:74:f4:47:fd: 60:4b:9f:fe:e4:7a:00:9b:15:30:ad:64:15:9e:19:d8:95:20: 82:6f:81:4f:43:3e:7b:d8:d0:2f:f3:b9:e3:75:27:19:ba:d7: f6:56:a1:b4:c1:20:d4:0d:24:42:90:8e:3a:c4:a1:37:bc:43: fd:7f:fd:29:df:9d:d9:2f:4d:86:96:e0:dc:3f:6c:11:ae:0f: 65:fb:4a:08:29:97:35:75:bc:15:8d:1a:9d:85:12:26:a8:d9: 80:a1:8a:44:a4:0a:90:03:0e:08:ba:be:2c:16:84:13:12:df: ae:c9:eb:63:c7:69:f0:ff:d8:75:d9:ed:b9:1a:19:cb:08:31: 9e:86:1d:4e:7a:ae:da:21:3c:c6:29:e6:ca:15:52:f5:85:34: 5a:2b:ec:da:9e:03:2e:21:fd:1d:fa:18:11:c6:4d:70:fa:4d: e7:dd:97:8a:e4:e7:e3:d9:e0:d5:49:54:41:be:46:26:c8:ef: 0e:66:ed:2e:bd:bc:b3:5a:c9:47:4a:7d:31:cd:22:0e:2a:dd: 97:e6:07:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY4NjIxMTAvBgNVBAUTKEU4NTJBNThERTg3MTlGOEJDNkJENjQ5NDk4NTRCNDc0 NDdCODlDREUwHhcNMjUwNjMwMTcyODMyWhcNMjUwNzA3MTcyODMyWjAYMRYwFAYD VQQDEw02ODYyYzk0MC0yMjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6E6tOSN7qditv7B9rYCprcFU8ryaGdN06VAcOhdq3sx33aUF2l9HNaoALCQj SohC8EWWhLx9flHmBJfMW7SOqW0N0oVnKVht1v8HqaWYMZRDl84tfMh53QvQMdx9 i+YmnZIYyVIdg/PDT0FYZuH5c3Gmw/jZPz6gb989f3s6WNm1gifs/DzW0f4C4H4S ly5z6ELVbeqTw/ALQR9vd+0HNLKDA2/D/WTViBuIdCbPeC42jgIesxWnv3q8hW4u DUe0hOrZK5HKV3uSAtOR/kxJdXJuyxSHTAzchSogT3Jsn3PtU5qNVBHEoxvibm7G J0Fz1fuC90JOkUUn6Dx053Vz5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEINCHJf mYIBHtvFacRRyesFCyIRMB8GA1UdIwQYMBaAFOhSpY3ocZ+Lxr1klJhUtHRHuJze MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Rjg2Mi8xRTZGNkMxMjBG RjkxMUU5QTBEOTJCMEZDNEY5QUUwMi82RktsamVoeG40dkd2V1NVbUZTMGRFZTRu TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZGS2xqZWh4bjR2R3ZXU1VtRlMwZEVlNG5ONC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Rjg2Mi8xRTZGNkMxMjBGRjkxMUU5QTBEOTJCMEZDNEY5QUUwMi82RktsamVoeG40 dkd2V1NVbUZTMGRFZTRuTjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaiPzNlOGvLaM3zdQqdpOPk94Kv5lteTF9U3YntfYqbYIpzFlk09sa Bp6bdwxqyw1NeHT0R/1gS5/+5HoAmxUwrWQVnhnYlSCCb4FPQz572NAv87njdScZ utf2VqG0wSDUDSRCkI46xKE3vEP9f/0p353ZL02GluDcP2wRrg9l+0oIKZc1dbwV jRqdhRImqNmAoYpEpAqQAw4Iur4sFoQTEt+uyetjx2nw/9h12e25GhnLCDGehh1O eq7aITzGKebKFVL1hTRaK+zangMuIf0d+hgRxk1w+k3n3ZeK5Ofj2eDVSVRBvkYm yO8OZu0uvbyzWslHSn0xzSIOKt2X5geM -----END CERTIFICATE-----Generated at Wed Jul 2 00:38:47 2025 by rpki-client