$ rpki-client -vvf rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft File: -6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft (raw, json) Hash identifier: jHScPitjSjeCOgu2UfvVa//T0ZHxLd48e6vO1i1Gb7A= Subject key identifier: 34:74:C9:0F:14:F3:FF:FE:51:BB:DE:D3:91:DE:B7:86:A3:13:E0:58 Authority key identifier: FB:A7:C3:AD:F0:7F:80:B3:56:C1:13:B8:52:56:F5:7A:40:69:EA:E6 Certificate issuer: /CN=A918FD87/serialNumber=FBA7C3ADF07F80B356C113B85256F57A4069EAE6 Certificate serial: 0822 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft Manifest number: 081A Signing time: Wed 02 Jul 2025 21:07:44 +0000 Manifest this update: Wed 02 Jul 2025 21:07:44 +0000 Manifest next update: Wed 09 Jul 2025 21:07:44 +0000 Files and hashes: 1: -6fDrfB_gLNWwRO4Ulb1ekBp6uY.crl (hash: e13VQGLkpOtfwgqBOVLs2FoqW/i+HLIJ0ni1i9Nnh3M=) 2: 35167F34DE0911EAA8F7452CC4F9AE02.roa (hash: 5iBEu4/lxuKcsTngGzKrbQO6HIpjDKLahJSiNgvhi+k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.crl rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:07:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2082 (0x822) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FD87, serialNumber=FBA7C3ADF07F80B356C113B85256F57A4069EAE6 Validity Not Before: Jul 2 21:07:44 2025 GMT Not After : Jul 9 21:07:44 2025 GMT Subject: CN=68659fa0-66ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:08:85:b4:1e:7a:df:ce:12:e8:0e:35:a3:1e: 08:a2:ff:fd:3d:03:56:fe:4e:ae:d9:90:e2:13:54: 58:1b:bf:60:70:fc:5f:1b:72:39:f4:5c:84:01:d7: ed:bb:3a:36:ba:f8:d3:f1:68:b2:e5:a5:c5:01:71: 1d:cc:78:47:40:50:3e:20:66:c3:69:91:bb:22:01: b8:6d:ea:bc:97:e2:d8:62:57:17:33:e0:21:71:09: f1:0b:cd:73:28:43:52:6a:9b:85:e7:9d:01:68:c0: ad:c0:bd:43:80:c4:39:b5:16:ab:3f:a2:af:12:b9: ed:d1:f3:67:e0:2e:4e:60:1b:1d:62:59:1a:8a:99: 8b:f8:45:c0:82:05:c4:71:af:7d:d8:fa:8c:ff:77: fb:96:85:2d:b1:eb:a6:e0:dc:5e:c9:3c:03:6c:12: ce:0d:fa:7e:c0:1d:0d:c0:12:95:69:b7:b9:24:9a: a3:99:dd:4d:f9:7b:86:fe:8b:2a:3f:51:52:a5:7c: c8:5d:8e:6d:ee:8b:50:a8:fc:54:26:a8:17:60:da: 3c:9b:bc:d4:6e:01:2c:a1:6e:79:74:9a:54:4e:95: 7c:54:40:95:cd:2e:23:8a:4e:12:92:20:fb:1d:e1: c1:8c:37:2d:81:91:44:3d:5f:34:d8:5c:c3:a6:8c: fc:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:74:C9:0F:14:F3:FF:FE:51:BB:DE:D3:91:DE:B7:86:A3:13:E0:58 X509v3 Authority Key Identifier: keyid:FB:A7:C3:AD:F0:7F:80:B3:56:C1:13:B8:52:56:F5:7A:40:69:EA:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:4a:27:69:4e:da:40:08:64:bf:23:08:ec:cd:22:0a:c9:96: db:e5:78:b7:0d:38:da:46:fa:51:a0:73:dc:a0:32:d6:21:07: 2c:da:74:01:1a:ad:e3:ce:90:29:ad:c0:1d:f5:46:92:2f:9b: 91:b3:7f:6d:bd:26:9f:96:e1:14:c2:88:08:84:47:42:50:cd: 0a:bb:16:1f:ce:f8:c8:c6:42:53:f8:83:f8:93:a3:76:98:38: e1:d4:9d:af:e5:04:72:10:02:98:d1:35:0c:19:3e:65:f2:68: b3:e7:4b:40:14:8e:05:91:55:6e:9d:6f:6c:ea:94:34:71:fa: 27:d7:2e:1f:0b:4d:64:34:76:c3:46:e7:df:30:3a:c7:aa:15: d9:17:45:10:68:d6:42:e5:ca:ae:c1:1e:74:2e:e9:ec:b4:9e: a3:23:88:16:99:24:25:e8:09:93:a9:1e:15:91:7e:5a:bf:bc: d8:da:f7:f3:ca:9d:01:b1:0a:e1:9b:b4:0d:ed:61:68:8e:fd: 0a:ed:0c:e2:3e:8d:99:73:a9:f8:9c:43:b3:1a:39:25:7e:67: ae:9a:89:12:e2:a3:0a:dd:f9:56:63:6e:3d:d8:a2:13:0f:31: 49:0f:90:f5:0e:28:0a:1a:a1:bd:f4:98:a1:10:c9:a2:ac:49: 24:67:d4:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZEODcxMTAvBgNVBAUTKEZCQTdDM0FERjA3RjgwQjM1NkMxMTNCODUyNTZGNTdB NDA2OUVBRTYwHhcNMjUwNzAyMjEwNzQ0WhcNMjUwNzA5MjEwNzQ0WjAYMRYwFAYD VQQDEw02ODY1OWZhMC02NmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQiFtB56384S6A41ox4Iov/9PQNW/k6u2ZDiE1RYG79gcPxfG3I59FyEAdft uzo2uvjT8Wiy5aXFAXEdzHhHQFA+IGbDaZG7IgG4beq8l+LYYlcXM+AhcQnxC81z KENSapuF550BaMCtwL1DgMQ5tRarP6KvErnt0fNn4C5OYBsdYlkaipmL+EXAggXE ca992PqM/3f7loUtseum4NxeyTwDbBLODfp+wB0NwBKVabe5JJqjmd1N+XuG/osq P1FSpXzIXY5t7otQqPxUJqgXYNo8m7zUbgEsoW55dJpUTpV8VECVzS4jik4SkiD7 HeHBjDctgZFEPV802FzDpoz8qwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDR0yQ8U 8//+Ubve05Het4ajE+BYMB8GA1UdIwQYMBaAFPunw63wf4CzVsETuFJW9XpAaerm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkQ4Ny8yOUFBOTk1NkRF MDgxMUVBQTEwNkI2MkJDNEY5QUUwMi8tNmZEcmZCX2dMTld3Uk80VWxiMWVrQnA2 dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy02ZkRyZkJfZ0xOV3dSTzRVbGIxZWtCcDZ1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkQ4Ny8yOUFBOTk1NkRFMDgxMUVBQTEwNkI2MkJDNEY5QUUwMi8tNmZEcmZCX2dM Tld3Uk80VWxiMWVrQnA2dVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxSidpTtpACGS/IwjszSIKyZbb5Xi3DTjaRvpRoHPcoDLWIQcs2nQB Gq3jzpAprcAd9UaSL5uRs39tvSafluEUwogIhEdCUM0KuxYfzvjIxkJT+IP4k6N2 mDjh1J2v5QRyEAKY0TUMGT5l8miz50tAFI4FkVVunW9s6pQ0cfon1y4fC01kNHbD RuffMDrHqhXZF0UQaNZC5cquwR50LunstJ6jI4gWmSQl6AmTqR4VkX5av7zY2vfz yp0BsQrhm7QN7WFojv0K7QziPo2Zc6n4nEOzGjklfmeumokS4qMK3flWY2492KIT DzFJD5D1DigKGqG99JihEMmirEkkZ9RZ -----END CERTIFICATE-----Generated at Thu Jul 3 18:35:06 2025 by rpki-client