$ rpki-client -vvf rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.mft File: 6VE3HeTcsQAlSE0vFP3NosZFW5E.mft (raw, json) Hash identifier: HiCCcnsy/eM0IDZ9RXJ2A2dOjpk0b/OJtf3qguIgbKM= Subject key identifier: 94:D6:27:64:2E:40:87:F4:6F:E4:11:1E:F7:5C:D6:66:E7:90:B6:1D Authority key identifier: E9:51:37:1D:E4:DC:B1:00:25:48:4D:2F:14:FD:CD:A2:C6:45:5B:91 Certificate issuer: /CN=A9195FCB/serialNumber=E951371DE4DCB10025484D2F14FDCDA2C6455B91 Certificate serial: 076E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6VE3HeTcsQAlSE0vFP3NosZFW5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.mft Manifest number: 0766 Signing time: Mon 30 Jun 2025 21:52:33 +0000 Manifest this update: Mon 30 Jun 2025 21:52:32 +0000 Manifest next update: Mon 07 Jul 2025 21:52:32 +0000 Files and hashes: 1: 6VE3HeTcsQAlSE0vFP3NosZFW5E.crl (hash: t49niPqTtFV4xFAJMl5NgNpqbIrDO0J/3+NjSpbEN6I=) 2: A3E98D0E22A911EB96014E82C4F9AE02.roa (hash: 4z79+Ejq1kli2iEB0MzmMtVOKS0J1xYaAwfN6Hko8PY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.crl rsync://rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6VE3HeTcsQAlSE0vFP3NosZFW5E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 21:52:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1902 (0x76e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195FCB, serialNumber=E951371DE4DCB10025484D2F14FDCDA2C6455B91 Validity Not Before: Jun 30 21:52:32 2025 GMT Not After : Jul 7 21:52:32 2025 GMT Subject: CN=68630720-f779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2c:cb:43:65:1b:89:5e:21:4d:5c:7e:78:15: c5:7b:6a:cd:cd:1f:7c:ec:43:31:c1:9f:d4:80:a0: 62:9a:3c:62:25:28:ae:11:1a:d3:54:69:70:15:86: 16:cd:52:52:ee:94:37:30:82:54:c5:7b:69:2c:c8: 55:32:a7:24:0b:11:72:54:fb:9c:ff:39:f9:a7:eb: 8f:df:4e:51:66:31:23:b8:07:20:73:87:d9:10:ce: 0e:b4:c2:08:12:0e:77:50:15:ba:b6:2e:4a:f2:c2: 42:95:9e:4f:c6:32:15:e6:3d:d9:ac:00:71:ff:ac: 45:8e:a0:86:0b:9e:32:21:de:2a:b1:1e:94:74:e0: 10:99:1f:80:36:6f:ba:2e:63:d1:ed:81:ae:2e:48: 3d:75:90:c4:3c:3d:5c:b4:e0:81:4b:38:4b:63:db: 4a:7a:09:90:2b:fc:58:6e:57:dd:b0:b1:c6:43:58: d6:d6:71:c5:c4:5f:35:67:1a:d8:0a:8c:8e:30:13: 47:17:df:02:0f:80:06:31:4d:2d:2b:e5:c4:e7:b5: 14:1a:a3:23:5b:57:54:e3:8c:ac:e8:e2:34:e6:bf: 05:98:e5:78:d4:8f:42:ee:43:bf:83:a4:e7:70:ef: 79:2f:e6:c4:4a:b0:83:73:81:53:0a:4a:b4:7a:64: 43:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:D6:27:64:2E:40:87:F4:6F:E4:11:1E:F7:5C:D6:66:E7:90:B6:1D X509v3 Authority Key Identifier: keyid:E9:51:37:1D:E4:DC:B1:00:25:48:4D:2F:14:FD:CD:A2:C6:45:5B:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6VE3HeTcsQAlSE0vFP3NosZFW5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:83:31:3b:35:db:ee:87:0d:b3:13:57:12:e6:10:9b:c4:92: d4:12:cd:e3:9c:ac:aa:a8:d3:e6:f8:7d:6b:49:66:25:5b:80: 68:50:ee:f7:5c:5b:17:b9:af:57:b0:0b:a2:9b:1c:78:f0:59: 7b:d7:01:dc:22:25:a3:e1:96:d4:0e:00:b6:66:08:4b:c0:40: af:0d:0b:ba:dd:2e:e2:19:97:29:2c:5a:c9:d3:3b:7f:f1:be: 44:2f:a3:dd:64:14:40:ac:ab:e6:71:6d:69:15:a0:bf:15:8d: 0c:8b:07:8e:64:17:8b:61:01:d7:6c:39:aa:9c:b0:82:b0:e5: 4c:0a:2d:c8:08:2f:7b:7e:42:eb:c1:dd:04:e2:97:df:5d:62: 99:04:a4:a5:54:16:3c:2e:19:37:90:a4:73:08:ba:1f:68:aa: c3:7f:af:17:f5:50:46:6a:b0:fa:9b:8d:5c:53:b0:33:4b:f1: bd:78:8f:b8:f3:2b:1b:40:24:ed:4c:f4:29:2f:49:27:f5:19: a8:27:20:04:f7:d7:78:d4:ab:35:40:d9:3e:16:a6:f5:1f:d7: 15:f2:58:ec:17:50:cf:23:86:d9:8d:ab:36:73:5d:7e:34:41: 7a:84:72:c6:d9:15:57:7b:d0:87:23:2d:b2:c4:77:25:96:a2: da:0e:38:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB24wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVGQ0IxMTAvBgNVBAUTKEU5NTEzNzFERTREQ0IxMDAyNTQ4NEQyRjE0RkRDREEy QzY0NTVCOTEwHhcNMjUwNjMwMjE1MjMyWhcNMjUwNzA3MjE1MjMyWjAYMRYwFAYD VQQDEw02ODYzMDcyMC1mNzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyCzLQ2UbiV4hTVx+eBXFe2rNzR987EMxwZ/UgKBimjxiJSiuERrTVGlwFYYW zVJS7pQ3MIJUxXtpLMhVMqckCxFyVPuc/zn5p+uP305RZjEjuAcgc4fZEM4OtMII Eg53UBW6ti5K8sJClZ5PxjIV5j3ZrABx/6xFjqCGC54yId4qsR6UdOAQmR+ANm+6 LmPR7YGuLkg9dZDEPD1ctOCBSzhLY9tKegmQK/xYblfdsLHGQ1jW1nHFxF81ZxrY CoyOMBNHF98CD4AGMU0tK+XE57UUGqMjW1dU44ys6OI05r8FmOV41I9C7kO/g6Tn cO95L+bESrCDc4FTCkq0emRDcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJTWJ2Qu QIf0b+QRHvdc1mbnkLYdMB8GA1UdIwQYMBaAFOlRNx3k3LEAJUhNLxT9zaLGRVuR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUZDQi84ODBFNjM0MDIy QTcxMUVCQjQwNkNFN0NDNEY5QUUwMi82VkUzSGVUY3NRQWxTRTB2RlAzTm9zWkZX NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZWRTNIZVRjc1FBbFNFMHZGUDNOb3NaRlc1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUZDQi84ODBFNjM0MDIyQTcxMUVCQjQwNkNFN0NDNEY5QUUwMi82VkUzSGVUY3NR QWxTRTB2RlAzTm9zWkZXNUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtgzE7Ndvuhw2zE1cS5hCbxJLUEs3jnKyqqNPm+H1rSWYlW4BoUO73 XFsXua9XsAuimxx48Fl71wHcIiWj4ZbUDgC2ZghLwECvDQu63S7iGZcpLFrJ0zt/ 8b5EL6PdZBRArKvmcW1pFaC/FY0MiweOZBeLYQHXbDmqnLCCsOVMCi3ICC97fkLr wd0E4pffXWKZBKSlVBY8Lhk3kKRzCLofaKrDf68X9VBGarD6m41cU7AzS/G9eI+4 8ysbQCTtTPQpL0kn9RmoJyAE99d41Ks1QNk+Fqb1H9cV8ljsF1DPI4bZjas2c11+ NEF6hHLG2RVXe9CHIy2yxHcllqLaDjgI -----END CERTIFICATE-----Generated at Tue Jul 1 15:14:41 2025 by rpki-client