$ rpki-client -vvf rpki.apnic.net/member_repository/A919676F/FE49FAC2D3A011ED814C4C18C4F9AE02/67oUOyhmNxjNjH2j9jEAmpgE7l8.mft File: 67oUOyhmNxjNjH2j9jEAmpgE7l8.mft (raw, json) Hash identifier: XT0JdFOQxSqLuE7MS/5gFO8iGvi/pNU5lniji8wqMPg= Subject key identifier: 74:D5:1C:4D:EC:C3:FC:5C:A2:7A:4F:63:33:E7:3B:D6:18:48:DE:36 Authority key identifier: EB:BA:14:3B:28:66:37:18:CD:8C:7D:A3:F6:31:00:9A:98:04:EE:5F Certificate issuer: /CN=A919676F/serialNumber=EBBA143B28663718CD8C7DA3F631009A9804EE5F Certificate serial: 01AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67oUOyhmNxjNjH2j9jEAmpgE7l8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919676F/FE49FAC2D3A011ED814C4C18C4F9AE02/67oUOyhmNxjNjH2j9jEAmpgE7l8.mft Manifest number: 01A6 Signing time: Thu 03 Jul 2025 03:23:06 +0000 Manifest this update: Thu 03 Jul 2025 03:23:06 +0000 Manifest next update: Thu 10 Jul 2025 03:23:06 +0000 Files and hashes: 1: 67oUOyhmNxjNjH2j9jEAmpgE7l8.crl (hash: CyMK8w5mZRubhC9BLrFIeCejOnyAll9Ipk4E8BeNpIw=) 2: D277F83CD3A411ED8C51160FC4F9AE02.roa (hash: xeDK9WlWOxddaeQUzhh0jJMfgRYN6KWkgPqKssZPync=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919676F/FE49FAC2D3A011ED814C4C18C4F9AE02/67oUOyhmNxjNjH2j9jEAmpgE7l8.crl rsync://rpki.apnic.net/member_repository/A919676F/FE49FAC2D3A011ED814C4C18C4F9AE02/67oUOyhmNxjNjH2j9jEAmpgE7l8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67oUOyhmNxjNjH2j9jEAmpgE7l8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 426 (0x1aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919676F, serialNumber=EBBA143B28663718CD8C7DA3F631009A9804EE5F Validity Not Before: Jul 3 03:23:06 2025 GMT Not After : Jul 10 03:23:06 2025 GMT Subject: CN=6865f79a-28a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:69:9d:09:ef:8a:ec:d3:12:2b:fb:ac:76:49: 15:a6:00:05:5b:ea:19:a8:34:cc:64:f2:0d:c5:59: 3c:75:c1:0b:27:0f:6e:1b:34:75:c7:91:14:7b:4b: 86:77:10:ba:b8:6f:15:5d:40:18:63:72:8e:63:4c: f6:46:3a:01:5d:47:5d:fc:84:e6:72:6a:2f:ef:1d: 03:f3:47:f0:d1:19:68:85:63:48:cd:fe:9c:7b:6f: 31:62:eb:dd:28:5e:e6:31:32:d1:0f:02:9c:96:42: 21:41:83:28:7b:51:7d:d0:c1:bd:ee:ce:66:e1:25: 68:54:3a:85:06:25:fa:7b:b7:c5:56:87:c9:b5:f8: 3f:79:81:48:6c:a7:8e:f1:82:69:cb:12:f9:61:dc: 12:b5:23:81:17:1e:36:9e:bb:5d:3b:b8:e2:fa:b8: 76:dd:f0:0a:20:be:87:4b:be:ac:7e:0a:65:8d:6f: c6:c4:d1:3f:ed:2d:29:e4:32:75:99:0b:15:97:9c: 37:27:87:7f:de:89:3e:01:df:7e:61:2d:1e:78:ab: 73:03:2b:05:4f:37:69:13:ac:ec:e8:29:37:0d:2e: 02:12:e6:27:b8:a5:e2:bc:f9:a1:8c:a6:e3:6e:7c: c4:56:c8:a2:ed:5e:7e:2b:37:0d:9c:c5:69:d3:3f: 36:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:D5:1C:4D:EC:C3:FC:5C:A2:7A:4F:63:33:E7:3B:D6:18:48:DE:36 X509v3 Authority Key Identifier: keyid:EB:BA:14:3B:28:66:37:18:CD:8C:7D:A3:F6:31:00:9A:98:04:EE:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919676F/FE49FAC2D3A011ED814C4C18C4F9AE02/67oUOyhmNxjNjH2j9jEAmpgE7l8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67oUOyhmNxjNjH2j9jEAmpgE7l8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919676F/FE49FAC2D3A011ED814C4C18C4F9AE02/67oUOyhmNxjNjH2j9jEAmpgE7l8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:82:44:89:6d:45:58:b3:e4:d4:d5:7a:04:0b:6f:69:9a:26: 89:b1:10:14:ac:21:c0:2b:97:7a:72:78:e0:76:d5:62:0d:4c: ba:2e:b5:74:21:71:08:9b:a9:29:29:61:dc:58:26:5c:8b:ea: 91:59:59:96:7d:35:06:00:f4:db:0a:92:2a:71:12:fc:34:a5: be:7d:a3:86:ae:ab:db:b0:9f:08:2a:9f:8a:aa:39:32:bc:6a: 24:84:d2:ae:4e:ed:05:bd:cf:d9:8c:e7:92:2f:c7:65:4d:32: 33:bd:a5:72:6f:b4:ad:db:52:cb:7b:44:08:d5:3a:9a:f9:04: 97:af:3c:b7:85:53:c1:4e:86:10:8a:7d:3a:f4:6f:70:c2:fe: 61:d2:e6:a5:e0:d4:a4:6e:3b:8e:30:6f:1e:5a:58:32:75:78: a0:f9:58:09:45:72:4a:16:b6:75:9b:b4:7c:fe:39:a1:19:cd: 0d:e8:6f:72:8f:49:3b:9e:87:7c:6f:c8:c0:21:be:58:12:ab: d7:4c:ee:52:5b:33:2a:05:a6:0c:7d:ea:a7:e5:d6:9e:67:d6: 30:c2:20:0e:dd:da:a7:29:80:00:09:32:84:9a:ce:19:1c:26: a2:a4:a4:0f:dc:9b:72:82:6c:02:77:97:ed:62:0e:bb:e8:7c: 12:1f:c9:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTY3NkYxMTAvBgNVBAUTKEVCQkExNDNCMjg2NjM3MThDRDhDN0RBM0Y2MzEwMDlB OTgwNEVFNUYwHhcNMjUwNzAzMDMyMzA2WhcNMjUwNzEwMDMyMzA2WjAYMRYwFAYD VQQDEw02ODY1Zjc5YS0yOGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxWmdCe+K7NMSK/usdkkVpgAFW+oZqDTMZPINxVk8dcELJw9uGzR1x5EUe0uG dxC6uG8VXUAYY3KOY0z2RjoBXUdd/ITmcmov7x0D80fw0RlohWNIzf6ce28xYuvd KF7mMTLRDwKclkIhQYMoe1F90MG97s5m4SVoVDqFBiX6e7fFVofJtfg/eYFIbKeO 8YJpyxL5YdwStSOBFx42nrtdO7ji+rh23fAKIL6HS76sfgpljW/GxNE/7S0p5DJ1 mQsVl5w3J4d/3ok+Ad9+YS0eeKtzAysFTzdpE6zs6Ck3DS4CEuYnuKXivPmhjKbj bnzEVsii7V5+KzcNnMVp0z82kQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHTVHE3s w/xconpPYzPnO9YYSN42MB8GA1UdIwQYMBaAFOu6FDsoZjcYzYx9o/YxAJqYBO5f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Njc2Ri9GRTQ5RkFDMkQz QTAxMUVEODE0QzRDMThDNEY5QUUwMi82N29VT3lobU54ak5qSDJqOWpFQW1wZ0U3 bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY3b1VPeWhtTnhqTmpIMmo5akVBbXBnRTdsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Njc2Ri9GRTQ5RkFDMkQzQTAxMUVEODE0QzRDMThDNEY5QUUwMi82N29VT3lobU54 ak5qSDJqOWpFQW1wZ0U3bDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2gkSJbUVYs+TU1XoEC29pmiaJsRAUrCHAK5d6cnjgdtViDUy6LrV0 IXEIm6kpKWHcWCZci+qRWVmWfTUGAPTbCpIqcRL8NKW+faOGrqvbsJ8IKp+Kqjky vGokhNKuTu0Fvc/ZjOeSL8dlTTIzvaVyb7St21LLe0QI1Tqa+QSXrzy3hVPBToYQ in069G9wwv5h0ual4NSkbjuOMG8eWlgydXig+VgJRXJKFrZ1m7R8/jmhGc0N6G9y j0k7nod8b8jAIb5YEqvXTO5SWzMqBaYMfeqn5daeZ9YwwiAO3dqnKYAACTKEms4Z HCaipKQP3JtygmwCd5ftYg676HwSH8nj -----END CERTIFICATE-----Generated at Thu Jul 3 08:04:45 2025 by rpki-client