$ rpki-client -vvf rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.mft File: 6EKSkSMrng-5SFoKrUk9fgfH5NE.mft (raw, json) Hash identifier: LwTUBAIACnqeD/b4doZvg++NAcBE3KadH60lq1jnelk= Subject key identifier: 8A:03:F9:36:58:9D:ED:05:4C:5E:CF:BA:58:37:36:2F:3E:75:04:46 Authority key identifier: E8:42:92:91:23:2B:9E:0F:B9:48:5A:0A:AD:49:3D:7E:07:C7:E4:D1 Certificate issuer: /CN=A9199696/serialNumber=E8429291232B9E0FB9485A0AAD493D7E07C7E4D1 Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EKSkSMrng-5SFoKrUk9fgfH5NE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.mft Manifest number: 42 Signing time: Tue 01 Jul 2025 08:12:04 +0000 Manifest this update: Tue 01 Jul 2025 08:12:03 +0000 Manifest next update: Tue 08 Jul 2025 08:12:03 +0000 Files and hashes: 1: 6EKSkSMrng-5SFoKrUk9fgfH5NE.crl (hash: RnWtflYPkrgS4zAzeLsBzfeoR4RqfZHYh/unW5UTH9g=) 2: 1A44E27AF1A711EFA441E72CC4F9AE02.roa (hash: +T8xPEy3qOwqRDiq3fa/SHDl3cgx+ER91jGPjiK2GbE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.crl rsync://rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EKSkSMrng-5SFoKrUk9fgfH5NE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:12:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199696, serialNumber=E8429291232B9E0FB9485A0AAD493D7E07C7E4D1 Validity Not Before: Jul 1 08:12:03 2025 GMT Not After : Jul 8 08:12:03 2025 GMT Subject: CN=68639853-9ec6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:56:f2:2e:4f:91:bd:b5:8d:57:2d:30:2e:a8: 02:77:6e:e2:ae:6e:3f:82:4a:aa:f1:c3:e2:c3:e2: e0:c3:69:66:42:09:c2:2a:a9:a9:76:7b:a6:71:56: d4:13:6d:38:91:d5:5b:81:80:f2:08:e0:73:18:10: 7d:48:96:1d:7e:76:2e:f8:73:84:cc:97:70:c8:d4: 10:d3:b9:79:3c:f7:a3:92:64:75:67:9e:12:eb:05: 8f:57:dc:11:74:b5:6b:90:39:f3:77:f6:5d:7a:c8: 83:74:3f:fb:9c:eb:82:cb:b3:ee:f6:68:a2:68:26: 17:07:c9:99:eb:dc:ea:60:72:24:11:e1:3d:c9:b2: 7f:8e:ae:e3:1b:ee:cf:c0:64:99:88:67:b7:23:1f: bd:b7:71:47:00:21:9c:bf:71:9d:a4:c6:cd:a2:d8: 92:4a:69:8a:82:88:2c:90:02:78:62:2e:74:73:fe: 57:24:58:7f:4f:72:9d:bb:d7:ab:3a:8a:50:e2:94: 2d:74:32:f8:6c:db:28:75:b8:29:04:38:b3:07:fe: a8:47:ee:4b:5a:93:8b:32:79:99:4a:09:8e:50:fe: 59:10:a1:73:64:46:34:28:1c:7c:f3:dd:0c:7d:13: 76:7f:11:23:3f:cf:a6:f3:a6:43:ba:80:05:c1:9e: 59:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:03:F9:36:58:9D:ED:05:4C:5E:CF:BA:58:37:36:2F:3E:75:04:46 X509v3 Authority Key Identifier: keyid:E8:42:92:91:23:2B:9E:0F:B9:48:5A:0A:AD:49:3D:7E:07:C7:E4:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EKSkSMrng-5SFoKrUk9fgfH5NE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:db:a2:b5:cb:df:e8:bb:84:e7:a4:de:11:93:7d:cf:8d:52: 4b:cb:d8:2a:62:37:57:ee:c6:2f:ca:d5:3e:a5:c2:b3:62:ca: a7:c6:86:7e:66:63:c6:37:59:c7:d2:ca:28:aa:de:e2:bf:77: a8:ed:81:5c:76:8a:54:82:e9:8c:64:3d:64:5d:7a:f1:51:73: 37:21:f4:63:80:1d:98:80:b2:a2:68:2d:c6:de:d7:da:71:2e: 5a:1c:78:83:49:a2:08:4c:dd:e0:9b:29:f4:02:91:1d:d5:1f: c9:dc:cd:41:37:2f:bf:b3:da:f6:fb:f6:9e:fe:69:d8:3f:be: eb:19:ed:3b:c7:09:d6:b3:c2:cf:3d:93:c1:19:73:26:d3:85: 77:7f:18:4f:55:3d:77:80:bb:45:64:88:9b:7c:3b:4d:0e:78: 37:e5:2a:94:66:33:6a:0b:79:7b:ad:c5:59:63:01:fd:a7:15: f7:18:8e:70:f7:2d:50:b2:89:1a:95:8c:7d:45:d4:cd:ec:25: b6:2e:aa:64:10:69:ee:aa:bb:a8:cd:a6:24:fb:92:2e:83:cd: ca:8d:fb:60:6a:83:71:c2:72:5c:89:65:17:19:52:c7:67:e8: 19:84:80:42:f9:29:84:80:93:f6:14:43:43:27:73:e1:22:87: 4f:65:64:5d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 OTY5NjExMC8GA1UEBRMoRTg0MjkyOTEyMzJCOUUwRkI5NDg1QTBBQUQ0OTNEN0Uw N0M3RTREMTAeFw0yNTA3MDEwODEyMDNaFw0yNTA3MDgwODEyMDNaMBgxFjAUBgNV BAMTDTY4NjM5ODUzLTllYzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCcVvIuT5G9tY1XLTAuqAJ3buKubj+CSqrxw+LD4uDDaWZCCcIqqal2e6ZxVtQT bTiR1VuBgPII4HMYEH1Ilh1+di74c4TMl3DI1BDTuXk896OSZHVnnhLrBY9X3BF0 tWuQOfN39l16yIN0P/uc64LLs+72aKJoJhcHyZnr3OpgciQR4T3Jsn+OruMb7s/A ZJmIZ7cjH723cUcAIZy/cZ2kxs2i2JJKaYqCiCyQAnhiLnRz/lckWH9Pcp2716s6 ilDilC10Mvhs2yh1uCkEOLMH/qhH7ktak4syeZlKCY5Q/lkQoXNkRjQoHHzz3Qx9 E3Z/ESM/z6bzpkO6gAXBnlkpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUigP5Nlid 7QVMXs+6WDc2Lz51BEYwHwYDVR0jBBgwFoAU6EKSkSMrng+5SFoKrUk9fgfH5NEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5Njk2LzJCODExNjU2RjFB NDExRUY4NDQ4RUIyMkM0RjlBRTAyLzZFS1NrU01ybmctNVNGb0tyVWs5ZmdmSDVO RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNkVLU2tTTXJuZy01U0ZvS3JVazlmZ2ZINU5FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5 Njk2LzJCODExNjU2RjFBNDExRUY4NDQ4RUIyMkM0RjlBRTAyLzZFS1NrU01ybmct NVNGb0tyVWs5ZmdmSDVORS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB3borXL3+i7hOek3hGTfc+NUkvL2CpiN1fuxi/K1T6lwrNiyqfGhn5m Y8Y3WcfSyiiq3uK/d6jtgVx2ilSC6YxkPWRdevFRczch9GOAHZiAsqJoLcbe19px LloceINJoghM3eCbKfQCkR3VH8nczUE3L7+z2vb79p7+adg/vusZ7TvHCdazws89 k8EZcybThXd/GE9VPXeAu0VkiJt8O00OeDflKpRmM2oLeXutxVljAf2nFfcYjnD3 LVCyiRqVjH1F1M3sJbYuqmQQae6qu6jNpiT7ki6DzcqN+2Bqg3HCclyJZRcZUsdn 6BmEgEL5KYSAk/YUQ0Mnc+Eih09lZF0= -----END CERTIFICATE-----Generated at Thu Jul 3 06:11:09 2025 by rpki-client