$ rpki-client -vvf rpki.apnic.net/member_repository/A9114EF6/8DAE05A0D0D411EFBCD5123EC4F9AE02/r0YdV6kKM1svp3p6rsFnNJVJI7E.mft File: r0YdV6kKM1svp3p6rsFnNJVJI7E.mft (raw, json) Hash identifier: 2JECguC61fBxplUSoDUuzCSBwN/1QmbXCQQDrQjPGQ8= Subject key identifier: D5:C7:78:D9:D3:95:1A:B3:2E:49:04:D7:47:40:5E:9E:62:AA:B6:4B Authority key identifier: AF:46:1D:57:A9:0A:33:5B:2F:A7:7A:7A:AE:C1:67:34:95:49:23:B1 Certificate issuer: /CN=A9114EF6/serialNumber=AF461D57A90A335B2FA77A7AAEC16734954923B1 Certificate serial: 66 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r0YdV6kKM1svp3p6rsFnNJVJI7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114EF6/8DAE05A0D0D411EFBCD5123EC4F9AE02/r0YdV6kKM1svp3p6rsFnNJVJI7E.mft Manifest number: 5E Signing time: Thu 19 Jun 2025 06:37:16 +0000 Manifest this update: Thu 19 Jun 2025 06:37:15 +0000 Manifest next update: Thu 26 Jun 2025 06:37:15 +0000 Files and hashes: 1: r0YdV6kKM1svp3p6rsFnNJVJI7E.crl (hash: 5CDsYO6jDJd2u16e1WqL9zFl7NF64UTIxaIpcOV9nr8=) 2: 7EF2846AD16911EF9ECCE01FC4F9AE02.roa (hash: rKGqZf7K9QKHRBXlpgZth78K2mjkrDt+mwCvAfFIYLc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114EF6/8DAE05A0D0D411EFBCD5123EC4F9AE02/r0YdV6kKM1svp3p6rsFnNJVJI7E.crl rsync://rpki.apnic.net/member_repository/A9114EF6/8DAE05A0D0D411EFBCD5123EC4F9AE02/r0YdV6kKM1svp3p6rsFnNJVJI7E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r0YdV6kKM1svp3p6rsFnNJVJI7E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 06:37:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 102 (0x66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114EF6, serialNumber=AF461D57A90A335B2FA77A7AAEC16734954923B1 Validity Not Before: Jun 19 06:37:15 2025 GMT Not After : Jun 26 06:37:15 2025 GMT Subject: CN=6853b01c-ae2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:98:72:21:67:96:38:ad:54:78:97:13:4e:32: 1e:21:cc:c5:44:41:bb:d8:23:32:ee:0e:1c:ad:61: ca:3d:95:55:4d:d3:2e:50:b1:37:9b:fa:0f:d1:70: 34:a7:81:00:27:c2:df:25:a0:74:c9:66:d5:c6:d2: c8:d0:97:51:95:5a:8d:d2:b2:a5:60:f2:d5:3c:28: 90:c5:2d:33:45:e1:46:96:4c:4d:bb:43:12:c5:07: c3:8d:ec:86:19:ea:fe:45:4f:e1:31:35:80:18:38: ad:fb:52:40:8f:8a:26:70:2a:9f:ef:ae:fe:e7:33: c2:f1:f8:b8:7e:22:fc:c5:1f:03:56:d0:26:4d:79: cc:07:04:47:59:72:d7:f7:bc:33:bf:51:0f:af:a3: a7:7b:0c:24:2f:14:8a:76:dc:57:23:fb:57:9b:b6: 15:1f:82:07:ee:e4:43:1e:b5:fb:de:3f:0b:ac:a9: 8d:8f:ca:91:00:93:58:64:7d:64:8d:59:5d:d1:2b: 15:4d:2b:bd:c7:c5:72:fe:bf:da:33:2d:7b:97:24: b0:43:75:57:97:5e:32:e7:aa:12:94:87:4f:b6:4d: 66:33:48:7a:a8:bc:dd:ff:48:a5:40:f9:c1:14:a1: 5f:14:76:0e:12:9f:d3:e7:54:93:cb:cd:c7:f7:82: 91:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:C7:78:D9:D3:95:1A:B3:2E:49:04:D7:47:40:5E:9E:62:AA:B6:4B X509v3 Authority Key Identifier: keyid:AF:46:1D:57:A9:0A:33:5B:2F:A7:7A:7A:AE:C1:67:34:95:49:23:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114EF6/8DAE05A0D0D411EFBCD5123EC4F9AE02/r0YdV6kKM1svp3p6rsFnNJVJI7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r0YdV6kKM1svp3p6rsFnNJVJI7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114EF6/8DAE05A0D0D411EFBCD5123EC4F9AE02/r0YdV6kKM1svp3p6rsFnNJVJI7E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:8f:df:3a:89:75:5d:16:94:45:8c:87:43:56:5a:2b:76:d8: fb:b3:da:07:0b:ff:fc:43:70:7d:a9:a0:09:1b:be:a0:88:f4: 84:24:ff:7d:8b:90:58:42:e2:bc:ef:61:76:a7:7b:dc:8d:35: 15:4e:f8:2c:a6:4d:ef:60:a1:15:c8:1d:d7:d6:0a:fe:2c:4d: d7:d5:31:8c:00:30:16:69:b9:7c:cf:86:51:9c:8d:2c:b3:a6: 6d:b1:53:5c:ba:e2:63:b2:b8:61:66:17:57:07:e3:7e:2a:50: 26:15:70:ff:b8:2a:95:66:a0:56:60:ef:8c:dc:0f:f9:d7:5c: 0c:69:b8:a7:c5:48:2c:9b:29:3b:13:e5:8e:9a:42:4b:d9:88: 6b:f6:09:de:2f:19:ea:58:1b:f8:3e:21:84:e7:54:36:a5:71: 6e:e6:ec:7a:26:0f:94:bf:15:b5:d8:1d:d5:5c:46:ca:28:06: ac:05:58:f7:f1:79:81:e1:05:65:62:18:01:26:43:6a:7b:bd: a8:83:10:3b:77:96:59:98:a6:a1:42:3f:03:7e:e7:f5:16:26: 91:72:52:33:9e:e9:7d:cb:df:8a:8a:23:db:fc:9a:09:86:f9: a4:2b:8d:84:28:f4:e4:16:cc:34:4b:08:e3:b7:b7:eb:b7:28: 6b:6c:f3:e2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NEVGNjExMC8GA1UEBRMoQUY0NjFENTdBOTBBMzM1QjJGQTc3QTdBQUVDMTY3MzQ5 NTQ5MjNCMTAeFw0yNTA2MTkwNjM3MTVaFw0yNTA2MjYwNjM3MTVaMBgxFjAUBgNV BAMTDTY4NTNiMDFjLWFlMmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMmHIhZ5Y4rVR4lxNOMh4hzMVEQbvYIzLuDhytYco9lVVN0y5QsTeb+g/RcDSn gQAnwt8loHTJZtXG0sjQl1GVWo3SsqVg8tU8KJDFLTNF4UaWTE27QxLFB8ON7IYZ 6v5FT+ExNYAYOK37UkCPiiZwKp/vrv7nM8Lx+Lh+IvzFHwNW0CZNecwHBEdZctf3 vDO/UQ+vo6d7DCQvFIp23Fcj+1ebthUfggfu5EMetfvePwusqY2PypEAk1hkfWSN WV3RKxVNK73HxXL+v9ozLXuXJLBDdVeXXjLnqhKUh0+2TWYzSHqovN3/SKVA+cEU oV8Udg4Sn9PnVJPLzcf3gpF1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1cd42dOV GrMuSQTXR0BenmKqtkswHwYDVR0jBBgwFoAUr0YdV6kKM1svp3p6rsFnNJVJI7Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0RUY2LzhEQUUwNUEwRDBE NDExRUZCQ0Q1MTIzRUM0RjlBRTAyL3IwWWRWNmtLTTFzdnAzcDZyc0ZuTkpWSkk3 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcjBZZFY2a0tNMXN2cDNwNnJzRm5OSlZKSTdFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0 RUY2LzhEQUUwNUEwRDBENDExRUZCQ0Q1MTIzRUM0RjlBRTAyL3IwWWRWNmtLTTFz dnAzcDZyc0ZuTkpWSkk3RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIaP3zqJdV0WlEWMh0NWWit22Puz2gcL//xDcH2poAkbvqCI9IQk/32L kFhC4rzvYXane9yNNRVO+CymTe9goRXIHdfWCv4sTdfVMYwAMBZpuXzPhlGcjSyz pm2xU1y64mOyuGFmF1cH434qUCYVcP+4KpVmoFZg74zcD/nXXAxpuKfFSCybKTsT 5Y6aQkvZiGv2Cd4vGepYG/g+IYTnVDalcW7m7HomD5S/FbXYHdVcRsooBqwFWPfx eYHhBWViGAEmQ2p7vaiDEDt3llmYpqFCPwN+5/UWJpFyUjOe6X3L34qKI9v8mgmG +aQrjYQo9OQWzDRLCOO3t+u3KGts8+I= -----END CERTIFICATE-----Generated at Fri Jun 20 05:53:15 2025 by rpki-client