$ rpki-client -vvf rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft File: A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft (raw, json) Hash identifier: Y9BvP7wyttdiE59fFWj1GTC40Wu7989NljpQ9coiYNQ= Subject key identifier: CD:6B:07:6D:8E:F5:50:EF:EE:76:87:B7:1B:49:83:B1:96:69:2B:7C Authority key identifier: 03:A8:56:6C:80:31:F5:62:19:9D:F9:9D:9B:99:B9:C7:E7:19:F8:90 Certificate issuer: /CN=A911FA99/serialNumber=03A8566C8031F562199DF99D9B99B9C7E719F890 Certificate serial: 0B4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft Manifest number: 0B46 Signing time: Sat 14 Jun 2025 18:59:07 +0000 Manifest this update: Sat 14 Jun 2025 18:59:06 +0000 Manifest next update: Sat 21 Jun 2025 18:59:06 +0000 Files and hashes: 1: A6hWbIAx9WIZnfmdm5m5x-cZ-JA.crl (hash: Iv5sY8FEX22aJPslajAZJJ+80PYuJuxJqyEr1DKx1+o=) 2: 730BD0EC384011EAADE7134BC4F9AE02.roa (hash: EJy7DgILM8z1iO6xDPQ9fjq4rQed/FbUFf1TGO0uQ3M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.crl rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 18:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2894 (0xb4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FA99, serialNumber=03A8566C8031F562199DF99D9B99B9C7E719F890 Validity Not Before: Jun 14 18:59:06 2025 GMT Not After : Jun 21 18:59:06 2025 GMT Subject: CN=684dc67a-8844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:51:f0:2e:52:ba:4c:e3:b3:54:12:8a:85:3c: 26:18:76:ef:a0:3f:54:6e:e9:61:9f:0f:14:70:68: 7a:b5:5a:4b:d0:c8:20:d6:68:a9:e4:79:12:36:d8: 1c:01:b3:9e:af:1a:67:6e:dd:9d:59:62:78:ae:d6: 29:3b:03:8b:d2:85:ba:14:d8:0e:1f:6a:4e:d1:fb: f7:e7:f4:21:80:8b:37:0a:be:29:cd:d3:57:e6:e1: 55:42:86:f5:a0:ee:ee:a6:54:87:cc:49:9b:65:bc: f3:cc:de:78:f6:1b:6e:70:c3:70:48:c8:d4:cc:fc: 2d:03:77:02:7f:34:c1:af:0e:50:c7:5d:51:75:df: 55:df:10:9e:37:b1:9f:ca:c5:f1:f3:dd:28:70:10: 27:46:bf:1f:04:9d:6f:b4:c9:28:6b:d7:09:e3:70: e7:47:c1:4f:62:01:3e:d2:43:1a:5f:ca:b8:a1:c5: 71:9e:e1:d8:a9:0b:a5:b2:be:a9:51:3e:29:78:f2: 84:bb:b6:66:ad:5b:b5:43:50:e0:55:ff:88:da:ef: 55:45:10:b8:f6:bb:c9:fd:4d:a2:aa:72:5c:cf:6a: 5f:5b:6d:fc:65:40:8b:b3:53:14:e6:da:84:ce:a0: d7:1b:32:f0:51:fb:ba:73:13:94:fb:d7:6b:45:80: 4f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:6B:07:6D:8E:F5:50:EF:EE:76:87:B7:1B:49:83:B1:96:69:2B:7C X509v3 Authority Key Identifier: keyid:03:A8:56:6C:80:31:F5:62:19:9D:F9:9D:9B:99:B9:C7:E7:19:F8:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:00:2c:70:5d:3e:fc:bd:2d:b3:d3:07:71:f9:4c:89:78:1c: 19:23:65:46:ec:1b:ec:c6:5c:6b:41:8f:0e:3f:0b:6c:1c:eb: ec:f4:11:32:bb:be:48:e7:ab:77:58:5e:f8:9b:19:8f:c8:1e: fa:24:c6:42:83:10:b9:db:c6:5a:1b:a1:f8:10:2e:25:0c:5b: 4a:2b:11:60:b1:bb:b3:f8:e0:4e:a6:2e:4e:73:61:31:1f:e6: da:e5:a7:94:98:b9:e9:af:b5:00:03:40:6a:93:9f:7a:d8:ef: 06:41:07:43:b4:57:8f:12:d0:e2:61:7e:49:c0:9f:cf:5b:af: fe:8a:61:65:85:df:ad:33:fa:57:02:29:19:ad:1f:56:d9:75: c0:41:68:32:d4:a7:07:72:ad:6d:d1:67:9b:91:76:ba:b3:98: 65:01:74:d8:b4:8e:59:92:99:98:15:2e:a8:7e:a8:71:a4:ba: a9:00:38:f3:b2:66:35:82:73:45:b1:81:b4:04:49:81:52:6c: 09:ab:f9:cb:70:92:4b:e2:d8:23:6f:a1:28:c1:e0:f0:9e:6d: 98:93:1d:ea:a7:1e:d9:2e:dd:a4:64:2f:7c:dd:b1:21:b8:8d: bc:df:ca:cb:4c:57:c7:02:57:01:31:a0:46:77:10:c6:61:65: 3d:a1:29:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC04wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZBOTkxMTAvBgNVBAUTKDAzQTg1NjZDODAzMUY1NjIxOTlERjk5RDlCOTlCOUM3 RTcxOUY4OTAwHhcNMjUwNjE0MTg1OTA2WhcNMjUwNjIxMTg1OTA2WjAYMRYwFAYD VQQDEw02ODRkYzY3YS04ODQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlFHwLlK6TOOzVBKKhTwmGHbvoD9Ubulhnw8UcGh6tVpL0Mgg1mip5HkSNtgc AbOerxpnbt2dWWJ4rtYpOwOL0oW6FNgOH2pO0fv35/QhgIs3Cr4pzdNX5uFVQob1 oO7uplSHzEmbZbzzzN549htucMNwSMjUzPwtA3cCfzTBrw5Qx11Rdd9V3xCeN7Gf ysXx890ocBAnRr8fBJ1vtMkoa9cJ43DnR8FPYgE+0kMaX8q4ocVxnuHYqQulsr6p UT4pePKEu7ZmrVu1Q1DgVf+I2u9VRRC49rvJ/U2iqnJcz2pfW238ZUCLs1MU5tqE zqDXGzLwUfu6cxOU+9drRYBPUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM1rB22O 9VDv7naHtxtJg7GWaSt8MB8GA1UdIwQYMBaAFAOoVmyAMfViGZ35nZuZucfnGfiQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkE5OS8wNjAyM0M3NjM4 M0YxMUVBQUVFODk0NDVDNEY5QUUwMi9BNmhXYklBeDlXSVpuZm1kbTVtNXgtY1ot SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E2aFdiSUF4OVdJWm5mbWRtNW01eC1jWi1KQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkE5OS8wNjAyM0M3NjM4M0YxMUVBQUVFODk0NDVDNEY5QUUwMi9BNmhXYklBeDlX SVpuZm1kbTVtNXgtY1otSkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpACxwXT78vS2z0wdx+UyJeBwZI2VG7BvsxlxrQY8OPwtsHOvs9BEy u75I56t3WF74mxmPyB76JMZCgxC528ZaG6H4EC4lDFtKKxFgsbuz+OBOpi5Oc2Ex H+ba5aeUmLnpr7UAA0Bqk5962O8GQQdDtFePEtDiYX5JwJ/PW6/+imFlhd+tM/pX AikZrR9W2XXAQWgy1KcHcq1t0WebkXa6s5hlAXTYtI5ZkpmYFS6ofqhxpLqpADjz smY1gnNFsYG0BEmBUmwJq/nLcJJL4tgjb6EoweDwnm2Ykx3qpx7ZLt2kZC983bEh uI2838rLTFfHAlcBMaBGdxDGYWU9oSlG -----END CERTIFICATE-----Generated at Sun Jun 15 09:45:05 2025 by rpki-client