$ rpki-client -vvf rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/6PktayopMPClvq9TBEyF2OreHro.mft File: 6PktayopMPClvq9TBEyF2OreHro.mft (raw, json) Hash identifier: LXRmxB02bwOAoqO7h8TXYTJ6Xhb1urmLBoqM/6szeYs= Subject key identifier: C2:A7:09:03:A6:7D:8A:45:F9:F4:4A:1E:B2:0C:3D:92:BF:DC:90:62 Authority key identifier: E8:F9:2D:6B:2A:29:30:F0:A5:BE:AF:53:04:4C:85:D8:EA:DE:1E:BA Certificate issuer: /CN=A9129C87/serialNumber=E8F92D6B2A2930F0A5BEAF53044C85D8EADE1EBA Certificate serial: 043F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6PktayopMPClvq9TBEyF2OreHro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/6PktayopMPClvq9TBEyF2OreHro.mft Manifest number: 043B Signing time: Sun 15 Jun 2025 00:01:41 +0000 Manifest this update: Sun 15 Jun 2025 00:01:40 +0000 Manifest next update: Sun 22 Jun 2025 00:01:40 +0000 Files and hashes: 1: 6PktayopMPClvq9TBEyF2OreHro.crl (hash: M152j2olSJqCS5Eqj05cd3qSrowbWnj/UGtN7ZEK79k=) 2: 80A9DE56614C11EC9175DE54C4F9AE02.roa (hash: ygV29+CdpRjO1HlIMJ6Gkg3eEGxPeEnonRI3YwMUHgM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/6PktayopMPClvq9TBEyF2OreHro.crl rsync://rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/6PktayopMPClvq9TBEyF2OreHro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6PktayopMPClvq9TBEyF2OreHro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1087 (0x43f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129C87, serialNumber=E8F92D6B2A2930F0A5BEAF53044C85D8EADE1EBA Validity Not Before: Jun 15 00:01:40 2025 GMT Not After : Jun 22 00:01:40 2025 GMT Subject: CN=684e0d64-4b22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:17:33:26:02:44:fe:ef:c2:02:1e:3c:1e:d0: 4e:fe:33:f1:61:9b:b8:ff:f3:9a:e7:04:dc:77:23: 98:20:8a:f7:e1:28:e7:1d:73:66:62:dd:4d:eb:d0: 48:9b:db:71:06:91:48:da:81:41:75:6d:b5:3b:60: a4:23:de:82:2c:4a:8a:cf:fe:be:d9:c8:fd:4b:b3: 97:e5:66:9c:0f:12:b1:7b:df:0e:d6:b8:75:00:da: fe:ef:80:33:ac:92:31:c9:af:f1:2b:33:dd:c3:01: 7c:7e:b5:cd:41:32:20:65:f7:79:2b:8f:0a:73:d0: 0d:96:1a:d6:31:b5:c2:2a:2c:71:ee:8e:ea:e5:9e: 65:fc:76:e3:55:df:19:87:ae:a8:27:99:bf:8e:13: 79:e5:a1:70:e3:93:ae:a8:14:8a:d0:3a:e2:74:2e: fb:9c:d9:10:22:d1:e8:e3:59:4c:3e:91:51:3d:61: 0a:ff:7c:d8:7c:85:dc:6a:04:6e:9e:51:c5:ad:92: b3:6e:30:1a:d0:75:bf:4b:1b:6b:b7:06:4b:d2:61: ac:85:10:f0:ed:3a:fe:11:8b:39:3b:b7:2d:23:7a: b3:73:6d:e6:08:e7:bc:ef:04:c4:02:2f:3a:05:5b: 63:98:74:44:4c:8b:28:92:d2:82:c1:13:2a:64:0f: 75:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A7:09:03:A6:7D:8A:45:F9:F4:4A:1E:B2:0C:3D:92:BF:DC:90:62 X509v3 Authority Key Identifier: keyid:E8:F9:2D:6B:2A:29:30:F0:A5:BE:AF:53:04:4C:85:D8:EA:DE:1E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/6PktayopMPClvq9TBEyF2OreHro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6PktayopMPClvq9TBEyF2OreHro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/6PktayopMPClvq9TBEyF2OreHro.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:37:2c:e3:db:97:8c:d8:78:fb:44:ad:55:a5:71:74:56:34: ad:6a:0f:6c:1d:9d:5a:6c:cb:ce:4c:5f:e4:15:f9:d2:45:04: 5d:14:39:66:52:88:7d:85:f7:45:49:62:df:6f:f5:7b:59:ff: 77:5d:f5:af:13:74:56:5c:61:ab:59:0e:d6:df:bf:5a:5f:07: e0:1f:47:66:fd:8d:75:5d:e8:fd:46:59:11:89:15:74:7a:ce: 04:06:ae:85:5f:83:47:2d:c5:68:2b:74:00:9d:f5:ba:18:3e: d8:4d:98:84:da:3d:f9:93:85:75:d4:06:93:57:79:da:c9:22: fa:5f:40:3e:54:d6:2c:07:ef:9f:ee:66:4f:c8:f5:70:a4:c0: 7e:15:a7:24:9e:07:90:aa:c3:9e:2b:1d:3d:17:0d:cd:cc:48: 2d:7c:f3:62:2a:c1:ae:a2:0e:92:98:5c:64:1e:54:6a:bb:ee: e3:83:76:06:b9:e7:76:4b:1d:71:ae:5d:b2:d2:5b:0a:d1:5a: ec:2e:18:9c:b2:0a:80:a4:f9:98:30:a3:a4:0a:1b:76:82:d4: 45:c3:46:ce:eb:29:b4:c9:c8:d6:8e:d0:c2:20:44:20:b8:57: 6c:d3:1e:4d:e8:3f:ed:2e:6c:b9:b1:3d:3f:9d:a7:ea:eb:5c: 8a:c2:5c:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBD8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlDODcxMTAvBgNVBAUTKEU4RjkyRDZCMkEyOTMwRjBBNUJFQUY1MzA0NEM4NUQ4 RUFERTFFQkEwHhcNMjUwNjE1MDAwMTQwWhcNMjUwNjIyMDAwMTQwWjAYMRYwFAYD VQQDEw02ODRlMGQ2NC00YjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1RczJgJE/u/CAh48HtBO/jPxYZu4//Oa5wTcdyOYIIr34SjnHXNmYt1N69BI m9txBpFI2oFBdW21O2CkI96CLEqKz/6+2cj9S7OX5WacDxKxe98O1rh1ANr+74Az rJIxya/xKzPdwwF8frXNQTIgZfd5K48Kc9ANlhrWMbXCKixx7o7q5Z5l/HbjVd8Z h66oJ5m/jhN55aFw45OuqBSK0DridC77nNkQItHo41lMPpFRPWEK/3zYfIXcagRu nlHFrZKzbjAa0HW/SxtrtwZL0mGshRDw7Tr+EYs5O7ctI3qzc23mCOe87wTEAi86 BVtjmHRETIsoktKCwRMqZA91jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMKnCQOm fYpF+fRKHrIMPZK/3JBiMB8GA1UdIwQYMBaAFOj5LWsqKTDwpb6vUwRMhdjq3h66 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUM4Ny9GRDA4M0Y1ODVF RUQxMUVDOUE0OTZENTlDNEY5QUUwMi82UGt0YXlvcE1QQ2x2cTlUQkV5RjJPcmVI cm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZQa3RheW9wTVBDbHZxOVRCRXlGMk9yZUhyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OUM4Ny9GRDA4M0Y1ODVFRUQxMUVDOUE0OTZENTlDNEY5QUUwMi82UGt0YXlvcE1Q Q2x2cTlUQkV5RjJPcmVIcm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpNyzj25eM2Hj7RK1VpXF0VjStag9sHZ1abMvOTF/kFfnSRQRdFDlm Uoh9hfdFSWLfb/V7Wf93XfWvE3RWXGGrWQ7W379aXwfgH0dm/Y11Xej9RlkRiRV0 es4EBq6FX4NHLcVoK3QAnfW6GD7YTZiE2j35k4V11AaTV3naySL6X0A+VNYsB++f 7mZPyPVwpMB+FackngeQqsOeKx09Fw3NzEgtfPNiKsGuog6SmFxkHlRqu+7jg3YG ued2Sx1xrl2y0lsK0VrsLhicsgqApPmYMKOkCht2gtRFw0bO6ym0ycjWjtDCIEQg uFds0x5N6D/tLmy5sT0/nafq61yKwly7 -----END CERTIFICATE-----Generated at Mon Jun 16 15:59:41 2025 by rpki-client