$ rpki-client -vvf rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/6bez7TFz3kD-TB_m2P5CucvpyDM.mft File: 6bez7TFz3kD-TB_m2P5CucvpyDM.mft (raw, json) Hash identifier: 8L4o8pdJ15hyPjfQyDG85U6YptmvMC2VXqNyMfX8iUI= Subject key identifier: DD:A9:34:24:2E:6D:4E:15:0C:4D:A0:08:60:D3:26:BB:EE:C8:C6:1B Authority key identifier: E9:B7:B3:ED:31:73:DE:40:FE:4C:1F:E6:D8:FE:42:B9:CB:E9:C8:33 Certificate issuer: /CN=A9137E12/serialNumber=E9B7B3ED3173DE40FE4C1FE6D8FE42B9CBE9C833 Certificate serial: 9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6bez7TFz3kD-TB_m2P5CucvpyDM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/6bez7TFz3kD-TB_m2P5CucvpyDM.mft Manifest number: 9B Signing time: Sun 15 Jun 2025 05:26:41 +0000 Manifest this update: Sun 15 Jun 2025 05:26:41 +0000 Manifest next update: Sun 22 Jun 2025 05:26:41 +0000 Files and hashes: 1: 6bez7TFz3kD-TB_m2P5CucvpyDM.crl (hash: ttX2X/aq9n1DKzYycxpcfJJTBAWj6Q+SK+BedEJhtec=) 2: 367EF0645F9B11EFB904A774C4F9AE02.roa (hash: 3W86JdspaifMIg33JDT0CjRhdsWrcUOOO2qpo/ordp4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/6bez7TFz3kD-TB_m2P5CucvpyDM.crl rsync://rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/6bez7TFz3kD-TB_m2P5CucvpyDM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6bez7TFz3kD-TB_m2P5CucvpyDM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 05:26:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 157 (0x9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137E12, serialNumber=E9B7B3ED3173DE40FE4C1FE6D8FE42B9CBE9C833 Validity Not Before: Jun 15 05:26:41 2025 GMT Not After : Jun 22 05:26:41 2025 GMT Subject: CN=684e5991-87b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:fb:96:e6:3d:3d:39:73:f3:aa:c4:90:b2:51: 2f:04:d5:5a:16:e2:33:7a:4c:da:77:99:c3:8a:d3: 44:c3:43:2b:c1:bd:e6:62:60:d8:68:c2:34:4d:5d: 25:e1:e8:8a:39:a4:ef:1e:44:fd:93:f5:56:3b:94: 1f:f5:07:0c:f0:d4:9b:55:78:8a:fa:51:45:0e:e6: a8:36:27:23:b9:79:41:67:9a:bc:2b:e8:61:cc:ad: 6e:98:a1:4f:eb:32:40:01:25:88:c6:40:9f:e3:9e: 66:58:e5:b7:54:26:b5:16:3c:61:5b:fd:cd:6e:19: f7:d5:82:72:54:d0:74:f0:05:fa:68:66:be:29:7c: 8a:55:36:7f:4d:27:d1:bd:a8:5b:dd:cc:f2:ff:be: 9c:74:3e:45:b4:3e:6c:50:bd:f7:2a:6a:b5:98:b3: b4:5f:82:54:96:d2:b8:12:67:22:d5:b1:a6:e2:c6: 33:a9:40:08:01:7a:f2:2e:5d:32:4c:7d:51:ef:f2: 47:35:b2:0b:7d:ef:ea:e0:c5:33:44:c6:16:93:cc: 55:36:9e:f7:16:e8:47:03:6f:a0:d6:0d:b6:d1:b6: 5f:ad:08:4c:a9:52:71:b1:10:0f:a8:f4:cd:5b:4a: 14:90:55:d2:6e:c1:0b:02:6c:f8:87:0d:a6:2e:15: 2f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:A9:34:24:2E:6D:4E:15:0C:4D:A0:08:60:D3:26:BB:EE:C8:C6:1B X509v3 Authority Key Identifier: keyid:E9:B7:B3:ED:31:73:DE:40:FE:4C:1F:E6:D8:FE:42:B9:CB:E9:C8:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/6bez7TFz3kD-TB_m2P5CucvpyDM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6bez7TFz3kD-TB_m2P5CucvpyDM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/6bez7TFz3kD-TB_m2P5CucvpyDM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:dd:d0:d0:e9:54:a4:b9:56:e7:6b:4c:69:6d:63:b2:f6:01: 27:96:b9:b2:04:14:89:f0:8d:d0:c8:4a:b2:ea:e5:b9:b3:bc: 3b:c3:c7:b7:3b:9b:99:ec:fa:95:17:df:ae:08:06:77:13:37: 20:58:8f:2c:88:fc:5f:4d:0b:c9:0c:4a:a7:4b:cd:e4:70:11: 76:b3:6d:63:59:3d:8e:89:53:0a:b3:0c:64:1e:af:b5:17:95: 5f:28:8d:70:fb:62:09:1c:7f:af:2d:2c:4e:85:ee:6e:a5:08: c8:c5:ca:db:ba:ed:bb:ba:29:cf:e4:43:51:95:a0:db:6f:8c: 3a:78:07:7a:e0:43:57:b6:45:d8:e7:1e:a9:b6:58:1f:3d:53: 1f:16:58:ae:77:52:4b:92:c0:6a:73:11:63:8d:d3:c2:14:aa: fb:f9:a1:0a:07:50:91:9f:8c:58:3d:a8:75:a7:2f:a4:bc:c7: b9:8e:15:5e:b7:ee:41:10:48:d6:ab:75:7e:39:fa:19:3b:84: 5c:f9:71:c6:de:7b:f3:3a:86:a9:d6:41:2c:b8:8e:18:7b:69: 66:b9:f4:12:9e:32:6f:53:ce:85:76:0b:59:35:f3:05:77:6a: 12:df:06:f2:63:c1:33:46:95:2e:d0:25:0a:f7:8f:bc:48:a8: 62:b2:30:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdFMTIxMTAvBgNVBAUTKEU5QjdCM0VEMzE3M0RFNDBGRTRDMUZFNkQ4RkU0MkI5 Q0JFOUM4MzMwHhcNMjUwNjE1MDUyNjQxWhcNMjUwNjIyMDUyNjQxWjAYMRYwFAYD VQQDEw02ODRlNTk5MS04N2I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4PuW5j09OXPzqsSQslEvBNVaFuIzekzad5nDitNEw0Mrwb3mYmDYaMI0TV0l 4eiKOaTvHkT9k/VWO5Qf9QcM8NSbVXiK+lFFDuaoNicjuXlBZ5q8K+hhzK1umKFP 6zJAASWIxkCf455mWOW3VCa1FjxhW/3Nbhn31YJyVNB08AX6aGa+KXyKVTZ/TSfR vahb3czy/76cdD5FtD5sUL33Kmq1mLO0X4JUltK4Emci1bGm4sYzqUAIAXryLl0y TH1R7/JHNbILfe/q4MUzRMYWk8xVNp73FuhHA2+g1g220bZfrQhMqVJxsRAPqPTN W0oUkFXSbsELAmz4hw2mLhUvoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN2pNCQu bU4VDE2gCGDTJrvuyMYbMB8GA1UdIwQYMBaAFOm3s+0xc95A/kwf5tj+QrnL6cgz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0UxMi9DNzI4MEYzNDVG OUExMUVGQjQ0MkJGNzNDNEY5QUUwMi82YmV6N1RGejNrRC1UQl9tMlA1Q3VjdnB5 RE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZiZXo3VEZ6M2tELVRCX20yUDVDdWN2cHlETS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz N0UxMi9DNzI4MEYzNDVGOUExMUVGQjQ0MkJGNzNDNEY5QUUwMi82YmV6N1RGejNr RC1UQl9tMlA1Q3VjdnB5RE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBq3dDQ6VSkuVbna0xpbWOy9gEnlrmyBBSJ8I3QyEqy6uW5s7w7w8e3 O5uZ7PqVF9+uCAZ3EzcgWI8siPxfTQvJDEqnS83kcBF2s21jWT2OiVMKswxkHq+1 F5VfKI1w+2IJHH+vLSxOhe5upQjIxcrbuu27uinP5ENRlaDbb4w6eAd64ENXtkXY 5x6ptlgfPVMfFliud1JLksBqcxFjjdPCFKr7+aEKB1CRn4xYPah1py+kvMe5jhVe t+5BEEjWq3V+OfoZO4Rc+XHG3nvzOoap1kEsuI4Ye2lmufQSnjJvU86FdgtZNfMF d2oS3wbyY8EzRpUu0CUK94+8SKhisjAp -----END CERTIFICATE-----Generated at Tue Jun 17 01:33:30 2025 by rpki-client