$ rpki-client -vvf rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.mft File: ET6g_81su3s89UWrzSyWLYbh7LA.mft (raw, json) Hash identifier: r2DJD15WeYXosMmJZo7CfXqZOUh01+hZ4nuBbjFMa6A= Subject key identifier: B1:DE:D8:E0:22:05:A1:44:82:72:89:6C:94:05:1C:73:13:B6:E5:53 Authority key identifier: 11:3E:A0:FF:CD:6C:BB:7B:3C:F5:45:AB:CD:2C:96:2D:86:E1:EC:B0 Certificate issuer: /CN=A915C6B7/serialNumber=113EA0FFCD6CBB7B3CF545ABCD2C962D86E1ECB0 Certificate serial: 0BCC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ET6g_81su3s89UWrzSyWLYbh7LA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.mft Manifest number: 0BC4 Signing time: Thu 12 Jun 2025 18:43:00 +0000 Manifest this update: Thu 12 Jun 2025 18:42:59 +0000 Manifest next update: Thu 19 Jun 2025 18:42:59 +0000 Files and hashes: 1: ET6g_81su3s89UWrzSyWLYbh7LA.crl (hash: c/t5GS3duGJw6mrP5pTw12YB9VpviXBN7jruAogVpaw=) 2: 69683D8CC64D11EABD8FD32DC4F9AE02.roa (hash: ndk7WBwAom+jNCFlVWgXYFCEOWN+x873QVE3wv4MHH8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.crl rsync://rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ET6g_81su3s89UWrzSyWLYbh7LA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 18:42:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3020 (0xbcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C6B7, serialNumber=113EA0FFCD6CBB7B3CF545ABCD2C962D86E1ECB0 Validity Not Before: Jun 12 18:42:59 2025 GMT Not After : Jun 19 18:42:59 2025 GMT Subject: CN=684b1fb3-dcee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:53:64:78:f8:25:00:d8:17:ba:b8:a6:a3:75: bc:23:8f:b3:d4:5e:86:71:e1:1a:68:c2:f8:65:5a: 29:b6:71:ea:b1:69:be:d1:35:15:95:d4:c3:d0:c8: a2:87:30:70:4f:7f:bf:0f:5e:9d:38:de:4e:01:bd: 5d:db:d6:7a:8b:f3:39:d1:a9:22:47:8f:3f:8d:fc: ea:04:72:e7:b3:cb:74:da:f3:01:61:9c:73:1a:ec: b1:a6:e2:d7:6b:06:8d:6a:a2:1c:88:5f:39:18:0e: d5:8d:62:11:d8:b0:4e:4f:11:5b:51:85:15:87:ad: 7b:95:29:7d:e4:37:5d:20:5e:86:03:06:bb:1c:cb: f8:38:ee:9f:30:b9:62:70:6c:21:d8:17:28:d3:ea: 23:af:89:3c:df:65:4e:7f:ec:fd:37:37:3d:09:d9: a4:cd:13:35:70:f5:2c:c6:bc:a1:7b:b9:82:12:1d: 4d:ad:ab:48:d4:db:a5:5b:58:a7:69:e3:8b:01:26: 6e:14:f7:bc:ef:8f:c7:93:86:f9:7a:db:a5:63:0d: f5:41:07:62:15:51:e1:f3:ed:32:30:45:9a:00:b9: 68:47:9b:74:07:61:22:15:ae:0e:32:7c:f8:ef:de: 13:5e:80:80:83:0a:bb:b4:80:9b:7a:5f:45:1c:5f: f0:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:DE:D8:E0:22:05:A1:44:82:72:89:6C:94:05:1C:73:13:B6:E5:53 X509v3 Authority Key Identifier: keyid:11:3E:A0:FF:CD:6C:BB:7B:3C:F5:45:AB:CD:2C:96:2D:86:E1:EC:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ET6g_81su3s89UWrzSyWLYbh7LA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:62:72:2a:83:df:6e:6a:cb:2e:f4:d9:50:83:83:ea:dc:d1: 17:e5:bd:97:b8:d7:37:75:eb:02:9a:47:46:7f:48:45:a4:91: 50:70:e0:8b:f0:b3:37:1d:d4:92:21:c3:3f:b2:b3:54:1e:ab: 11:84:d5:1d:4d:81:fb:50:b1:c2:9d:90:6c:c5:53:80:67:57: aa:81:86:b2:ec:30:fc:2f:f2:26:8c:28:93:a0:96:19:19:52: 12:67:39:6d:54:50:d5:9c:10:cf:ef:51:f5:07:e6:20:56:e2: 5b:5c:86:3f:87:2d:83:68:79:8e:d0:be:27:c5:4c:34:7f:a4: 25:74:3b:48:49:f8:af:d6:89:6c:fa:e5:35:89:70:28:37:95: dc:b8:30:eb:70:28:e6:0b:1f:c3:c9:66:ed:18:18:36:c8:1d: 23:2d:93:6f:18:ff:1e:0a:64:85:da:54:1f:5d:16:6f:b4:4f: 73:00:03:e1:ff:14:0c:33:36:45:dd:70:85:49:b6:2c:a8:c2: a2:d6:d7:a9:fa:f8:1f:aa:af:f8:be:99:d8:97:2a:f6:92:f7: 83:88:64:76:65:98:ab:8f:dc:9d:54:e3:bf:52:15:e2:b8:04: 20:a2:50:a2:9b:17:9b:4e:b0:32:79:6b:7e:50:1b:94:5a:21: a7:46:55:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUM2QjcxMTAvBgNVBAUTKDExM0VBMEZGQ0Q2Q0JCN0IzQ0Y1NDVBQkNEMkM5NjJE ODZFMUVDQjAwHhcNMjUwNjEyMTg0MjU5WhcNMjUwNjE5MTg0MjU5WjAYMRYwFAYD VQQDEw02ODRiMWZiMy1kY2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1NkePglANgXurimo3W8I4+z1F6GceEaaML4ZVoptnHqsWm+0TUVldTD0Mii hzBwT3+/D16dON5OAb1d29Z6i/M50akiR48/jfzqBHLns8t02vMBYZxzGuyxpuLX awaNaqIciF85GA7VjWIR2LBOTxFbUYUVh617lSl95DddIF6GAwa7HMv4OO6fMLli cGwh2Bco0+ojr4k832VOf+z9Nzc9CdmkzRM1cPUsxryhe7mCEh1NratI1NulW1in aeOLASZuFPe874/Hk4b5etulYw31QQdiFVHh8+0yMEWaALloR5t0B2EiFa4OMnz4 794TXoCAgwq7tICbel9FHF/wywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLHe2OAi BaFEgnKJbJQFHHMTtuVTMB8GA1UdIwQYMBaAFBE+oP/NbLt7PPVFq80sli2G4eyw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzZCNy84MDI1REQ3QTFF RjcxMUVBQUQ0NDQ5NUJDNEY5QUUwMi9FVDZnXzgxc3Uzczg5VVdyelN5V0xZYmg3 TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VUNmdfODFzdTNzODlVV3J6U3lXTFliaDdMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzZCNy84MDI1REQ3QTFFRjcxMUVBQUQ0NDQ5NUJDNEY5QUUwMi9FVDZnXzgxc3Uz czg5VVdyelN5V0xZYmg3TEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLYnIqg99uassu9NlQg4Pq3NEX5b2XuNc3desCmkdGf0hFpJFQcOCL 8LM3HdSSIcM/srNUHqsRhNUdTYH7ULHCnZBsxVOAZ1eqgYay7DD8L/ImjCiToJYZ GVISZzltVFDVnBDP71H1B+YgVuJbXIY/hy2DaHmO0L4nxUw0f6QldDtISfiv1ols +uU1iXAoN5XcuDDrcCjmCx/DyWbtGBg2yB0jLZNvGP8eCmSF2lQfXRZvtE9zAAPh /xQMMzZF3XCFSbYsqMKi1tep+vgfqq/4vpnYlyr2kveDiGR2ZZirj9ydVOO/UhXi uAQgolCimxebTrAyeWt+UBuUWiGnRlXP -----END CERTIFICATE-----Generated at Sat Jun 14 19:19:49 2025 by rpki-client