$ rpki-client -vvf rpki.apnic.net/member_repository/A9161099/FD367C700D0411EF85E46F55C4F9AE02/A6AuL12r8P85OGKLxP9fthZT8EU.mft File: A6AuL12r8P85OGKLxP9fthZT8EU.mft (raw, json) Hash identifier: GIwVYZawgseJ3YvvpLhczSHYNtNQMIMMI7Y71HYX7ig= Subject key identifier: 03:25:E2:00:0A:02:13:FE:00:3E:95:A9:8C:AB:DB:2A:B8:FF:7C:49 Authority key identifier: 03:A0:2E:2F:5D:AB:F0:FF:39:38:62:8B:C4:FF:5F:B6:16:53:F0:45 Certificate issuer: /CN=A9161099/serialNumber=03A02E2F5DABF0FF3938628BC4FF5FB61653F045 Certificate serial: FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6AuL12r8P85OGKLxP9fthZT8EU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161099/FD367C700D0411EF85E46F55C4F9AE02/A6AuL12r8P85OGKLxP9fthZT8EU.mft Manifest number: E6 Signing time: Sun 15 Jun 2025 04:47:58 +0000 Manifest this update: Sun 15 Jun 2025 04:47:58 +0000 Manifest next update: Sun 22 Jun 2025 04:47:58 +0000 Files and hashes: 1: A6AuL12r8P85OGKLxP9fthZT8EU.crl (hash: na7QQbM24w7W4bUiHYYYMvkhf+ACCvFxkpyvDMjWhX4=) 2: 4335BE9C0D0611EFA3ECB057C4F9AE02.roa (hash: 3QaIs0MEQTp5+WPYR1WYTiWl+pbfn1qVb0U7KbrgNTE=) 3: 42D4C3BC0D0611EFA3ECB057C4F9AE02.roa (hash: culo+SXGLXhoFYc+j6cile+BQd4b8OQlh1GlcQ7YkOs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161099/FD367C700D0411EF85E46F55C4F9AE02/A6AuL12r8P85OGKLxP9fthZT8EU.crl rsync://rpki.apnic.net/member_repository/A9161099/FD367C700D0411EF85E46F55C4F9AE02/A6AuL12r8P85OGKLxP9fthZT8EU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6AuL12r8P85OGKLxP9fthZT8EU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 04:47:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 250 (0xfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161099, serialNumber=03A02E2F5DABF0FF3938628BC4FF5FB61653F045 Validity Not Before: Jun 15 04:47:58 2025 GMT Not After : Jun 22 04:47:58 2025 GMT Subject: CN=684e507e-8568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:97:56:8c:37:68:71:d3:fa:f1:c5:09:7b:1a: 0d:47:f1:2a:e0:7b:15:67:13:f2:99:9e:a9:d7:96: a2:b8:e3:99:7c:50:a9:64:2f:8e:b6:c2:73:f7:29: b0:03:5f:6f:6a:a0:f3:1b:6d:d1:d7:cd:38:c6:d0: 10:80:d7:4c:01:e9:fc:72:25:43:74:48:85:61:88: a7:97:e6:ff:c4:7e:e7:92:ea:ad:65:03:59:b6:38: cc:72:5b:37:06:0f:31:b7:10:f3:62:5a:ee:3a:0e: 83:9c:70:e6:49:6c:57:d6:ed:9d:26:d7:11:30:8a: 20:43:71:bc:ea:98:db:54:da:68:36:83:2e:3f:66: ee:c9:c7:1e:f3:d6:e0:2c:f4:20:be:26:9a:11:00: 48:22:81:c3:f2:0f:06:87:88:d7:db:17:f7:2d:51: 98:15:ce:a3:0a:dd:2e:4e:80:98:a8:37:c4:c4:fc: 10:d2:e4:86:c9:9f:b2:32:b8:20:a8:4b:8f:46:b4: d4:fc:80:a3:38:f5:a2:bd:90:bd:65:0f:f1:2a:75: 74:76:43:04:c2:c3:05:f6:06:3c:90:b2:c1:6f:05: 6f:36:24:d1:19:bb:9e:11:89:40:98:31:fd:ba:e1: 0c:9d:4f:05:53:3b:ec:94:40:39:8f:b0:fa:07:f9: 35:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:25:E2:00:0A:02:13:FE:00:3E:95:A9:8C:AB:DB:2A:B8:FF:7C:49 X509v3 Authority Key Identifier: keyid:03:A0:2E:2F:5D:AB:F0:FF:39:38:62:8B:C4:FF:5F:B6:16:53:F0:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161099/FD367C700D0411EF85E46F55C4F9AE02/A6AuL12r8P85OGKLxP9fthZT8EU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6AuL12r8P85OGKLxP9fthZT8EU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161099/FD367C700D0411EF85E46F55C4F9AE02/A6AuL12r8P85OGKLxP9fthZT8EU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:14:54:70:2a:f1:cf:56:b7:38:82:09:0a:6a:63:00:42:5c: 6e:74:56:9d:a1:04:e3:f9:b5:49:91:8d:39:e9:e6:c8:27:d8: 3b:e0:6b:ee:ee:f4:16:0e:37:1e:f2:73:09:ab:01:24:ef:24: 56:75:f7:2c:b5:7f:4d:90:48:f7:0a:70:ff:43:4f:96:45:ec: a8:ce:57:03:52:a9:b4:9d:5c:bf:75:b6:8b:62:aa:09:18:ef: fb:dd:c8:e0:39:c7:85:33:17:e1:64:5c:24:6d:36:47:9b:14: 5a:9a:10:89:57:46:6b:bf:f6:9a:45:84:1e:db:41:4b:9e:10: e3:b9:a9:70:d4:17:30:84:f5:a2:1f:e1:1a:46:f8:b3:78:23: ed:52:07:07:5f:2b:57:51:f7:a3:da:44:f6:fa:e7:9a:71:41: fb:57:a4:7b:b4:67:8d:63:70:ef:cf:70:39:fd:76:7c:7e:85: e0:69:43:98:bc:4c:b1:28:bb:d1:fc:12:d2:99:c4:b5:99:ca: d7:54:73:3f:e0:5d:69:c5:64:e2:0d:43:2d:60:fa:37:5c:00: d5:c2:3e:5f:78:3c:02:43:ac:c4:5c:cb:20:d1:3c:53:5e:a0: 3b:88:64:c7:c6:70:76:e9:7b:3a:ba:45:45:bb:0c:e5:65:ab: 1a:79:4b:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjEwOTkxMTAvBgNVBAUTKDAzQTAyRTJGNURBQkYwRkYzOTM4NjI4QkM0RkY1RkI2 MTY1M0YwNDUwHhcNMjUwNjE1MDQ0NzU4WhcNMjUwNjIyMDQ0NzU4WjAYMRYwFAYD VQQDEw02ODRlNTA3ZS04NTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt5dWjDdocdP68cUJexoNR/Eq4HsVZxPymZ6p15aiuOOZfFCpZC+OtsJz9ymw A19vaqDzG23R1804xtAQgNdMAen8ciVDdEiFYYinl+b/xH7nkuqtZQNZtjjMcls3 Bg8xtxDzYlruOg6DnHDmSWxX1u2dJtcRMIogQ3G86pjbVNpoNoMuP2buycce89bg LPQgviaaEQBIIoHD8g8Gh4jX2xf3LVGYFc6jCt0uToCYqDfExPwQ0uSGyZ+yMrgg qEuPRrTU/ICjOPWivZC9ZQ/xKnV0dkMEwsMF9gY8kLLBbwVvNiTRGbueEYlAmDH9 uuEMnU8FUzvslEA5j7D6B/k1nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAMl4gAK AhP+AD6VqYyr2yq4/3xJMB8GA1UdIwQYMBaAFAOgLi9dq/D/OThii8T/X7YWU/BF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTA5OS9GRDM2N0M3MDBE MDQxMUVGODVFNDZGNTVDNEY5QUUwMi9BNkF1TDEycjhQODVPR0tMeFA5ZnRoWlQ4 RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E2QXVMMTJyOFA4NU9HS0x4UDlmdGhaVDhFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTA5OS9GRDM2N0M3MDBEMDQxMUVGODVFNDZGNTVDNEY5QUUwMi9BNkF1TDEycjhQ ODVPR0tMeFA5ZnRoWlQ4RVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByFFRwKvHPVrc4ggkKamMAQlxudFadoQTj+bVJkY056ebIJ9g74Gvu 7vQWDjce8nMJqwEk7yRWdfcstX9NkEj3CnD/Q0+WReyozlcDUqm0nVy/dbaLYqoJ GO/73cjgOceFMxfhZFwkbTZHmxRamhCJV0Zrv/aaRYQe20FLnhDjualw1BcwhPWi H+EaRvizeCPtUgcHXytXUfej2kT2+ueacUH7V6R7tGeNY3Dvz3A5/XZ8foXgaUOY vEyxKLvR/BLSmcS1mcrXVHM/4F1pxWTiDUMtYPo3XADVwj5feDwCQ6zEXMsg0TxT XqA7iGTHxnB26Xs6ukVFuwzlZasaeUsc -----END CERTIFICATE-----Generated at Mon Jun 16 17:08:48 2025 by rpki-client