$ rpki-client -vvf rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.mft File: dt6sBgRg9vilvVgpnFOryvmx01g.mft (raw, json) Hash identifier: vlUvr/ucpOtESdqjn+XrQXGNdbVWM17TpN8DBC/7FWQ= Subject key identifier: 4D:41:4A:C7:C9:EB:8A:6A:0C:6D:17:E3:2E:9C:E5:62:65:D8:D9:40 Authority key identifier: 76:DE:AC:06:04:60:F6:F8:A5:BD:58:29:9C:53:AB:CA:F9:B1:D3:58 Certificate issuer: /CN=A9171172/serialNumber=76DEAC060460F6F8A5BD58299C53ABCAF9B1D358 Certificate serial: 0787 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dt6sBgRg9vilvVgpnFOryvmx01g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.mft Manifest number: 077B Signing time: Fri 20 Jun 2025 21:20:36 +0000 Manifest this update: Fri 20 Jun 2025 21:20:36 +0000 Manifest next update: Fri 27 Jun 2025 21:20:36 +0000 Files and hashes: 1: dt6sBgRg9vilvVgpnFOryvmx01g.crl (hash: BhfBfgla7ccw2FNVS2RjKBiM9J9oU3hVWV0wtcfQio4=) 2: 0A94FC36198711EB80EAEF4CC4F9AE02.roa (hash: pSgSIQQUaLX2o2nTmQmGl/Qpmc9pAZuJpTvLRIL92IA=) 3: 6DEC60FC198811EBAD4C384FC4F9AE02.roa (hash: 00f5UezOFyyqRBMxbkiUS7o0hS0GGG4xnKYK/4mdm8c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.crl rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dt6sBgRg9vilvVgpnFOryvmx01g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 21:20:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1927 (0x787) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171172, serialNumber=76DEAC060460F6F8A5BD58299C53ABCAF9B1D358 Validity Not Before: Jun 20 21:20:36 2025 GMT Not After : Jun 27 21:20:36 2025 GMT Subject: CN=6855d0a4-f3d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:12:1b:5a:02:43:f7:e0:e8:00:87:79:39:b3: 62:b2:90:b6:74:68:c3:db:10:c7:18:63:47:dc:40: 1f:bd:eb:4e:ca:5e:c4:a0:19:d2:79:4b:eb:89:1c: 39:77:c2:05:fd:1c:fc:06:83:d6:7b:57:1c:26:92: 8f:4b:e0:a6:6b:bb:b8:40:2d:7b:d4:ae:0c:73:a3: 8c:d7:fc:b6:e0:df:c7:f8:2c:38:60:4f:ec:9e:51: 28:43:00:ae:ff:4c:10:9e:c0:00:89:f9:15:a8:12: fa:3e:9c:b2:8a:0b:f2:d2:c9:64:47:33:1f:42:73: bb:3b:98:16:f5:c8:4f:3c:50:4b:af:07:2b:70:2c: a2:c4:f4:d1:63:1f:5a:ef:da:8a:57:44:d3:fc:95: ba:29:1c:21:ac:c6:30:f3:b3:65:c1:f1:99:11:45: f5:f8:bc:02:4f:d4:a9:67:2c:a6:43:1b:b5:92:0b: ca:84:30:cc:2a:56:3a:31:83:80:2b:8c:3a:8b:31: 30:7f:b6:67:5e:82:86:de:e5:f9:f0:1c:74:4b:9b: ea:c4:a7:5c:45:6c:84:a8:f4:aa:f5:f4:2f:70:c8: 12:8d:5c:3e:05:de:9b:c1:e0:1b:f3:6c:7d:79:14: d6:a9:e4:17:ff:3e:4f:5e:2d:a8:5a:0d:8a:45:f1: ab:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:41:4A:C7:C9:EB:8A:6A:0C:6D:17:E3:2E:9C:E5:62:65:D8:D9:40 X509v3 Authority Key Identifier: keyid:76:DE:AC:06:04:60:F6:F8:A5:BD:58:29:9C:53:AB:CA:F9:B1:D3:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dt6sBgRg9vilvVgpnFOryvmx01g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:4d:69:9f:a7:8d:3d:e9:bf:79:b1:b6:d6:8a:1e:fe:4c:75: 62:42:2a:99:d0:84:9c:12:70:a4:fb:89:61:52:a6:12:6e:bb: 63:bc:2d:f5:e7:3b:36:fb:ef:c3:d2:7d:7b:ce:2e:1b:a7:5c: d3:ae:b3:d9:87:29:3f:7f:80:b8:6a:79:75:0a:20:68:5c:9f: a4:ad:58:06:6e:5c:1d:ac:88:3c:fd:91:dc:38:93:a0:17:50: a7:12:70:4b:20:a7:74:26:30:33:75:1a:fe:18:58:60:4b:be: e7:54:00:ef:2c:fd:f7:98:f5:f9:fb:71:80:04:fb:ef:cc:ce: 31:26:76:ca:5f:9f:38:d6:ad:3d:24:ea:fa:eb:c8:80:25:d6: 39:d4:77:43:f7:05:c2:1e:ba:9f:51:73:64:82:ad:ca:47:63: eb:6a:88:a1:10:06:f9:3d:7a:73:98:5a:e0:20:77:e4:85:69: e2:34:77:9b:dd:be:e1:8d:7b:b3:eb:f0:d1:64:24:40:3e:60: a8:ba:39:a9:3d:7a:a7:d9:5b:58:13:bc:74:4e:ce:e7:5a:b3: 74:6c:66:99:70:12:28:44:06:a0:cb:2f:26:2a:57:d4:27:b3: 56:fd:8e:a2:20:4a:97:b2:3b:08:67:21:ce:7d:71:d9:52:0d: 9e:b8:66:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzExNzIxMTAvBgNVBAUTKDc2REVBQzA2MDQ2MEY2RjhBNUJENTgyOTlDNTNBQkNB RjlCMUQzNTgwHhcNMjUwNjIwMjEyMDM2WhcNMjUwNjI3MjEyMDM2WjAYMRYwFAYD VQQDEw02ODU1ZDBhNC1mM2Q1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5RIbWgJD9+DoAId5ObNispC2dGjD2xDHGGNH3EAfvetOyl7EoBnSeUvriRw5 d8IF/Rz8BoPWe1ccJpKPS+Cma7u4QC171K4Mc6OM1/y24N/H+Cw4YE/snlEoQwCu /0wQnsAAifkVqBL6Ppyyigvy0slkRzMfQnO7O5gW9chPPFBLrwcrcCyixPTRYx9a 79qKV0TT/JW6KRwhrMYw87NlwfGZEUX1+LwCT9SpZyymQxu1kgvKhDDMKlY6MYOA K4w6izEwf7ZnXoKG3uX58Bx0S5vqxKdcRWyEqPSq9fQvcMgSjVw+Bd6bweAb82x9 eRTWqeQX/z5PXi2oWg2KRfGrawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE1BSsfJ 64pqDG0X4y6c5WJl2NlAMB8GA1UdIwQYMBaAFHberAYEYPb4pb1YKZxTq8r5sdNY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTE3Mi84MTU4M0FCRTE4 QkUxMUVCQUMxMERFNDZDNEY5QUUwMi9kdDZzQmdSZzl2aWx2VmdwbkZPcnl2bXgw MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2R0NnNCZ1JnOXZpbHZWZ3BuRk9yeXZteDAxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTE3Mi84MTU4M0FCRTE4QkUxMUVCQUMxMERFNDZDNEY5QUUwMi9kdDZzQmdSZzl2 aWx2VmdwbkZPcnl2bXgwMWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOTWmfp4096b95sbbWih7+THViQiqZ0IScEnCk+4lhUqYSbrtjvC31 5zs2++/D0n17zi4bp1zTrrPZhyk/f4C4anl1CiBoXJ+krVgGblwdrIg8/ZHcOJOg F1CnEnBLIKd0JjAzdRr+GFhgS77nVADvLP33mPX5+3GABPvvzM4xJnbKX5841q09 JOr668iAJdY51HdD9wXCHrqfUXNkgq3KR2PraoihEAb5PXpzmFrgIHfkhWniNHeb 3b7hjXuz6/DRZCRAPmCoujmpPXqn2VtYE7x0Ts7nWrN0bGaZcBIoRAagyy8mKlfU J7NW/Y6iIEqXsjsIZyHOfXHZUg2euGZf -----END CERTIFICATE-----Generated at Sat Jun 21 00:30:12 2025 by rpki-client