$ rpki-client -vvf rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.mft File: 2z39hs6_6u06rxXeruaWUjR0aik.mft (raw, json) Hash identifier: S04DXCtiNgMBdi7s2zYWb0V8eTiazTLM/u78FnYkH3w= Subject key identifier: B7:08:FA:0B:C3:FA:E4:F4:D3:D9:8A:94:01:91:B3:D0:80:BF:DC:36 Authority key identifier: DB:3D:FD:86:CE:BF:EA:ED:3A:AF:15:DE:AE:E6:96:52:34:74:6A:29 Certificate issuer: /CN=A9171BF0/serialNumber=DB3DFD86CEBFEAED3AAF15DEAEE6965234746A29 Certificate serial: 70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2z39hs6_6u06rxXeruaWUjR0aik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.mft Manifest number: 6F Signing time: Thu 19 Jun 2025 06:15:28 +0000 Manifest this update: Thu 19 Jun 2025 06:15:28 +0000 Manifest next update: Thu 26 Jun 2025 06:15:28 +0000 Files and hashes: 1: 2z39hs6_6u06rxXeruaWUjR0aik.crl (hash: KqD6+srqunhKioe10cOWCO1dV894HpVdO+fka/20kbc=) 2: 12004368A41611EFA0D7CD42C4F9AE02.roa (hash: 9YzGJkxen0bF7ZOSO15+u2xKU2H/RKyzN947mBYbnYU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.crl rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2z39hs6_6u06rxXeruaWUjR0aik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 06:15:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 112 (0x70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171BF0, serialNumber=DB3DFD86CEBFEAED3AAF15DEAEE6965234746A29 Validity Not Before: Jun 19 06:15:28 2025 GMT Not After : Jun 26 06:15:28 2025 GMT Subject: CN=6853ab00-206f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:71:cb:e1:5f:62:12:c1:fc:87:2b:87:ea:fb: de:64:46:65:99:2b:7b:6d:c4:48:bf:b2:b0:e1:f3: 59:f2:53:bf:65:c2:06:99:bd:6e:48:ac:1c:80:4a: c7:46:ee:99:81:2e:93:42:0e:1e:7c:cb:ca:6e:1a: ea:8f:6a:8f:66:3f:37:f5:10:91:de:a3:de:d8:16: e3:c3:b6:2b:7c:8c:48:e2:b9:b5:51:ce:22:95:23: ad:ef:eb:02:5e:1a:5a:c5:3f:d8:64:fd:43:0d:45: ef:db:ca:cc:25:dc:61:d9:12:1e:39:d6:b4:e7:d1: 11:c0:f9:ed:54:07:7f:38:2a:e8:78:e5:3e:d7:1d: 0c:eb:3a:c0:33:b0:f5:57:31:76:19:d1:24:4a:45: 1b:50:41:9e:75:dc:e9:7b:ad:5f:a9:8f:b3:d1:3c: 22:e6:f3:de:84:53:aa:77:98:01:ee:d5:7e:69:74: a5:73:e8:15:a4:61:bd:da:30:74:60:55:0b:7b:dc: 1e:3d:c8:96:c4:a8:86:0d:63:e8:5a:2f:ee:a8:09: 94:77:b3:37:8a:ab:9b:e4:c8:f5:32:4d:d1:71:56: 35:b1:2c:dc:cc:2c:ed:46:6c:d6:18:96:2d:61:73: 0f:b0:ec:16:c7:f4:fe:f8:26:b1:1d:c1:34:88:5b: 9b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:08:FA:0B:C3:FA:E4:F4:D3:D9:8A:94:01:91:B3:D0:80:BF:DC:36 X509v3 Authority Key Identifier: keyid:DB:3D:FD:86:CE:BF:EA:ED:3A:AF:15:DE:AE:E6:96:52:34:74:6A:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2z39hs6_6u06rxXeruaWUjR0aik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:a6:ab:92:f8:34:1f:1d:82:2e:6b:c5:f2:8a:ca:38:0f:85: 6b:ef:5e:7f:e4:3e:a0:8f:f7:1d:6b:cd:2a:f6:3f:f6:d6:b4: 43:54:0e:d5:97:9f:34:42:35:07:d8:24:68:17:92:77:82:1c: a5:4a:3e:83:d4:a5:78:4c:e9:e9:11:5e:bb:50:c9:dd:2a:54: e3:8b:4e:df:aa:cc:10:e6:bf:f6:dd:a7:77:57:fb:45:b5:bf: ec:0d:5c:bb:89:8b:92:19:c9:4e:0e:a0:7a:60:fc:b1:71:9a: fa:50:5f:6d:94:65:36:4f:54:1e:bf:5c:89:7c:42:46:59:6f: 5e:1c:2a:72:a6:8a:89:23:09:a9:38:f7:2a:46:6f:fa:5d:06: 00:f4:03:d2:af:eb:0c:80:0a:5b:67:3e:c4:3f:51:7b:6b:de: ff:28:9c:37:c1:59:a8:63:23:66:83:9a:fc:cc:03:54:54:81: 0f:48:8d:5a:ba:59:0c:38:7b:e4:3c:37:64:fc:a6:fb:1f:02: 77:ee:7e:e7:47:7a:1e:e8:af:c5:d1:40:38:35:e8:f5:10:db: b5:a9:f5:3a:9d:14:60:a7:8f:cb:8e:40:ef:92:e3:01:aa:22: 17:a1:a6:de:62:1a:19:b9:3f:4e:f6:12:ae:1a:6d:f0:0e:9c: b9:dd:63:f3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MUJGMDExMC8GA1UEBRMoREIzREZEODZDRUJGRUFFRDNBQUYxNURFQUVFNjk2NTIz NDc0NkEyOTAeFw0yNTA2MTkwNjE1MjhaFw0yNTA2MjYwNjE1MjhaMBgxFjAUBgNV BAMTDTY4NTNhYjAwLTIwNmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEccvhX2ISwfyHK4fq+95kRmWZK3ttxEi/srDh81nyU79lwgaZvW5IrByASsdG 7pmBLpNCDh58y8puGuqPao9mPzf1EJHeo97YFuPDtit8jEjiubVRziKVI63v6wJe GlrFP9hk/UMNRe/byswl3GHZEh451rTn0RHA+e1UB384Kuh45T7XHQzrOsAzsPVX MXYZ0SRKRRtQQZ513Ol7rV+pj7PRPCLm896EU6p3mAHu1X5pdKVz6BWkYb3aMHRg VQt73B49yJbEqIYNY+haL+6oCZR3szeKq5vkyPUyTdFxVjWxLNzMLO1GbNYYli1h cw+w7BbH9P74JrEdwTSIW5s5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUtwj6C8P6 5PTT2YqUAZGz0IC/3DYwHwYDVR0jBBgwFoAU2z39hs6/6u06rxXeruaWUjR0aikw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcxQkYwL0E3OEYxQjEyQTQx NTExRUZBMTRGQkQzRkM0RjlBRTAyLzJ6MzloczZfNnUwNnJ4WGVydWFXVWpSMGFp ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMnozOWhzNl82dTA2cnhYZXJ1YVdValIwYWlrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcx QkYwL0E3OEYxQjEyQTQxNTExRUZBMTRGQkQzRkM0RjlBRTAyLzJ6MzloczZfNnUw NnJ4WGVydWFXVWpSMGFpay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGGmq5L4NB8dgi5rxfKKyjgPhWvvXn/kPqCP9x1rzSr2P/bWtENUDtWX nzRCNQfYJGgXkneCHKVKPoPUpXhM6ekRXrtQyd0qVOOLTt+qzBDmv/bdp3dX+0W1 v+wNXLuJi5IZyU4OoHpg/LFxmvpQX22UZTZPVB6/XIl8QkZZb14cKnKmiokjCak4 9ypGb/pdBgD0A9Kv6wyACltnPsQ/UXtr3v8onDfBWahjI2aDmvzMA1RUgQ9IjVq6 WQw4e+Q8N2T8pvsfAnfufudHeh7or8XRQDg16PUQ27Wp9TqdFGCnj8uOQO+S4wGq Ihehpt5iGhm5P072Eq4abfAOnLndY/M= -----END CERTIFICATE-----Generated at Sat Jun 21 02:11:12 2025 by rpki-client