$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft File: X60bOb5FVSYiBtGfWmabx7afcsg.mft (raw, json) Hash identifier: vgQxG84Q5baRkyohzHzKHVGx2N0eOPNluLVTMcDnQsg= Subject key identifier: 47:10:F9:A1:B8:0B:8A:AA:C6:ED:BE:0E:9C:C6:99:54:87:C9:4E:7D Authority key identifier: 5F:AD:1B:39:BE:45:55:26:22:06:D1:9F:5A:66:9B:C7:B6:9F:72:C8 Certificate issuer: /CN=A9173CE6/serialNumber=5FAD1B39BE4555262206D19F5A669BC7B69F72C8 Certificate serial: 0680 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X60bOb5FVSYiBtGfWmabx7afcsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft Manifest number: 067D Signing time: Fri 20 Jun 2025 22:06:19 +0000 Manifest this update: Fri 20 Jun 2025 22:06:19 +0000 Manifest next update: Fri 27 Jun 2025 22:06:19 +0000 Files and hashes: 1: X60bOb5FVSYiBtGfWmabx7afcsg.crl (hash: iQwvfjmfKM/bhZMZLVghdZQ/M9fDteXsK/lAXX56t0Q=) 2: C4245600E55A11ED98D38780C4F9AE02.roa (hash: yju+fZAWtM3RsMZrSlngexqtu4I3chkHV+7N/8ZbBdQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.crl rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X60bOb5FVSYiBtGfWmabx7afcsg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 22:06:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1664 (0x680) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173CE6, serialNumber=5FAD1B39BE4555262206D19F5A669BC7B69F72C8 Validity Not Before: Jun 20 22:06:19 2025 GMT Not After : Jun 27 22:06:19 2025 GMT Subject: CN=6855db5b-612a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:79:b6:7c:60:db:d1:1d:38:00:5e:3d:30:6b: 52:b4:58:f9:47:3d:75:61:33:f7:83:63:58:ea:ae: 71:ca:b0:bf:be:6d:21:09:40:f4:b8:61:09:c1:1e: 5d:f1:79:c7:10:b8:44:56:22:c4:15:ad:9d:be:58: b2:de:91:b2:68:96:0b:bf:aa:24:50:9a:bd:75:7e: e3:88:84:89:8f:25:57:70:53:6b:a0:a2:31:1e:33: 02:de:50:0f:f6:23:13:c4:77:67:a0:48:89:66:28: 6a:0a:e2:73:42:e7:b7:9b:72:fd:e2:30:cf:d9:91: 6c:1c:cb:ac:71:14:9d:e3:aa:44:68:58:c5:3a:3d: bf:53:f7:9c:ee:16:65:58:09:dc:e9:1b:4d:3d:bb: 76:fb:8d:b2:61:26:48:0a:1c:eb:d7:af:5e:b4:d0: a4:2d:93:6b:5d:f5:c1:99:93:1e:92:06:f1:dd:b1: 51:6b:ae:f4:60:e1:ed:2f:34:15:27:64:71:67:17: bb:57:b8:63:9b:26:af:db:6d:29:53:89:bc:b0:78: 60:6e:f0:81:7b:0b:03:d6:d6:25:ad:a9:12:4c:71: 42:46:03:fa:37:31:45:58:df:d6:e0:43:3d:37:74: 0d:05:c8:e0:d3:6a:3c:f7:ab:79:bc:5b:1e:e7:20: 0d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:10:F9:A1:B8:0B:8A:AA:C6:ED:BE:0E:9C:C6:99:54:87:C9:4E:7D X509v3 Authority Key Identifier: keyid:5F:AD:1B:39:BE:45:55:26:22:06:D1:9F:5A:66:9B:C7:B6:9F:72:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X60bOb5FVSYiBtGfWmabx7afcsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:c8:ae:29:90:50:14:fc:89:24:67:cf:8f:a3:80:31:3b:c5: 22:bb:6a:ed:a5:ff:9a:67:44:0f:ec:6d:26:d7:93:f0:3e:de: ae:be:66:59:8d:4f:9b:d7:d0:af:82:11:08:2a:0e:f3:52:52: 7a:91:2c:b0:23:25:b3:65:e9:2e:f1:85:a5:fc:64:32:bb:9b: 7e:f3:72:15:1f:f4:98:b8:0b:b7:59:75:6a:13:b8:3e:01:09: 44:c8:56:5a:fd:6f:0f:4a:a0:3d:17:f2:db:0b:e9:d1:a7:7d: ad:d6:de:c2:32:5b:1e:18:2f:28:1c:0b:21:89:ee:47:d9:9d: 8c:f7:18:7d:bf:1e:0d:f6:bb:4c:28:b7:5f:18:b9:c4:0c:f3: 21:17:d2:39:3c:8e:ac:da:0d:4b:91:47:52:8f:e5:4a:c1:4b: ab:f2:a3:2d:bb:60:07:5c:32:80:7c:75:ea:f3:ae:05:3f:7a: e1:4c:7b:9b:58:7c:e7:55:d1:ca:3e:37:95:6e:96:ed:66:f8: 3c:06:81:56:86:c9:7e:0a:51:3c:0d:b6:9f:60:a8:d5:a4:73: 70:b9:05:b9:a4:28:1a:db:44:36:cc:26:e0:68:79:98:3b:aa: a9:ab:59:8d:55:b6:1e:f5:e2:b3:cf:ed:49:23:cf:8f:90:b3: 1a:a9:8a:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNDRTYxMTAvBgNVBAUTKDVGQUQxQjM5QkU0NTU1MjYyMjA2RDE5RjVBNjY5QkM3 QjY5RjcyQzgwHhcNMjUwNjIwMjIwNjE5WhcNMjUwNjI3MjIwNjE5WjAYMRYwFAYD VQQDEw02ODU1ZGI1Yi02MTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsnm2fGDb0R04AF49MGtStFj5Rz11YTP3g2NY6q5xyrC/vm0hCUD0uGEJwR5d 8XnHELhEViLEFa2dvliy3pGyaJYLv6okUJq9dX7jiISJjyVXcFNroKIxHjMC3lAP 9iMTxHdnoEiJZihqCuJzQue3m3L94jDP2ZFsHMuscRSd46pEaFjFOj2/U/ec7hZl WAnc6RtNPbt2+42yYSZIChzr169etNCkLZNrXfXBmZMekgbx3bFRa670YOHtLzQV J2RxZxe7V7hjmyav220pU4m8sHhgbvCBewsD1tYlrakSTHFCRgP6NzFFWN/W4EM9 N3QNBcjg02o896t5vFse5yANuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEcQ+aG4 C4qqxu2+DpzGmVSHyU59MB8GA1UdIwQYMBaAFF+tGzm+RVUmIgbRn1pmm8e2n3LI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0NFNi8wM0EwMTc4NDdC RDAxMUVCODVBNjY5ODBDNEY5QUUwMi9YNjBiT2I1RlZTWWlCdEdmV21hYng3YWZj c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1g2MGJPYjVGVlNZaUJ0R2ZXbWFieDdhZmNzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0NFNi8wM0EwMTc4NDdCRDAxMUVCODVBNjY5ODBDNEY5QUUwMi9YNjBiT2I1RlZT WWlCdEdmV21hYng3YWZjc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcyK4pkFAU/IkkZ8+Po4AxO8Uiu2rtpf+aZ0QP7G0m15PwPt6uvmZZ jU+b19CvghEIKg7zUlJ6kSywIyWzZeku8YWl/GQyu5t+83IVH/SYuAu3WXVqE7g+ AQlEyFZa/W8PSqA9F/LbC+nRp32t1t7CMlseGC8oHAshie5H2Z2M9xh9vx4N9rtM KLdfGLnEDPMhF9I5PI6s2g1LkUdSj+VKwUur8qMtu2AHXDKAfHXq864FP3rhTHub WHznVdHKPjeVbpbtZvg8BoFWhsl+ClE8DbafYKjVpHNwuQW5pCga20Q2zCbgaHmY O6qpq1mNVbYe9eKzz+1JI8+PkLMaqYrw -----END CERTIFICATE-----Generated at Sat Jun 21 20:41:17 2025 by rpki-client