$ rpki-client -vvf rpki.apnic.net/member_repository/A9175762/C343692AB85111EB9F80A81CC4F9AE02/l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.mft File: l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.mft (raw, json) Hash identifier: BSsmvf24lbBnIliM3USpRzmUK/rygcHj9M/hJT0R/o4= Subject key identifier: E8:C1:06:49:77:BA:16:61:5D:17:CD:55:29:44:73:6D:05:89:34:4B Authority key identifier: 97:A1:26:25:6F:96:96:6E:D4:CA:E1:DE:DD:0E:F9:40:D3:00:07:A6 Certificate issuer: /CN=A9175762/serialNumber=97A126256F96966ED4CAE1DEDD0EF940D30007A6 Certificate serial: 05E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175762/C343692AB85111EB9F80A81CC4F9AE02/l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.mft Manifest number: 05E2 Signing time: Sat 14 Jun 2025 22:42:13 +0000 Manifest this update: Sat 14 Jun 2025 22:42:13 +0000 Manifest next update: Sat 21 Jun 2025 22:42:13 +0000 Files and hashes: 1: l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.crl (hash: xsZzPejaJqyHbGqzj3HOrjL4USHz52qKSRT/eLD67BI=) 2: 9DD99914B85311EBA5D4171FC4F9AE02.roa (hash: sA3Y6loeO+Du++cXdVYeey7TebrDsgcCCcYdqCjW+ns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175762/C343692AB85111EB9F80A81CC4F9AE02/l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.crl rsync://rpki.apnic.net/member_repository/A9175762/C343692AB85111EB9F80A81CC4F9AE02/l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 22:42:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1512 (0x5e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175762, serialNumber=97A126256F96966ED4CAE1DEDD0EF940D30007A6 Validity Not Before: Jun 14 22:42:13 2025 GMT Not After : Jun 21 22:42:13 2025 GMT Subject: CN=684dfac5-1d74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1a:da:97:78:20:93:d5:b7:06:c2:90:87:52: 9f:f7:e7:2b:76:21:bc:10:73:ff:3b:a5:1e:e4:3a: 57:db:64:3c:a0:76:85:3a:f6:b5:ef:9c:c6:03:26: 23:53:2c:60:b8:10:fb:4e:05:9a:ea:42:c2:5f:5b: 60:ea:ae:32:6c:d1:50:a1:67:8e:d3:3d:71:e7:1e: f5:8e:b4:fd:e7:32:9c:3f:35:c0:8e:cf:13:44:68: 97:a9:99:10:c4:69:b4:09:57:85:57:52:9f:10:27: ea:21:cb:be:da:2a:3f:f6:ea:f4:a6:49:db:a9:e5: ae:6e:0f:b5:ce:00:64:63:f0:0d:84:f9:6a:a8:08: ec:96:8b:38:d4:6c:ab:0c:be:e7:46:e4:e0:5c:88: 2c:3d:36:d9:24:f2:80:cc:b3:6c:31:3d:b7:97:f8: de:30:db:1b:f3:47:4f:47:ff:c2:95:0f:aa:15:5d: 0c:3d:31:6c:21:33:65:e2:37:33:50:dc:f4:49:91: 24:3b:b0:30:ae:1a:7b:e0:d2:b8:bc:2f:91:6e:bf: 80:e0:6c:da:c2:f4:24:06:d1:4f:02:c5:17:80:9b: a2:b4:06:6f:31:b5:86:a9:af:13:7a:0b:3c:f5:9f: 60:16:6b:1e:f4:2f:3b:fe:ad:2d:89:c4:f6:b9:eb: 82:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:C1:06:49:77:BA:16:61:5D:17:CD:55:29:44:73:6D:05:89:34:4B X509v3 Authority Key Identifier: keyid:97:A1:26:25:6F:96:96:6E:D4:CA:E1:DE:DD:0E:F9:40:D3:00:07:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175762/C343692AB85111EB9F80A81CC4F9AE02/l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175762/C343692AB85111EB9F80A81CC4F9AE02/l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:ca:70:16:c5:05:b5:28:33:ca:42:88:96:32:a6:04:93:12: 5e:b6:96:ba:3b:d0:8f:ba:7e:52:d6:d0:8e:11:78:53:32:e9: 44:02:4c:ab:2a:ef:73:44:4f:e7:47:34:2e:6e:f3:22:a4:52: 92:6e:f9:18:72:be:8d:40:8e:4f:49:e4:f7:a2:18:1f:5e:5a: f0:c3:82:ec:04:89:40:4c:60:03:3c:6d:e2:70:a1:f8:13:af: 8a:4d:e5:43:3b:f3:4e:51:45:b7:a7:25:cb:8b:ad:3b:46:a7: 52:61:78:85:6d:6c:24:b3:02:ed:af:7b:55:90:76:1c:e4:c1: 3f:4a:00:94:4d:df:82:b1:e1:03:6b:66:81:00:6a:93:ed:01: 3a:f3:7d:1e:5a:bd:31:29:e1:e5:e4:97:a2:c6:85:15:c0:d0: 39:ac:6c:77:97:e3:7e:96:75:fc:7d:06:99:8e:a1:26:d0:ea: eb:b3:e7:5f:3d:de:83:ed:df:df:bf:47:32:02:fe:e1:f1:d9: dd:98:1f:ee:d5:03:5f:68:8d:01:54:f3:b7:1a:5c:61:d3:e6: e8:f5:72:47:2e:72:89:cf:d1:5a:23:d3:2e:b0:e5:65:a1:22: 6b:6a:d2:b3:a0:48:3c:6f:14:44:0c:72:e5:b1:58:c2:5c:65: f8:58:f9:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU3NjIxMTAvBgNVBAUTKDk3QTEyNjI1NkY5Njk2NkVENENBRTFERUREMEVGOTQw RDMwMDA3QTYwHhcNMjUwNjE0MjI0MjEzWhcNMjUwNjIxMjI0MjEzWjAYMRYwFAYD VQQDEw02ODRkZmFjNS0xZDc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Bral3ggk9W3BsKQh1Kf9+crdiG8EHP/O6Ue5DpX22Q8oHaFOva175zGAyYj UyxguBD7TgWa6kLCX1tg6q4ybNFQoWeO0z1x5x71jrT95zKcPzXAjs8TRGiXqZkQ xGm0CVeFV1KfECfqIcu+2io/9ur0pknbqeWubg+1zgBkY/ANhPlqqAjslos41Gyr DL7nRuTgXIgsPTbZJPKAzLNsMT23l/jeMNsb80dPR//ClQ+qFV0MPTFsITNl4jcz UNz0SZEkO7Awrhp74NK4vC+Rbr+A4GzawvQkBtFPAsUXgJuitAZvMbWGqa8Tegs8 9Z9gFmse9C87/q0ticT2ueuCpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOjBBkl3 uhZhXRfNVSlEc20FiTRLMB8GA1UdIwQYMBaAFJehJiVvlpZu1Mrh3t0O+UDTAAem MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTc2Mi9DMzQzNjkyQUI4 NTExMUVCOUY4MEE4MUNDNEY5QUUwMi9sNkVtSlctV2xtN1V5dUhlM1E3NVFOTUFC NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w2RW1KVy1XbG03VXl1SGUzUTc1UU5NQUI2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTc2Mi9DMzQzNjkyQUI4NTExMUVCOUY4MEE4MUNDNEY5QUUwMi9sNkVtSlctV2xt N1V5dUhlM1E3NVFOTUFCNlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHynAWxQW1KDPKQoiWMqYEkxJetpa6O9CPun5S1tCOEXhTMulEAkyr Ku9zRE/nRzQubvMipFKSbvkYcr6NQI5PSeT3ohgfXlrww4LsBIlATGADPG3icKH4 E6+KTeVDO/NOUUW3pyXLi607RqdSYXiFbWwkswLtr3tVkHYc5ME/SgCUTd+CseED a2aBAGqT7QE6830eWr0xKeHl5JeixoUVwNA5rGx3l+N+lnX8fQaZjqEm0Orrs+df Pd6D7d/fv0cyAv7h8dndmB/u1QNfaI0BVPO3Glxh0+bo9XJHLnKJz9FaI9MusOVl oSJratKzoEg8bxREDHLlsVjCXGX4WPmm -----END CERTIFICATE-----Generated at Mon Jun 16 14:38:48 2025 by rpki-client