$ rpki-client -vvf rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.mft File: 2tXg1z0FSml7IoOa8fpKzZT1Cho.mft (raw, json) Hash identifier: MLEnGnf8MQzYHKTD7fQOI9wm4ZbBhZ8zHyDcAuq6heI= Subject key identifier: 6A:99:72:B6:09:D6:83:DD:A3:CB:A9:B6:6C:7A:90:61:0A:6D:8B:90 Authority key identifier: DA:D5:E0:D7:3D:05:4A:69:7B:22:83:9A:F1:FA:4A:CD:94:F5:0A:1A Certificate issuer: /CN=A9184F65/serialNumber=DAD5E0D73D054A697B22839AF1FA4ACD94F50A1A Certificate serial: CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2tXg1z0FSml7IoOa8fpKzZT1Cho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.mft Manifest number: C6 Signing time: Sun 15 Jun 2025 04:58:15 +0000 Manifest this update: Sun 15 Jun 2025 04:58:15 +0000 Manifest next update: Sun 22 Jun 2025 04:58:15 +0000 Files and hashes: 1: 2tXg1z0FSml7IoOa8fpKzZT1Cho.crl (hash: s4IKS1dELQ6eJqohWjEtZ2DW3HssPlgO3ddwacbYgCU=) 2: 6923942E252711EF948A5E18C4F9AE02.roa (hash: 0x0eSzOxBYHAqof1oT5c9wIXASU8irda6T6qsynIr4E=) 3: 9F0B162A252C11EFB58A7552C4F9AE02.roa (hash: recSAfAQrqtQaEHIzSjruotoH+IobzT5ObtgaKvqx8U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.crl rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2tXg1z0FSml7IoOa8fpKzZT1Cho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 206 (0xce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184F65, serialNumber=DAD5E0D73D054A697B22839AF1FA4ACD94F50A1A Validity Not Before: Jun 15 04:58:15 2025 GMT Not After : Jun 22 04:58:15 2025 GMT Subject: CN=684e52e7-6420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8b:df:b6:66:90:4b:81:99:45:ac:9e:f0:d5: 3e:eb:97:4b:2c:77:7d:e2:0b:dc:a5:2d:79:06:34: 47:6b:f9:7a:a6:fd:44:6f:21:8a:9b:52:34:45:00: 78:1a:a1:37:61:90:c9:51:cc:a8:37:cf:6d:ec:27: 56:91:d8:f2:2d:40:25:06:fe:ba:c9:db:18:d9:a5: f8:35:71:67:00:22:d6:eb:93:3c:40:8a:18:cc:ff: b1:d6:fd:48:71:32:8b:fe:76:51:b5:07:36:f2:45: 48:e5:a2:ec:10:57:10:be:f4:50:5c:91:0a:35:a6: 12:d1:85:18:86:23:11:e2:b5:17:cd:41:43:8a:b6: d5:6c:50:0f:f1:8a:1a:1c:00:10:27:cd:d1:8e:11: 42:a4:76:24:20:59:dd:e1:dd:aa:4a:1f:05:d0:45: 6b:f6:9a:25:54:b6:94:84:e0:c1:e6:af:98:f6:01: a7:74:b8:cb:b3:cf:4c:b8:f9:8c:53:ab:05:e8:02: 68:70:53:79:6b:14:81:ff:0b:83:17:35:55:e5:0c: 11:9b:df:ee:10:50:48:ab:a0:cb:d6:00:73:7d:b0: 4a:30:7e:c2:a4:27:77:fb:73:1e:73:48:35:81:7d: 00:20:0b:53:af:d5:e1:7a:77:f8:6a:7e:1c:35:f1: 43:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:99:72:B6:09:D6:83:DD:A3:CB:A9:B6:6C:7A:90:61:0A:6D:8B:90 X509v3 Authority Key Identifier: keyid:DA:D5:E0:D7:3D:05:4A:69:7B:22:83:9A:F1:FA:4A:CD:94:F5:0A:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2tXg1z0FSml7IoOa8fpKzZT1Cho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:b7:80:1d:bc:21:b0:8e:44:06:e6:de:a1:9c:cb:78:7c:bd: c9:4d:d1:8c:8f:42:46:64:15:da:d7:e9:44:c4:1a:14:75:ac: d3:04:19:4e:72:14:c1:fb:31:fd:3c:5b:3d:70:0e:d6:83:3b: 4f:7e:19:b6:3a:54:33:38:71:96:fa:cb:33:76:65:27:96:ca: 9b:eb:39:f4:dd:62:51:ac:36:c7:06:17:b5:13:99:96:86:91: e3:d0:f4:82:fa:99:3e:57:12:0e:8b:47:03:24:5b:ca:71:5e: ec:ad:0d:a0:db:3c:c2:b8:79:46:8e:bf:17:42:31:44:85:55: fc:0b:c6:60:b7:a1:f5:2c:47:5d:c3:32:fa:33:f9:16:c0:12: 77:4a:f6:ea:4d:19:bf:47:68:4b:3a:37:fc:63:ba:b3:8d:ca: 7c:f0:64:cb:b5:9a:5d:8e:9e:e0:ee:b1:e5:42:75:5f:4a:42: 86:cf:ae:2d:36:07:53:73:06:ab:e4:e2:c5:22:1b:ae:3f:02: a1:aa:76:ad:b5:4c:7d:10:3e:79:da:0a:01:ce:74:c6:6b:26: 3a:33:32:b7:bb:dc:8d:6d:07:66:2d:ed:2e:07:17:9a:ae:cd: 1a:51:3e:63:72:5f:31:84:0a:c6:6e:23:8a:38:ba:c6:f5:9a: 98:f7:15:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODRGNjUxMTAvBgNVBAUTKERBRDVFMEQ3M0QwNTRBNjk3QjIyODM5QUYxRkE0QUNE OTRGNTBBMUEwHhcNMjUwNjE1MDQ1ODE1WhcNMjUwNjIyMDQ1ODE1WjAYMRYwFAYD VQQDEw02ODRlNTJlNy02NDIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoYvftmaQS4GZRaye8NU+65dLLHd94gvcpS15BjRHa/l6pv1EbyGKm1I0RQB4 GqE3YZDJUcyoN89t7CdWkdjyLUAlBv66ydsY2aX4NXFnACLW65M8QIoYzP+x1v1I cTKL/nZRtQc28kVI5aLsEFcQvvRQXJEKNaYS0YUYhiMR4rUXzUFDirbVbFAP8Yoa HAAQJ83RjhFCpHYkIFnd4d2qSh8F0EVr9polVLaUhODB5q+Y9gGndLjLs89MuPmM U6sF6AJocFN5axSB/wuDFzVV5QwRm9/uEFBIq6DL1gBzfbBKMH7CpCd3+3Mec0g1 gX0AIAtTr9Xhenf4an4cNfFD0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGqZcrYJ 1oPdo8uptmx6kGEKbYuQMB8GA1UdIwQYMBaAFNrV4Nc9BUppeyKDmvH6Ss2U9Qoa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NEY2NS9BQzYzQURDNjI1 MjQxMUVGODJBOTVCNzRDNEY5QUUwMi8ydFhnMXowRlNtbDdJb09hOGZwS3paVDFD aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ0WGcxejBGU21sN0lvT2E4ZnBLelpUMUNoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NEY2NS9BQzYzQURDNjI1MjQxMUVGODJBOTVCNzRDNEY5QUUwMi8ydFhnMXowRlNt bDdJb09hOGZwS3paVDFDaG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqt4AdvCGwjkQG5t6hnMt4fL3JTdGMj0JGZBXa1+lExBoUdazTBBlO chTB+zH9PFs9cA7WgztPfhm2OlQzOHGW+sszdmUnlsqb6zn03WJRrDbHBhe1E5mW hpHj0PSC+pk+VxIOi0cDJFvKcV7srQ2g2zzCuHlGjr8XQjFEhVX8C8Zgt6H1LEdd wzL6M/kWwBJ3SvbqTRm/R2hLOjf8Y7qzjcp88GTLtZpdjp7g7rHlQnVfSkKGz64t NgdTcwar5OLFIhuuPwKhqnattUx9ED552goBznTGayY6MzK3u9yNbQdmLe0uBxea rs0aUT5jcl8xhArGbiOKOLrG9ZqY9xVm -----END CERTIFICATE-----Generated at Sun Jun 15 09:38:21 2025 by rpki-client