$ rpki-client -vvf rpki.apnic.net/member_repository/A9185456/052E2C48D46211EDA7DC6E51C4F9AE02/6yX--P-P_HFEQDc2nK2vr2zYklI.mft File: 6yX--P-P_HFEQDc2nK2vr2zYklI.mft (raw, json) Hash identifier: JOcQ4NoIvlGWXmxKsNtsWqBrEMevj8ZMKOxuFt51boo= Subject key identifier: 0E:ED:D0:E4:F6:A5:94:F8:6A:DB:67:19:6E:5F:9D:16:DA:7C:2A:EA Authority key identifier: EB:25:FE:F8:FF:8F:FC:71:44:40:37:36:9C:AD:AF:AF:6C:D8:92:52 Certificate issuer: /CN=A9185456/serialNumber=EB25FEF8FF8FFC71444037369CADAFAF6CD89252 Certificate serial: 01A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6yX--P-P_HFEQDc2nK2vr2zYklI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185456/052E2C48D46211EDA7DC6E51C4F9AE02/6yX--P-P_HFEQDc2nK2vr2zYklI.mft Manifest number: 01A0 Signing time: Sat 21 Jun 2025 02:37:19 +0000 Manifest this update: Sat 21 Jun 2025 02:37:19 +0000 Manifest next update: Sat 28 Jun 2025 02:37:19 +0000 Files and hashes: 1: 6yX--P-P_HFEQDc2nK2vr2zYklI.crl (hash: VkCBZYKF0gIpl8w4kegR/6xMI8SyR+P1xpquxXyN8Lg=) 2: 7E156BA0D46511EDBFC00C87C4F9AE02.roa (hash: FRRfK4hKeTw9lsBnsIsSbgs7rIXetSWQ2flb/qNJQ7k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185456/052E2C48D46211EDA7DC6E51C4F9AE02/6yX--P-P_HFEQDc2nK2vr2zYklI.crl rsync://rpki.apnic.net/member_repository/A9185456/052E2C48D46211EDA7DC6E51C4F9AE02/6yX--P-P_HFEQDc2nK2vr2zYklI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6yX--P-P_HFEQDc2nK2vr2zYklI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 02:37:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 420 (0x1a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185456, serialNumber=EB25FEF8FF8FFC71444037369CADAFAF6CD89252 Validity Not Before: Jun 21 02:37:19 2025 GMT Not After : Jun 28 02:37:19 2025 GMT Subject: CN=68561adf-8e14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:69:f3:9f:39:5a:de:85:33:dd:f4:86:43:95: 7f:a4:ac:39:1e:e2:52:41:84:dd:77:2a:cc:e7:95: 89:34:dc:94:02:a4:82:63:cb:bf:aa:0b:9a:2d:ac: 75:e4:cf:d5:d6:46:60:8e:fc:48:2f:4c:67:d2:e8: 7f:a3:b3:03:ac:04:e1:55:c9:9c:9e:3b:aa:e6:e9: 10:5f:d1:74:42:fe:0f:97:8a:f9:06:0b:a5:c0:88: 76:e3:93:2e:57:7d:48:27:c4:71:31:05:5b:9c:b2: aa:1f:f8:23:3b:1e:9d:dc:08:db:0f:83:7b:32:43: b6:6e:f3:3b:25:e8:07:f0:bd:56:d0:5e:d3:9c:f8: 40:2a:bb:57:e9:ce:8e:3f:9a:02:64:9f:bb:ee:2a: c9:0d:53:95:56:3e:6b:b8:f9:92:6b:20:78:b4:e6: 3d:20:f9:18:5c:d0:bd:ba:7f:5c:4e:e1:af:61:09: 66:f0:88:44:a5:af:a0:bf:88:58:15:c2:98:7a:56: 62:f1:d6:9f:7b:09:b8:07:83:c8:0f:30:15:be:a8: d4:d1:2a:e1:2c:f6:13:bc:13:52:76:80:61:62:56: c5:25:56:e9:74:4d:1d:da:54:12:2c:c7:81:3f:c0: e8:3f:a8:15:f1:f2:30:ab:89:20:20:2b:8a:2e:1a: 49:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:ED:D0:E4:F6:A5:94:F8:6A:DB:67:19:6E:5F:9D:16:DA:7C:2A:EA X509v3 Authority Key Identifier: keyid:EB:25:FE:F8:FF:8F:FC:71:44:40:37:36:9C:AD:AF:AF:6C:D8:92:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185456/052E2C48D46211EDA7DC6E51C4F9AE02/6yX--P-P_HFEQDc2nK2vr2zYklI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6yX--P-P_HFEQDc2nK2vr2zYklI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185456/052E2C48D46211EDA7DC6E51C4F9AE02/6yX--P-P_HFEQDc2nK2vr2zYklI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:62:12:9f:7e:ab:f2:87:6a:49:46:58:17:6b:37:f7:a9:4e: 4e:5b:02:94:dc:10:1f:a2:d2:79:c5:7f:9b:26:40:6d:d4:16: 78:47:e7:e0:d1:6b:ba:53:87:25:c8:27:da:c6:61:f0:4a:b3: 22:14:7e:b8:7c:78:89:9a:98:47:ba:d2:20:09:c5:06:f2:a7: 2e:2b:2f:1d:8a:bc:50:49:64:07:dd:32:ae:e9:e7:4c:5a:e3: 00:d8:d4:16:2d:ed:fa:ca:b7:41:7b:33:7b:cb:d4:89:c9:33: b7:80:76:8a:a4:34:2d:e5:1a:89:28:2b:0e:f2:65:f7:ab:ff: a2:f5:88:e1:f7:7a:38:e8:aa:6e:6e:c3:56:78:e3:f3:ee:51: ef:c4:2d:60:df:b3:08:6b:1d:2f:35:c7:91:b6:fd:73:f2:de: 1e:04:e1:59:76:18:ee:0b:2c:5a:c2:2e:fe:08:ab:8b:4f:73: b3:48:f5:74:d6:a9:5e:89:21:9c:f0:8a:a0:37:26:db:31:07: 8d:38:8c:e0:03:9e:57:20:5f:f1:80:26:c1:68:dc:12:bc:ca: 44:80:68:cf:83:b3:af:6e:0e:11:3f:83:e9:83:f8:e0:f3:43: 07:b4:67:c4:d1:aa:32:c8:75:6c:79:89:88:cc:05:76:a6:6c: 5c:6c:84:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU0NTYxMTAvBgNVBAUTKEVCMjVGRUY4RkY4RkZDNzE0NDQwMzczNjlDQURBRkFG NkNEODkyNTIwHhcNMjUwNjIxMDIzNzE5WhcNMjUwNjI4MDIzNzE5WjAYMRYwFAYD VQQDEw02ODU2MWFkZi04ZTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Wnznzla3oUz3fSGQ5V/pKw5HuJSQYTddyrM55WJNNyUAqSCY8u/qguaLax1 5M/V1kZgjvxIL0xn0uh/o7MDrAThVcmcnjuq5ukQX9F0Qv4Pl4r5BgulwIh245Mu V31IJ8RxMQVbnLKqH/gjOx6d3AjbD4N7MkO2bvM7JegH8L1W0F7TnPhAKrtX6c6O P5oCZJ+77irJDVOVVj5ruPmSayB4tOY9IPkYXNC9un9cTuGvYQlm8IhEpa+gv4hY FcKYelZi8dafewm4B4PIDzAVvqjU0SrhLPYTvBNSdoBhYlbFJVbpdE0d2lQSLMeB P8DoP6gV8fIwq4kgICuKLhpJfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA7t0OT2 pZT4attnGW5fnRbafCrqMB8GA1UdIwQYMBaAFOsl/vj/j/xxREA3Npytr69s2JJS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTQ1Ni8wNTJFMkM0OEQ0 NjIxMUVEQTdEQzZFNTFDNEY5QUUwMi82eVgtLVAtUF9IRkVRRGMybksydnIyellr bEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ5WC0tUC1QX0hGRVFEYzJuSzJ2cjJ6WWtsSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTQ1Ni8wNTJFMkM0OEQ0NjIxMUVEQTdEQzZFNTFDNEY5QUUwMi82eVgtLVAtUF9I RkVRRGMybksydnIyellrbEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1YhKffqvyh2pJRlgXazf3qU5OWwKU3BAfotJ5xX+bJkBt1BZ4R+fg 0Wu6U4clyCfaxmHwSrMiFH64fHiJmphHutIgCcUG8qcuKy8dirxQSWQH3TKu6edM WuMA2NQWLe36yrdBezN7y9SJyTO3gHaKpDQt5RqJKCsO8mX3q/+i9Yjh93o46Kpu bsNWeOPz7lHvxC1g37MIax0vNceRtv1z8t4eBOFZdhjuCyxawi7+CKuLT3OzSPV0 1qleiSGc8IqgNybbMQeNOIzgA55XIF/xgCbBaNwSvMpEgGjPg7Ovbg4RP4Ppg/jg 80MHtGfE0aoyyHVseYmIzAV2pmxcbIQ8 -----END CERTIFICATE-----Generated at Sun Jun 22 08:54:25 2025 by rpki-client