$ rpki-client -vvf rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.mft File: p6JnToSEYDkgd5o1LFWATlU2UBQ.mft (raw, json) Hash identifier: 1qa+akOfrCHoJ4Qv1WnES2DTq6iKPA4SZnI0OZxT35I= Subject key identifier: BF:65:74:9E:30:19:5C:51:0C:F4:76:C0:DB:6D:AE:8D:C5:EF:D1:96 Authority key identifier: A7:A2:67:4E:84:84:60:39:20:77:9A:35:2C:55:80:4E:55:36:50:14 Certificate issuer: /CN=A9185CF3/serialNumber=A7A2674E8484603920779A352C55804E55365014 Certificate serial: 0BC0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6JnToSEYDkgd5o1LFWATlU2UBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.mft Manifest number: 0BB9 Signing time: Sat 14 Jun 2025 18:47:05 +0000 Manifest this update: Sat 14 Jun 2025 18:47:05 +0000 Manifest next update: Sat 21 Jun 2025 18:47:05 +0000 Files and hashes: 1: p6JnToSEYDkgd5o1LFWATlU2UBQ.crl (hash: 2ggDUDJrSz4hPuJiNolt21qIodSaR88gks1MNMQh70s=) 2: 53B6182C213611EAB9F02B49C4F9AE02.roa (hash: RvdTnjVHgMOyaT2D6NI7RBOs0ab70zz7muos4KwEa2g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.crl rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6JnToSEYDkgd5o1LFWATlU2UBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 18:47:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3008 (0xbc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185CF3, serialNumber=A7A2674E8484603920779A352C55804E55365014 Validity Not Before: Jun 14 18:47:05 2025 GMT Not After : Jun 21 18:47:05 2025 GMT Subject: CN=684dc3a9-cb43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:21:40:74:aa:59:6c:2d:89:dc:c5:ed:e5:4b: 35:fd:6b:ac:82:75:68:14:e6:c3:72:bb:27:d4:5e: 96:bc:8e:20:b2:2f:5f:29:6c:6b:36:3e:4c:dd:bd: 4a:7d:7c:74:93:a4:39:23:cc:9f:00:54:11:97:95: e0:ed:a5:cc:13:17:a7:53:0d:9b:85:db:70:c3:f5: f0:f4:b6:5f:1a:99:dd:ad:0a:67:66:d9:1e:b1:de: 10:2b:75:70:76:51:dd:8a:8f:68:d0:a2:b1:76:d3: e4:55:f9:5f:a8:9a:6e:79:07:e9:50:0c:da:ae:b2: 03:81:0a:76:82:af:f5:96:8d:1a:5c:91:2f:a7:af: 92:a6:e5:4d:8e:18:a0:16:b0:40:e7:ea:c4:a5:a7: 97:96:2a:e7:86:ec:ee:71:27:0d:c1:31:e9:4e:ed: 8c:96:5b:94:18:09:1c:ee:e5:1c:3e:93:0b:60:57: 6f:ff:4d:02:9b:1c:5a:a9:6b:16:fb:80:24:4a:3e: 4e:8a:a0:e8:94:b8:43:f9:52:98:6f:65:01:ae:bd: fb:b7:04:9d:d2:50:49:66:34:c5:5d:40:52:48:e4: 51:65:68:71:d0:e7:d3:6f:ca:83:79:d5:5e:74:05: 6c:9b:d4:00:2d:cd:39:e8:2c:c3:8b:41:71:8c:2b: 22:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:65:74:9E:30:19:5C:51:0C:F4:76:C0:DB:6D:AE:8D:C5:EF:D1:96 X509v3 Authority Key Identifier: keyid:A7:A2:67:4E:84:84:60:39:20:77:9A:35:2C:55:80:4E:55:36:50:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6JnToSEYDkgd5o1LFWATlU2UBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:13:16:11:ce:4d:f5:ff:c7:47:26:ac:60:01:b6:21:bb:0d: 9e:56:d9:e5:f7:b3:c4:d0:95:b6:b5:3b:26:d4:4b:5c:01:ae: c7:4d:80:0d:b3:04:21:44:9b:8b:be:dd:3c:85:ce:3d:e7:c6: 46:73:52:99:1f:2b:a1:d0:cf:56:c7:56:d2:af:32:6f:8f:bd: db:26:04:18:66:f7:8c:86:19:81:57:b2:d7:21:49:c5:92:af: ce:07:46:d0:1a:3e:8f:ff:7b:c2:2f:92:ab:70:ff:85:17:92: 92:d9:fd:17:46:b5:93:3f:4f:c3:81:74:6e:d8:46:d3:a5:ee: 29:87:4a:56:7b:94:d2:0e:41:12:3b:af:9c:2c:77:c1:2c:9c: 36:28:bb:db:d5:a1:c2:6c:78:2f:96:e2:34:3a:f3:62:9c:89: ab:25:6a:56:3c:c8:7a:53:56:08:5f:69:fa:e0:c7:b9:c3:39: 08:f9:b9:5c:48:08:76:25:f8:75:35:7e:7e:21:d6:40:9d:f1: 7b:cf:5c:1a:20:b2:d5:b8:34:80:ea:af:51:aa:8f:0a:8e:f1: 6e:d6:05:6b:72:e7:1f:59:01:2d:95:51:92:38:a7:f2:e3:c3: fd:f1:a9:4f:f5:f1:41:4c:17:9b:0d:58:2f:54:10:88:bb:47: 80:b0:8c:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVDRjMxMTAvBgNVBAUTKEE3QTI2NzRFODQ4NDYwMzkyMDc3OUEzNTJDNTU4MDRF NTUzNjUwMTQwHhcNMjUwNjE0MTg0NzA1WhcNMjUwNjIxMTg0NzA1WjAYMRYwFAYD VQQDEw02ODRkYzNhOS1jYjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtyFAdKpZbC2J3MXt5Us1/WusgnVoFObDcrsn1F6WvI4gsi9fKWxrNj5M3b1K fXx0k6Q5I8yfAFQRl5Xg7aXMExenUw2bhdtww/Xw9LZfGpndrQpnZtkesd4QK3Vw dlHdio9o0KKxdtPkVflfqJpueQfpUAzarrIDgQp2gq/1lo0aXJEvp6+SpuVNjhig FrBA5+rEpaeXlirnhuzucScNwTHpTu2MlluUGAkc7uUcPpMLYFdv/00CmxxaqWsW +4AkSj5OiqDolLhD+VKYb2UBrr37twSd0lBJZjTFXUBSSORRZWhx0OfTb8qDedVe dAVsm9QALc056CzDi0FxjCsiAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL9ldJ4w GVxRDPR2wNttro3F79GWMB8GA1UdIwQYMBaAFKeiZ06EhGA5IHeaNSxVgE5VNlAU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUNGMy80QkRENTE4RTIx MzUxMUVBQkU0ODg3NDdDNEY5QUUwMi9wNkpuVG9TRVlEa2dkNW8xTEZXQVRsVTJV QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A2Sm5Ub1NFWURrZ2Q1bzFMRldBVGxVMlVCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUNGMy80QkRENTE4RTIxMzUxMUVBQkU0ODg3NDdDNEY5QUUwMi9wNkpuVG9TRVlE a2dkNW8xTEZXQVRsVTJVQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqExYRzk31/8dHJqxgAbYhuw2eVtnl97PE0JW2tTsm1EtcAa7HTYAN swQhRJuLvt08hc4958ZGc1KZHyuh0M9Wx1bSrzJvj73bJgQYZveMhhmBV7LXIUnF kq/OB0bQGj6P/3vCL5KrcP+FF5KS2f0XRrWTP0/DgXRu2EbTpe4ph0pWe5TSDkES O6+cLHfBLJw2KLvb1aHCbHgvluI0OvNinImrJWpWPMh6U1YIX2n64Me5wzkI+blc SAh2Jfh1NX5+IdZAnfF7z1waILLVuDSA6q9Rqo8KjvFu1gVrcucfWQEtlVGSOKfy 48P98alP9fFBTBebDVgvVBCIu0eAsIzi -----END CERTIFICATE-----Generated at Sun Jun 15 08:50:49 2025 by rpki-client