$ rpki-client -vvf rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft File: 6Ihh_0pFOAJnqBtY-pnkia0AG70.mft (raw, json) Hash identifier: NTiWOgDWPZ/ebb38JcbhO/3Lfshxa65TmtpWehwQtT4= Subject key identifier: 39:6C:A0:FA:55:51:76:46:39:12:B7:87:D5:DE:2A:28:C3:B9:75:C0 Authority key identifier: E8:88:61:FF:4A:45:38:02:67:A8:1B:58:FA:99:E4:89:AD:00:1B:BD Certificate issuer: /CN=A918ACB2/serialNumber=E88861FF4A45380267A81B58FA99E489AD001BBD Certificate serial: 0113 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ihh_0pFOAJnqBtY-pnkia0AG70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft Manifest number: 010C Signing time: Fri 13 Jun 2025 04:00:21 +0000 Manifest this update: Fri 13 Jun 2025 04:00:20 +0000 Manifest next update: Fri 20 Jun 2025 04:00:20 +0000 Files and hashes: 1: 6Ihh_0pFOAJnqBtY-pnkia0AG70.crl (hash: QLgV1S7Eu9vPBwCTBVFrm+xPrBstApkRnw+ZJ+Jigbk=) 2: B66B434EBCE011EE98AEB646C4F9AE02.roa (hash: 4+NB3j+Ku9z9DW7nQRzRq87llzJ2sOudlesGDx2vWI8=) 3: BD1A38D4984B11EFB342C220C4F9AE02.roa (hash: EIknsqOvV+3/e4OowMHbRVdsbkd9a/wu1lD+d08gIWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.crl rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ihh_0pFOAJnqBtY-pnkia0AG70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 04:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 275 (0x113) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918ACB2, serialNumber=E88861FF4A45380267A81B58FA99E489AD001BBD Validity Not Before: Jun 13 04:00:20 2025 GMT Not After : Jun 20 04:00:20 2025 GMT Subject: CN=684ba254-404f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1e:9f:02:e0:e4:bd:9d:8b:e3:0d:a6:2b:e1: 0e:89:45:90:95:06:79:ce:ea:dc:10:0c:8e:40:27: c9:6a:f9:b5:6f:e7:ce:8e:d1:0c:30:64:11:83:2b: 42:fa:d8:56:34:64:06:5b:b5:fc:b1:7d:82:eb:6d: 63:8f:2a:ba:2f:4a:44:e8:65:86:a0:f4:e6:e7:c1: 50:4d:53:dc:2e:72:4d:d2:d8:a2:85:e9:32:bf:75: 47:35:a8:77:8f:19:b9:de:4d:9a:13:cb:26:2d:a8: 06:9d:48:b6:0c:eb:e5:f8:aa:3c:c5:3b:f1:e8:fe: 2e:00:37:d9:a5:4e:93:b9:ef:95:f8:a2:c1:92:c9: 80:39:76:60:3e:db:62:62:ee:5b:0c:ca:64:76:fc: f8:9f:64:50:22:3f:91:5d:6d:c7:46:e7:d5:2d:f6: 77:62:8f:e4:6c:67:2c:89:21:5b:64:96:4c:ce:57: 62:13:57:fc:c5:80:64:08:df:0d:cb:f7:4b:c5:65: ad:e4:02:70:70:3c:2f:11:e5:81:8e:23:5f:f2:54: 2e:be:5c:36:75:75:d2:d0:e1:51:af:0b:c2:f3:5c: ce:47:14:ff:50:6f:a6:a3:fe:4f:d9:2d:f4:a4:ba: b1:b1:43:92:a4:43:82:73:b0:de:96:5d:59:02:f7: 00:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:6C:A0:FA:55:51:76:46:39:12:B7:87:D5:DE:2A:28:C3:B9:75:C0 X509v3 Authority Key Identifier: keyid:E8:88:61:FF:4A:45:38:02:67:A8:1B:58:FA:99:E4:89:AD:00:1B:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ihh_0pFOAJnqBtY-pnkia0AG70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:2d:3f:aa:8e:45:33:dd:a3:d3:c1:d9:fc:3c:1b:28:d6:3d: 82:5f:ec:41:b8:cb:11:76:1a:6d:f8:8c:11:24:cc:87:78:36: c2:43:cc:8b:67:4c:68:97:88:09:2c:61:ce:86:4a:cc:cb:15: 1a:b3:1c:be:e3:e3:6b:b3:2a:d1:40:70:d8:88:76:fa:6b:61: 02:30:38:ec:2e:0a:bb:7a:96:10:a8:44:6f:fc:63:92:61:a9: d1:cf:bc:98:66:18:08:78:d8:85:42:3d:96:61:79:95:30:c4: d0:f6:0d:ef:9b:e2:81:e0:6d:2e:90:3b:fd:78:4f:b0:99:81: 9a:35:39:f0:d9:3b:40:ff:aa:67:a9:eb:47:a0:e0:5c:f5:f2: 67:4c:a7:22:b1:5a:c2:ff:ac:71:39:2a:23:a3:71:f2:b9:dd: 5f:29:2f:10:29:99:38:9e:9d:4a:a9:a6:04:a1:d2:47:ff:76: 6c:20:ec:77:07:a9:1b:2d:fb:63:35:b9:19:4e:a9:3d:02:7a: 5b:3a:f4:1f:b4:f7:d6:9e:ee:1e:4d:46:b3:46:82:0c:9a:f5: 92:25:d7:f2:64:2e:c0:15:57:b3:31:05:e3:da:e4:4f:f0:1b: 89:cc:08:1b:e1:bb:59:42:56:0a:78:da:08:75:cc:37:86:21: bf:d9:08:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEFDQjIxMTAvBgNVBAUTKEU4ODg2MUZGNEE0NTM4MDI2N0E4MUI1OEZBOTlFNDg5 QUQwMDFCQkQwHhcNMjUwNjEzMDQwMDIwWhcNMjUwNjIwMDQwMDIwWjAYMRYwFAYD VQQDEw02ODRiYTI1NC00MDRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvB6fAuDkvZ2L4w2mK+EOiUWQlQZ5zurcEAyOQCfJavm1b+fOjtEMMGQRgytC +thWNGQGW7X8sX2C621jjyq6L0pE6GWGoPTm58FQTVPcLnJN0tiihekyv3VHNah3 jxm53k2aE8smLagGnUi2DOvl+Ko8xTvx6P4uADfZpU6Tue+V+KLBksmAOXZgPtti Yu5bDMpkdvz4n2RQIj+RXW3HRufVLfZ3Yo/kbGcsiSFbZJZMzldiE1f8xYBkCN8N y/dLxWWt5AJwcDwvEeWBjiNf8lQuvlw2dXXS0OFRrwvC81zORxT/UG+mo/5P2S30 pLqxsUOSpEOCc7Dell1ZAvcA6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDlsoPpV UXZGORK3h9XeKijDuXXAMB8GA1UdIwQYMBaAFOiIYf9KRTgCZ6gbWPqZ5ImtABu9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUNCMi85RkU3NjBBNkI4 M0MxMUVFODc0MTkwMkVDNEY5QUUwMi82SWhoXzBwRk9BSm5xQnRZLXBua2lhMEFH NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZJaGhfMHBGT0FKbnFCdFktcG5raWEwQUc3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QUNCMi85RkU3NjBBNkI4M0MxMUVFODc0MTkwMkVDNEY5QUUwMi82SWhoXzBwRk9B Sm5xQnRZLXBua2lhMEFHNzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbLT+qjkUz3aPTwdn8PBso1j2CX+xBuMsRdhpt+IwRJMyHeDbCQ8yL Z0xol4gJLGHOhkrMyxUasxy+4+NrsyrRQHDYiHb6a2ECMDjsLgq7epYQqERv/GOS YanRz7yYZhgIeNiFQj2WYXmVMMTQ9g3vm+KB4G0ukDv9eE+wmYGaNTnw2TtA/6pn qetHoOBc9fJnTKcisVrC/6xxOSojo3Hyud1fKS8QKZk4np1KqaYEodJH/3ZsIOx3 B6kbLftjNbkZTqk9AnpbOvQftPfWnu4eTUazRoIMmvWSJdfyZC7AFVezMQXj2uRP 8BuJzAgb4btZQlYKeNoIdcw3hiG/2QgH -----END CERTIFICATE-----Generated at Sat Jun 14 19:37:23 2025 by rpki-client