$ rpki-client -vvf rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft File: -6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft (raw, json) Hash identifier: uK8bt4dRXKXvQQ8dj5bInjl+ftcnHHZnc1hH8S+1k3Q= Subject key identifier: 5B:B3:1A:1B:C4:90:02:DC:34:C3:E7:70:B6:E1:65:CE:25:96:0A:C0 Authority key identifier: FB:A7:C3:AD:F0:7F:80:B3:56:C1:13:B8:52:56:F5:7A:40:69:EA:E6 Certificate issuer: /CN=A918FD87/serialNumber=FBA7C3ADF07F80B356C113B85256F57A4069EAE6 Certificate serial: 081C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft Manifest number: 0814 Signing time: Fri 20 Jun 2025 20:44:35 +0000 Manifest this update: Fri 20 Jun 2025 20:44:34 +0000 Manifest next update: Fri 27 Jun 2025 20:44:34 +0000 Files and hashes: 1: -6fDrfB_gLNWwRO4Ulb1ekBp6uY.crl (hash: O67V96xRgifxB1VWv+d9mnKL+DlIchV/eNrSgroRRV0=) 2: 35167F34DE0911EAA8F7452CC4F9AE02.roa (hash: 5iBEu4/lxuKcsTngGzKrbQO6HIpjDKLahJSiNgvhi+k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.crl rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 20:44:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2076 (0x81c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FD87, serialNumber=FBA7C3ADF07F80B356C113B85256F57A4069EAE6 Validity Not Before: Jun 20 20:44:34 2025 GMT Not After : Jun 27 20:44:34 2025 GMT Subject: CN=6855c832-283e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:99:1a:16:e2:7b:ee:b4:58:1c:02:91:6d:e7: 9c:ce:56:73:4c:56:1d:0c:9a:4e:1b:1f:79:31:64: 2c:80:82:e1:93:f1:20:1c:aa:16:7d:08:a1:6e:52: 75:79:bf:58:cc:78:e5:62:2b:75:85:60:28:ae:73: 4d:78:38:80:23:f8:35:18:43:45:33:22:5b:1f:15: 72:e7:17:b7:75:c3:98:17:8d:c2:9c:50:f0:d6:5c: 38:f7:3e:f0:35:03:c8:85:9d:0f:17:6e:50:12:31: 39:0c:04:70:4b:ae:db:fb:8f:76:2e:50:1d:10:73: 3a:98:d6:da:d1:fd:d2:73:62:eb:47:40:a1:35:34: bc:a1:85:4b:8b:cc:97:21:90:78:07:96:69:29:c9: 1a:c0:3d:8e:89:b5:f3:54:2a:3a:0c:93:84:63:f4: d1:a3:79:94:e8:c4:ce:8a:b6:cd:91:5e:ed:e4:29: b5:5e:81:b4:e8:2b:ae:a8:af:3f:40:46:9e:24:b7: 85:a1:78:ea:dc:bc:d6:f0:53:9d:c7:19:50:c5:27: bc:98:75:b8:de:c0:05:6c:4a:2f:c7:3f:b2:e8:d2: fb:8f:e3:fe:50:a5:eb:1b:d4:d1:93:b4:7f:32:4e: 18:1d:50:9c:56:0a:08:0c:07:5d:4a:f8:98:b0:72: da:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:B3:1A:1B:C4:90:02:DC:34:C3:E7:70:B6:E1:65:CE:25:96:0A:C0 X509v3 Authority Key Identifier: keyid:FB:A7:C3:AD:F0:7F:80:B3:56:C1:13:B8:52:56:F5:7A:40:69:EA:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:cd:fd:66:c7:73:b7:62:42:e7:6e:17:d1:07:49:a4:65:9b: 4b:bb:57:1d:e2:f3:6b:44:d6:6b:5f:fd:19:94:59:b9:cc:66: 18:fa:b6:aa:83:d0:f9:3c:70:bd:f2:b9:d5:c1:fc:66:4a:09: d3:b6:0e:3a:f9:86:e4:46:dc:ec:1e:e6:ea:6f:d7:bb:15:4c: 92:51:c7:e2:97:a6:c8:22:5c:0a:3d:68:90:80:c4:a1:71:77: 9b:4a:f7:30:eb:a3:28:90:5e:af:97:2c:8a:f6:ee:5a:65:e9: 9f:d9:30:ec:ab:13:b4:ff:16:49:f9:9b:18:b7:e9:75:f7:d2: 10:e3:50:40:aa:20:85:d8:7a:4d:3e:dc:a2:bc:94:80:05:72: 08:c1:57:72:47:70:0d:70:f9:cd:fd:10:13:cf:1c:e5:5d:cc: 54:5f:72:c8:b1:3f:8b:a4:40:18:b5:42:45:06:bf:3f:f0:ef: c2:3f:1a:f4:97:88:50:33:ff:8b:c5:8c:ee:26:50:44:a4:c1: 90:a9:25:23:eb:34:28:58:69:4f:15:3a:2c:a3:8e:10:a7:d3: 5b:2c:78:c3:13:e5:51:55:45:d8:0e:64:50:bd:90:4b:b2:21: 15:dc:81:2b:db:79:88:68:a2:7d:4b:73:68:94:c1:a5:d8:15: 1c:0b:64:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZEODcxMTAvBgNVBAUTKEZCQTdDM0FERjA3RjgwQjM1NkMxMTNCODUyNTZGNTdB NDA2OUVBRTYwHhcNMjUwNjIwMjA0NDM0WhcNMjUwNjI3MjA0NDM0WjAYMRYwFAYD VQQDEw02ODU1YzgzMi0yODNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlZkaFuJ77rRYHAKRbeeczlZzTFYdDJpOGx95MWQsgILhk/EgHKoWfQihblJ1 eb9YzHjlYit1hWAornNNeDiAI/g1GENFMyJbHxVy5xe3dcOYF43CnFDw1lw49z7w NQPIhZ0PF25QEjE5DARwS67b+492LlAdEHM6mNba0f3Sc2LrR0ChNTS8oYVLi8yX IZB4B5ZpKckawD2OibXzVCo6DJOEY/TRo3mU6MTOirbNkV7t5Cm1XoG06CuuqK8/ QEaeJLeFoXjq3LzW8FOdxxlQxSe8mHW43sAFbEovxz+y6NL7j+P+UKXrG9TRk7R/ Mk4YHVCcVgoIDAddSviYsHLaCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFuzGhvE kALcNMPncLbhZc4llgrAMB8GA1UdIwQYMBaAFPunw63wf4CzVsETuFJW9XpAaerm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkQ4Ny8yOUFBOTk1NkRF MDgxMUVBQTEwNkI2MkJDNEY5QUUwMi8tNmZEcmZCX2dMTld3Uk80VWxiMWVrQnA2 dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy02ZkRyZkJfZ0xOV3dSTzRVbGIxZWtCcDZ1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkQ4Ny8yOUFBOTk1NkRFMDgxMUVBQTEwNkI2MkJDNEY5QUUwMi8tNmZEcmZCX2dM Tld3Uk80VWxiMWVrQnA2dVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1zf1mx3O3YkLnbhfRB0mkZZtLu1cd4vNrRNZrX/0ZlFm5zGYY+raq g9D5PHC98rnVwfxmSgnTtg46+YbkRtzsHubqb9e7FUySUcfil6bIIlwKPWiQgMSh cXebSvcw66MokF6vlyyK9u5aZemf2TDsqxO0/xZJ+ZsYt+l199IQ41BAqiCF2HpN PtyivJSABXIIwVdyR3ANcPnN/RATzxzlXcxUX3LIsT+LpEAYtUJFBr8/8O/CPxr0 l4hQM/+LxYzuJlBEpMGQqSUj6zQoWGlPFToso44Qp9NbLHjDE+VRVUXYDmRQvZBL siEV3IEr23mIaKJ9S3NolMGl2BUcC2Q+ -----END CERTIFICATE-----Generated at Sat Jun 21 08:19:53 2025 by rpki-client