$ rpki-client -vvf rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.mft File: 6EKSkSMrng-5SFoKrUk9fgfH5NE.mft (raw, json) Hash identifier: GGoW8QFYtKEx3aWD+eUgGaZov3Ua5OFekdgrnTN5K4g= Subject key identifier: C7:6A:B4:8F:B3:14:33:D1:B0:81:65:CC:5C:97:83:37:36:94:C9:95 Authority key identifier: E8:42:92:91:23:2B:9E:0F:B9:48:5A:0A:AD:49:3D:7E:07:C7:E4:D1 Certificate issuer: /CN=A9199696/serialNumber=E8429291232B9E0FB9485A0AAD493D7E07C7E4D1 Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EKSkSMrng-5SFoKrUk9fgfH5NE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.mft Manifest number: 3A Signing time: Sun 15 Jun 2025 06:37:21 +0000 Manifest this update: Sun 15 Jun 2025 06:37:20 +0000 Manifest next update: Sun 22 Jun 2025 06:37:20 +0000 Files and hashes: 1: 6EKSkSMrng-5SFoKrUk9fgfH5NE.crl (hash: eqp/NnwxhIkBZoERngi5GTEuqZ5U4P9BfzGIbiYU30Q=) 2: 1A44E27AF1A711EFA441E72CC4F9AE02.roa (hash: +T8xPEy3qOwqRDiq3fa/SHDl3cgx+ER91jGPjiK2GbE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.crl rsync://rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EKSkSMrng-5SFoKrUk9fgfH5NE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199696, serialNumber=E8429291232B9E0FB9485A0AAD493D7E07C7E4D1 Validity Not Before: Jun 15 06:37:20 2025 GMT Not After : Jun 22 06:37:20 2025 GMT Subject: CN=684e6a20-2f8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d5:cb:d5:b5:fd:b0:79:37:7b:f5:ae:b9:36: 91:3e:26:95:19:bd:8f:20:aa:34:ed:08:92:47:08: 83:7d:b5:00:51:cd:77:d9:5b:3a:55:9d:9f:f5:ec: db:1f:40:a3:65:ad:bf:58:47:7e:10:31:96:fc:ed: fb:49:12:d6:24:a4:33:67:aa:7a:3c:b7:e6:37:27: 4c:f5:9b:17:f2:73:32:83:f2:c0:5f:c4:d2:8e:ff: c8:98:3e:dd:8e:50:d6:c4:4c:9b:c9:56:1c:6d:5c: 8d:52:86:99:a6:a6:ba:80:ab:fb:bb:ce:ad:b2:16: c2:76:5c:7a:93:9c:25:87:94:f0:e6:3c:89:8a:50: 03:53:bb:87:68:f9:80:31:dc:47:cd:3d:40:2d:c7: 9d:57:5e:0c:00:3a:e7:cc:bc:41:bc:51:67:0a:22: c7:ca:f9:a7:b7:2f:6b:48:e3:97:6b:5e:78:a2:be: 41:2b:98:2d:c1:fb:d5:c2:b9:9b:71:60:46:f8:86: f1:e3:11:51:a9:54:91:bf:34:55:dc:5f:0c:be:53: ca:e8:3f:ff:ca:6f:51:a8:49:aa:7e:71:1c:3d:ad: 82:39:ea:4e:fb:c0:21:4d:51:a6:50:7d:94:dc:c1: 7b:5d:5c:47:19:05:d1:53:3b:0b:59:cc:00:fb:38: f3:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:6A:B4:8F:B3:14:33:D1:B0:81:65:CC:5C:97:83:37:36:94:C9:95 X509v3 Authority Key Identifier: keyid:E8:42:92:91:23:2B:9E:0F:B9:48:5A:0A:AD:49:3D:7E:07:C7:E4:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EKSkSMrng-5SFoKrUk9fgfH5NE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:67:17:54:94:25:33:b2:cd:14:f4:21:7e:0b:34:d0:fa:b9: 7d:71:dc:83:e9:0b:7b:10:78:5c:2c:90:c9:d0:07:ee:4d:48: d5:26:de:46:eb:3a:a2:70:2d:2e:c7:1e:cf:0d:a4:7a:90:29: c3:2a:59:6c:f2:af:28:e6:e9:af:c1:e2:62:33:ff:fc:e0:eb: b3:9d:4c:90:57:21:78:ee:c4:cd:f4:2c:c0:53:5f:a0:e2:88: 2e:50:f5:08:c9:33:40:0f:fa:d3:aa:fd:d1:f6:f7:10:f1:66: 4a:e9:a9:61:40:6f:fa:9a:14:2a:69:a3:8a:c5:c0:d3:93:a4: 89:1d:c1:7b:ac:2b:be:d5:9a:c1:3a:e1:d5:98:0b:8f:7e:39: 44:ff:52:71:8e:7b:f3:66:7d:5d:04:c4:79:f6:c3:d4:02:07: 74:b7:4e:58:ba:cb:22:0a:ad:66:8b:86:8d:63:6d:16:4f:01: 7c:4a:26:13:a6:66:64:13:38:dd:3a:bf:88:df:98:6e:9f:eb: 34:a3:c2:fd:c7:f7:7a:b6:20:2c:4b:78:46:66:5b:e1:23:db: 0a:59:e2:93:c9:5a:98:fa:fc:d4:b1:5e:47:29:45:82:ca:56: 1f:a9:56:b2:27:ef:f9:5f:ed:ec:66:23:d0:d6:30:10:c5:eb: 42:80:c0:07 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 OTY5NjExMC8GA1UEBRMoRTg0MjkyOTEyMzJCOUUwRkI5NDg1QTBBQUQ0OTNEN0Uw N0M3RTREMTAeFw0yNTA2MTUwNjM3MjBaFw0yNTA2MjIwNjM3MjBaMBgxFjAUBgNV BAMTDTY4NGU2YTIwLTJmOGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC41cvVtf2weTd79a65NpE+JpUZvY8gqjTtCJJHCIN9tQBRzXfZWzpVnZ/17Nsf QKNlrb9YR34QMZb87ftJEtYkpDNnqno8t+Y3J0z1mxfyczKD8sBfxNKO/8iYPt2O UNbETJvJVhxtXI1ShpmmprqAq/u7zq2yFsJ2XHqTnCWHlPDmPImKUANTu4do+YAx 3EfNPUAtx51XXgwAOufMvEG8UWcKIsfK+ae3L2tI45drXniivkErmC3B+9XCuZtx YEb4hvHjEVGpVJG/NFXcXwy+U8roP//Kb1GoSap+cRw9rYI56k77wCFNUaZQfZTc wXtdXEcZBdFTOwtZzAD7OPOBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUx2q0j7MU M9GwgWXMXJeDNzaUyZUwHwYDVR0jBBgwFoAU6EKSkSMrng+5SFoKrUk9fgfH5NEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5Njk2LzJCODExNjU2RjFB NDExRUY4NDQ4RUIyMkM0RjlBRTAyLzZFS1NrU01ybmctNVNGb0tyVWs5ZmdmSDVO RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNkVLU2tTTXJuZy01U0ZvS3JVazlmZ2ZINU5FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5 Njk2LzJCODExNjU2RjFBNDExRUY4NDQ4RUIyMkM0RjlBRTAyLzZFS1NrU01ybmct NVNGb0tyVWs5ZmdmSDVORS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFVnF1SUJTOyzRT0IX4LNND6uX1x3IPpC3sQeFwskMnQB+5NSNUm3kbr OqJwLS7HHs8NpHqQKcMqWWzyryjm6a/B4mIz//zg67OdTJBXIXjuxM30LMBTX6Di iC5Q9QjJM0AP+tOq/dH29xDxZkrpqWFAb/qaFCppo4rFwNOTpIkdwXusK77VmsE6 4dWYC49+OUT/UnGOe/NmfV0ExHn2w9QCB3S3Tli6yyIKrWaLho1jbRZPAXxKJhOm ZmQTON06v4jfmG6f6zSjwv3H93q2ICxLeEZmW+Ej2wpZ4pPJWpj6/NSxXkcpRYLK Vh+pVrIn7/lf7exmI9DWMBDF60KAwAc= -----END CERTIFICATE-----Generated at Sun Jun 15 10:22:15 2025 by rpki-client