$ rpki-client -vvf rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/6sJx1r3dV8MxnnHIEdhQR1NMRzA.mft File: 6sJx1r3dV8MxnnHIEdhQR1NMRzA.mft (raw, json) Hash identifier: dunPdhF5XKrE/e5Yg7oDkWjmdtg+eK7c+LGiDz8cvQA= Subject key identifier: B0:EA:9E:1A:08:14:B3:89:FF:BA:97:46:A0:D1:FE:16:5F:4E:B9:80 Authority key identifier: EA:C2:71:D6:BD:DD:57:C3:31:9E:71:C8:11:D8:50:47:53:4C:47:30 Certificate issuer: /CN=A919A1BE/serialNumber=EAC271D6BDDD57C3319E71C811D85047534C4730 Certificate serial: 0AE3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sJx1r3dV8MxnnHIEdhQR1NMRzA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/6sJx1r3dV8MxnnHIEdhQR1NMRzA.mft Manifest number: 0ADA Signing time: Thu 12 Jun 2025 19:13:13 +0000 Manifest this update: Thu 12 Jun 2025 19:13:13 +0000 Manifest next update: Thu 19 Jun 2025 19:13:13 +0000 Files and hashes: 1: 6sJx1r3dV8MxnnHIEdhQR1NMRzA.crl (hash: Ezyp1QTxSsSSh5wy6BK+/ewWsHKptl505ciJJdBzAfE=) 2: 0FFE5282122811F0AC9B4112C4F9AE02.roa (hash: qP7+uhy7LyLUv4jd3g7zWSe0a9FYblcgiMmuUDc4eAs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/6sJx1r3dV8MxnnHIEdhQR1NMRzA.crl rsync://rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/6sJx1r3dV8MxnnHIEdhQR1NMRzA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sJx1r3dV8MxnnHIEdhQR1NMRzA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 19:13:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2787 (0xae3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A1BE, serialNumber=EAC271D6BDDD57C3319E71C811D85047534C4730 Validity Not Before: Jun 12 19:13:13 2025 GMT Not After : Jun 19 19:13:13 2025 GMT Subject: CN=684b26c9-959e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:37:e4:91:be:7a:e0:3b:ba:a3:a6:7a:46:15: c7:e6:12:79:d1:3c:09:9a:5d:57:83:94:22:85:04: 50:0c:88:d4:ef:3e:e1:d5:1b:4a:43:9d:95:46:ce: a1:63:aa:82:77:f7:c0:11:2a:24:8e:7b:a3:47:c9: ca:e7:72:20:92:13:8e:32:c9:fb:56:5c:5a:e0:3a: ee:ec:da:51:f3:7b:f1:42:87:95:d6:fd:e3:e3:8d: f7:e4:5b:c3:e5:a9:d8:59:a9:0e:82:7f:d9:51:0c: 35:d4:fc:b0:51:6a:e9:0e:ea:5e:d8:9c:7f:3a:b4: 8c:6d:48:d7:50:31:f1:f4:58:b0:9e:2d:27:99:26: df:68:c9:a4:99:73:c5:01:fd:3f:10:b9:10:ab:a7: 75:ce:52:f5:6b:70:3d:90:d7:df:8c:df:6d:e5:56: 6a:31:d9:5f:6e:28:23:2e:ab:46:da:d7:79:ec:ab: bb:27:07:30:ee:b8:2c:8a:ba:d4:b5:31:a4:93:54: 32:cf:57:ae:aa:90:51:a1:ff:e3:a9:9f:18:e6:d0: 3e:76:1d:40:25:5d:8d:f6:ec:ea:57:06:fa:0d:32: 11:a9:a7:18:69:41:b2:c8:72:43:4a:f8:4b:a3:47: 2c:85:a1:e7:b4:92:f4:3b:33:43:4e:1a:4f:f1:c7: a3:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:EA:9E:1A:08:14:B3:89:FF:BA:97:46:A0:D1:FE:16:5F:4E:B9:80 X509v3 Authority Key Identifier: keyid:EA:C2:71:D6:BD:DD:57:C3:31:9E:71:C8:11:D8:50:47:53:4C:47:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/6sJx1r3dV8MxnnHIEdhQR1NMRzA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sJx1r3dV8MxnnHIEdhQR1NMRzA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/6sJx1r3dV8MxnnHIEdhQR1NMRzA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:9d:c1:6b:69:db:62:5e:74:5d:74:46:a5:23:a6:6a:c0:34: 5b:2c:96:b6:d5:47:c5:ae:2b:e3:88:d1:87:bd:76:aa:9e:80: 4f:8e:b6:de:71:29:1d:33:67:fc:e8:12:04:30:46:08:65:80: 4c:dc:8b:d2:22:8a:58:d3:48:28:fc:b6:c1:a9:38:91:19:60: 7d:6d:ce:12:73:8a:cf:af:ed:bd:7a:69:c5:a1:31:34:49:45: 3a:5c:6a:e1:5e:25:7f:03:99:6a:aa:22:f2:c9:a3:58:4f:ec: 67:85:a9:ce:36:4b:31:c1:76:61:23:40:e4:3c:38:a7:70:3f: 35:9c:94:36:b0:1c:1a:25:63:70:b7:8e:1a:db:5d:74:00:81: 58:44:fb:a5:b4:64:43:f1:22:58:40:b1:f4:5f:b9:a6:e9:44: 4b:2b:12:fb:d0:fa:d7:37:b8:5c:8f:78:a4:a5:1a:df:14:e3: 17:be:3d:38:64:b0:df:01:61:98:4a:6d:35:e9:9e:bf:ea:84: 1b:c6:20:50:15:f2:0e:fd:7b:dc:59:3b:b5:f3:fd:1f:0a:40: 18:46:89:71:63:5f:87:54:ea:5c:af:c9:ae:bc:65:19:91:2f: 33:5a:9b:ca:70:f3:06:59:20:c9:44:31:0f:fa:e9:11:f2:32: 18:10:3c:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCuMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUExQkUxMTAvBgNVBAUTKEVBQzI3MUQ2QkRERDU3QzMzMTlFNzFDODExRDg1MDQ3 NTM0QzQ3MzAwHhcNMjUwNjEyMTkxMzEzWhcNMjUwNjE5MTkxMzEzWjAYMRYwFAYD VQQDEw02ODRiMjZjOS05NTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsTfkkb564Du6o6Z6RhXH5hJ50TwJml1Xg5QihQRQDIjU7z7h1RtKQ52VRs6h Y6qCd/fAESokjnujR8nK53IgkhOOMsn7Vlxa4Dru7NpR83vxQoeV1v3j44335FvD 5anYWakOgn/ZUQw11PywUWrpDupe2Jx/OrSMbUjXUDHx9Fiwni0nmSbfaMmkmXPF Af0/ELkQq6d1zlL1a3A9kNffjN9t5VZqMdlfbigjLqtG2td57Ku7Jwcw7rgsirrU tTGkk1Qyz1euqpBRof/jqZ8Y5tA+dh1AJV2N9uzqVwb6DTIRqacYaUGyyHJDSvhL o0cshaHntJL0OzNDThpP8cejjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLDqnhoI FLOJ/7qXRqDR/hZfTrmAMB8GA1UdIwQYMBaAFOrCcda93VfDMZ5xyBHYUEdTTEcw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTFCRS83MDA4NDc3RTRE NjAxMUVBQUI2MzUzNzRDNEY5QUUwMi82c0p4MXIzZFY4TXhubkhJRWRoUVIxTk1S ekEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZzSngxcjNkVjhNeG5uSElFZGhRUjFOTVJ6QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTFCRS83MDA4NDc3RTRENjAxMUVBQUI2MzUzNzRDNEY5QUUwMi82c0p4MXIzZFY4 TXhubkhJRWRoUVIxTk1SekEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbncFradtiXnRddEalI6ZqwDRbLJa21UfFrivjiNGHvXaqnoBPjrbe cSkdM2f86BIEMEYIZYBM3IvSIopY00go/LbBqTiRGWB9bc4Sc4rPr+29emnFoTE0 SUU6XGrhXiV/A5lqqiLyyaNYT+xnhanONksxwXZhI0DkPDincD81nJQ2sBwaJWNw t44a2110AIFYRPultGRD8SJYQLH0X7mm6URLKxL70PrXN7hcj3ikpRrfFOMXvj04 ZLDfAWGYSm016Z6/6oQbxiBQFfIO/XvcWTu18/0fCkAYRolxY1+HVOpcr8muvGUZ kS8zWpvKcPMGWSDJRDEP+ukR8jIYEDxh -----END CERTIFICATE-----Generated at Sat Jun 14 19:40:49 2025 by rpki-client