$ rpki-client -vvf rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.mft File: 6tgeRb5BR2cpw1YqNG-29i_IH70.mft (raw, json) Hash identifier: xT1VZzv/NODxydbRssQY2yrgAqeJnU42JJOxwm1/WR4= Subject key identifier: E7:BE:FE:37:B8:49:1C:2E:40:BC:91:0B:12:72:71:4F:72:BF:92:C3 Authority key identifier: EA:D8:1E:45:BE:41:47:67:29:C3:56:2A:34:6F:B6:F6:2F:C8:1F:BD Certificate issuer: /CN=A9119624/serialNumber=EAD81E45BE41476729C3562A346FB6F62FC81FBD Certificate serial: 0D62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tgeRb5BR2cpw1YqNG-29i_IH70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.mft Manifest number: 0D59 Signing time: Fri 18 Jul 2025 18:08:41 +0000 Manifest this update: Fri 18 Jul 2025 18:08:40 +0000 Manifest next update: Fri 25 Jul 2025 18:08:40 +0000 Files and hashes: 1: 6tgeRb5BR2cpw1YqNG-29i_IH70.crl (hash: OiRyqZRIT9drt5GeGzVXJx/pEgJvWbxyqcWdtdpJ3ng=) 2: 0FA62A50214011EA90EFFE63C4F9AE02.roa (hash: b2eeZFRX3Cfrh2KgUNSH2XUFjtsQ8yv94mtfUkRiNmk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.crl rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tgeRb5BR2cpw1YqNG-29i_IH70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 18:08:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3426 (0xd62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119624, serialNumber=EAD81E45BE41476729C3562A346FB6F62FC81FBD Validity Not Before: Jul 18 18:08:40 2025 GMT Not After : Jul 25 18:08:40 2025 GMT Subject: CN=687a8da9-86b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:99:d9:ec:f0:c2:84:83:e9:f4:fc:7e:99:46: 39:d1:d0:15:2f:31:01:ef:b5:a7:b2:bc:df:2e:b2: c2:7a:ae:94:1b:94:3c:a4:ff:9b:85:8e:4a:12:88: e8:e5:d3:c0:d2:81:6f:d2:e5:cb:a8:c7:64:83:33: 2c:8e:f4:90:99:30:15:b7:17:c7:25:c8:81:e3:c9: bd:5a:24:05:82:b3:63:a9:ef:db:a2:64:60:37:6a: 75:ab:49:4f:08:c1:1e:d4:db:63:bf:14:69:f7:35: 7d:ee:c1:40:b7:fc:34:f6:59:94:e2:a8:e7:d7:8b: 06:a8:9f:59:36:0f:1b:33:1f:14:f5:2b:ca:ed:e2: f9:bd:58:1d:e0:76:90:e6:f2:10:6b:1d:a2:16:de: 15:a8:e9:dc:ec:fe:27:a1:a6:d1:c6:b0:04:5f:f8: 5b:c7:c4:09:d5:06:54:8e:7a:47:9e:79:6b:0d:4a: 24:15:b1:7f:63:3e:56:c5:b8:5c:8a:3a:6d:7a:d6: 89:e3:12:5d:55:09:78:3e:b8:61:df:c9:2c:74:79: f4:bc:ef:1b:ff:77:1a:98:9d:de:ad:96:b9:fa:68: 7b:01:a4:12:2d:54:60:65:d8:13:c2:20:a6:e6:60: a1:e2:c4:44:ce:27:c4:83:56:85:f2:e7:15:72:79: 6a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:BE:FE:37:B8:49:1C:2E:40:BC:91:0B:12:72:71:4F:72:BF:92:C3 X509v3 Authority Key Identifier: keyid:EA:D8:1E:45:BE:41:47:67:29:C3:56:2A:34:6F:B6:F6:2F:C8:1F:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tgeRb5BR2cpw1YqNG-29i_IH70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:ad:fc:19:7e:d6:c6:82:79:f0:c0:f0:3c:0a:b2:d6:46:24: 1f:90:86:78:bf:d2:26:4c:52:47:86:c7:18:93:ca:b7:34:da: 1d:de:fe:d2:d0:8e:18:d5:1f:83:98:51:69:ec:74:b2:da:b1: 56:65:2d:21:c8:d8:2a:8d:11:ce:6f:28:ca:bd:32:9e:ef:a1: 4c:a6:fc:62:52:18:ef:f7:96:5d:90:b7:c8:9b:38:03:87:50: f0:b5:9b:bf:dc:cd:7e:a5:9b:28:53:ba:40:7e:ac:14:bf:19: c2:26:3c:44:9b:69:14:21:17:a2:53:af:12:09:a2:7f:0e:b5: d3:9a:05:4f:e3:6b:69:39:84:ff:0c:14:01:31:7a:e5:d9:bd: d0:b5:f2:8a:21:26:dc:1c:c1:fb:88:52:08:0d:4a:a0:43:f4: 27:8a:d8:45:43:45:2b:93:4e:8d:2d:5c:63:2f:1f:7d:90:05: 6e:30:89:13:66:19:ef:76:ae:40:39:ff:02:fd:83:19:94:52: bb:10:c9:51:4e:90:72:11:30:e2:0d:1a:d1:c2:a5:38:f7:c0: a7:81:26:b4:0d:63:90:d4:09:78:d2:36:08:47:c9:00:af:c9: df:11:79:69:3b:d7:57:cd:26:8c:42:af:7b:da:2c:b0:b2:dd: 54:c7:d7:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk2MjQxMTAvBgNVBAUTKEVBRDgxRTQ1QkU0MTQ3NjcyOUMzNTYyQTM0NkZCNkY2 MkZDODFGQkQwHhcNMjUwNzE4MTgwODQwWhcNMjUwNzI1MTgwODQwWjAYMRYwFAYD VQQDEw02ODdhOGRhOS04NmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvpnZ7PDChIPp9Px+mUY50dAVLzEB77WnsrzfLrLCeq6UG5Q8pP+bhY5KEojo 5dPA0oFv0uXLqMdkgzMsjvSQmTAVtxfHJciB48m9WiQFgrNjqe/bomRgN2p1q0lP CMEe1NtjvxRp9zV97sFAt/w09lmU4qjn14sGqJ9ZNg8bMx8U9SvK7eL5vVgd4HaQ 5vIQax2iFt4VqOnc7P4noabRxrAEX/hbx8QJ1QZUjnpHnnlrDUokFbF/Yz5Wxbhc ijptetaJ4xJdVQl4Prhh38ksdHn0vO8b/3camJ3erZa5+mh7AaQSLVRgZdgTwiCm 5mCh4sREzifEg1aF8ucVcnlqxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOe+/je4 SRwuQLyRCxJycU9yv5LDMB8GA1UdIwQYMBaAFOrYHkW+QUdnKcNWKjRvtvYvyB+9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTYyNC8zRDRBNUE4NEQ0 NEQxMUU5QTM4M0EzNUJDNEY5QUUwMi82dGdlUmI1QlIyY3B3MVlxTkctMjlpX0lI NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ0Z2VSYjVCUjJjcHcxWXFORy0yOWlfSUg3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTYyNC8zRDRBNUE4NEQ0NEQxMUU5QTM4M0EzNUJDNEY5QUUwMi82dGdlUmI1QlIy Y3B3MVlxTkctMjlpX0lINzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCprfwZftbGgnnwwPA8CrLWRiQfkIZ4v9ImTFJHhscYk8q3NNod3v7S 0I4Y1R+DmFFp7HSy2rFWZS0hyNgqjRHObyjKvTKe76FMpvxiUhjv95ZdkLfImzgD h1DwtZu/3M1+pZsoU7pAfqwUvxnCJjxEm2kUIReiU68SCaJ/DrXTmgVP42tpOYT/ DBQBMXrl2b3QtfKKISbcHMH7iFIIDUqgQ/QnithFQ0Urk06NLVxjLx99kAVuMIkT Zhnvdq5AOf8C/YMZlFK7EMlRTpByETDiDRrRwqU498CngSa0DWOQ1Al40jYIR8kA r8nfEXlpO9dXzSaMQq972iywst1Ux9e/ -----END CERTIFICATE-----Generated at Sun Jul 20 06:57:54 2025 by rpki-client