$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.mft File: 6f6DqUwBuxPVNX83DHZZc-mX9NA.mft (raw, json) Hash identifier: m5VeNDQp/TiV4A5BxukaTR18HhVQLBUjwKhx8tD221E= Subject key identifier: AD:D9:D9:9D:1A:86:EA:6C:0C:DD:30:32:5B:20:3F:33:E7:56:1D:62 Authority key identifier: E9:FE:83:A9:4C:01:BB:13:D5:35:7F:37:0C:76:59:73:E9:97:F4:D0 Certificate issuer: /CN=A911BDAE/serialNumber=E9FE83A94C01BB13D5357F370C765973E997F4D0 Certificate serial: 0299 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f6DqUwBuxPVNX83DHZZc-mX9NA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.mft Manifest number: 0294 Signing time: Sat 19 Jul 2025 02:01:28 +0000 Manifest this update: Sat 19 Jul 2025 02:01:27 +0000 Manifest next update: Sat 26 Jul 2025 02:01:27 +0000 Files and hashes: 1: 6f6DqUwBuxPVNX83DHZZc-mX9NA.crl (hash: x9c3Xsmhu2nPXdF4ZP9RpFNJOcQQfrFJgSvhxL7CVyI=) 2: 23803F800C9C11ED82C8955BC4F9AE02.roa (hash: Ny3HF6QiqyIBzWklmUHinHzimYgWUBmeHFmleIQ1/IQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.crl rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f6DqUwBuxPVNX83DHZZc-mX9NA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 665 (0x299) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BDAE, serialNumber=E9FE83A94C01BB13D5357F370C765973E997F4D0 Validity Not Before: Jul 19 02:01:27 2025 GMT Not After : Jul 26 02:01:27 2025 GMT Subject: CN=687afc77-8368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:32:15:58:43:11:a0:89:50:1e:fc:37:77:69: 94:fe:f7:9c:18:65:08:ce:5e:f2:1f:c6:d3:d7:35: 4a:8c:1d:14:2d:08:11:1f:b2:6d:ed:31:8a:93:ab: 04:af:19:e9:3f:52:64:75:6b:1f:49:20:39:e8:b7: 66:a6:9a:47:86:ff:64:8f:3b:25:5f:24:9f:e7:b4: 92:24:4b:92:66:13:b5:b0:a3:74:49:3f:e1:72:32: 8f:d5:eb:b9:9e:23:39:5e:56:21:94:61:f6:b7:62: 5a:8b:0f:6a:58:13:a1:c2:eb:8c:a0:1b:23:f4:7f: c7:77:e5:9f:5c:2d:32:cd:98:26:56:9f:32:ba:39: 3f:92:69:c1:a6:5c:5e:92:04:bb:e5:21:32:87:37: 10:3e:de:2a:a8:a8:a4:a5:20:78:7c:6b:19:b6:15: 5d:b3:1d:35:ca:19:b2:5d:32:12:a0:e6:f4:2b:8c: 6f:27:67:d5:87:18:c4:a2:76:86:d9:4d:5a:10:17: a4:31:93:e1:44:af:10:d9:bb:8d:61:e4:ed:4a:96: a4:7b:cf:38:6d:c9:a2:42:5a:de:b3:58:b9:f3:57: 0a:45:03:6c:ce:87:27:69:4f:bb:d0:53:b9:d4:3a: 43:16:ee:0b:83:06:f1:ba:e5:aa:1b:c6:74:28:cd: 50:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:D9:D9:9D:1A:86:EA:6C:0C:DD:30:32:5B:20:3F:33:E7:56:1D:62 X509v3 Authority Key Identifier: keyid:E9:FE:83:A9:4C:01:BB:13:D5:35:7F:37:0C:76:59:73:E9:97:F4:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f6DqUwBuxPVNX83DHZZc-mX9NA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:93:08:31:10:bc:c2:cc:12:88:87:b7:fa:8e:c2:71:64:cd: a7:13:85:67:2d:6c:ea:44:9f:47:02:48:6c:1b:bd:8d:d1:69: b0:dc:ed:21:0f:6a:02:a3:f5:61:70:5b:d9:95:73:55:03:e4: 93:5c:ca:0d:54:7a:bc:a8:23:42:d0:84:61:7c:fe:b2:66:ef: 44:e1:db:d0:d6:17:79:2f:cf:ef:8e:25:f5:81:cf:1a:98:95: 87:b1:99:3c:38:67:4d:af:cb:4e:f8:06:dd:6d:0d:12:85:5e: 35:4f:79:86:96:94:76:fd:08:cc:c8:3b:c3:72:20:9f:83:d5: 62:2b:67:96:c6:c3:75:dc:0c:25:b2:0c:48:6a:30:34:a9:fc: 21:73:b3:e5:1c:3f:f8:fb:4e:56:04:39:5a:28:0e:c7:3a:b3: 90:cb:d4:0b:8e:c1:4f:08:ec:6b:4a:23:03:c0:92:52:22:ab: 66:3e:84:45:a5:87:bc:a6:fc:37:61:c7:14:c1:1a:5a:b4:2a: 5d:45:bd:ac:8b:b4:ab:ff:66:3f:fb:f3:e7:2e:29:2c:2f:6e: f5:ae:39:91:6d:7e:56:d5:e0:13:5f:94:9b:a2:2a:50:ef:a4: 51:5b:b4:1f:e1:85:09:79:7d:7d:d0:80:8d:ce:9a:1f:86:f7: 39:3f:23:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJEQUUxMTAvBgNVBAUTKEU5RkU4M0E5NEMwMUJCMTNENTM1N0YzNzBDNzY1OTcz RTk5N0Y0RDAwHhcNMjUwNzE5MDIwMTI3WhcNMjUwNzI2MDIwMTI3WjAYMRYwFAYD VQQDEw02ODdhZmM3Ny04MzY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0jIVWEMRoIlQHvw3d2mU/vecGGUIzl7yH8bT1zVKjB0ULQgRH7Jt7TGKk6sE rxnpP1JkdWsfSSA56LdmpppHhv9kjzslXySf57SSJEuSZhO1sKN0ST/hcjKP1eu5 niM5XlYhlGH2t2Jaiw9qWBOhwuuMoBsj9H/Hd+WfXC0yzZgmVp8yujk/kmnBplxe kgS75SEyhzcQPt4qqKikpSB4fGsZthVdsx01yhmyXTISoOb0K4xvJ2fVhxjEonaG 2U1aEBekMZPhRK8Q2buNYeTtSpake884bcmiQlres1i581cKRQNszocnaU+70FO5 1DpDFu4LgwbxuuWqG8Z0KM1QYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK3Z2Z0a hupsDN0wMlsgPzPnVh1iMB8GA1UdIwQYMBaAFOn+g6lMAbsT1TV/Nwx2WXPpl/TQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkRBRS9FOEYxMjk5ODBD OTUxMUVEODg2MjU2MzRDNEY5QUUwMi82ZjZEcVV3QnV4UFZOWDgzREhaWmMtbVg5 TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZmNkRxVXdCdXhQVk5YODNESFpaYy1tWDlOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkRBRS9FOEYxMjk5ODBDOTUxMUVEODg2MjU2MzRDNEY5QUUwMi82ZjZEcVV3QnV4 UFZOWDgzREhaWmMtbVg5TkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVkwgxELzCzBKIh7f6jsJxZM2nE4VnLWzqRJ9HAkhsG72N0Wmw3O0h D2oCo/VhcFvZlXNVA+STXMoNVHq8qCNC0IRhfP6yZu9E4dvQ1hd5L8/vjiX1gc8a mJWHsZk8OGdNr8tO+AbdbQ0ShV41T3mGlpR2/QjMyDvDciCfg9ViK2eWxsN13Awl sgxIajA0qfwhc7PlHD/4+05WBDlaKA7HOrOQy9QLjsFPCOxrSiMDwJJSIqtmPoRF pYe8pvw3YccUwRpatCpdRb2si7Sr/2Y/+/PnLiksL271rjmRbX5W1eATX5SboipQ 76RRW7Qf4YUJeX190ICNzpofhvc5PyO4 -----END CERTIFICATE-----Generated at Sun Jul 20 22:28:25 2025 by rpki-client