$ rpki-client -vvf rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft File: h6R_J-defCg5wTM1HaJRFILG-bQ.mft (raw, json) Hash identifier: pUcyCKmt0emEzZGvDoLA7Alt7dSW+dV4L38p8A0RC0Q= Subject key identifier: 2C:EF:AC:49:D6:D1:A4:49:B0:97:9D:49:C1:2C:32:41:B0:7F:B9:6B Authority key identifier: 87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4 Certificate issuer: /CN=A911C621/serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4 Certificate serial: 021C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft Manifest number: 01FC Signing time: Sat 19 Jul 2025 02:46:31 +0000 Manifest this update: Sat 19 Jul 2025 02:46:30 +0000 Manifest next update: Sat 26 Jul 2025 02:46:30 +0000 Files and hashes: 1: h6R_J-defCg5wTM1HaJRFILG-bQ.crl (hash: qnB28F4oZcrV851MlwUyQJD6F0AgjunKk2iOjYzCKR4=) 2: 0863E3F642DA11F0AAB03C37C4F9AE02.roa (hash: Tf/IGi1ICXtoXaqQ78IcykbXi91E4+JpuO9PMd4skSo=) 3: 7E7B632E8D6611EDB7F20B1FC4F9AE02.roa (hash: kCFs9nmPiAnIcv8oJpJvtJLqB5yozfBXxDX1yoHDz3Q=) 4: 7D7547C48D6611EDB7F20B1FC4F9AE02.roa (hash: 15pVERijhw/wdJE16SjLjUvjRTutNcev/TWYcbcb+WY=) 5: 5D21607ADDF211EDA14C0C56C4F9AE02.roa (hash: qXl8VijXeUBq5YZGQbPFuyGm9qVJaEd0Hn4beaPuvSE=) 6: 1D956B9E858811ED9CDCC91BC4F9AE02.roa (hash: SS3DT3rVQ2RIIspyHG3PNw/Nkcbg7KmAnjQNkHYA/tU=) 7: E4DFE77CD77E11ED8E33F181C4F9AE02.roa (hash: 5xN+Wv93iJltArr43SjcRaq1i5ZKH/wlPD32n7ycLFk=) 8: 07A28E0E42DA11F0AAB03C37C4F9AE02.roa (hash: 6Dj2SuYopnU3KhVpEQsxoPjoZpbXyzCQPJ+pNdncb7g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:46:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 540 (0x21c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C621, serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4 Validity Not Before: Jul 19 02:46:30 2025 GMT Not After : Jul 26 02:46:30 2025 GMT Subject: CN=687b0707-1701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3c:ef:46:74:8c:5f:15:58:31:0e:ab:a4:57: 7f:5a:df:03:c9:e2:2b:40:49:05:de:66:71:b1:ce: 93:5c:56:42:75:5d:ba:d8:2a:66:2a:21:c5:ac:a2: 03:c3:db:78:34:75:d4:fa:37:9c:bd:99:7a:6c:37: 27:86:f2:08:db:11:0e:85:cc:9d:f0:51:26:df:e2: ba:9e:1c:b8:fb:ac:1c:f3:1f:cb:ae:a1:a0:bf:ec: 3f:80:45:15:76:1c:29:0a:8f:3f:44:15:8a:a9:7c: bb:78:59:55:7e:6f:fc:1b:bc:b1:9c:4c:f3:f5:44: 07:ad:89:9d:5b:77:d7:03:05:d2:06:4b:83:d4:44: 79:89:39:37:ca:74:97:d7:45:70:07:76:88:ec:b6: cb:87:1e:9b:27:e1:2e:cf:b1:13:58:41:6c:d8:98: df:8c:bf:8c:0a:f8:9c:cf:55:03:f1:5a:78:16:67: ad:ed:ea:d4:d5:39:b1:dd:30:14:b2:63:0c:b3:69: a3:f1:0c:6c:78:54:ff:69:af:c7:3f:82:f3:ed:7a: 8f:4b:b4:47:50:74:29:4e:3c:ba:a7:83:2e:23:c3: 44:e6:f1:a6:ff:77:48:e0:bd:9f:d7:44:bc:57:92: f8:7f:57:89:8c:b4:0b:35:e0:72:b6:1c:06:19:5f: 8a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:EF:AC:49:D6:D1:A4:49:B0:97:9D:49:C1:2C:32:41:B0:7F:B9:6B X509v3 Authority Key Identifier: keyid:87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:47:1f:9d:f6:38:7b:60:9d:dc:d4:82:46:c1:81:97:61:cc: 51:51:5a:9f:16:4d:5b:1a:3a:44:00:96:62:56:0a:36:e6:fe: 2b:fb:97:dc:78:29:b6:5f:42:02:ec:76:3e:c6:68:b3:ae:ad: a2:c3:5c:7b:2b:97:b3:5f:58:72:00:ab:51:3b:c0:e4:f0:2c: df:bc:ad:a6:85:e3:4e:1f:b6:70:03:4e:0f:ce:06:5b:16:a2: 5d:1f:5e:c1:14:5a:b0:79:4b:74:48:4f:f5:65:b4:31:96:ac: 24:2a:18:ba:37:ee:f7:e1:86:de:5a:23:c1:aa:0d:fd:ab:fc: d5:df:2c:c5:93:48:03:bb:d1:42:7f:dc:3c:cd:52:12:14:52: cd:4b:2b:65:19:11:3c:fa:39:7c:1c:f7:bb:a2:21:9c:43:24: b8:a0:e9:7c:8d:47:d6:4d:24:02:ae:fc:28:24:3e:71:0f:3d: 61:92:c3:1f:b7:d1:6b:a5:97:e9:5f:14:b3:ed:33:2f:8e:dc: 5e:6c:7f:b7:b6:57:cb:4c:0f:1e:12:08:cb:86:e8:c0:10:a3: cd:fe:6d:47:23:2a:b0:19:dd:14:0f:13:a2:a8:2d:7e:38:42: 59:ef:3d:70:59:1c:a2:f7:56:a7:fc:23:e4:fd:45:c9:de:21: 17:b2:4f:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM2MjExMTAvBgNVBAUTKDg3QTQ3RjI3RTc1RTdDMjgzOUMxMzMzNTFEQTI1MTE0 ODJDNkY5QjQwHhcNMjUwNzE5MDI0NjMwWhcNMjUwNzI2MDI0NjMwWjAYMRYwFAYD VQQDEw02ODdiMDcwNy0xNzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvDzvRnSMXxVYMQ6rpFd/Wt8DyeIrQEkF3mZxsc6TXFZCdV262CpmKiHFrKID w9t4NHXU+jecvZl6bDcnhvII2xEOhcyd8FEm3+K6nhy4+6wc8x/LrqGgv+w/gEUV dhwpCo8/RBWKqXy7eFlVfm/8G7yxnEzz9UQHrYmdW3fXAwXSBkuD1ER5iTk3ynSX 10VwB3aI7LbLhx6bJ+Euz7ETWEFs2JjfjL+MCvicz1UD8Vp4Fmet7erU1Tmx3TAU smMMs2mj8QxseFT/aa/HP4Lz7XqPS7RHUHQpTjy6p4MuI8NE5vGm/3dI4L2f10S8 V5L4f1eJjLQLNeBythwGGV+K1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCzvrEnW 0aRJsJedScEsMkGwf7lrMB8GA1UdIwQYMBaAFIekfyfnXnwoOcEzNR2iURSCxvm0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzYyMS9GN0QwMEJFRTc0 MzkxMUVEOTg2RDczODVDNEY5QUUwMi9oNlJfSi1kZWZDZzV3VE0xSGFKUkZJTEct YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g2Ul9KLWRlZkNnNXdUTTFIYUpSRklMRy1iUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzYyMS9GN0QwMEJFRTc0MzkxMUVEOTg2RDczODVDNEY5QUUwMi9oNlJfSi1kZWZD ZzV3VE0xSGFKUkZJTEctYlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9Rx+d9jh7YJ3c1IJGwYGXYcxRUVqfFk1bGjpEAJZiVgo25v4r+5fc eCm2X0IC7HY+xmizrq2iw1x7K5ezX1hyAKtRO8Dk8CzfvK2mheNOH7ZwA04PzgZb FqJdH17BFFqweUt0SE/1ZbQxlqwkKhi6N+734YbeWiPBqg39q/zV3yzFk0gDu9FC f9w8zVISFFLNSytlGRE8+jl8HPe7oiGcQyS4oOl8jUfWTSQCrvwoJD5xDz1hksMf t9FrpZfpXxSz7TMvjtxebH+3tlfLTA8eEgjLhujAEKPN/m1HIyqwGd0UDxOiqC1+ OEJZ7z1wWRyi91an/CPk/UXJ3iEXsk8f -----END CERTIFICATE-----Generated at Sun Jul 20 11:37:49 2025 by rpki-client