$ rpki-client -vvf rpki.apnic.net/member_repository/A9120208/BA8674263B9711F0A170C775C4F9AE02/S6E9VJoFZMMeqLIxX84wI7tiiKc.mft File: S6E9VJoFZMMeqLIxX84wI7tiiKc.mft (raw, json) Hash identifier: dbHMFxwNAjlKI4Ae2jgQZ979WPUk77FwLpIwBOQJYd0= Subject key identifier: 0D:89:4D:EA:04:F8:ED:AE:17:74:F7:CD:4A:73:61:78:76:56:9E:16 Authority key identifier: 4B:A1:3D:54:9A:05:64:C3:1E:A8:B2:31:5F:CE:30:23:BB:62:88:A7 Certificate issuer: /CN=A9120208/serialNumber=4BA13D549A0564C31EA8B2315FCE3023BB6288A7 Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S6E9VJoFZMMeqLIxX84wI7tiiKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120208/BA8674263B9711F0A170C775C4F9AE02/S6E9VJoFZMMeqLIxX84wI7tiiKc.mft Manifest number: 20 Signing time: Mon 21 Jul 2025 08:05:44 +0000 Manifest this update: Mon 21 Jul 2025 08:05:43 +0000 Manifest next update: Mon 28 Jul 2025 08:05:43 +0000 Files and hashes: 1: S6E9VJoFZMMeqLIxX84wI7tiiKc.crl (hash: BQvb0tKsE4GdDR52KU88nqlM8eSk3f2dX1eaLy3IEHU=) 2: FB24C32041DC11F091D21255C4F9AE02.roa (hash: YkPIdT5pU6s6PBK/cXBQwdkKPPO1WquYP5q3kmQJuaw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120208/BA8674263B9711F0A170C775C4F9AE02/S6E9VJoFZMMeqLIxX84wI7tiiKc.crl rsync://rpki.apnic.net/member_repository/A9120208/BA8674263B9711F0A170C775C4F9AE02/S6E9VJoFZMMeqLIxX84wI7tiiKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S6E9VJoFZMMeqLIxX84wI7tiiKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 08:05:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120208, serialNumber=4BA13D549A0564C31EA8B2315FCE3023BB6288A7 Validity Not Before: Jul 21 08:05:43 2025 GMT Not After : Jul 28 08:05:43 2025 GMT Subject: CN=687df4d7-7a44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1d:09:c7:18:40:32:79:44:62:8d:48:57:6a: 9b:a6:0e:9f:a0:b4:f7:d3:bb:72:74:6a:16:08:97: 5c:58:70:f7:59:b6:1c:e6:87:fd:04:ed:3e:53:92: 5b:30:09:dd:ea:49:2d:9e:a5:15:c6:f1:ee:69:a9: 6d:7c:bf:5e:27:ae:44:9f:89:28:6f:56:5a:12:d8: e4:20:93:83:a8:a3:bc:40:71:a2:25:0e:dd:73:0a: 7e:33:10:6d:88:1b:5f:b2:79:fb:b5:1d:3f:8f:f2: 1f:18:8e:62:1a:47:f5:c5:3b:86:5a:f0:15:96:81: 64:ae:82:e6:b4:f5:3f:df:73:d3:5f:00:3a:aa:87: 92:47:15:4e:d0:b7:d3:eb:10:0e:1f:28:0e:ce:cc: ef:bb:21:c4:a6:3a:54:1e:09:3a:d7:79:e7:c7:a0: 5d:d9:9c:b5:ed:99:99:50:da:19:9b:69:ff:d3:55: a2:57:f1:bf:3e:c3:b2:08:c7:36:c8:7c:1b:9d:19: 7e:20:92:81:e3:24:93:76:2d:ad:23:23:51:f9:60: 8f:5b:95:31:cc:37:31:13:62:b3:4c:67:ca:da:7c: 1c:b9:70:44:b3:2c:9f:8e:a0:60:1f:19:9a:c5:f6: 08:f0:38:44:fa:c8:87:18:cc:b2:32:b1:ab:a7:49: 81:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:89:4D:EA:04:F8:ED:AE:17:74:F7:CD:4A:73:61:78:76:56:9E:16 X509v3 Authority Key Identifier: keyid:4B:A1:3D:54:9A:05:64:C3:1E:A8:B2:31:5F:CE:30:23:BB:62:88:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120208/BA8674263B9711F0A170C775C4F9AE02/S6E9VJoFZMMeqLIxX84wI7tiiKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S6E9VJoFZMMeqLIxX84wI7tiiKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120208/BA8674263B9711F0A170C775C4F9AE02/S6E9VJoFZMMeqLIxX84wI7tiiKc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:56:1a:5c:cb:33:6c:1a:ed:36:65:15:f5:55:48:c9:ab:71: 58:75:d8:9c:1e:59:e1:68:c3:aa:78:1c:68:e4:11:48:4d:ba: 35:4f:8c:17:17:31:d4:00:3b:06:1a:df:0b:a3:93:1e:2a:95: bf:3e:ea:da:12:af:1a:12:6c:7c:a3:b0:4e:14:cc:4d:53:82: bb:c6:d6:1a:90:4f:e7:0f:83:6e:fb:25:69:9f:51:48:f1:63: 62:0d:7c:8a:20:d6:a4:7f:99:55:76:f1:e1:a6:1a:ab:f4:c0: 49:78:9c:ab:38:0f:f0:80:2a:55:fd:54:59:3f:2c:0f:4c:be: de:c3:00:7c:44:af:c9:bd:7d:14:a1:8f:19:f1:af:d5:65:82: 8e:0b:b1:13:c3:31:e4:10:31:54:97:6b:e5:37:81:a5:d4:1b: 67:4b:16:be:65:35:c3:89:40:83:2f:66:f9:99:a7:a9:74:37: a8:01:b8:b9:d4:f2:73:7c:25:b2:f9:49:4c:18:73:10:ed:0f: 09:ca:3d:c6:4d:b3:0c:78:df:61:b5:99:48:37:81:2b:9e:2a: 51:e1:0e:79:d1:57:52:39:4b:84:33:8d:41:d0:ca:b2:2d:0d: 0b:ff:9c:32:bb:9f:9f:e7:37:91:18:9e:12:54:5f:92:09:3f: 11:35:48:05 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MDIwODExMC8GA1UEBRMoNEJBMTNENTQ5QTA1NjRDMzFFQThCMjMxNUZDRTMwMjNC QjYyODhBNzAeFw0yNTA3MjEwODA1NDNaFw0yNTA3MjgwODA1NDNaMBgxFjAUBgNV BAMTDTY4N2RmNGQ3LTdhNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0HQnHGEAyeURijUhXapumDp+gtPfTu3J0ahYIl1xYcPdZthzmh/0E7T5Tklsw Cd3qSS2epRXG8e5pqW18v14nrkSfiShvVloS2OQgk4Ooo7xAcaIlDt1zCn4zEG2I G1+yefu1HT+P8h8YjmIaR/XFO4Za8BWWgWSugua09T/fc9NfADqqh5JHFU7Qt9Pr EA4fKA7OzO+7IcSmOlQeCTrXeefHoF3ZnLXtmZlQ2hmbaf/TVaJX8b8+w7IIxzbI fBudGX4gkoHjJJN2La0jI1H5YI9blTHMNzETYrNMZ8rafBy5cESzLJ+OoGAfGZrF 9gjwOET6yIcYzLIysaunSYEHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDYlN6gT4 7a4XdPfNSnNheHZWnhYwHwYDVR0jBBgwFoAUS6E9VJoFZMMeqLIxX84wI7tiiKcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIwMjA4L0JBODY3NDI2M0I5 NzExRjBBMTcwQzc3NUM0RjlBRTAyL1M2RTlWSm9GWk1NZXFMSXhYODR3STd0aWlL Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUzZFOVZKb0ZaTU1lcUxJeFg4NHdJN3RpaUtjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIw MjA4L0JBODY3NDI2M0I5NzExRjBBMTcwQzc3NUM0RjlBRTAyL1M2RTlWSm9GWk1N ZXFMSXhYODR3STd0aWlLYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIRWGlzLM2wa7TZlFfVVSMmrcVh12JweWeFow6p4HGjkEUhNujVPjBcX MdQAOwYa3wujkx4qlb8+6toSrxoSbHyjsE4UzE1TgrvG1hqQT+cPg277JWmfUUjx Y2INfIog1qR/mVV28eGmGqv0wEl4nKs4D/CAKlX9VFk/LA9Mvt7DAHxEr8m9fRSh jxnxr9Vlgo4LsRPDMeQQMVSXa+U3gaXUG2dLFr5lNcOJQIMvZvmZp6l0N6gBuLnU 8nN8JbL5SUwYcxDtDwnKPcZNswx432G1mUg3gSueKlHhDnnRV1I5S4QzjUHQyrIt DQv/nDK7n5/nN5EYnhJUX5IJPxE1SAU= -----END CERTIFICATE-----Generated at Mon Jul 21 13:22:01 2025 by rpki-client