$ rpki-client -vvf rpki.apnic.net/member_repository/A913F13A/F3E4D2CE0C1F11EAAFDAE02AC4F9AE02/k6TJbWKYFprgVdTqJmgrEHL7lQI.mft File: k6TJbWKYFprgVdTqJmgrEHL7lQI.mft (raw, json) Hash identifier: /f96e5YHvIko1dc78GiYmQX/DA2l32Kpq/Owybk4SeE= Subject key identifier: B5:DA:AB:D0:29:12:9D:3D:B3:32:0C:C5:B6:40:12:12:D0:1D:92:4A Authority key identifier: 93:A4:C9:6D:62:98:16:9A:E0:55:D4:EA:26:68:2B:10:72:FB:95:02 Certificate issuer: /CN=A913F13A/serialNumber=93A4C96D6298169AE055D4EA26682B1072FB9502 Certificate serial: 0C3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k6TJbWKYFprgVdTqJmgrEHL7lQI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F13A/F3E4D2CE0C1F11EAAFDAE02AC4F9AE02/k6TJbWKYFprgVdTqJmgrEHL7lQI.mft Manifest number: 0C37 Signing time: Fri 18 Jul 2025 18:46:08 +0000 Manifest this update: Fri 18 Jul 2025 18:46:07 +0000 Manifest next update: Fri 25 Jul 2025 18:46:07 +0000 Files and hashes: 1: k6TJbWKYFprgVdTqJmgrEHL7lQI.crl (hash: cqoFmd6GbCZ/iAXjQOXfl81MYCvgGrL4mr1caL4vi0w=) 2: EF2EEFEEFE6711EBB771CF1BC4F9AE02.roa (hash: L5tqJHyg+8gIFIm1ykvt4HmQLazog9tmOzpHF2+Hn9w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F13A/F3E4D2CE0C1F11EAAFDAE02AC4F9AE02/k6TJbWKYFprgVdTqJmgrEHL7lQI.crl rsync://rpki.apnic.net/member_repository/A913F13A/F3E4D2CE0C1F11EAAFDAE02AC4F9AE02/k6TJbWKYFprgVdTqJmgrEHL7lQI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k6TJbWKYFprgVdTqJmgrEHL7lQI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 18:46:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3132 (0xc3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F13A, serialNumber=93A4C96D6298169AE055D4EA26682B1072FB9502 Validity Not Before: Jul 18 18:46:07 2025 GMT Not After : Jul 25 18:46:07 2025 GMT Subject: CN=687a9670-13ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6f:a5:33:a5:86:e1:b5:2e:cb:3d:18:b8:15: 8d:75:2a:e7:d3:ce:0c:4b:a4:4e:0f:a7:83:1a:4e: 60:a3:c4:43:a4:a9:86:60:12:c5:e0:52:6b:e7:ee: 5f:5f:d4:34:a3:53:56:4f:70:3e:61:f5:a9:19:b3: ef:4b:7e:be:34:1d:1f:6e:35:91:46:cd:5a:51:00: 5a:b8:44:12:a3:d2:2e:a2:fa:4a:6f:35:58:dc:e5: 26:cf:c1:51:1d:73:13:cf:a3:55:7f:47:70:ed:07: fb:c5:89:67:3b:6b:ec:6b:27:2e:00:ec:02:2c:2d: e4:14:47:e0:af:b0:e3:41:14:53:ed:7a:15:63:10: d2:b4:c1:04:41:df:f4:c2:e4:d4:15:87:aa:49:db: fc:f1:78:6a:2b:1b:e9:4e:bd:b8:18:bf:ea:5d:9f: d2:eb:cd:57:ca:2e:23:6f:2c:1b:6d:59:b1:00:51: 2d:40:f0:09:8d:88:ed:90:c9:d6:88:26:34:76:3b: 42:43:21:d1:5e:36:d7:c7:36:ee:f4:6c:9f:8b:68: 7c:62:e7:12:4b:82:f1:40:dd:ef:8c:d9:0b:9d:1b: 5a:c4:58:62:bf:55:bf:af:20:cc:1b:67:0d:d0:29: 83:ab:4f:cd:af:4d:bd:25:96:21:86:77:af:d9:e3: 75:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:DA:AB:D0:29:12:9D:3D:B3:32:0C:C5:B6:40:12:12:D0:1D:92:4A X509v3 Authority Key Identifier: keyid:93:A4:C9:6D:62:98:16:9A:E0:55:D4:EA:26:68:2B:10:72:FB:95:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F13A/F3E4D2CE0C1F11EAAFDAE02AC4F9AE02/k6TJbWKYFprgVdTqJmgrEHL7lQI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k6TJbWKYFprgVdTqJmgrEHL7lQI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F13A/F3E4D2CE0C1F11EAAFDAE02AC4F9AE02/k6TJbWKYFprgVdTqJmgrEHL7lQI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:c7:81:8e:3f:ca:c6:50:ed:2a:c8:d3:2b:8e:63:aa:35:eb: cd:32:36:f7:fe:74:8a:04:f4:41:04:9f:38:96:7e:8f:20:7a: e3:91:20:d4:70:82:f2:3b:f0:38:77:bb:87:7b:52:f5:e0:59: 19:f9:a5:d5:b9:d6:33:02:db:3a:bc:f2:bd:d6:d8:96:fb:8c: 10:16:c3:d9:41:f7:e8:9f:4a:30:b9:72:95:10:85:ea:58:b2: 13:c8:c1:aa:70:e5:70:35:e1:36:98:9e:32:6e:b9:f8:8b:2d: 4f:d2:53:0f:38:7a:b3:66:8a:d2:9b:4c:59:b4:c5:1b:14:b5: c2:4e:86:e4:ef:59:b7:92:c6:cf:af:82:39:3e:70:a4:2f:4f: 33:b8:c5:85:2a:11:83:89:5e:9a:88:53:44:41:04:3c:b9:92: 58:83:8e:2e:f4:c7:60:1e:53:f1:50:23:1c:20:eb:fd:1d:df: 45:59:c0:e5:07:85:03:24:3c:8c:f9:53:68:0e:2b:a9:0d:39: 18:f2:ac:5d:93:f4:f4:cb:97:63:38:70:7b:11:00:db:04:26: fa:5e:e5:f4:56:34:49:80:d6:b4:2c:bb:a6:53:07:c5:fb:17: 9f:03:32:d5:77:4f:8e:5a:c0:da:39:9b:e5:58:5a:48:7c:30: 15:08:77:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YxM0ExMTAvBgNVBAUTKDkzQTRDOTZENjI5ODE2OUFFMDU1RDRFQTI2NjgyQjEw NzJGQjk1MDIwHhcNMjUwNzE4MTg0NjA3WhcNMjUwNzI1MTg0NjA3WjAYMRYwFAYD VQQDEw02ODdhOTY3MC0xM2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqW+lM6WG4bUuyz0YuBWNdSrn084MS6ROD6eDGk5go8RDpKmGYBLF4FJr5+5f X9Q0o1NWT3A+YfWpGbPvS36+NB0fbjWRRs1aUQBauEQSo9IuovpKbzVY3OUmz8FR HXMTz6NVf0dw7Qf7xYlnO2vsaycuAOwCLC3kFEfgr7DjQRRT7XoVYxDStMEEQd/0 wuTUFYeqSdv88XhqKxvpTr24GL/qXZ/S681Xyi4jbywbbVmxAFEtQPAJjYjtkMnW iCY0djtCQyHRXjbXxzbu9Gyfi2h8YucSS4LxQN3vjNkLnRtaxFhiv1W/ryDMG2cN 0CmDq0/Nr029JZYhhnev2eN1lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLXaq9Ap Ep09szIMxbZAEhLQHZJKMB8GA1UdIwQYMBaAFJOkyW1imBaa4FXU6iZoKxBy+5UC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjEzQS9GM0U0RDJDRTBD MUYxMUVBQUZEQUUwMkFDNEY5QUUwMi9rNlRKYldLWUZwcmdWZFRxSm1nckVITDds UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s2VEpiV0tZRnByZ1ZkVHFKbWdyRUhMN2xRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjEzQS9GM0U0RDJDRTBDMUYxMUVBQUZEQUUwMkFDNEY5QUUwMi9rNlRKYldLWUZw cmdWZFRxSm1nckVITDdsUUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALx4GOP8rGUO0qyNMrjmOqNevNMjb3/nSKBPRBBJ84ln6PIHrjkSDU cILyO/A4d7uHe1L14FkZ+aXVudYzAts6vPK91tiW+4wQFsPZQffon0owuXKVEIXq WLITyMGqcOVwNeE2mJ4ybrn4iy1P0lMPOHqzZorSm0xZtMUbFLXCTobk71m3ksbP r4I5PnCkL08zuMWFKhGDiV6aiFNEQQQ8uZJYg44u9MdgHlPxUCMcIOv9Hd9FWcDl B4UDJDyM+VNoDiupDTkY8qxdk/T0y5djOHB7EQDbBCb6XuX0VjRJgNa0LLumUwfF +xefAzLVd0+OWsDaOZvlWFpIfDAVCHc3 -----END CERTIFICATE-----Generated at Sun Jul 20 09:55:48 2025 by rpki-client