$ rpki-client -vvf rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.mft File: C6HFLWJbsbnkQzglDaPWTYBoego.mft (raw, json) Hash identifier: jT3+EVeoP68eQFEkKa3i6i7NOzwQQ5eDwLlu+z44BOM= Subject key identifier: 1F:4C:2C:90:D9:76:4D:E6:F9:37:A3:C3:5D:F4:9E:83:B8:8D:98:72 Authority key identifier: 0B:A1:C5:2D:62:5B:B1:B9:E4:43:38:25:0D:A3:D6:4D:80:68:7A:0A Certificate issuer: /CN=A9140E48/serialNumber=0BA1C52D625BB1B9E44338250DA3D64D80687A0A Certificate serial: 0556 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6HFLWJbsbnkQzglDaPWTYBoego.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.mft Manifest number: 0550 Signing time: Sun 20 Jul 2025 23:36:36 +0000 Manifest this update: Sun 20 Jul 2025 23:36:35 +0000 Manifest next update: Sun 27 Jul 2025 23:36:35 +0000 Files and hashes: 1: C6HFLWJbsbnkQzglDaPWTYBoego.crl (hash: B1hk5MXGWlT0Sek3Nv16WAV6+zqHkHA+jQuTZxzXUvg=) 2: D5FFCB96F9D611EB8A9FCE34C4F9AE02.roa (hash: EHUc5Goa9nVY7SlTfmeqrv5ucf88hUBAHLp60F7iD50=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.crl rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6HFLWJbsbnkQzglDaPWTYBoego.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 23:36:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1366 (0x556) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140E48, serialNumber=0BA1C52D625BB1B9E44338250DA3D64D80687A0A Validity Not Before: Jul 20 23:36:35 2025 GMT Not After : Jul 27 23:36:35 2025 GMT Subject: CN=687d7d83-8c74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:65:ed:74:96:6b:0b:cb:46:88:ad:e4:fd:43: 48:e6:bd:b5:30:e4:aa:1e:0c:f9:ea:29:71:f3:5b: 06:2f:b2:6c:4d:ff:60:0b:0e:7b:0e:90:20:4d:17: b9:87:62:38:e6:bc:fe:50:65:8d:b3:0d:8f:10:f2: a1:d8:7c:08:15:5a:99:32:0d:f9:38:53:6a:ae:0d: 99:73:c0:53:af:6f:50:fd:8f:45:19:96:47:2e:e0: c2:72:f9:77:c9:9d:60:1e:46:00:da:e1:78:ad:9e: f0:f7:2a:eb:1f:16:0a:7d:19:36:32:aa:ae:21:72: 0c:78:1e:25:87:0c:91:0e:2f:cf:d6:82:e0:b8:8e: 40:c5:72:35:3f:54:13:b3:a6:a7:45:02:bf:96:8d: 28:bc:5e:f7:7b:d1:f8:f3:11:69:93:eb:49:d8:04: 55:7f:16:e4:cc:a2:63:83:f8:18:cc:75:75:ec:f4: 58:9c:d4:60:4f:b3:50:83:34:ce:39:85:15:f7:2a: 1a:7a:d4:ff:d7:66:2f:92:85:6a:7d:48:ea:20:23: a3:00:20:cf:7d:c7:b7:47:fd:96:9c:ac:9e:94:55: e8:6a:e8:cb:da:b9:df:f7:17:22:ea:54:d3:2e:bd: d7:60:d9:5d:9b:3b:52:fa:35:10:f2:3f:30:56:bb: 6e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:4C:2C:90:D9:76:4D:E6:F9:37:A3:C3:5D:F4:9E:83:B8:8D:98:72 X509v3 Authority Key Identifier: keyid:0B:A1:C5:2D:62:5B:B1:B9:E4:43:38:25:0D:A3:D6:4D:80:68:7A:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6HFLWJbsbnkQzglDaPWTYBoego.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:fe:f8:78:e7:0f:17:08:d0:d3:e1:97:0a:44:3b:57:07:01: f1:73:81:dc:74:1a:09:06:0d:74:5f:3c:9e:6b:0d:fe:89:0d: 1c:11:2e:ec:d6:65:55:de:4c:1b:35:16:65:84:98:40:cf:77: d7:55:b6:c6:a7:71:8d:87:8d:1e:6c:c9:d6:e9:93:dc:93:ef: a9:4b:a7:8b:1f:c7:d7:87:6e:66:21:9d:15:f4:46:74:69:00: ea:f1:e9:e0:24:93:84:b7:5c:85:9f:29:09:44:c1:00:31:d3: 15:04:93:70:db:0d:2c:b4:8c:aa:94:fa:12:36:f8:c6:91:b9: d2:83:d3:96:6b:e9:c5:bd:bf:ee:2b:dd:37:d6:ab:10:3b:51: b5:89:e8:34:ae:e2:a2:59:2c:2a:bc:a8:f3:85:ff:0c:ff:62: 98:55:58:ef:df:cc:6b:e2:b3:c2:2e:40:27:ea:5b:a2:69:87: e2:82:bb:9e:39:bc:aa:a1:b9:67:85:8a:39:d3:05:13:da:6c: 6d:14:ec:7f:47:df:24:3b:7e:14:30:a4:99:f3:89:61:bf:f9: 3f:ab:bf:f0:3b:3c:d8:60:6b:1e:2f:a0:0f:6f:19:13:db:55: a6:cd:92:d6:03:7b:5f:29:6e:2a:5e:6e:04:54:c8:b2:06:ae: a2:f6:10:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBFNDgxMTAvBgNVBAUTKDBCQTFDNTJENjI1QkIxQjlFNDQzMzgyNTBEQTNENjRE ODA2ODdBMEEwHhcNMjUwNzIwMjMzNjM1WhcNMjUwNzI3MjMzNjM1WjAYMRYwFAYD VQQDEw02ODdkN2Q4My04Yzc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu2XtdJZrC8tGiK3k/UNI5r21MOSqHgz56ilx81sGL7JsTf9gCw57DpAgTRe5 h2I45rz+UGWNsw2PEPKh2HwIFVqZMg35OFNqrg2Zc8BTr29Q/Y9FGZZHLuDCcvl3 yZ1gHkYA2uF4rZ7w9yrrHxYKfRk2MqquIXIMeB4lhwyRDi/P1oLguI5AxXI1P1QT s6anRQK/lo0ovF73e9H48xFpk+tJ2ARVfxbkzKJjg/gYzHV17PRYnNRgT7NQgzTO OYUV9yoaetT/12YvkoVqfUjqICOjACDPfce3R/2WnKyelFXoaujL2rnf9xci6lTT Lr3XYNldmztS+jUQ8j8wVrtuyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB9MLJDZ dk3m+Tejw130noO4jZhyMB8GA1UdIwQYMBaAFAuhxS1iW7G55EM4JQ2j1k2AaHoK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEU0OC81MEVGRDg3NkY5 RDQxMUVCOTc5NDgzMTFDNEY5QUUwMi9DNkhGTFdKYnNibmtRemdsRGFQV1RZQm9l Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M2SEZMV0pic2Jua1F6Z2xEYVBXVFlCb2Vnby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEU0OC81MEVGRDg3NkY5RDQxMUVCOTc5NDgzMTFDNEY5QUUwMi9DNkhGTFdKYnNi bmtRemdsRGFQV1RZQm9lZ28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAn/vh45w8XCNDT4ZcKRDtXBwHxc4HcdBoJBg10Xzyeaw3+iQ0cES7s 1mVV3kwbNRZlhJhAz3fXVbbGp3GNh40ebMnW6ZPck++pS6eLH8fXh25mIZ0V9EZ0 aQDq8engJJOEt1yFnykJRMEAMdMVBJNw2w0stIyqlPoSNvjGkbnSg9OWa+nFvb/u K9031qsQO1G1ieg0ruKiWSwqvKjzhf8M/2KYVVjv38xr4rPCLkAn6luiaYfigrue ObyqoblnhYo50wUT2mxtFOx/R98kO34UMKSZ84lhv/k/q7/wOzzYYGseL6APbxkT 21WmzZLWA3tfKW4qXm4EVMiyBq6i9hC6 -----END CERTIFICATE-----Generated at Mon Jul 21 18:22:54 2025 by rpki-client