$ rpki-client -vvf rpki.apnic.net/member_repository/A9165772/04BD1A6C07C411EF852DCC7DC4F9AE02/6osEPoaPdVc7zEVArUlUEC3JIrg.mft File: 6osEPoaPdVc7zEVArUlUEC3JIrg.mft (raw, json) Hash identifier: uINwV0HJC/voOze4JsrdHEecTUXY0sgOblFiJySChbE= Subject key identifier: A2:FF:86:CA:AD:05:ED:4F:EA:3F:1B:AC:8F:C9:C6:C6:F9:F2:09:B1 Authority key identifier: EA:8B:04:3E:86:8F:75:57:3B:CC:45:40:AD:49:54:10:2D:C9:22:B8 Certificate issuer: /CN=A9165772/serialNumber=EA8B043E868F75573BCC4540AD4954102DC922B8 Certificate serial: E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6osEPoaPdVc7zEVArUlUEC3JIrg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165772/04BD1A6C07C411EF852DCC7DC4F9AE02/6osEPoaPdVc7zEVArUlUEC3JIrg.mft Manifest number: E5 Signing time: Mon 21 Jul 2025 05:34:13 +0000 Manifest this update: Mon 21 Jul 2025 05:34:13 +0000 Manifest next update: Mon 28 Jul 2025 05:34:12 +0000 Files and hashes: 1: 6osEPoaPdVc7zEVArUlUEC3JIrg.crl (hash: xQoMi4frDm+/ApvaSyuITOxoOAjoQ/4ST5kZDxuDv0s=) 2: 6EF22D0A07C411EF8A38A486C4F9AE02.roa (hash: Z/bRh5gfICRhTgZIBmGvmKVx5q7fvhoDOyqb8F4Xn3w=) 3: 4F038F1007C511EFB3AD2E14C4F9AE02.roa (hash: YLqUw8RXSjFSw9i6iZFHkMU1fvDuVln4F0j/za3GPYo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165772/04BD1A6C07C411EF852DCC7DC4F9AE02/6osEPoaPdVc7zEVArUlUEC3JIrg.crl rsync://rpki.apnic.net/member_repository/A9165772/04BD1A6C07C411EF852DCC7DC4F9AE02/6osEPoaPdVc7zEVArUlUEC3JIrg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6osEPoaPdVc7zEVArUlUEC3JIrg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 05:34:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 233 (0xe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165772, serialNumber=EA8B043E868F75573BCC4540AD4954102DC922B8 Validity Not Before: Jul 21 05:34:13 2025 GMT Not After : Jul 28 05:34:12 2025 GMT Subject: CN=687dd155-b11d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:37:d9:46:2c:36:64:9d:b1:a0:11:00:d3:91: 08:aa:73:51:3e:f8:04:0e:35:79:c4:29:e6:58:07: 6f:df:d9:1f:70:4b:96:8f:04:3b:e5:75:e7:06:f1: 82:e9:d4:19:19:cd:dd:b0:a1:d0:72:5b:99:e8:9a: fe:31:a4:08:2b:b9:48:23:79:69:fc:bf:76:bd:b0: 22:31:ba:49:39:29:28:f6:06:57:00:c5:74:6e:8b: 97:dc:01:eb:d2:85:96:32:d8:0e:14:65:9f:19:ba: c9:5e:89:f5:f9:3d:00:00:53:07:64:b0:6a:9f:ce: de:5f:9a:7f:f6:e0:5b:53:9b:53:cd:e6:0d:00:1a: 3e:3a:c4:58:aa:3d:c3:94:8e:85:23:3a:c0:22:ee: ef:87:a4:38:78:7f:dc:de:76:2a:d3:13:34:9a:6b: cb:1b:8c:3d:f7:c0:b7:20:b7:7a:44:3b:a1:0b:c6: cc:ef:43:80:16:1a:76:bf:b3:32:16:27:55:65:23: d5:87:c0:a2:29:3c:21:f9:2c:93:72:83:e9:b9:96: 3d:b4:28:47:1b:6b:60:8a:c2:50:1b:7c:6f:2a:0c: 01:1d:d2:43:41:ef:25:e4:2c:92:43:58:2b:94:f3: 47:a0:bc:f1:70:ae:75:f8:f4:7d:94:4b:4f:0a:80: 04:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:FF:86:CA:AD:05:ED:4F:EA:3F:1B:AC:8F:C9:C6:C6:F9:F2:09:B1 X509v3 Authority Key Identifier: keyid:EA:8B:04:3E:86:8F:75:57:3B:CC:45:40:AD:49:54:10:2D:C9:22:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165772/04BD1A6C07C411EF852DCC7DC4F9AE02/6osEPoaPdVc7zEVArUlUEC3JIrg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6osEPoaPdVc7zEVArUlUEC3JIrg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165772/04BD1A6C07C411EF852DCC7DC4F9AE02/6osEPoaPdVc7zEVArUlUEC3JIrg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:6b:01:c7:85:8b:49:ce:70:ca:8e:c9:1d:6a:d9:c9:ed:13: c6:3e:1a:d6:51:c0:09:e7:51:11:e1:2c:b4:fb:40:4e:a3:a2: b7:a7:ec:ff:66:e4:27:32:92:a7:28:98:45:52:92:ef:ed:50: 02:ae:f8:df:cc:b3:08:f1:7c:0e:b8:82:f1:08:6e:20:58:8b: c3:65:ee:a3:f5:5b:8b:a3:37:66:82:6c:da:02:fa:e8:1b:9b: 06:cf:92:92:21:bc:25:eb:33:4e:98:46:46:ee:36:ed:53:cc: 7d:d7:cb:15:5d:23:11:89:de:80:94:07:ab:d0:fd:55:fd:d0: f0:95:e5:a7:59:be:fd:87:a2:4a:98:ac:9d:16:a6:54:d1:a7: f7:34:b3:2a:68:d8:54:88:3b:a9:fd:55:e7:53:b2:ee:07:4e: cc:20:7e:18:cc:6d:96:2d:0a:49:b4:18:05:55:8e:58:6f:84: b3:cb:30:1f:fe:c2:28:fa:0f:83:dd:17:83:c9:6b:60:ac:d2: 45:f6:b9:26:1f:08:f5:84:7d:ac:5a:48:ce:96:3c:84:58:57: b8:f8:d7:f5:10:d3:18:62:a8:49:12:f6:ad:f9:fd:09:04:62: 9b:8d:ae:ed:f4:ed:8f:a4:fe:56:c6:61:ec:53:7b:d1:da:88: 57:20:1f:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU3NzIxMTAvBgNVBAUTKEVBOEIwNDNFODY4Rjc1NTczQkNDNDU0MEFENDk1NDEw MkRDOTIyQjgwHhcNMjUwNzIxMDUzNDEzWhcNMjUwNzI4MDUzNDEyWjAYMRYwFAYD VQQDEw02ODdkZDE1NS1iMTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvDfZRiw2ZJ2xoBEA05EIqnNRPvgEDjV5xCnmWAdv39kfcEuWjwQ75XXnBvGC 6dQZGc3dsKHQcluZ6Jr+MaQIK7lII3lp/L92vbAiMbpJOSko9gZXAMV0bouX3AHr 0oWWMtgOFGWfGbrJXon1+T0AAFMHZLBqn87eX5p/9uBbU5tTzeYNABo+OsRYqj3D lI6FIzrAIu7vh6Q4eH/c3nYq0xM0mmvLG4w998C3ILd6RDuhC8bM70OAFhp2v7My FidVZSPVh8CiKTwh+SyTcoPpuZY9tChHG2tgisJQG3xvKgwBHdJDQe8l5CySQ1gr lPNHoLzxcK51+PR9lEtPCoAEtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKL/hsqt Be1P6j8brI/Jxsb58gmxMB8GA1UdIwQYMBaAFOqLBD6Gj3VXO8xFQK1JVBAtySK4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTc3Mi8wNEJEMUE2QzA3 QzQxMUVGODUyRENDN0RDNEY5QUUwMi82b3NFUG9hUGRWYzd6RVZBclVsVUVDM0pJ cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZvc0VQb2FQZFZjN3pFVkFyVWxVRUMzSklyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTc3Mi8wNEJEMUE2QzA3QzQxMUVGODUyRENDN0RDNEY5QUUwMi82b3NFUG9hUGRW Yzd6RVZBclVsVUVDM0pJcmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBawHHhYtJznDKjskdatnJ7RPGPhrWUcAJ51ER4Sy0+0BOo6K3p+z/ ZuQnMpKnKJhFUpLv7VACrvjfzLMI8XwOuILxCG4gWIvDZe6j9VuLozdmgmzaAvro G5sGz5KSIbwl6zNOmEZG7jbtU8x918sVXSMRid6AlAer0P1V/dDwleWnWb79h6JK mKydFqZU0af3NLMqaNhUiDup/VXnU7LuB07MIH4YzG2WLQpJtBgFVY5Yb4SzyzAf /sIo+g+D3ReDyWtgrNJF9rkmHwj1hH2sWkjOljyEWFe4+Nf1ENMYYqhJEvat+f0J BGKbja7t9O2PpP5WxmHsU3vR2ohXIB83 -----END CERTIFICATE-----Generated at Tue Jul 22 12:10:42 2025 by rpki-client