$ rpki-client -vvf rpki.apnic.net/member_repository/A918BFA2/137678201D9611E2B3FB577E08B02CD2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.mft File: 6wSl6qrVHVvys-1-Z1_U1Ka2QFk.mft (raw, json) Hash identifier: sXfURJeuyO6oC2f9Wp1f0E5dNiIX4e7Gpt6fxeEsMoA= Subject key identifier: F6:D2:B0:85:B2:A0:78:CD:D1:5B:26:48:99:34:AA:64:5E:0C:84:79 Authority key identifier: EB:04:A5:EA:AA:D5:1D:5B:F2:B3:ED:7E:67:5F:D4:D4:A6:B6:40:59 Certificate issuer: /CN=A918BFA2/serialNumber=EB04A5EAAAD51D5BF2B3ED7E675FD4D4A6B64059 Certificate serial: 349E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BFA2/137678201D9611E2B3FB577E08B02CD2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.mft Manifest number: 349E Signing time: Sun 20 Jul 2025 14:51:18 +0000 Manifest this update: Sun 20 Jul 2025 14:51:18 +0000 Manifest next update: Sun 27 Jul 2025 14:51:18 +0000 Files and hashes: 1: 6wSl6qrVHVvys-1-Z1_U1Ka2QFk.crl (hash: UcMegFgSQ6rH2MauWYuLsMdxw4qWOLSmrYILYWBi1vw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BFA2/137678201D9611E2B3FB577E08B02CD2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.crl rsync://rpki.apnic.net/member_repository/A918BFA2/137678201D9611E2B3FB577E08B02CD2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:51:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13470 (0x349e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BFA2, serialNumber=EB04A5EAAAD51D5BF2B3ED7E675FD4D4A6B64059 Validity Not Before: Jul 20 14:51:18 2025 GMT Not After : Jul 27 14:51:18 2025 GMT Subject: CN=687d0266-0a56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8d:a4:a1:51:7f:44:f6:2a:76:2a:91:30:6a: ad:d6:c6:95:00:6c:43:02:61:ec:45:3e:4c:9c:1f: 2d:72:4b:7a:f4:a7:a8:e1:13:77:4f:67:99:88:27: d9:84:6f:f2:fa:36:43:fd:16:23:37:aa:54:07:80: 2a:13:89:96:9c:90:14:f0:31:03:3d:c9:3c:c7:fa: 9c:93:10:db:52:46:0f:a8:63:93:0b:22:f5:8b:e5: 0f:29:ae:b3:a9:1b:a3:b2:eb:63:fb:70:ce:51:a3: e1:1b:b3:c5:4d:3d:87:00:94:08:01:d8:bf:1f:ff: 6c:27:4c:97:6a:6d:46:e7:cc:b4:54:ca:1a:b1:be: cc:2e:f5:21:6a:50:63:66:d9:0a:fd:c3:d9:c1:fc: 97:02:26:88:23:52:78:f5:16:61:81:64:d0:72:1c: b9:87:94:69:e6:18:5f:c2:fe:82:34:9f:06:55:54: 50:32:6e:e1:2c:aa:c6:f4:c2:64:0f:0e:3e:c1:14: 41:3e:2b:d1:e0:32:85:de:2f:b0:45:d5:4f:ac:49: 6d:d2:d5:de:95:22:2c:c0:c1:a1:c8:4d:03:c9:53: b4:5b:61:d9:15:d8:e8:30:47:9e:cd:3c:1a:f4:0b: d3:30:42:ad:da:19:b3:75:64:68:c0:a0:a4:3d:5c: c5:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:D2:B0:85:B2:A0:78:CD:D1:5B:26:48:99:34:AA:64:5E:0C:84:79 X509v3 Authority Key Identifier: keyid:EB:04:A5:EA:AA:D5:1D:5B:F2:B3:ED:7E:67:5F:D4:D4:A6:B6:40:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BFA2/137678201D9611E2B3FB577E08B02CD2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BFA2/137678201D9611E2B3FB577E08B02CD2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:e0:ea:49:23:a8:31:11:c7:ad:54:4e:99:c4:3a:19:12:cf: 00:43:0c:86:bc:9b:e3:fb:62:c1:bd:da:78:a7:6c:95:80:bf: 9f:94:d9:72:75:e6:b1:1f:2f:94:34:ec:71:eb:98:4c:ec:6a: db:b2:7b:de:ca:43:ac:92:df:b9:02:8b:45:63:8b:b6:73:81: ec:26:60:b0:1e:2d:10:62:75:13:2d:66:a8:fe:2d:e2:b7:ea: fa:48:4e:2e:ed:3a:b4:d8:19:e2:d1:98:00:e0:b3:d8:81:c8: 4e:ef:8d:ef:a1:f0:c2:fb:8a:bf:20:1f:5b:ca:db:11:a8:37: 59:84:89:43:df:2c:01:ba:68:fc:64:a6:a9:67:aa:97:43:5d: 55:97:9d:20:74:4c:fd:da:fc:60:3f:0a:f9:a7:ca:fb:53:19: 4c:2a:63:0a:ab:3e:97:e1:fe:01:d9:3f:9a:46:29:0f:b8:d8: 75:64:b8:fe:33:af:34:5a:5b:cc:2c:ea:c9:5e:5f:38:96:3a: 58:c4:be:b7:1f:5c:f7:43:3c:5c:67:7a:a0:d8:37:a7:f9:a1: 8a:24:f7:99:00:e6:88:47:be:04:0c:11:8d:62:97:da:35:22: 58:91:0e:ae:37:e4:7f:77:74:13:e4:b2:75:ef:2e:87:58:2f: 20:2c:be:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJGQTIxMTAvBgNVBAUTKEVCMDRBNUVBQUFENTFENUJGMkIzRUQ3RTY3NUZENEQ0 QTZCNjQwNTkwHhcNMjUwNzIwMTQ1MTE4WhcNMjUwNzI3MTQ1MTE4WjAYMRYwFAYD VQQDEw02ODdkMDI2Ni0wYTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlo2koVF/RPYqdiqRMGqt1saVAGxDAmHsRT5MnB8tckt69Keo4RN3T2eZiCfZ hG/y+jZD/RYjN6pUB4AqE4mWnJAU8DEDPck8x/qckxDbUkYPqGOTCyL1i+UPKa6z qRujsutj+3DOUaPhG7PFTT2HAJQIAdi/H/9sJ0yXam1G58y0VMoasb7MLvUhalBj ZtkK/cPZwfyXAiaII1J49RZhgWTQchy5h5Rp5hhfwv6CNJ8GVVRQMm7hLKrG9MJk Dw4+wRRBPivR4DKF3i+wRdVPrElt0tXelSIswMGhyE0DyVO0W2HZFdjoMEeezTwa 9AvTMEKt2hmzdWRowKCkPVzFXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPbSsIWy oHjN0VsmSJk0qmReDIR5MB8GA1UdIwQYMBaAFOsEpeqq1R1b8rPtfmdf1NSmtkBZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkZBMi8xMzc2NzgyMDFE OTYxMUUyQjNGQjU3N0UwOEIwMkNEMi82d1NsNnFyVkhWdnlzLTEtWjFfVTFLYTJR RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ3U2w2cXJWSFZ2eXMtMS1aMV9VMUthMlFGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkZBMi8xMzc2NzgyMDFEOTYxMUUyQjNGQjU3N0UwOEIwMkNEMi82d1NsNnFyVkhW dnlzLTEtWjFfVTFLYTJRRmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCd4OpJI6gxEcetVE6ZxDoZEs8AQwyGvJvj+2LBvdp4p2yVgL+flNly deaxHy+UNOxx65hM7GrbsnveykOskt+5AotFY4u2c4HsJmCwHi0QYnUTLWao/i3i t+r6SE4u7Tq02Bni0ZgA4LPYgchO743vofDC+4q/IB9bytsRqDdZhIlD3ywBumj8 ZKapZ6qXQ11Vl50gdEz92vxgPwr5p8r7UxlMKmMKqz6X4f4B2T+aRikPuNh1ZLj+ M680WlvMLOrJXl84ljpYxL63H1z3QzxcZ3qg2Den+aGKJPeZAOaIR74EDBGNYpfa NSJYkQ6uN+R/d3QT5LJ17y6HWC8gLL7b -----END CERTIFICATE-----Generated at Mon Jul 21 06:35:22 2025 by rpki-client