$ rpki-client -vvf rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.mft File: 6FKljehxn4vGvWSUmFS0dEe4nN4.mft (raw, json) Hash identifier: QSGXCvKyNdRf6fMSJiT7Tpr1DR4c1km0Wz5Qcmruv2o= Subject key identifier: D9:23:82:E5:DE:6C:2B:48:F2:CF:4B:09:5A:62:C3:14:FD:0B:C3:B1 Authority key identifier: E8:52:A5:8D:E8:71:9F:8B:C6:BD:64:94:98:54:B4:74:47:B8:9C:DE Certificate issuer: /CN=A918F862/serialNumber=E852A58DE8719F8BC6BD64949854B47447B89CDE Certificate serial: 114F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6FKljehxn4vGvWSUmFS0dEe4nN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.mft Manifest number: 1142 Signing time: Fri 18 Jul 2025 17:24:54 +0000 Manifest this update: Fri 18 Jul 2025 17:24:54 +0000 Manifest next update: Fri 25 Jul 2025 17:24:54 +0000 Files and hashes: 1: 6FKljehxn4vGvWSUmFS0dEe4nN4.crl (hash: aglWmJpI0LtSlabrVLZlS3IkO7SmcdG1AgIqQ1HL8Dg=) 2: D1D7F9AE0FF911E9B45E3B10C4F9AE02.roa (hash: 3Wqu6xOv+Yqgn98imVoKo0C/3S3sn8xVZaKt7qUGL5g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.crl rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6FKljehxn4vGvWSUmFS0dEe4nN4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 17:24:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4431 (0x114f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F862, serialNumber=E852A58DE8719F8BC6BD64949854B47447B89CDE Validity Not Before: Jul 18 17:24:54 2025 GMT Not After : Jul 25 17:24:54 2025 GMT Subject: CN=687a8366-3073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9b:c6:cd:49:ce:8b:3a:00:a5:bb:3b:be:7b: fb:5d:c0:c8:36:91:f9:06:91:e5:2f:90:1d:4d:3e: 44:96:f8:c4:74:8f:c7:b1:cf:b0:87:c0:e5:82:dd: cf:93:07:a6:83:9b:57:e2:a4:38:2c:f5:03:cb:a7: 1e:aa:22:8e:7b:ef:9a:a6:ef:66:e6:42:7b:a5:a5: 80:67:52:70:d6:9a:90:38:41:65:7f:f1:d0:f1:a5: 4a:7a:42:a9:1d:e0:7f:76:00:a5:a3:52:a9:98:db: 73:0a:88:39:e1:38:12:d8:7b:41:42:82:e1:e9:6b: 80:3d:2a:5c:a4:0d:ff:b3:a3:09:4d:0f:96:47:3b: d9:fe:22:1f:c4:5e:44:4c:f0:ac:d5:55:eb:12:86: 7f:a9:5a:42:57:90:69:d2:f7:fc:b4:3c:0f:ba:f1: 44:31:b5:9d:d0:52:e5:c0:ef:03:6d:21:44:5b:51: 97:e1:df:76:67:b8:39:e3:6e:86:52:a3:ba:c4:75: e5:a6:92:be:09:90:59:60:80:a0:e7:9e:02:a2:29: 33:28:e6:26:b3:b9:86:eb:ba:21:cc:bd:f1:ae:fc: 2f:e8:ea:59:64:5c:77:44:d3:a5:f2:14:14:19:fa: df:91:1e:43:f8:37:dc:bb:2a:67:61:02:50:52:d1: 9a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:23:82:E5:DE:6C:2B:48:F2:CF:4B:09:5A:62:C3:14:FD:0B:C3:B1 X509v3 Authority Key Identifier: keyid:E8:52:A5:8D:E8:71:9F:8B:C6:BD:64:94:98:54:B4:74:47:B8:9C:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6FKljehxn4vGvWSUmFS0dEe4nN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:08:5a:22:8f:8e:b5:cd:a9:61:26:fc:fd:60:b5:dc:01:39: fd:cd:0e:21:33:d3:43:29:f6:1c:63:96:00:9d:46:1d:5b:9e: 2c:9f:04:ac:d0:17:ae:fa:48:f9:87:e6:72:9f:a4:bd:6f:44: 9a:3b:df:c9:bd:96:a8:41:c5:bf:ca:ad:94:5e:0b:24:e3:00: 50:d4:a3:c4:f7:ab:a9:1d:9c:a9:7c:67:6d:22:16:92:40:ba: ee:b2:9e:bc:99:99:87:f0:70:66:55:df:4e:98:ac:da:56:28: 28:0c:b2:31:1e:68:ec:9c:d0:cc:6a:12:80:bd:e9:39:c7:7c: 40:16:98:91:d4:01:4a:30:57:53:28:c9:2e:8f:60:98:16:a8: 86:a9:a5:bf:b2:8a:33:34:76:18:c8:50:68:9f:3e:6a:60:7a: 1d:66:66:3b:a0:70:45:f8:8f:fb:8f:73:68:44:e8:54:e6:ac: 5e:10:63:01:e5:0b:17:3c:40:66:51:59:88:50:d5:1b:ed:8e: af:ad:a7:82:f8:a9:d0:f1:80:3c:aa:d0:50:e2:65:a2:9d:35: 5f:65:42:6c:7e:ca:f5:7d:69:23:ba:dd:7e:a6:a9:3e:8f:b4: c5:2d:70:51:b7:81:82:23:f4:75:eb:9f:e8:ea:0b:8c:c2:d5: d5:1a:88:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY4NjIxMTAvBgNVBAUTKEU4NTJBNThERTg3MTlGOEJDNkJENjQ5NDk4NTRCNDc0 NDdCODlDREUwHhcNMjUwNzE4MTcyNDU0WhcNMjUwNzI1MTcyNDU0WjAYMRYwFAYD VQQDEw02ODdhODM2Ni0zMDczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArJvGzUnOizoApbs7vnv7XcDINpH5BpHlL5AdTT5ElvjEdI/Hsc+wh8Dlgt3P kwemg5tX4qQ4LPUDy6ceqiKOe++apu9m5kJ7paWAZ1Jw1pqQOEFlf/HQ8aVKekKp HeB/dgClo1KpmNtzCog54TgS2HtBQoLh6WuAPSpcpA3/s6MJTQ+WRzvZ/iIfxF5E TPCs1VXrEoZ/qVpCV5Bp0vf8tDwPuvFEMbWd0FLlwO8DbSFEW1GX4d92Z7g5426G UqO6xHXlppK+CZBZYICg554CoikzKOYms7mG67ohzL3xrvwv6OpZZFx3RNOl8hQU GfrfkR5D+DfcuypnYQJQUtGa5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNkjguXe bCtI8s9LCVpiwxT9C8OxMB8GA1UdIwQYMBaAFOhSpY3ocZ+Lxr1klJhUtHRHuJze MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Rjg2Mi8xRTZGNkMxMjBG RjkxMUU5QTBEOTJCMEZDNEY5QUUwMi82RktsamVoeG40dkd2V1NVbUZTMGRFZTRu TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZGS2xqZWh4bjR2R3ZXU1VtRlMwZEVlNG5ONC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Rjg2Mi8xRTZGNkMxMjBGRjkxMUU5QTBEOTJCMEZDNEY5QUUwMi82RktsamVoeG40 dkd2V1NVbUZTMGRFZTRuTjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7CFoij461zalhJvz9YLXcATn9zQ4hM9NDKfYcY5YAnUYdW54snwSs 0Beu+kj5h+Zyn6S9b0SaO9/JvZaoQcW/yq2UXgsk4wBQ1KPE96upHZypfGdtIhaS QLrusp68mZmH8HBmVd9OmKzaVigoDLIxHmjsnNDMahKAvek5x3xAFpiR1AFKMFdT KMkuj2CYFqiGqaW/soozNHYYyFBonz5qYHodZmY7oHBF+I/7j3NoROhU5qxeEGMB 5QsXPEBmUVmIUNUb7Y6vraeC+KnQ8YA8qtBQ4mWinTVfZUJsfsr1fWkjut1+pqk+ j7TFLXBRt4GCI/R165/o6guMwtXVGojm -----END CERTIFICATE-----Generated at Sun Jul 20 06:16:08 2025 by rpki-client