$ rpki-client -vvf rpki.apnic.net/member_repository/A9114EF6/8DAE05A0D0D411EFBCD5123EC4F9AE02/r0YdV6kKM1svp3p6rsFnNJVJI7E.mft File: r0YdV6kKM1svp3p6rsFnNJVJI7E.mft (raw, json) Hash identifier: Y2o6W9wUOVJurPboDad9PaGSKdbsD5Dj+3eSYkY908E= Subject key identifier: 19:6A:A3:69:AE:3C:B7:C9:53:E6:D7:58:B7:3E:A0:DE:96:C8:B7:5F Authority key identifier: AF:46:1D:57:A9:0A:33:5B:2F:A7:7A:7A:AE:C1:67:34:95:49:23:B1 Certificate issuer: /CN=A9114EF6/serialNumber=AF461D57A90A335B2FA77A7AAEC16734954923B1 Certificate serial: 76 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r0YdV6kKM1svp3p6rsFnNJVJI7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114EF6/8DAE05A0D0D411EFBCD5123EC4F9AE02/r0YdV6kKM1svp3p6rsFnNJVJI7E.mft Manifest number: 6E Signing time: Mon 21 Jul 2025 07:14:13 +0000 Manifest this update: Mon 21 Jul 2025 07:14:12 +0000 Manifest next update: Mon 28 Jul 2025 07:14:12 +0000 Files and hashes: 1: r0YdV6kKM1svp3p6rsFnNJVJI7E.crl (hash: WVNCkfLAXwgAt59r4zivskpxhUR2lej27xH6u/nYaeY=) 2: 7EF2846AD16911EF9ECCE01FC4F9AE02.roa (hash: rKGqZf7K9QKHRBXlpgZth78K2mjkrDt+mwCvAfFIYLc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114EF6/8DAE05A0D0D411EFBCD5123EC4F9AE02/r0YdV6kKM1svp3p6rsFnNJVJI7E.crl rsync://rpki.apnic.net/member_repository/A9114EF6/8DAE05A0D0D411EFBCD5123EC4F9AE02/r0YdV6kKM1svp3p6rsFnNJVJI7E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r0YdV6kKM1svp3p6rsFnNJVJI7E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 07:14:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 118 (0x76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114EF6, serialNumber=AF461D57A90A335B2FA77A7AAEC16734954923B1 Validity Not Before: Jul 21 07:14:12 2025 GMT Not After : Jul 28 07:14:12 2025 GMT Subject: CN=687de8c4-ca77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:94:fd:17:04:8d:11:84:d3:68:33:91:5b:eb: 44:31:13:5c:53:0c:e8:a4:41:a1:89:83:9f:a1:29: 9f:83:d4:35:86:6a:d4:cd:df:58:f4:74:70:23:2b: 93:e5:4d:e1:bb:6e:f6:ef:63:84:c1:43:90:70:8d: 4c:7f:b2:34:9e:6c:9d:a2:88:71:23:5e:fb:96:ca: 17:99:a6:58:c6:b4:54:42:95:02:d8:eb:4b:93:4d: bd:78:fe:f1:63:20:42:a7:a1:cc:9b:15:f3:6d:df: 82:5c:fa:af:16:44:4a:00:d8:6a:c9:86:e5:0c:86: f2:56:a7:f2:ee:07:28:08:14:ba:77:a0:f4:f2:bf: 85:e6:32:2f:40:d4:f4:3a:62:8e:85:9c:1a:13:8a: 2e:9c:ad:14:43:3b:a3:df:f5:54:19:0a:a7:5a:5a: 3a:db:65:97:29:be:f3:b9:f9:1b:49:d7:24:6e:2e: 15:c0:07:da:e7:4f:72:0a:d5:07:0d:03:5d:f5:6b: aa:3a:b6:3d:f0:15:4f:a1:63:d7:26:9f:fd:18:14: 6c:ab:52:26:4a:be:4e:50:bd:d7:33:c9:5d:67:83: 06:89:c9:fd:77:40:cb:aa:04:df:f7:8c:31:14:8f: d5:6b:38:2f:8a:1c:2e:3a:01:a1:a4:a0:2f:35:bf: 21:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:6A:A3:69:AE:3C:B7:C9:53:E6:D7:58:B7:3E:A0:DE:96:C8:B7:5F X509v3 Authority Key Identifier: keyid:AF:46:1D:57:A9:0A:33:5B:2F:A7:7A:7A:AE:C1:67:34:95:49:23:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114EF6/8DAE05A0D0D411EFBCD5123EC4F9AE02/r0YdV6kKM1svp3p6rsFnNJVJI7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r0YdV6kKM1svp3p6rsFnNJVJI7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114EF6/8DAE05A0D0D411EFBCD5123EC4F9AE02/r0YdV6kKM1svp3p6rsFnNJVJI7E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:a8:ed:68:89:22:74:d8:34:f8:cd:09:8a:f7:a5:c2:52:91: 55:0d:d9:ee:89:1a:82:ce:ee:75:af:be:7a:84:c8:da:7e:cd: 49:a1:3f:3f:ee:0f:75:51:0f:29:af:0d:32:b8:4f:e9:b4:0a: 6e:29:1b:ec:a8:8e:e8:a5:ca:5d:e0:9d:40:87:20:47:39:03: c6:8d:f2:f2:41:0b:ce:7d:4c:f4:9e:94:83:90:98:0e:5c:f1: 58:f9:ce:19:e0:c4:8b:1a:62:e8:cd:6f:a9:30:9b:a8:f6:3b: 4c:fb:81:2b:90:55:93:76:89:77:18:22:2a:48:51:4a:82:9e: cc:71:b2:26:f3:8a:1b:08:91:b6:6b:88:f5:94:10:bf:23:cf: bf:4f:11:e5:73:21:3b:e2:d2:18:85:91:32:4b:26:3b:0a:2d: e2:1f:c9:80:1f:d6:e0:fa:50:59:97:33:39:64:47:6d:bd:37: f6:88:33:2b:12:90:8a:44:6c:73:d9:2b:21:8e:41:f2:f7:a8: bd:ae:c0:91:4c:42:a9:d9:51:42:f7:84:bd:c2:e6:b5:82:aa: ed:8e:93:2c:83:1c:03:45:6e:73:e9:3e:44:5b:b0:ad:0d:12: d9:93:29:e1:cd:58:23:d9:f5:c6:75:a9:0d:86:76:fb:db:35: ab:56:e8:e5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NEVGNjExMC8GA1UEBRMoQUY0NjFENTdBOTBBMzM1QjJGQTc3QTdBQUVDMTY3MzQ5 NTQ5MjNCMTAeFw0yNTA3MjEwNzE0MTJaFw0yNTA3MjgwNzE0MTJaMBgxFjAUBgNV BAMTDTY4N2RlOGM0LWNhNzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7lP0XBI0RhNNoM5Fb60QxE1xTDOikQaGJg5+hKZ+D1DWGatTN31j0dHAjK5Pl TeG7bvbvY4TBQ5BwjUx/sjSebJ2iiHEjXvuWyheZpljGtFRClQLY60uTTb14/vFj IEKnocybFfNt34Jc+q8WREoA2GrJhuUMhvJWp/LuBygIFLp3oPTyv4XmMi9A1PQ6 Yo6FnBoTii6crRRDO6Pf9VQZCqdaWjrbZZcpvvO5+RtJ1yRuLhXAB9rnT3IK1QcN A131a6o6tj3wFU+hY9cmn/0YFGyrUiZKvk5QvdczyV1ngwaJyf13QMuqBN/3jDEU j9VrOC+KHC46AaGkoC81vyFhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGWqjaa48 t8lT5tdYtz6g3pbIt18wHwYDVR0jBBgwFoAUr0YdV6kKM1svp3p6rsFnNJVJI7Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0RUY2LzhEQUUwNUEwRDBE NDExRUZCQ0Q1MTIzRUM0RjlBRTAyL3IwWWRWNmtLTTFzdnAzcDZyc0ZuTkpWSkk3 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcjBZZFY2a0tNMXN2cDNwNnJzRm5OSlZKSTdFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0 RUY2LzhEQUUwNUEwRDBENDExRUZCQ0Q1MTIzRUM0RjlBRTAyL3IwWWRWNmtLTTFz dnAzcDZyc0ZuTkpWSkk3RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKSo7WiJInTYNPjNCYr3pcJSkVUN2e6JGoLO7nWvvnqEyNp+zUmhPz/u D3VRDymvDTK4T+m0Cm4pG+yojuilyl3gnUCHIEc5A8aN8vJBC859TPSelIOQmA5c 8Vj5zhngxIsaYujNb6kwm6j2O0z7gSuQVZN2iXcYIipIUUqCnsxxsibzihsIkbZr iPWUEL8jz79PEeVzITvi0hiFkTJLJjsKLeIfyYAf1uD6UFmXMzlkR229N/aIMysS kIpEbHPZKyGOQfL3qL2uwJFMQqnZUUL3hL3C5rWCqu2OkyyDHANFbnPpPkRbsK0N EtmTKeHNWCPZ9cZ1qQ2GdvvbNatW6OU= -----END CERTIFICATE-----Generated at Mon Jul 21 12:47:52 2025 by rpki-client