$ rpki-client -vvf rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft File: h6R_J-defCg5wTM1HaJRFILG-bQ.mft (raw, json) Hash identifier: n1r/IgHCiKhfpNfxl2Z2FeFZORfraqPk8ZMc4rzhWng= Subject key identifier: 08:81:D6:EB:FF:C7:1E:D7:0A:D6:81:8A:BF:48:37:69:E6:49:00:17 Authority key identifier: 87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4 Certificate issuer: /CN=A911C621/serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4 Certificate serial: 020F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft Manifest number: 01EF Signing time: Mon 23 Jun 2025 01:43:28 +0000 Manifest this update: Mon 23 Jun 2025 01:43:28 +0000 Manifest next update: Mon 30 Jun 2025 01:43:28 +0000 Files and hashes: 1: h6R_J-defCg5wTM1HaJRFILG-bQ.crl (hash: bt59wRfetfWl0/CameL+iOEMdaijS9sLXetSBezs5jI=) 2: 0863E3F642DA11F0AAB03C37C4F9AE02.roa (hash: Tf/IGi1ICXtoXaqQ78IcykbXi91E4+JpuO9PMd4skSo=) 3: 7E7B632E8D6611EDB7F20B1FC4F9AE02.roa (hash: kCFs9nmPiAnIcv8oJpJvtJLqB5yozfBXxDX1yoHDz3Q=) 4: 7D7547C48D6611EDB7F20B1FC4F9AE02.roa (hash: 15pVERijhw/wdJE16SjLjUvjRTutNcev/TWYcbcb+WY=) 5: 5D21607ADDF211EDA14C0C56C4F9AE02.roa (hash: qXl8VijXeUBq5YZGQbPFuyGm9qVJaEd0Hn4beaPuvSE=) 6: 1D956B9E858811ED9CDCC91BC4F9AE02.roa (hash: SS3DT3rVQ2RIIspyHG3PNw/Nkcbg7KmAnjQNkHYA/tU=) 7: E4DFE77CD77E11ED8E33F181C4F9AE02.roa (hash: 5xN+Wv93iJltArr43SjcRaq1i5ZKH/wlPD32n7ycLFk=) 8: 07A28E0E42DA11F0AAB03C37C4F9AE02.roa (hash: 6Dj2SuYopnU3KhVpEQsxoPjoZpbXyzCQPJ+pNdncb7g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Jun 2025 01:43:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 527 (0x20f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C621, serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4 Validity Not Before: Jun 23 01:43:28 2025 GMT Not After : Jun 30 01:43:28 2025 GMT Subject: CN=6858b140-411d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5b:17:f4:fb:f4:da:ea:88:ed:02:81:87:b8: 81:21:bf:e7:19:6e:17:61:1b:3d:b8:af:17:40:0e: 78:55:22:f8:d6:47:46:07:a5:66:54:b5:a1:99:1d: 05:d4:a3:04:3d:59:ce:d7:b0:b7:d9:83:82:51:2c: 70:e4:9a:94:cf:59:14:db:14:7f:bc:a4:3f:84:e1: 68:31:dd:be:3e:d1:1f:ff:ae:fe:0a:f8:dc:ba:c1: e0:fa:d1:e7:22:65:90:f0:12:a2:8d:3d:9d:65:af: ad:be:cb:db:5a:0e:6b:af:9b:30:ad:13:c1:3a:b7: 8f:db:84:d6:fc:61:a0:ff:a7:3d:db:f0:38:82:8e: 7b:1c:ca:1f:31:bc:cf:ec:10:e8:ec:6e:cc:fb:28: 06:5a:69:a0:ad:b8:8a:86:14:1d:d9:5d:4d:9b:a4: a6:8f:9c:f5:01:9c:83:8b:bb:5a:91:62:68:76:8c: 90:2c:46:c8:14:85:b1:62:73:3c:75:51:40:7e:bd: eb:04:2b:17:f5:62:00:2b:c6:c5:36:66:4f:ed:80: 30:c8:23:84:9a:f7:41:9a:05:17:32:ac:27:c8:2c: 93:83:9f:18:f6:8c:d5:08:30:df:95:8c:ff:a1:12: 8e:b6:8f:63:39:c8:05:1d:c6:78:d7:c0:a5:e5:24: 80:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:81:D6:EB:FF:C7:1E:D7:0A:D6:81:8A:BF:48:37:69:E6:49:00:17 X509v3 Authority Key Identifier: keyid:87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:2a:34:33:b2:0c:c2:4a:9f:c2:c7:3d:82:56:f8:47:54:9f: e2:b7:1a:37:2e:92:6d:3a:e6:a7:06:74:47:3c:ff:7f:79:63: e3:c3:c9:13:41:2a:8e:45:d0:58:31:62:15:1e:69:06:8b:02: bd:c7:a8:03:2b:38:2f:a2:c6:cf:54:2f:86:e3:df:d4:4f:81: b9:f3:08:11:a0:45:4d:d1:85:cc:ba:88:51:b1:68:81:d2:6a: e4:c0:95:68:bf:b5:59:c4:b9:d7:d3:55:ce:6b:84:b0:bf:a9: 70:29:94:c0:a4:67:40:e9:27:cb:5e:d5:50:85:82:e2:dc:1a: 40:90:1a:4e:51:28:d8:3e:bf:cd:8f:b6:2f:5b:5d:da:b8:3d: c4:93:58:0e:33:32:9e:f4:33:db:51:dc:05:a4:33:b1:ac:92: 4f:13:8b:a2:eb:81:e0:ec:f3:78:8d:6e:fb:3f:ae:da:26:ef: 50:4d:18:02:b3:6e:8a:4c:6e:af:15:b1:ec:d8:b9:14:02:3c: 03:59:c2:d8:0c:28:34:21:c5:19:c3:a1:8b:31:45:a1:cd:ec: e6:95:7e:4e:9f:f4:a6:91:25:b2:29:cc:38:fe:7f:10:51:ad: a1:2b:af:f5:30:16:d5:93:2b:e6:a7:48:15:60:e4:75:7c:81: f5:e7:b1:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM2MjExMTAvBgNVBAUTKDg3QTQ3RjI3RTc1RTdDMjgzOUMxMzMzNTFEQTI1MTE0 ODJDNkY5QjQwHhcNMjUwNjIzMDE0MzI4WhcNMjUwNjMwMDE0MzI4WjAYMRYwFAYD VQQDEw02ODU4YjE0MC00MTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqVsX9Pv02uqI7QKBh7iBIb/nGW4XYRs9uK8XQA54VSL41kdGB6VmVLWhmR0F 1KMEPVnO17C32YOCUSxw5JqUz1kU2xR/vKQ/hOFoMd2+PtEf/67+CvjcusHg+tHn ImWQ8BKijT2dZa+tvsvbWg5rr5swrRPBOreP24TW/GGg/6c92/A4go57HMofMbzP 7BDo7G7M+ygGWmmgrbiKhhQd2V1Nm6Smj5z1AZyDi7takWJodoyQLEbIFIWxYnM8 dVFAfr3rBCsX9WIAK8bFNmZP7YAwyCOEmvdBmgUXMqwnyCyTg58Y9ozVCDDflYz/ oRKOto9jOcgFHcZ418Cl5SSAkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAiB1uv/ xx7XCtaBir9IN2nmSQAXMB8GA1UdIwQYMBaAFIekfyfnXnwoOcEzNR2iURSCxvm0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzYyMS9GN0QwMEJFRTc0 MzkxMUVEOTg2RDczODVDNEY5QUUwMi9oNlJfSi1kZWZDZzV3VE0xSGFKUkZJTEct YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g2Ul9KLWRlZkNnNXdUTTFIYUpSRklMRy1iUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzYyMS9GN0QwMEJFRTc0MzkxMUVEOTg2RDczODVDNEY5QUUwMi9oNlJfSi1kZWZD ZzV3VE0xSGFKUkZJTEctYlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4KjQzsgzCSp/Cxz2CVvhHVJ/itxo3LpJtOuanBnRHPP9/eWPjw8kT QSqORdBYMWIVHmkGiwK9x6gDKzgvosbPVC+G49/UT4G58wgRoEVN0YXMuohRsWiB 0mrkwJVov7VZxLnX01XOa4Swv6lwKZTApGdA6SfLXtVQhYLi3BpAkBpOUSjYPr/N j7YvW13auD3Ek1gOMzKe9DPbUdwFpDOxrJJPE4ui64Hg7PN4jW77P67aJu9QTRgC s26KTG6vFbHs2LkUAjwDWcLYDCg0IcUZw6GLMUWhzezmlX5On/SmkSWyKcw4/n8Q Ua2hK6/1MBbVkyvmp0gVYOR1fIH157Ft -----END CERTIFICATE-----Generated at Tue Jun 24 14:41:53 2025 by rpki-client