$ rpki-client -vvf rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.mft File: 6C0Q0tocmL9oykxkkbkP_Q-rM5Q.mft (raw, json) Hash identifier: pmvcoJv7FFcgSI7IO7VMrju2GcqHGvW/RFG6qscTQj4= Subject key identifier: D1:D4:B7:F6:CD:39:44:6D:D9:43:2A:1D:7D:3D:FC:E8:E2:38:30:CC Authority key identifier: E8:2D:10:D2:DA:1C:98:BF:68:CA:4C:64:91:B9:0F:FD:0F:AB:33:94 Certificate issuer: /CN=A912D5C1/serialNumber=E82D10D2DA1C98BF68CA4C6491B90FFD0FAB3394 Certificate serial: 0C85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.mft Manifest number: 0C6F Signing time: Fri 30 May 2025 18:30:25 +0000 Manifest this update: Fri 30 May 2025 18:30:24 +0000 Manifest next update: Fri 06 Jun 2025 18:30:24 +0000 Files and hashes: 1: 6C0Q0tocmL9oykxkkbkP_Q-rM5Q.crl (hash: MlrDqjd/gx9mJy0BjUvLdmLQ5+d+U9F0+VkZM+j2nAI=) 2: D7F98876520B11EE8B85DB63C4F9AE02.roa (hash: PKoIMzmjFW6opIpuPpXxT7JTsKk8w7rWTXfvOheNJEQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.crl rsync://rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:30:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3205 (0xc85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D5C1, serialNumber=E82D10D2DA1C98BF68CA4C6491B90FFD0FAB3394 Validity Not Before: May 30 18:30:24 2025 GMT Not After : Jun 6 18:30:24 2025 GMT Subject: CN=6839f940-3607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1a:0a:64:6a:b7:ab:38:bc:db:a8:0c:41:b4: 45:a2:70:35:d3:6a:26:e7:c9:e2:04:df:db:c3:2f: 4d:74:8e:f1:c4:59:c3:43:e4:c6:91:1b:20:11:62: 82:14:89:23:5f:9e:34:df:3b:43:90:b7:a3:54:c4: e9:db:52:c2:90:ed:e4:e1:16:0f:d5:37:1e:c6:ae: da:c5:3f:1f:28:0c:bf:58:4c:f9:38:6c:58:ed:6f: f0:59:8c:63:a5:7a:c4:10:51:c4:e4:de:a5:52:87: c8:ab:26:fe:cc:17:1c:32:9c:b3:0d:67:ac:db:03: 53:98:b0:62:62:66:ca:f3:8c:0e:1c:2d:2e:01:76: 2d:9f:53:1e:19:d4:05:9c:fd:47:13:bd:4e:c3:01: 56:3c:14:96:cb:ca:58:3b:4c:8b:94:70:1c:55:3d: c7:61:4e:96:42:7a:a6:d0:35:da:be:d5:44:b3:d9: d3:44:3c:f6:ee:63:29:b7:52:54:07:c4:b9:4a:d5: 80:ec:3e:68:35:c2:a2:00:60:25:a1:d9:3e:40:63: 10:e6:b6:10:b0:ab:ac:0d:73:b4:72:cf:8c:24:55: 56:24:03:f8:7d:3d:03:33:dc:9c:cb:71:5d:60:bd: f5:9a:97:a9:fa:2a:a4:2d:38:17:79:87:49:d3:bb: 17:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:D4:B7:F6:CD:39:44:6D:D9:43:2A:1D:7D:3D:FC:E8:E2:38:30:CC X509v3 Authority Key Identifier: keyid:E8:2D:10:D2:DA:1C:98:BF:68:CA:4C:64:91:B9:0F:FD:0F:AB:33:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:9d:06:73:ea:07:29:4b:50:fc:7a:52:13:36:a2:27:fc:62: e3:6d:35:e3:ad:32:0e:c9:40:72:db:bf:d9:be:3d:ee:59:24: 17:f0:d9:0f:00:42:77:a0:90:5e:2e:0d:b7:fd:41:0d:c5:12: 6b:38:12:f5:0f:13:69:be:61:5a:01:31:58:3a:ec:65:c4:48: 2f:77:ff:e3:a5:f8:2b:36:a3:da:55:2f:9e:e8:2e:4e:4a:df: 9f:5a:81:a0:5f:35:a9:29:67:47:db:fc:94:dc:e0:7c:b4:6b: c6:42:3a:cf:54:eb:dd:b8:55:f9:ca:90:74:4f:d0:7e:66:04: da:57:05:05:a7:f6:ce:b7:8c:56:73:e1:42:11:f4:d5:9e:42: ad:ee:6f:70:7c:24:38:00:04:3d:0d:10:63:93:9e:22:f4:e6: f9:a2:3c:ab:5d:52:6d:19:5e:10:4a:03:20:18:0e:ff:c1:9c: 1b:e7:0c:e3:66:59:a4:05:e6:21:cb:fb:4a:00:fb:11:6c:43: d8:6e:19:90:23:33:f8:82:9b:09:29:de:99:23:b1:db:9d:42: af:a5:64:90:7c:0a:b8:45:d6:67:22:e6:ce:c7:a5:61:8e:ed: cd:5b:86:3d:12:ec:86:a0:bd:43:b8:44:de:14:3b:8c:78:4c: 4b:29:0d:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQ1QzExMTAvBgNVBAUTKEU4MkQxMEQyREExQzk4QkY2OENBNEM2NDkxQjkwRkZE MEZBQjMzOTQwHhcNMjUwNTMwMTgzMDI0WhcNMjUwNjA2MTgzMDI0WjAYMRYwFAYD VQQDEw02ODM5Zjk0MC0zNjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuhoKZGq3qzi826gMQbRFonA102om58niBN/bwy9NdI7xxFnDQ+TGkRsgEWKC FIkjX5403ztDkLejVMTp21LCkO3k4RYP1Tcexq7axT8fKAy/WEz5OGxY7W/wWYxj pXrEEFHE5N6lUofIqyb+zBccMpyzDWes2wNTmLBiYmbK84wOHC0uAXYtn1MeGdQF nP1HE71OwwFWPBSWy8pYO0yLlHAcVT3HYU6WQnqm0DXavtVEs9nTRDz27mMpt1JU B8S5StWA7D5oNcKiAGAlodk+QGMQ5rYQsKusDXO0cs+MJFVWJAP4fT0DM9ycy3Fd YL31mpep+iqkLTgXeYdJ07sXOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNHUt/bN OURt2UMqHX09/OjiODDMMB8GA1UdIwQYMBaAFOgtENLaHJi/aMpMZJG5D/0PqzOU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDVDMS9CMDdEQ0I0NEZG Q0MxMUU5QTVFNzk3ODRDNEY5QUUwMi82QzBRMHRvY21MOW95a3hra2JrUF9RLXJN NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZDMFEwdG9jbUw5b3lreGtrYmtQX1Etck01US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDVDMS9CMDdEQ0I0NEZGQ0MxMUU5QTVFNzk3ODRDNEY5QUUwMi82QzBRMHRvY21M OW95a3hra2JrUF9RLXJNNVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+nQZz6gcpS1D8elITNqIn/GLjbTXjrTIOyUBy27/Zvj3uWSQX8NkP AEJ3oJBeLg23/UENxRJrOBL1DxNpvmFaATFYOuxlxEgvd//jpfgrNqPaVS+e6C5O St+fWoGgXzWpKWdH2/yU3OB8tGvGQjrPVOvduFX5ypB0T9B+ZgTaVwUFp/bOt4xW c+FCEfTVnkKt7m9wfCQ4AAQ9DRBjk54i9Ob5ojyrXVJtGV4QSgMgGA7/wZwb5wzj ZlmkBeYhy/tKAPsRbEPYbhmQIzP4gpsJKd6ZI7HbnUKvpWSQfAq4RdZnIubOx6Vh ju3NW4Y9EuyGoL1DuETeFDuMeExLKQ3s -----END CERTIFICATE-----Generated at Sat May 31 17:39:17 2025 by rpki-client