$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft File: 6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft (raw, json) Hash identifier: QdZJxki4HxSsS7eJGDQY1g6X9P0jVicyJkW0Cdsda4c= Subject key identifier: 20:44:4E:B9:84:33:BE:D7:AC:A4:CB:95:DE:4D:5B:C0:CD:B2:8F:E6 Authority key identifier: E8:7D:C6:C5:C7:10:43:90:57:D8:AB:ED:90:C2:6D:0C:9C:87:2B:34 Certificate issuer: /CN=A9137ABC/serialNumber=E87DC6C5C710439057D8ABED90C26D0C9C872B34 Certificate serial: 2A07 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft Manifest number: 29F8 Signing time: Mon 02 Jun 2025 14:21:27 +0000 Manifest this update: Mon 02 Jun 2025 14:21:26 +0000 Manifest next update: Mon 09 Jun 2025 14:21:26 +0000 Files and hashes: 1: 6H3GxccQQ5BX2KvtkMJtDJyHKzQ.crl (hash: mvgmoKucvULFMmI0gqYPKMpLxJkuUbRjAzH7gn/UoW0=) 2: 79AF67622C3C11EE81B24651C4F9AE02.roa (hash: RyMrOX2UuuoLSsEP72kB/McA8P2k1GYXnFOd34HV84Y=) 3: 7A90F2402C3C11EE81B24651C4F9AE02.roa (hash: oZUQe7vF9965udCpvU+/bwZotZkJzZlfqtmcro6cyHo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.crl rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 05:53:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10759 (0x2a07) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC, serialNumber=E87DC6C5C710439057D8ABED90C26D0C9C872B34 Validity Not Before: Jun 2 14:21:26 2025 GMT Not After : Jun 9 14:21:26 2025 GMT Subject: CN=683db366-f35f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:3a:f7:7d:85:58:e4:85:2a:30:20:45:17:65: a6:ca:b9:b6:ef:b3:3e:5d:1f:87:f9:db:a1:a5:e3: 57:88:21:d8:be:7f:f2:62:2c:eb:e8:a0:f1:ff:df: bb:6f:6b:a0:fc:dc:4c:73:9c:9a:79:db:ae:59:99: 1e:bb:99:f6:5a:b1:1e:ba:bd:d5:8d:a6:57:7a:ca: ec:d3:78:0e:80:65:e2:1c:21:89:6b:c6:fd:35:18: 63:5e:6e:15:7c:8b:17:90:4f:3f:20:8a:3f:0c:5f: 21:ac:f6:aa:70:18:74:98:47:14:d9:79:93:86:19: 69:5c:bb:47:63:ed:cc:67:e0:72:78:5e:20:c9:94: 1a:18:31:44:40:29:0f:af:86:ee:0a:33:2b:31:5b: f8:38:cd:9f:b4:a9:27:45:41:96:20:6b:e9:40:6e: 09:4f:eb:84:16:88:54:ce:47:c7:1a:80:5f:1e:16: d3:b4:5f:6a:e3:44:55:8b:92:b9:a0:38:be:79:f4: cf:a6:3c:a3:08:13:95:df:bd:8c:8f:16:6a:85:31: aa:ff:f7:48:5a:1f:0b:c8:24:ed:04:e9:72:66:3d: 4f:be:43:b3:27:bc:a5:14:df:b6:9f:70:8f:ca:c8: ca:a2:94:55:55:af:9c:d0:d4:50:f3:e0:d6:97:36: 30:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:44:4E:B9:84:33:BE:D7:AC:A4:CB:95:DE:4D:5B:C0:CD:B2:8F:E6 X509v3 Authority Key Identifier: keyid:E8:7D:C6:C5:C7:10:43:90:57:D8:AB:ED:90:C2:6D:0C:9C:87:2B:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:a7:10:d3:7e:89:33:97:8b:4b:8d:5b:8a:06:09:8f:c4:63: 4e:32:2c:b5:7f:6e:b9:80:76:27:c3:fe:df:4c:11:43:4b:e8: 34:b9:b2:07:82:e8:21:58:77:f2:df:c5:25:d4:08:dd:16:d3: cf:89:89:9a:5d:ab:3c:c7:8b:3e:b7:0c:88:c5:69:ad:3e:0d: 57:c4:ec:e3:01:a2:59:42:7c:16:b8:5a:b2:98:0a:b5:48:77: 3a:af:b2:b5:34:d5:62:14:38:07:a7:90:bd:46:ee:0a:70:e5: a4:cb:dc:e0:6c:6e:95:6f:db:b2:28:02:81:26:69:98:dd:51: 4b:46:0a:95:c3:26:c9:d6:2d:af:ae:8f:35:1d:40:2d:61:74: 4c:5f:81:17:b0:ba:90:9f:08:ac:e5:c0:cd:ee:91:4f:c5:39: 3c:42:79:5a:ed:7a:63:80:6d:e2:59:2b:3b:64:2a:a1:7b:d8: f9:ca:d7:97:b5:7b:fa:ff:78:61:7e:99:ec:4c:fe:59:36:c4: ad:02:54:fd:33:bb:21:b5:80:63:c5:93:ea:45:df:9a:7b:1e: 50:6f:f6:58:63:b2:bc:bf:68:7f:d7:61:1e:0c:f5:9b:e0:9e: dc:1e:1d:c5:ef:57:8e:0c:16:f5:0c:8d:26:66:b4:40:c6:33: 44:04:57:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKEU4N0RDNkM1QzcxMDQzOTA1N0Q4QUJFRDkwQzI2RDBD OUM4NzJCMzQwHhcNMjUwNjAyMTQyMTI2WhcNMjUwNjA5MTQyMTI2WjAYMRYwFAYD VQQDEw02ODNkYjM2Ni1mMzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6zr3fYVY5IUqMCBFF2Wmyrm277M+XR+H+duhpeNXiCHYvn/yYizr6KDx/9+7 b2ug/NxMc5yaeduuWZkeu5n2WrEeur3VjaZXesrs03gOgGXiHCGJa8b9NRhjXm4V fIsXkE8/IIo/DF8hrPaqcBh0mEcU2XmThhlpXLtHY+3MZ+ByeF4gyZQaGDFEQCkP r4buCjMrMVv4OM2ftKknRUGWIGvpQG4JT+uEFohUzkfHGoBfHhbTtF9q40RVi5K5 oDi+efTPpjyjCBOV372MjxZqhTGq//dIWh8LyCTtBOlyZj1PvkOzJ7ylFN+2n3CP ysjKopRVVa+c0NRQ8+DWlzYwnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCBETrmE M77XrKTLld5NW8DNso/mMB8GA1UdIwQYMBaAFOh9xsXHEEOQV9ir7ZDCbQychys0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy82QjhCOUQwRTM2 RkYxMUU0OTkwNEFDNjZDNEY5QUUwMi82SDNHeGNjUVE1QlgyS3Z0a01KdERKeUhL elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZIM0d4Y2NRUTVCWDJLdnRrTUp0REp5SEt6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz N0FCQy82QjhCOUQwRTM2RkYxMUU0OTkwNEFDNjZDNEY5QUUwMi82SDNHeGNjUVE1 QlgyS3Z0a01KdERKeUhLelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmpxDTfokzl4tLjVuKBgmPxGNOMiy1f265gHYnw/7fTBFDS+g0ubIH gughWHfy38Ul1AjdFtPPiYmaXas8x4s+twyIxWmtPg1XxOzjAaJZQnwWuFqymAq1 SHc6r7K1NNViFDgHp5C9Ru4KcOWky9zgbG6Vb9uyKAKBJmmY3VFLRgqVwybJ1i2v ro81HUAtYXRMX4EXsLqQnwis5cDN7pFPxTk8Qnla7XpjgG3iWSs7ZCqhe9j5yteX tXv6/3hhfpnsTP5ZNsStAlT9M7shtYBjxZPqRd+aex5Qb/ZYY7K8v2h/12EeDPWb 4J7cHh3F71eODBb1DI0mZrRAxjNEBFen -----END CERTIFICATE-----Generated at Mon Jun 2 20:30:56 2025 by rpki-client