$ rpki-client -vvf rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft File: 6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft (raw, json) Hash identifier: bZAw4bio724XfF34fFvrEtBVeFRHT3vdHLM4wUdKY+A= Subject key identifier: 6B:9B:1E:BE:09:F8:76:DA:A0:AB:DE:45:52:E5:57:BD:6C:EF:3E:9B Authority key identifier: E9:C4:10:C7:DD:D5:26:70:AB:8F:82:16:C8:76:14:B1:0E:C3:17:7A Certificate issuer: /CN=A9171560/serialNumber=E9C410C7DDD52670AB8F8216C87614B10EC3177A Certificate serial: 0D01 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft Manifest number: 0CF6 Signing time: Sat 31 May 2025 18:08:45 +0000 Manifest this update: Sat 31 May 2025 18:08:45 +0000 Manifest next update: Sat 07 Jun 2025 18:08:45 +0000 Files and hashes: 1: 6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl (hash: qc6hAEyateaej0QdYF1NP2uSa6nYyyUeewHTS3ha3Ao=) 2: 65AF30D422D211EAB3ABA447C4F9AE02.roa (hash: N5g6jdfkVyESUIZ9NbhjHN5A/zAKL0uPzj31oHqn/fU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 18:08:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3329 (0xd01) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171560, serialNumber=E9C410C7DDD52670AB8F8216C87614B10EC3177A Validity Not Before: May 31 18:08:45 2025 GMT Not After : Jun 7 18:08:45 2025 GMT Subject: CN=683b45ad-b7a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e4:98:a3:3e:d6:52:e9:e6:d6:c0:4e:98:69: 57:82:68:df:1e:73:87:4b:5e:d0:46:e0:b9:9e:cc: 14:34:35:52:93:31:b0:61:73:b8:a6:0c:e0:a6:aa: 71:e6:0a:47:71:b3:be:cc:40:b2:ee:30:ea:9d:b5: 5d:57:ba:68:32:a6:57:5f:f7:5a:86:c8:af:da:d6: 67:16:bc:82:7f:62:a9:aa:21:18:ba:cb:59:bd:0f: b9:2c:97:96:c1:0e:39:aa:0f:54:ab:9b:88:16:12: 56:20:c3:3d:11:c8:5f:c5:f9:b7:35:b9:12:fd:83: 70:75:8d:39:ea:ae:fa:87:6b:b0:07:5f:02:71:9b: 05:56:25:92:95:e5:39:75:ed:75:4e:29:fc:dd:64: b1:9f:d7:d1:56:10:cf:05:1e:ed:8e:d2:48:46:6f: 4c:b0:b3:e2:b9:8a:33:cf:11:5c:24:b1:63:69:66: b2:22:1a:94:06:d7:f7:6d:ec:9e:a3:db:f8:aa:a4: 88:49:a7:f0:ae:08:eb:99:05:c0:42:b9:bd:8e:ef: 6d:82:22:5a:52:12:c0:f3:2e:06:68:2b:ca:67:b9: bb:b6:98:74:88:7c:7f:09:0e:af:7a:b9:61:c2:e5: 01:ec:46:28:20:5d:d8:b8:85:3d:11:70:2d:c2:f4: ce:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:9B:1E:BE:09:F8:76:DA:A0:AB:DE:45:52:E5:57:BD:6C:EF:3E:9B X509v3 Authority Key Identifier: keyid:E9:C4:10:C7:DD:D5:26:70:AB:8F:82:16:C8:76:14:B1:0E:C3:17:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:77:4f:47:55:94:3f:c1:e7:84:cd:c4:ef:25:a7:94:bf:e5: 50:62:f6:ce:69:4e:90:0e:b2:87:97:93:01:93:71:cd:63:8d: 5c:f0:82:d6:59:68:f9:57:d5:ac:42:4e:26:9c:92:74:fc:95: 99:c6:4b:75:a4:5a:08:f9:6b:d9:f2:b4:fe:60:d3:e0:fb:01: 88:bf:0c:1f:26:e7:c5:41:39:73:b0:48:30:98:a8:d3:d2:7f: 89:fe:a5:f9:2c:58:d9:3b:ca:cd:ce:33:1d:95:d5:da:dd:dc: f1:3c:18:3b:13:7c:fc:a7:df:da:c9:07:31:75:14:1d:0c:2a: a3:36:20:11:25:65:8f:2f:be:24:b2:b8:e2:fa:a2:61:db:1c: e0:fc:b1:6c:e6:39:02:7d:af:bf:52:8f:d9:2c:89:ec:11:9b: bd:ea:14:7c:48:44:d5:e5:ef:d6:69:a5:12:f6:82:07:ef:1b: e7:2b:31:da:65:a4:37:72:6c:e3:0c:a7:c2:e3:8e:31:7f:5b: a8:e9:7d:9f:aa:c1:a0:c9:d3:44:ae:fb:e9:ea:80:bd:cb:cc: 06:c1:42:25:69:69:2b:c5:37:20:9d:11:77:31:b1:90:99:1a: 48:29:5e:c6:93:6f:df:91:59:dc:2c:6f:a9:51:0d:56:8b:bc: ae:b0:24:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE1NjAxMTAvBgNVBAUTKEU5QzQxMEM3RERENTI2NzBBQjhGODIxNkM4NzYxNEIx MEVDMzE3N0EwHhcNMjUwNTMxMTgwODQ1WhcNMjUwNjA3MTgwODQ1WjAYMRYwFAYD VQQDEw02ODNiNDVhZC1iN2EyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz+SYoz7WUunm1sBOmGlXgmjfHnOHS17QRuC5nswUNDVSkzGwYXO4pgzgpqpx 5gpHcbO+zECy7jDqnbVdV7poMqZXX/dahsiv2tZnFryCf2KpqiEYustZvQ+5LJeW wQ45qg9Uq5uIFhJWIMM9Echfxfm3NbkS/YNwdY056q76h2uwB18CcZsFViWSleU5 de11Tin83WSxn9fRVhDPBR7tjtJIRm9MsLPiuYozzxFcJLFjaWayIhqUBtf3beye o9v4qqSISafwrgjrmQXAQrm9ju9tgiJaUhLA8y4GaCvKZ7m7tph0iHx/CQ6verlh wuUB7EYoIF3YuIU9EXAtwvTO9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGubHr4J +HbaoKveRVLlV71s7z6bMB8GA1UdIwQYMBaAFOnEEMfd1SZwq4+CFsh2FLEOwxd6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTU2MC9BNzcwM0U5RUU0 MUQxMUU5OEY1Qjk4MTlDNEY5QUUwMi82Y1FReDkzVkpuQ3JqNElXeUhZVXNRN0RG M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZjUVF4OTNWSm5Dcmo0SVd5SFlVc1E3REYzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTU2MC9BNzcwM0U5RUU0MUQxMUU5OEY1Qjk4MTlDNEY5QUUwMi82Y1FReDkzVkpu Q3JqNElXeUhZVXNRN0RGM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdd09HVZQ/weeEzcTvJaeUv+VQYvbOaU6QDrKHl5MBk3HNY41c8ILW WWj5V9WsQk4mnJJ0/JWZxkt1pFoI+WvZ8rT+YNPg+wGIvwwfJufFQTlzsEgwmKjT 0n+J/qX5LFjZO8rNzjMdldXa3dzxPBg7E3z8p9/ayQcxdRQdDCqjNiARJWWPL74k srji+qJh2xzg/LFs5jkCfa+/Uo/ZLInsEZu96hR8SETV5e/WaaUS9oIH7xvnKzHa ZaQ3cmzjDKfC444xf1uo6X2fqsGgydNErvvp6oC9y8wGwUIlaWkrxTcgnRF3MbGQ mRpIKV7Gk2/fkVncLG+pUQ1Wi7yusCQm -----END CERTIFICATE-----Generated at Mon Jun 2 20:50:09 2025 by rpki-client