$ rpki-client -vvf rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft File: 6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft (raw, json) Hash identifier: lBD5S6P/rbj1z6JLqI3advT2fx/b8qXzvHTVT71IkWU= Subject key identifier: 08:E6:14:30:95:EB:C4:6E:96:90:07:DF:E8:FB:E9:D7:E7:B0:88:AD Authority key identifier: E9:C4:10:C7:DD:D5:26:70:AB:8F:82:16:C8:76:14:B1:0E:C3:17:7A Certificate issuer: /CN=A9171560/serialNumber=E9C410C7DDD52670AB8F8216C87614B10EC3177A Certificate serial: 0D19 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft Manifest number: 0D0E Signing time: Fri 18 Jul 2025 18:14:49 +0000 Manifest this update: Fri 18 Jul 2025 18:14:49 +0000 Manifest next update: Fri 25 Jul 2025 18:14:49 +0000 Files and hashes: 1: 6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl (hash: 1rrb/HtrHYWEsrXI6yGALjWSgLfPTMMxRhcYhxkDGaI=) 2: 65AF30D422D211EAB3ABA447C4F9AE02.roa (hash: N5g6jdfkVyESUIZ9NbhjHN5A/zAKL0uPzj31oHqn/fU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 18:14:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3353 (0xd19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171560, serialNumber=E9C410C7DDD52670AB8F8216C87614B10EC3177A Validity Not Before: Jul 18 18:14:49 2025 GMT Not After : Jul 25 18:14:49 2025 GMT Subject: CN=687a8f19-58df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d1:4a:05:7a:58:8d:3f:53:81:5c:af:8a:b2: c3:1d:5d:21:8f:28:94:24:18:32:a1:21:fa:80:94: 34:aa:af:6b:bc:e8:1c:18:7e:8c:95:90:8a:9d:39: b9:56:34:c3:95:b2:08:2c:d3:d1:ed:35:32:1d:1e: 21:36:b6:b1:0c:ba:06:02:06:45:ef:08:83:21:4d: 30:94:c1:c2:5d:7d:7b:4b:dc:34:63:46:db:e6:64: 0a:b4:5c:e8:f5:c8:52:e9:c9:c3:d2:11:34:d0:39: af:22:24:b8:ee:74:c2:f2:95:3a:2c:34:e4:2a:05: fb:f3:4e:75:80:76:40:b0:26:1a:25:7f:71:c2:4a: 4d:90:c6:05:b4:2f:4a:ca:21:60:7b:03:bf:5c:04: 0d:7d:a8:e7:1a:de:7e:74:a5:79:cb:f0:1b:d5:c9: 12:a4:07:56:ac:4d:90:83:d4:b6:55:e5:7f:53:19: 6f:a2:5d:2f:fc:d3:67:04:b1:2f:1a:57:f3:24:f6: d5:7b:27:3a:bd:88:c6:17:c8:70:f7:de:02:69:af: 67:dd:28:4e:6b:b8:4e:d5:99:f6:ee:f2:8b:b4:b3: b8:6d:45:be:d2:3c:28:d5:4f:ba:a5:b5:82:98:c6: 0c:98:cd:d7:ae:13:31:25:65:80:56:1c:cf:e4:45: f4:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:E6:14:30:95:EB:C4:6E:96:90:07:DF:E8:FB:E9:D7:E7:B0:88:AD X509v3 Authority Key Identifier: keyid:E9:C4:10:C7:DD:D5:26:70:AB:8F:82:16:C8:76:14:B1:0E:C3:17:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:af:ed:8c:df:1e:97:ef:6a:72:9b:a1:30:66:38:a4:5c:be: 33:03:44:0d:cb:06:33:cd:12:83:99:05:15:1d:e6:66:51:ad: d2:2c:77:19:c3:82:d1:ce:14:0f:b0:a9:80:d5:fd:f9:55:67: da:32:d6:47:f3:63:97:17:ee:8e:f8:0a:42:24:c3:93:a7:ac: f2:e8:68:42:42:3a:64:06:ec:6b:27:e5:6f:0e:42:3e:d7:79: fe:84:6a:6f:b2:a3:cb:02:bc:62:51:de:b8:62:58:71:b8:bd: 2a:44:aa:52:87:fe:24:a9:74:9a:f4:90:51:65:bc:84:6b:d7: 59:43:0c:2d:d9:c6:15:3f:ce:2a:e3:78:1e:66:d0:ed:b1:e5: e1:51:63:94:a2:eb:5d:01:f7:d5:d8:62:2d:3b:99:5e:54:36: 19:ec:d3:ab:ec:ba:69:23:33:96:5f:6c:9b:13:a1:a2:e0:15: 88:16:76:27:63:bd:82:a7:93:a1:e3:66:d0:23:7b:c2:6f:0e: 69:0f:19:63:0b:0d:73:8f:10:24:ac:5b:f3:ed:55:0a:60:08: 70:2f:b5:1d:32:87:05:46:d2:64:08:5c:ce:a5:f3:28:23:06: 37:c0:0f:46:b2:be:50:11:f9:32:96:82:7d:3b:c0:10:3c:b9: 47:4c:a7:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDRkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE1NjAxMTAvBgNVBAUTKEU5QzQxMEM3RERENTI2NzBBQjhGODIxNkM4NzYxNEIx MEVDMzE3N0EwHhcNMjUwNzE4MTgxNDQ5WhcNMjUwNzI1MTgxNDQ5WjAYMRYwFAYD VQQDEw02ODdhOGYxOS01OGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4dFKBXpYjT9TgVyvirLDHV0hjyiUJBgyoSH6gJQ0qq9rvOgcGH6MlZCKnTm5 VjTDlbIILNPR7TUyHR4hNraxDLoGAgZF7wiDIU0wlMHCXX17S9w0Y0bb5mQKtFzo 9chS6cnD0hE00DmvIiS47nTC8pU6LDTkKgX78051gHZAsCYaJX9xwkpNkMYFtC9K yiFgewO/XAQNfajnGt5+dKV5y/Ab1ckSpAdWrE2Qg9S2VeV/Uxlvol0v/NNnBLEv GlfzJPbVeyc6vYjGF8hw994Caa9n3ShOa7hO1Zn27vKLtLO4bUW+0jwo1U+6pbWC mMYMmM3XrhMxJWWAVhzP5EX0ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAjmFDCV 68RulpAH3+j76dfnsIitMB8GA1UdIwQYMBaAFOnEEMfd1SZwq4+CFsh2FLEOwxd6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTU2MC9BNzcwM0U5RUU0 MUQxMUU5OEY1Qjk4MTlDNEY5QUUwMi82Y1FReDkzVkpuQ3JqNElXeUhZVXNRN0RG M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZjUVF4OTNWSm5Dcmo0SVd5SFlVc1E3REYzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTU2MC9BNzcwM0U5RUU0MUQxMUU5OEY1Qjk4MTlDNEY5QUUwMi82Y1FReDkzVkpu Q3JqNElXeUhZVXNRN0RGM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcr+2M3x6X72pym6EwZjikXL4zA0QNywYzzRKDmQUVHeZmUa3SLHcZ w4LRzhQPsKmA1f35VWfaMtZH82OXF+6O+ApCJMOTp6zy6GhCQjpkBuxrJ+VvDkI+ 13n+hGpvsqPLArxiUd64YlhxuL0qRKpSh/4kqXSa9JBRZbyEa9dZQwwt2cYVP84q 43geZtDtseXhUWOUoutdAffV2GItO5leVDYZ7NOr7LppIzOWX2ybE6Gi4BWIFnYn Y72Cp5Oh42bQI3vCbw5pDxljCw1zjxAkrFvz7VUKYAhwL7UdMocFRtJkCFzOpfMo IwY3wA9Gsr5QEfkyloJ9O8AQPLlHTKcZ -----END CERTIFICATE-----Generated at Sun Jul 20 18:59:21 2025 by rpki-client