$ rpki-client -vvf rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.mft File: 6q7GCbncI1xGucXxvKPNvsf_7ig.mft (raw, json) Hash identifier: Ky6NaDBZ8g9v0uunceqV4xacQWpneIRo3u9L60xveaI= Subject key identifier: B7:CC:4C:7F:F9:F3:85:9D:9E:F8:DD:39:81:7B:95:F8:5B:26:F1:7A Authority key identifier: EA:AE:C6:09:B9:DC:23:5C:46:B9:C5:F1:BC:A3:CD:BE:C7:FF:EE:28 Certificate issuer: /CN=A917A82D/serialNumber=EAAEC609B9DC235C46B9C5F1BCA3CDBEC7FFEE28 Certificate serial: 0C3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6q7GCbncI1xGucXxvKPNvsf_7ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.mft Manifest number: 0C1D Signing time: Fri 30 May 2025 18:53:52 +0000 Manifest this update: Fri 30 May 2025 18:53:52 +0000 Manifest next update: Fri 06 Jun 2025 18:53:52 +0000 Files and hashes: 1: 6q7GCbncI1xGucXxvKPNvsf_7ig.crl (hash: 62Izq2e5dWTRdSp0wVta0yUNeSavJpV4n5A0UBjUL+M=) 2: 403FDDD0DF3511ED8FBA823DC4F9AE02.roa (hash: n02qcDfoz5xfgtE3pmF9DuTrufYGzGxNykq63R1mDas=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.crl rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6q7GCbncI1xGucXxvKPNvsf_7ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:53:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3131 (0xc3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A82D, serialNumber=EAAEC609B9DC235C46B9C5F1BCA3CDBEC7FFEE28 Validity Not Before: May 30 18:53:52 2025 GMT Not After : Jun 6 18:53:52 2025 GMT Subject: CN=6839fec0-e879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f2:e1:e1:87:a7:57:bf:3a:d4:e3:28:5a:e8: 3f:f0:d2:e6:e7:6f:2d:19:fe:f3:cc:eb:93:54:2d: 5a:ec:46:07:40:f0:36:04:34:10:e8:ed:71:72:1d: 8b:7b:eb:d0:dc:f8:6f:f4:ef:34:b0:9d:aa:e1:71: 46:58:ff:aa:4c:f3:7e:4a:4e:c7:ac:02:76:11:0d: e5:ed:df:f3:b8:e3:19:0a:f9:63:a5:5c:a1:38:55: cc:f9:55:2d:f3:5c:5a:2a:fe:87:a4:75:60:84:a7: f7:1f:a5:36:1c:e3:dc:6a:c2:3f:73:c7:d9:ca:ad: 8f:f5:24:fa:21:94:94:24:73:6f:c0:37:da:40:bf: df:d3:3f:f4:da:cc:d4:09:2d:5a:cb:8d:48:16:f9: 10:17:94:75:34:f6:74:16:13:5f:ac:fb:03:1c:b7: 59:77:2a:1f:f3:67:8e:22:55:d1:16:ee:6c:c5:2a: 8d:a9:67:32:10:34:7d:56:32:d4:cd:99:fa:06:31: aa:a0:d9:5b:d6:5e:b4:34:2d:ca:58:aa:36:59:94: d6:c7:56:28:9e:1a:40:0d:0c:08:e6:df:50:ab:0c: 5d:17:b7:0f:f0:a1:20:98:1f:5a:52:0f:ae:41:bc: 91:37:8d:5b:11:c4:0f:65:65:1b:b3:04:17:b7:ed: 1d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:CC:4C:7F:F9:F3:85:9D:9E:F8:DD:39:81:7B:95:F8:5B:26:F1:7A X509v3 Authority Key Identifier: keyid:EA:AE:C6:09:B9:DC:23:5C:46:B9:C5:F1:BC:A3:CD:BE:C7:FF:EE:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6q7GCbncI1xGucXxvKPNvsf_7ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:85:6a:56:c4:7a:fd:a9:14:63:8e:0c:19:d3:74:0d:2f:6a: f9:0b:dd:b7:7f:9b:42:10:3d:69:89:86:ec:66:85:ee:88:8b: ae:73:cc:08:44:d0:1d:18:64:37:8b:9d:69:70:c3:af:34:99: 2e:8e:63:80:8a:35:f2:a8:05:86:b8:a5:ce:ef:ee:77:ac:5c: a7:94:e6:96:33:34:63:b2:97:b2:2f:51:99:af:a3:a3:87:60: de:29:2f:53:31:1d:30:21:c2:f6:6b:5e:81:e1:cc:f0:5c:5d: 2a:9e:49:24:83:d3:5a:b8:07:64:a8:c3:4b:5a:f3:5c:c2:eb: d8:c2:d7:33:1d:99:b3:45:26:af:02:a5:8c:6a:c1:8d:db:3f: 88:47:c0:74:93:e6:cf:eb:e5:ff:05:bf:03:e6:40:71:cf:88: 97:cb:b1:5f:16:ca:45:92:3d:19:75:95:e1:9f:71:78:91:fb: 34:ac:75:f2:90:8f:28:14:af:c9:bb:12:b4:14:ab:0e:a6:36: 8b:e5:53:c8:8c:55:2d:28:e0:90:53:0c:f3:fd:ce:ff:46:28: f8:e4:81:a4:d4:aa:b3:54:93:6e:e9:28:ff:76:e8:85:88:b1: 1f:32:95:33:72:16:b5:63:d7:a2:31:24:1f:45:f3:7f:a3:bc: c2:d6:1f:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E4MkQxMTAvBgNVBAUTKEVBQUVDNjA5QjlEQzIzNUM0NkI5QzVGMUJDQTNDREJF QzdGRkVFMjgwHhcNMjUwNTMwMTg1MzUyWhcNMjUwNjA2MTg1MzUyWjAYMRYwFAYD VQQDEw02ODM5ZmVjMC1lODc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/Lh4YenV7861OMoWug/8NLm528tGf7zzOuTVC1a7EYHQPA2BDQQ6O1xch2L e+vQ3Phv9O80sJ2q4XFGWP+qTPN+Sk7HrAJ2EQ3l7d/zuOMZCvljpVyhOFXM+VUt 81xaKv6HpHVghKf3H6U2HOPcasI/c8fZyq2P9ST6IZSUJHNvwDfaQL/f0z/02szU CS1ay41IFvkQF5R1NPZ0FhNfrPsDHLdZdyof82eOIlXRFu5sxSqNqWcyEDR9VjLU zZn6BjGqoNlb1l60NC3KWKo2WZTWx1YonhpADQwI5t9QqwxdF7cP8KEgmB9aUg+u QbyRN41bEcQPZWUbswQXt+0dWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLfMTH/5 84WdnvjdOYF7lfhbJvF6MB8GA1UdIwQYMBaAFOquxgm53CNcRrnF8byjzb7H/+4o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTgyRC9BREY2NjVDMDEy NzgxMUVBOUI4RUQwMzRDNEY5QUUwMi82cTdHQ2JuY0kxeEd1Y1h4dktQTnZzZl83 aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZxN0dDYm5jSTF4R3VjWHh2S1BOdnNmXzdpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTgyRC9BREY2NjVDMDEyNzgxMUVBOUI4RUQwMzRDNEY5QUUwMi82cTdHQ2JuY0kx eEd1Y1h4dktQTnZzZl83aWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCChWpWxHr9qRRjjgwZ03QNL2r5C923f5tCED1piYbsZoXuiIuuc8wI RNAdGGQ3i51pcMOvNJkujmOAijXyqAWGuKXO7+53rFynlOaWMzRjspeyL1GZr6Oj h2DeKS9TMR0wIcL2a16B4czwXF0qnkkkg9NauAdkqMNLWvNcwuvYwtczHZmzRSav AqWMasGN2z+IR8B0k+bP6+X/Bb8D5kBxz4iXy7FfFspFkj0ZdZXhn3F4kfs0rHXy kI8oFK/JuxK0FKsOpjaL5VPIjFUtKOCQUwzz/c7/Rij45IGk1KqzVJNu6Sj/duiF iLEfMpUzcha1Y9eiMSQfRfN/o7zC1h9K -----END CERTIFICATE-----Generated at Sat May 31 16:46:55 2025 by rpki-client