$ rpki-client -vvf rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/6sJx1r3dV8MxnnHIEdhQR1NMRzA.mft File: 6sJx1r3dV8MxnnHIEdhQR1NMRzA.mft (raw, json) Hash identifier: UEvmpUzW8eJWLFo+rot6nT5/03Aqmb1MCSe2qgq67Ow= Subject key identifier: FA:36:37:75:A2:EE:8E:3F:21:B7:57:A6:12:A5:E1:DA:72:4F:38:73 Authority key identifier: EA:C2:71:D6:BD:DD:57:C3:31:9E:71:C8:11:D8:50:47:53:4C:47:30 Certificate issuer: /CN=A919A1BE/serialNumber=EAC271D6BDDD57C3319E71C811D85047534C4730 Certificate serial: 0AE1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sJx1r3dV8MxnnHIEdhQR1NMRzA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/6sJx1r3dV8MxnnHIEdhQR1NMRzA.mft Manifest number: 0AD8 Signing time: Sun 08 Jun 2025 19:11:25 +0000 Manifest this update: Sun 08 Jun 2025 19:11:25 +0000 Manifest next update: Sun 15 Jun 2025 19:11:25 +0000 Files and hashes: 1: 6sJx1r3dV8MxnnHIEdhQR1NMRzA.crl (hash: cJ9X9duYOP42mUVawxEKIYmeyTIfoo+ofCNW5UNOdr4=) 2: 0FFE5282122811F0AC9B4112C4F9AE02.roa (hash: qP7+uhy7LyLUv4jd3g7zWSe0a9FYblcgiMmuUDc4eAs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/6sJx1r3dV8MxnnHIEdhQR1NMRzA.crl rsync://rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/6sJx1r3dV8MxnnHIEdhQR1NMRzA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sJx1r3dV8MxnnHIEdhQR1NMRzA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 19:11:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2785 (0xae1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A1BE, serialNumber=EAC271D6BDDD57C3319E71C811D85047534C4730 Validity Not Before: Jun 8 19:11:25 2025 GMT Not After : Jun 15 19:11:25 2025 GMT Subject: CN=6845e05d-be5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b5:a0:ec:b5:ac:67:aa:d4:ba:0f:d6:20:11: e3:47:a9:8d:6e:bb:20:da:35:ac:a1:61:7e:d8:db: 59:47:31:33:8a:35:b7:bb:43:9c:b9:33:dc:0c:f4: 2e:65:82:a4:23:eb:dc:d0:12:a6:b9:b9:13:1e:5f: d8:bf:88:7d:41:85:11:78:70:3e:f5:4f:19:7d:57: ab:f0:df:b2:13:1f:11:14:20:b4:d1:ca:ce:45:15: c6:08:b5:39:f2:76:17:13:57:92:a1:02:b0:d6:87: 3e:86:02:19:b6:dd:19:ae:d1:cd:a9:d2:e3:57:84: 16:f3:99:98:78:08:64:50:e2:e9:de:7c:3c:7b:47: d6:3f:a1:c4:9b:ba:f6:cd:4c:c9:36:f2:ab:0b:1c: 38:bb:59:2c:b0:70:93:5b:8c:c6:27:2f:43:03:63: 67:f8:11:aa:59:00:d8:73:76:0a:65:42:ca:cd:a7: d3:49:12:be:70:58:66:d1:dd:7f:b3:4f:dd:46:d6: 81:56:44:40:b3:91:6c:4c:8f:73:c8:f1:a4:bb:b7: 35:9f:43:9c:98:c2:03:dd:e6:0c:da:94:12:0d:a2: 1a:db:9b:06:2e:f5:1b:1d:2a:27:89:d8:a4:a3:bc: 4f:7b:a9:7d:c8:47:e4:02:79:d9:90:18:c8:aa:2e: 28:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:36:37:75:A2:EE:8E:3F:21:B7:57:A6:12:A5:E1:DA:72:4F:38:73 X509v3 Authority Key Identifier: keyid:EA:C2:71:D6:BD:DD:57:C3:31:9E:71:C8:11:D8:50:47:53:4C:47:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/6sJx1r3dV8MxnnHIEdhQR1NMRzA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sJx1r3dV8MxnnHIEdhQR1NMRzA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/6sJx1r3dV8MxnnHIEdhQR1NMRzA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:57:d8:7a:19:72:81:6d:3c:52:5e:76:3b:ff:45:69:c3:78: 40:0c:b7:b5:86:af:60:34:66:0b:35:cc:a4:71:a4:a7:b3:b2: 0f:44:9a:05:55:63:bf:58:10:b2:ec:0a:9e:be:b1:d9:19:1a: 9a:5e:4e:04:c7:a9:21:f5:66:44:8b:b0:ac:a7:02:5a:b4:73: 4d:7c:98:2c:a8:50:c1:92:99:1e:c6:47:b5:0e:68:4d:50:8f: 1a:7a:86:ca:bf:ab:a5:5b:2a:7b:81:73:c6:89:1f:d0:a2:8f: 5d:2f:1f:1f:35:1b:26:2e:ec:c1:4d:1c:c6:82:f0:13:c2:06: 44:f7:fc:37:cc:04:14:34:76:a9:c2:8d:00:93:aa:9b:98:97: f7:16:eb:6f:5d:00:ea:b5:ee:ab:a3:71:a9:eb:64:ab:f7:4b: 4b:bf:bc:1c:5f:b4:56:ed:98:56:99:31:8e:75:75:a7:19:51: d1:3d:e5:62:bd:ff:3d:d7:ee:ac:be:98:52:81:c5:ac:4f:b8: 54:03:fd:de:de:66:d1:74:5c:eb:f2:64:e1:f4:75:5e:cd:f6: 88:88:27:62:d5:85:ef:d3:22:bc:d9:6c:8b:28:56:e7:92:f7: 73:f5:04:ab:e6:13:d4:3f:47:1f:73:d4:fe:34:e3:92:d0:d0: 12:0e:54:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCuEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUExQkUxMTAvBgNVBAUTKEVBQzI3MUQ2QkRERDU3QzMzMTlFNzFDODExRDg1MDQ3 NTM0QzQ3MzAwHhcNMjUwNjA4MTkxMTI1WhcNMjUwNjE1MTkxMTI1WjAYMRYwFAYD VQQDEw02ODQ1ZTA1ZC1iZTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqrWg7LWsZ6rUug/WIBHjR6mNbrsg2jWsoWF+2NtZRzEzijW3u0OcuTPcDPQu ZYKkI+vc0BKmubkTHl/Yv4h9QYUReHA+9U8ZfVer8N+yEx8RFCC00crORRXGCLU5 8nYXE1eSoQKw1oc+hgIZtt0ZrtHNqdLjV4QW85mYeAhkUOLp3nw8e0fWP6HEm7r2 zUzJNvKrCxw4u1kssHCTW4zGJy9DA2Nn+BGqWQDYc3YKZULKzafTSRK+cFhm0d1/ s0/dRtaBVkRAs5FsTI9zyPGku7c1n0OcmMID3eYM2pQSDaIa25sGLvUbHSonidik o7xPe6l9yEfkAnnZkBjIqi4oOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPo2N3Wi 7o4/IbdXphKl4dpyTzhzMB8GA1UdIwQYMBaAFOrCcda93VfDMZ5xyBHYUEdTTEcw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTFCRS83MDA4NDc3RTRE NjAxMUVBQUI2MzUzNzRDNEY5QUUwMi82c0p4MXIzZFY4TXhubkhJRWRoUVIxTk1S ekEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZzSngxcjNkVjhNeG5uSElFZGhRUjFOTVJ6QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTFCRS83MDA4NDc3RTRENjAxMUVBQUI2MzUzNzRDNEY5QUUwMi82c0p4MXIzZFY4 TXhubkhJRWRoUVIxTk1SekEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGV9h6GXKBbTxSXnY7/0Vpw3hADLe1hq9gNGYLNcykcaSns7IPRJoF VWO/WBCy7AqevrHZGRqaXk4Ex6kh9WZEi7CspwJatHNNfJgsqFDBkpkexke1DmhN UI8aeobKv6ulWyp7gXPGiR/Qoo9dLx8fNRsmLuzBTRzGgvATwgZE9/w3zAQUNHap wo0Ak6qbmJf3FutvXQDqte6ro3Gp62Sr90tLv7wcX7RW7ZhWmTGOdXWnGVHRPeVi vf891+6svphSgcWsT7hUA/3e3mbRdFzr8mTh9HVezfaIiCdi1YXv0yK82WyLKFbn kvdz9QSr5hPUP0cfc9T+NOOS0NASDlQh -----END CERTIFICATE-----Generated at Tue Jun 10 04:36:24 2025 by rpki-client