$ rpki-client -vvf rpki.apnic.net/member_repository/A919BC3B/C6BD547C39EE11EFA43D6586C4F9AE02/6PdV5x9e1_kTRSz_zj7UIIgSGmg.mft File: 6PdV5x9e1_kTRSz_zj7UIIgSGmg.mft (raw, json) Hash identifier: e7mDrMlXazHa6ugS3yZqjvWl/7HB6qVkEB/tHt7x7gU= Subject key identifier: B5:B1:07:84:BD:5C:89:DB:F8:D9:A2:22:32:FA:62:62:EA:CF:D5:4C Authority key identifier: E8:F7:55:E7:1F:5E:D7:F9:13:45:2C:FF:CE:3E:D4:20:88:12:1A:68 Certificate issuer: /CN=A919BC3B/serialNumber=E8F755E71F5ED7F913452CFFCE3ED42088121A68 Certificate serial: C4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6PdV5x9e1_kTRSz_zj7UIIgSGmg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919BC3B/C6BD547C39EE11EFA43D6586C4F9AE02/6PdV5x9e1_kTRSz_zj7UIIgSGmg.mft Manifest number: C1 Signing time: Wed 09 Jul 2025 06:40:53 +0000 Manifest this update: Wed 09 Jul 2025 06:40:52 +0000 Manifest next update: Wed 16 Jul 2025 06:40:52 +0000 Files and hashes: 1: 6PdV5x9e1_kTRSz_zj7UIIgSGmg.crl (hash: kO1nTj+EF+unGrajh5La85g9Q9jq5rvhJRNq/eEvbvI=) 2: 2C00BB1239EF11EFB6EE4687C4F9AE02.roa (hash: zJmy/7bWwOw3097+xOhmcdnCp+p0bjqozGeHRbB5Gck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919BC3B/C6BD547C39EE11EFA43D6586C4F9AE02/6PdV5x9e1_kTRSz_zj7UIIgSGmg.crl rsync://rpki.apnic.net/member_repository/A919BC3B/C6BD547C39EE11EFA43D6586C4F9AE02/6PdV5x9e1_kTRSz_zj7UIIgSGmg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6PdV5x9e1_kTRSz_zj7UIIgSGmg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Jul 2025 06:40:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 196 (0xc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919BC3B, serialNumber=E8F755E71F5ED7F913452CFFCE3ED42088121A68 Validity Not Before: Jul 9 06:40:52 2025 GMT Not After : Jul 16 06:40:52 2025 GMT Subject: CN=686e0ef5-6270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:92:cf:0c:31:31:18:b4:a1:e9:32:d1:25:41: 8b:55:51:bf:a9:d2:39:60:50:a8:46:c2:98:80:d9: d7:91:b8:17:46:f0:e8:34:06:c2:89:23:93:d5:dd: 43:62:ee:ed:c8:e1:59:67:a4:78:c8:1c:43:86:94: f3:69:c2:a8:d3:fb:4f:21:86:e3:ab:b8:f8:6a:d3: 73:5c:61:95:83:1b:e3:5f:ea:0d:4e:46:e6:c1:53: e7:de:1a:08:4c:25:44:af:1d:a9:84:35:40:3c:37: 28:20:b4:88:d9:c0:08:17:85:06:57:5b:b3:17:f6: e2:d4:1c:ba:09:01:78:f3:38:22:9b:f3:be:f5:45: 13:a8:f2:6c:73:9e:1a:d8:cc:f3:5a:04:91:db:e9: a4:3a:ce:ff:74:e9:3d:54:d8:93:2c:08:1c:03:13: bf:1a:23:a3:aa:5a:d6:ca:d6:fa:76:1b:45:0f:15: 66:e8:47:24:59:d9:9a:2e:d0:cf:e9:5f:0c:b5:16: 1d:02:8a:4a:ad:98:f9:6c:fe:c6:2c:c1:17:82:0f: 5c:bb:00:36:c3:3d:fd:66:73:8c:b0:fd:a4:ce:db: 51:e1:77:cd:00:14:36:7e:f4:64:5f:47:62:11:03: 29:8a:2e:27:f2:8e:1d:d6:eb:5e:85:44:c3:2c:f7: f7:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:B1:07:84:BD:5C:89:DB:F8:D9:A2:22:32:FA:62:62:EA:CF:D5:4C X509v3 Authority Key Identifier: keyid:E8:F7:55:E7:1F:5E:D7:F9:13:45:2C:FF:CE:3E:D4:20:88:12:1A:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919BC3B/C6BD547C39EE11EFA43D6586C4F9AE02/6PdV5x9e1_kTRSz_zj7UIIgSGmg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6PdV5x9e1_kTRSz_zj7UIIgSGmg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BC3B/C6BD547C39EE11EFA43D6586C4F9AE02/6PdV5x9e1_kTRSz_zj7UIIgSGmg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:5c:83:b7:6e:81:c5:ed:07:bb:56:5f:55:a0:33:1c:b6:af: c5:2b:70:50:3f:6c:d6:b0:7e:dc:f5:e0:ac:6c:13:83:cb:bd: 58:02:20:cd:a8:6a:bf:e4:98:b2:c7:c1:41:e1:8f:1d:7b:f4: 67:ce:5e:ac:13:21:fc:69:d2:9c:0d:56:bf:c5:12:d1:1f:07: 74:98:1b:70:d0:1f:d7:79:17:04:a9:77:3c:ef:89:63:42:34: 8a:bb:da:9d:03:53:e6:82:d3:74:2d:6b:6b:b8:b9:6e:f3:c3: c1:e9:29:e8:4b:ad:91:b7:98:ab:e2:e7:fc:b1:d3:8c:ed:b0: 4f:c1:57:79:1b:b1:25:be:a7:7f:31:0a:59:dc:72:86:78:63: f2:84:cb:56:36:a9:3c:fe:0c:6d:ae:51:60:e7:8e:dd:0b:26: 8f:3d:45:c8:6b:a0:00:a8:72:e5:96:21:58:7f:49:c7:29:50: dc:76:8f:79:28:de:23:4c:16:53:e3:cb:74:c4:cc:96:73:c0: 35:f9:77:7c:8f:30:e2:82:55:7d:88:66:3a:61:7e:59:cc:4f: bf:5e:9a:6a:d2:96:be:ed:7b:fc:d9:67:59:fd:ff:3b:e2:fb: 31:63:a5:6f:7e:60:25:94:27:6c:d7:6b:26:04:2f:17:4d:80: 69:4a:57:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUJDM0IxMTAvBgNVBAUTKEU4Rjc1NUU3MUY1RUQ3RjkxMzQ1MkNGRkNFM0VENDIw ODgxMjFBNjgwHhcNMjUwNzA5MDY0MDUyWhcNMjUwNzE2MDY0MDUyWjAYMRYwFAYD VQQDEw02ODZlMGVmNS02MjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1JLPDDExGLSh6TLRJUGLVVG/qdI5YFCoRsKYgNnXkbgXRvDoNAbCiSOT1d1D Yu7tyOFZZ6R4yBxDhpTzacKo0/tPIYbjq7j4atNzXGGVgxvjX+oNTkbmwVPn3hoI TCVErx2phDVAPDcoILSI2cAIF4UGV1uzF/bi1By6CQF48zgim/O+9UUTqPJsc54a 2MzzWgSR2+mkOs7/dOk9VNiTLAgcAxO/GiOjqlrWytb6dhtFDxVm6EckWdmaLtDP 6V8MtRYdAopKrZj5bP7GLMEXgg9cuwA2wz39ZnOMsP2kzttR4XfNABQ2fvRkX0di EQMpii4n8o4d1utehUTDLPf3FQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLWxB4S9 XInb+NmiIjL6YmLqz9VMMB8GA1UdIwQYMBaAFOj3VecfXtf5E0Us/84+1CCIEhpo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QkMzQi9DNkJENTQ3QzM5 RUUxMUVGQTQzRDY1ODZDNEY5QUUwMi82UGRWNXg5ZTFfa1RSU3pfemo3VUlJZ1NH bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZQZFY1eDllMV9rVFJTel96ajdVSUlnU0dtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QkMzQi9DNkJENTQ3QzM5RUUxMUVGQTQzRDY1ODZDNEY5QUUwMi82UGRWNXg5ZTFf a1RSU3pfemo3VUlJZ1NHbWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArXIO3boHF7Qe7Vl9VoDMctq/FK3BQP2zWsH7c9eCsbBODy71YAiDN qGq/5Jiyx8FB4Y8de/Rnzl6sEyH8adKcDVa/xRLRHwd0mBtw0B/XeRcEqXc874lj QjSKu9qdA1PmgtN0LWtruLlu88PB6SnoS62Rt5ir4uf8sdOM7bBPwVd5G7Elvqd/ MQpZ3HKGeGPyhMtWNqk8/gxtrlFg547dCyaPPUXIa6AAqHLlliFYf0nHKVDcdo95 KN4jTBZT48t0xMyWc8A1+Xd8jzDiglV9iGY6YX5ZzE+/Xppq0pa+7Xv82WdZ/f87 4vsxY6VvfmAllCds12smBC8XTYBpSlcK -----END CERTIFICATE-----Generated at Wed Jul 9 09:50:43 2025 by rpki-client