$ rpki-client -vvf rpki.apnic.net/member_repository/A919C355/22E76B442F5911EEB957EA72C4F9AE02/6AKchCosGw6rjSFi239_RN4ccCg.mft File: 6AKchCosGw6rjSFi239_RN4ccCg.mft (raw, json) Hash identifier: T+uSZh53fndHQoO5hCOmEBKfx2bJf4xJIZWXKMID6NQ= Subject key identifier: 6D:66:32:31:8D:7E:F9:7C:85:B5:AD:3A:FC:09:7F:EE:7B:8B:5C:E5 Authority key identifier: E8:02:9C:84:2A:2C:1B:0E:AB:8D:21:62:DB:7F:7F:44:DE:1C:70:28 Certificate issuer: /CN=A919C355/serialNumber=E8029C842A2C1B0EAB8D2162DB7F7F44DE1C7028 Certificate serial: 0160 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6AKchCosGw6rjSFi239_RN4ccCg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C355/22E76B442F5911EEB957EA72C4F9AE02/6AKchCosGw6rjSFi239_RN4ccCg.mft Manifest number: 015D Signing time: Mon 09 Jun 2025 03:04:30 +0000 Manifest this update: Mon 09 Jun 2025 03:04:28 +0000 Manifest next update: Mon 16 Jun 2025 03:04:28 +0000 Files and hashes: 1: 6AKchCosGw6rjSFi239_RN4ccCg.crl (hash: qA2RWBikmr5ahw++fzaZPlGWr3G4FDBk2L19NtILHQQ=) 2: 63884D122F5911EE8D896A87C4F9AE02.roa (hash: 4AwkRBSah0q0zkuKlGnrqVF3ZLdqCQgqioJ/w/eqAGc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C355/22E76B442F5911EEB957EA72C4F9AE02/6AKchCosGw6rjSFi239_RN4ccCg.crl rsync://rpki.apnic.net/member_repository/A919C355/22E76B442F5911EEB957EA72C4F9AE02/6AKchCosGw6rjSFi239_RN4ccCg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6AKchCosGw6rjSFi239_RN4ccCg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 03:04:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 352 (0x160) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C355, serialNumber=E8029C842A2C1B0EAB8D2162DB7F7F44DE1C7028 Validity Not Before: Jun 9 03:04:28 2025 GMT Not After : Jun 16 03:04:28 2025 GMT Subject: CN=68464f3d-998c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9c:94:26:a3:86:f7:fb:fb:4c:e1:76:03:da: ea:a1:98:75:52:18:56:21:d1:8a:e1:d7:55:e5:74: 8b:54:aa:e9:e1:3b:15:1c:68:89:dd:21:56:f6:83: fe:84:07:b0:ff:da:d8:76:c8:a7:ca:08:c2:e0:eb: b7:f8:f4:5b:72:2b:36:a0:fa:ac:37:9e:63:ca:84: 6d:46:ca:e6:23:66:1e:81:47:a6:d1:84:d3:09:9b: 17:63:d1:42:7e:2f:80:d0:07:bb:24:4f:25:19:47: 1c:4e:c9:f9:d0:65:47:74:4d:45:a2:e3:8a:35:a8: 64:37:d7:91:0d:4f:6d:b1:23:f0:e4:ac:9d:30:e0: 7e:a1:cc:06:a7:54:3f:46:99:39:4b:9b:cc:6a:be: 47:2f:ab:d2:38:34:b3:cf:ae:d4:c1:32:4f:b5:1b: 79:0d:76:ae:c0:46:42:e5:7f:8f:42:4b:0f:6f:70: 8b:38:23:0f:17:18:6a:11:75:6d:06:c1:c6:a7:8f: fd:0e:21:7b:71:a6:0b:95:82:4b:bd:59:99:e6:c6: ea:b9:38:8f:c1:8e:ce:ce:b6:6f:4c:d5:ba:de:0a: bf:d4:5f:01:d0:63:78:2a:17:36:9b:16:89:9b:55: 2d:ed:03:b6:3c:2c:49:e9:b2:a4:5b:eb:93:d0:ca: 0e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:66:32:31:8D:7E:F9:7C:85:B5:AD:3A:FC:09:7F:EE:7B:8B:5C:E5 X509v3 Authority Key Identifier: keyid:E8:02:9C:84:2A:2C:1B:0E:AB:8D:21:62:DB:7F:7F:44:DE:1C:70:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C355/22E76B442F5911EEB957EA72C4F9AE02/6AKchCosGw6rjSFi239_RN4ccCg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6AKchCosGw6rjSFi239_RN4ccCg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C355/22E76B442F5911EEB957EA72C4F9AE02/6AKchCosGw6rjSFi239_RN4ccCg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:cd:b4:df:87:c7:08:ea:dd:d9:89:2e:20:c1:22:47:29:56: e7:81:89:aa:61:dd:2e:2c:c3:c6:cc:b7:78:3a:96:b1:d2:39: 85:2c:07:96:cc:17:d8:2a:00:91:96:af:7a:7b:e2:41:f9:2f: 87:7c:cf:8f:da:97:a1:dc:df:48:42:62:43:40:7f:b3:82:c5: 9c:d4:27:16:bf:2d:3a:b9:e9:bf:26:67:a1:39:4f:3b:37:c2: dd:b8:4d:a6:b1:75:b2:7c:1d:59:eb:bb:97:2a:49:f1:dd:ae: e9:80:81:7f:c0:af:c1:9f:ff:49:6c:09:50:4d:7e:a3:0c:f6: ed:a8:e1:65:8c:66:79:0e:ca:d5:f4:36:8b:f4:9a:7a:51:9f: 8f:95:ae:a4:4c:f2:98:a1:ff:b6:8f:dc:cd:02:83:a7:ec:bb: 85:0b:ee:e5:22:32:80:f9:76:9e:11:d5:15:0b:fe:7b:1a:1f: 40:7e:2a:0a:dd:cd:40:dd:77:02:bd:f0:59:f7:ab:61:6c:00: c1:3e:1d:dd:c8:a4:ef:57:6e:61:73:a2:aa:4e:85:91:98:2a: 2f:1b:d2:eb:d2:f4:f5:7c:ed:49:52:81:e9:f4:71:fa:6d:a3: ca:25:8a:5f:19:a9:63:16:31:73:f3:a8:08:1a:96:e7:17:01: b1:f6:11:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMzNTUxMTAvBgNVBAUTKEU4MDI5Qzg0MkEyQzFCMEVBQjhEMjE2MkRCN0Y3RjQ0 REUxQzcwMjgwHhcNMjUwNjA5MDMwNDI4WhcNMjUwNjE2MDMwNDI4WjAYMRYwFAYD VQQDEw02ODQ2NGYzZC05OThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApZyUJqOG9/v7TOF2A9rqoZh1UhhWIdGK4ddV5XSLVKrp4TsVHGiJ3SFW9oP+ hAew/9rYdsinygjC4Ou3+PRbcis2oPqsN55jyoRtRsrmI2YegUem0YTTCZsXY9FC fi+A0Ae7JE8lGUccTsn50GVHdE1FouOKNahkN9eRDU9tsSPw5KydMOB+ocwGp1Q/ Rpk5S5vMar5HL6vSODSzz67UwTJPtRt5DXauwEZC5X+PQksPb3CLOCMPFxhqEXVt BsHGp4/9DiF7caYLlYJLvVmZ5sbquTiPwY7OzrZvTNW63gq/1F8B0GN4Khc2mxaJ m1Ut7QO2PCxJ6bKkW+uT0MoOuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG1mMjGN fvl8hbWtOvwJf+57i1zlMB8GA1UdIwQYMBaAFOgCnIQqLBsOq40hYtt/f0TeHHAo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzM1NS8yMkU3NkI0NDJG NTkxMUVFQjk1N0VBNzJDNEY5QUUwMi82QUtjaENvc0d3NnJqU0ZpMjM5X1JONGNj Q2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZBS2NoQ29zR3c2cmpTRmkyMzlfUk40Y2NDZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzM1NS8yMkU3NkI0NDJGNTkxMUVFQjk1N0VBNzJDNEY5QUUwMi82QUtjaENvc0d3 NnJqU0ZpMjM5X1JONGNjQ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAszbTfh8cI6t3ZiS4gwSJHKVbngYmqYd0uLMPGzLd4Opax0jmFLAeW zBfYKgCRlq96e+JB+S+HfM+P2peh3N9IQmJDQH+zgsWc1CcWvy06uem/JmehOU87 N8LduE2msXWyfB1Z67uXKknx3a7pgIF/wK/Bn/9JbAlQTX6jDPbtqOFljGZ5DsrV 9DaL9Jp6UZ+Pla6kTPKYof+2j9zNAoOn7LuFC+7lIjKA+XaeEdUVC/57Gh9AfioK 3c1A3XcCvfBZ96thbADBPh3dyKTvV25hc6KqToWRmCovG9Lr0vT1fO1JUoHp9HH6 baPKJYpfGaljFjFz86gIGpbnFwGx9hFr -----END CERTIFICATE-----Generated at Mon Jun 9 11:15:57 2025 by rpki-client