$ rpki-client -vvf rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft File: RMCz5V6PTVgxhgXnITScArKJwv0.mft (raw, json) Hash identifier: DcqfBxhJqaEJZS+/mZIKf3bxuX1rHVikf3WwNu26ftg= Subject key identifier: 42:A1:A7:D4:A7:B6:B5:80:21:18:EB:EE:C0:BA:61:44:F9:49:51:40 Authority key identifier: 44:C0:B3:E5:5E:8F:4D:58:31:86:05:E7:21:34:9C:02:B2:89:C2:FD Certificate issuer: /CN=A91167F7/serialNumber=44C0B3E55E8F4D58318605E721349C02B289C2FD Certificate serial: 06E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RMCz5V6PTVgxhgXnITScArKJwv0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft Manifest number: 06DD Signing time: Sat 14 Jun 2025 21:44:04 +0000 Manifest this update: Sat 14 Jun 2025 21:44:04 +0000 Manifest next update: Sat 21 Jun 2025 21:44:04 +0000 Files and hashes: 1: RMCz5V6PTVgxhgXnITScArKJwv0.crl (hash: uYBI71ogCJqKXxnUagQfE22yu8Wbt9b01PG2jfKZycE=) 2: 980A0D7254B511EBAC30E864C4F9AE02.roa (hash: PrgqmGPVCZutr73KuPF9z7k4L5rKkcCQ9HWUA608bqU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.crl rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RMCz5V6PTVgxhgXnITScArKJwv0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 21:44:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1762 (0x6e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91167F7, serialNumber=44C0B3E55E8F4D58318605E721349C02B289C2FD Validity Not Before: Jun 14 21:44:04 2025 GMT Not After : Jun 21 21:44:04 2025 GMT Subject: CN=684ded24-a5c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5c:32:29:9c:31:cb:fe:6d:4e:9f:2b:2f:ac: cb:06:64:ea:01:48:12:89:0c:35:20:ae:7c:1d:0a: 4b:80:eb:93:45:e8:14:c2:a1:12:b0:f7:06:29:54: 28:c0:f2:c3:37:9b:1a:c1:d1:27:c8:0f:18:a0:26: ca:50:74:bb:ac:c5:74:96:66:35:c3:13:dd:7d:7b: 3b:e5:21:ac:ef:67:d9:a0:6b:46:60:27:45:63:c5: 00:a0:12:87:3a:f2:d6:e0:22:8a:ba:52:dc:f3:cd: f9:06:53:fb:d2:56:01:74:16:b0:30:f1:6e:39:15: ae:1f:b5:28:a6:c2:a8:f6:cf:74:43:de:f2:09:e8: a7:8a:b9:43:c1:99:96:a7:2b:04:c3:48:03:cb:14: e2:cf:86:c9:6e:c3:7a:50:c8:c7:84:28:10:cf:25: 59:bc:25:54:99:5e:a0:af:64:53:71:99:41:05:e6: 0a:c6:a8:92:1c:6b:4b:f9:53:b8:3d:5b:b2:6b:45: 45:3a:b3:c3:5b:31:83:7b:0a:bf:09:71:4e:d2:81: da:b2:18:a8:b7:51:79:4b:2f:ec:9a:70:4e:c1:0a: bd:1b:73:dc:59:7d:77:c8:80:e4:a7:6e:a8:4d:47: 48:88:ce:bf:77:7d:29:2b:54:83:7e:74:da:a5:0e: f0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A1:A7:D4:A7:B6:B5:80:21:18:EB:EE:C0:BA:61:44:F9:49:51:40 X509v3 Authority Key Identifier: keyid:44:C0:B3:E5:5E:8F:4D:58:31:86:05:E7:21:34:9C:02:B2:89:C2:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RMCz5V6PTVgxhgXnITScArKJwv0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:d7:20:d7:0a:33:87:32:5d:84:b2:7e:58:18:36:f8:93:af: f4:93:4b:fe:8c:cb:5c:2d:56:d7:4a:9e:d1:de:f5:ed:59:55: 5e:6a:60:bf:c7:54:17:e3:07:7c:b3:af:41:a7:54:17:d9:f3: 63:ed:3b:6d:16:a7:5e:2a:11:f2:2a:9a:4c:0d:f1:a3:8d:4f: aa:34:b3:4d:40:3f:56:c2:aa:bb:77:0d:d0:d2:1b:5d:db:45: 3e:f0:ae:d6:3f:31:03:00:dd:f6:30:b3:d7:9b:25:38:d0:05: dc:95:3b:64:4c:88:ca:82:bd:61:30:f2:80:da:b7:b9:d6:ea: 6c:93:b2:c1:0c:3f:ba:6b:62:ff:5b:ac:e1:ee:c1:0e:ac:74: 64:b7:31:f8:23:ec:ad:7c:0c:37:74:3f:c3:8a:05:0f:18:7f: 23:a3:ed:32:f5:34:21:63:2c:b3:e0:4d:0d:c2:d3:78:7e:60: 40:ce:8a:be:e3:84:de:bd:81:47:08:72:58:fb:7c:88:00:25: 15:a8:5c:c0:5b:5e:77:27:38:68:f2:0e:eb:df:45:86:cd:6b: f5:25:cf:4c:6e:27:6b:cc:68:bc:21:c8:b8:93:d6:86:00:78: ca:70:d3:54:7b:0d:99:d8:e1:3f:04:9c:8f:e3:9d:a5:01:d3: 48:a0:cf:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY3RjcxMTAvBgNVBAUTKDQ0QzBCM0U1NUU4RjRENTgzMTg2MDVFNzIxMzQ5QzAy QjI4OUMyRkQwHhcNMjUwNjE0MjE0NDA0WhcNMjUwNjIxMjE0NDA0WjAYMRYwFAYD VQQDEw02ODRkZWQyNC1hNWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyFwyKZwxy/5tTp8rL6zLBmTqAUgSiQw1IK58HQpLgOuTRegUwqESsPcGKVQo wPLDN5sawdEnyA8YoCbKUHS7rMV0lmY1wxPdfXs75SGs72fZoGtGYCdFY8UAoBKH OvLW4CKKulLc8835BlP70lYBdBawMPFuORWuH7UopsKo9s90Q97yCeinirlDwZmW pysEw0gDyxTiz4bJbsN6UMjHhCgQzyVZvCVUmV6gr2RTcZlBBeYKxqiSHGtL+VO4 PVuya0VFOrPDWzGDewq/CXFO0oHashiot1F5Sy/smnBOwQq9G3PcWX13yIDkp26o TUdIiM6/d30pK1SDfnTapQ7wdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEKhp9Sn trWAIRjr7sC6YUT5SVFAMB8GA1UdIwQYMBaAFETAs+Vej01YMYYF5yE0nAKyicL9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjdGNy9CRkQzRUIxQTU0 MTYxMUVCQTRENTY4NjNDNEY5QUUwMi9STUN6NVY2UFRWZ3hoZ1huSVRTY0FyS0p3 djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JNQ3o1VjZQVFZneGhnWG5JVFNjQXJLSnd2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjdGNy9CRkQzRUIxQTU0MTYxMUVCQTRENTY4NjNDNEY5QUUwMi9STUN6NVY2UFRW Z3hoZ1huSVRTY0FyS0p3djAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBO1yDXCjOHMl2Esn5YGDb4k6/0k0v+jMtcLVbXSp7R3vXtWVVeamC/ x1QX4wd8s69Bp1QX2fNj7TttFqdeKhHyKppMDfGjjU+qNLNNQD9Wwqq7dw3Q0htd 20U+8K7WPzEDAN32MLPXmyU40AXclTtkTIjKgr1hMPKA2re51upsk7LBDD+6a2L/ W6zh7sEOrHRktzH4I+ytfAw3dD/DigUPGH8jo+0y9TQhYyyz4E0NwtN4fmBAzoq+ 44TevYFHCHJY+3yIACUVqFzAW153Jzho8g7r30WGzWv1Jc9MbidrzGi8Ici4k9aG AHjKcNNUew2Z2OE/BJyP452lAdNIoM/q -----END CERTIFICATE-----Generated at Sun Jun 15 05:50:27 2025 by rpki-client