$ rpki-client -vvf rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/6sqCrlKk_xgNM2F5-DlQpasLx7M.mft File: 6sqCrlKk_xgNM2F5-DlQpasLx7M.mft (raw, json) Hash identifier: c3a2w7bXnzpwCi3tOqPbmat4U6BEH9MbC1llpDNVXTg= Subject key identifier: E0:2D:83:C8:99:81:39:34:33:DE:08:26:87:15:92:D9:6F:FB:80:A7 Authority key identifier: EA:CA:82:AE:52:A4:FF:18:0D:33:61:79:F8:39:50:A5:AB:0B:C7:B3 Certificate issuer: /CN=A91486D3/serialNumber=EACA82AE52A4FF180D336179F83950A5AB0BC7B3 Certificate serial: E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sqCrlKk_xgNM2F5-DlQpasLx7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/6sqCrlKk_xgNM2F5-DlQpasLx7M.mft Manifest number: E1 Signing time: Sun 15 Jun 2025 04:36:08 +0000 Manifest this update: Sun 15 Jun 2025 04:36:08 +0000 Manifest next update: Sun 22 Jun 2025 04:36:08 +0000 Files and hashes: 1: 6sqCrlKk_xgNM2F5-DlQpasLx7M.crl (hash: Pga35A8Tj0opnlzMvaiT0Ob52a3KXFO7NRuzdNFrtlQ=) 2: C2A2E774EEC311EE8832C93AC4F9AE02.roa (hash: ms7snh2IzeS7RUyS63vDyik3Jw03vBKHQY1xlDWMLMg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/6sqCrlKk_xgNM2F5-DlQpasLx7M.crl rsync://rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/6sqCrlKk_xgNM2F5-DlQpasLx7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sqCrlKk_xgNM2F5-DlQpasLx7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91486D3, serialNumber=EACA82AE52A4FF180D336179F83950A5AB0BC7B3 Validity Not Before: Jun 15 04:36:08 2025 GMT Not After : Jun 22 04:36:08 2025 GMT Subject: CN=684e4db8-bac4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7b:02:b7:8e:fc:d6:34:9d:dc:37:95:21:ca: b2:51:37:d2:8d:dc:2b:54:17:8b:76:23:52:75:46: 52:05:4d:c6:0c:c4:71:fc:d3:b0:de:44:1c:31:9c: 49:ca:20:98:a9:96:0a:37:74:89:8c:fa:0a:7c:e1: f9:24:c9:da:15:f3:1f:61:a1:3c:e2:9e:df:59:88: 08:b6:cb:16:a5:c6:b7:37:83:c0:14:0d:c3:bd:20: 6d:f9:d1:b2:eb:25:00:eb:9f:97:63:b1:07:6a:13: 22:c9:3d:4e:40:e0:59:f4:6d:06:8b:2e:b4:4b:98: 92:06:0d:1d:d4:f5:b7:7a:c7:b9:fc:ec:1c:a4:e1: 75:be:9e:7f:e0:ff:21:38:95:41:f5:4d:05:f9:06: 83:c8:a8:00:9a:a8:27:62:a7:7c:ad:4e:4a:fa:be: 96:ee:83:33:4a:91:92:0e:a8:aa:12:fc:a3:93:a6: 56:17:0b:28:a9:6d:07:75:c9:6f:9e:be:aa:db:d7: 81:99:e8:d4:88:ab:c8:64:13:dc:ab:f1:56:d9:99: a0:e3:3c:c1:c1:eb:61:7d:34:e5:22:f1:64:23:e9: a6:15:b8:ff:e9:62:18:e9:ec:7e:57:44:64:05:2c: f5:72:7a:45:08:f9:d4:c5:34:2a:81:4c:4f:98:56: 73:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:2D:83:C8:99:81:39:34:33:DE:08:26:87:15:92:D9:6F:FB:80:A7 X509v3 Authority Key Identifier: keyid:EA:CA:82:AE:52:A4:FF:18:0D:33:61:79:F8:39:50:A5:AB:0B:C7:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/6sqCrlKk_xgNM2F5-DlQpasLx7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sqCrlKk_xgNM2F5-DlQpasLx7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/6sqCrlKk_xgNM2F5-DlQpasLx7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:6d:d8:a7:5f:e6:ce:80:63:2e:1a:14:60:2c:68:2f:c2:6e: dd:e2:3a:e5:86:f5:23:54:c1:7c:ab:01:34:ba:5a:9e:93:c9: 7f:5d:a4:4b:32:cb:8f:79:fb:aa:0f:5c:20:07:1d:3a:fe:98: b4:c5:40:db:8c:66:38:31:97:2b:4f:58:51:28:74:81:cb:a4: 78:95:5d:5b:c3:81:a4:2e:c4:2b:6e:dd:c4:e5:e0:fa:e4:07: c2:f8:c8:cc:0d:d2:e5:e3:73:75:7b:28:e4:4c:ca:84:6d:bb: 70:ed:78:5b:f9:45:3f:a9:be:03:fa:46:71:a4:e3:d9:28:99: 1a:be:66:14:c0:4a:87:21:50:c9:c7:98:b5:c3:30:e2:c4:cf: 59:98:57:c6:7b:6b:08:e5:58:d0:e6:58:7c:71:aa:56:a1:a4: d4:3d:a8:84:f8:aa:d0:72:ef:f9:f9:b9:31:d4:b6:11:91:03: cf:c1:9d:a8:04:e9:d4:e3:47:a1:cd:8a:b4:b3:0e:cf:63:23: 1c:05:6d:d7:92:e9:f1:d2:10:53:2c:a1:16:e0:af:f6:b2:6a: 70:1d:5d:37:fb:0d:44:80:7f:35:e7:fa:d4:af:af:8f:46:8d: ea:09:14:95:48:29:cf:cf:7b:a8:56:5c:5e:11:ef:94:0f:10: d2:79:3b:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg2RDMxMTAvBgNVBAUTKEVBQ0E4MkFFNTJBNEZGMTgwRDMzNjE3OUY4Mzk1MEE1 QUIwQkM3QjMwHhcNMjUwNjE1MDQzNjA4WhcNMjUwNjIyMDQzNjA4WjAYMRYwFAYD VQQDEw02ODRlNGRiOC1iYWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArnsCt4781jSd3DeVIcqyUTfSjdwrVBeLdiNSdUZSBU3GDMRx/NOw3kQcMZxJ yiCYqZYKN3SJjPoKfOH5JMnaFfMfYaE84p7fWYgItssWpca3N4PAFA3DvSBt+dGy 6yUA65+XY7EHahMiyT1OQOBZ9G0Giy60S5iSBg0d1PW3ese5/OwcpOF1vp5/4P8h OJVB9U0F+QaDyKgAmqgnYqd8rU5K+r6W7oMzSpGSDqiqEvyjk6ZWFwsoqW0Hdclv nr6q29eBmejUiKvIZBPcq/FW2Zmg4zzBwethfTTlIvFkI+mmFbj/6WIY6ex+V0Rk BSz1cnpFCPnUxTQqgUxPmFZz8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOAtg8iZ gTk0M94IJocVktlv+4CnMB8GA1UdIwQYMBaAFOrKgq5SpP8YDTNhefg5UKWrC8ez MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODZEMy8xRkEyOTExNEVF QzMxMUVFQjJEQkZCMUJDNEY5QUUwMi82c3FDcmxLa194Z05NMkY1LURsUXBhc0x4 N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZzcUNybEtrX3hnTk0yRjUtRGxRcGFzTHg3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODZEMy8xRkEyOTExNEVFQzMxMUVFQjJEQkZCMUJDNEY5QUUwMi82c3FDcmxLa194 Z05NMkY1LURsUXBhc0x4N00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWbdinX+bOgGMuGhRgLGgvwm7d4jrlhvUjVMF8qwE0ulqek8l/XaRL MsuPefuqD1wgBx06/pi0xUDbjGY4MZcrT1hRKHSBy6R4lV1bw4GkLsQrbt3E5eD6 5AfC+MjMDdLl43N1eyjkTMqEbbtw7Xhb+UU/qb4D+kZxpOPZKJkavmYUwEqHIVDJ x5i1wzDixM9ZmFfGe2sI5VjQ5lh8capWoaTUPaiE+KrQcu/5+bkx1LYRkQPPwZ2o BOnU40ehzYq0sw7PYyMcBW3Xkunx0hBTLKEW4K/2smpwHV03+w1EgH815/rUr6+P Ro3qCRSVSCnPz3uoVlxeEe+UDxDSeTvY -----END CERTIFICATE-----Generated at Sun Jun 15 09:31:50 2025 by rpki-client