$ rpki-client -vvf rpki.apnic.net/member_repository/A91583E2/4D3CC08A3B9911F0A0CC5978C4F9AE02/R6YZCsBcMIB-0V9AkhuyMttVJIQ.mft File: R6YZCsBcMIB-0V9AkhuyMttVJIQ.mft (raw, json) Hash identifier: WAgKKBR7jr29us1qL6U3+p/CtiCaKbEi9CP+lSdTXiw= Subject key identifier: EB:A1:9F:A7:67:34:2B:07:4D:36:06:C3:52:CC:C6:50:92:43:1A:1A Authority key identifier: 47:A6:19:0A:C0:5C:30:80:7E:D1:5F:40:92:1B:B2:32:DB:55:24:84 Certificate issuer: /CN=A91583E2/serialNumber=47A6190AC05C30807ED15F40921BB232DB552484 Certificate serial: 0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6YZCsBcMIB-0V9AkhuyMttVJIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91583E2/4D3CC08A3B9911F0A0CC5978C4F9AE02/R6YZCsBcMIB-0V9AkhuyMttVJIQ.mft Manifest number: 0B Signing time: Sun 15 Jun 2025 07:12:00 +0000 Manifest this update: Sun 15 Jun 2025 07:12:00 +0000 Manifest next update: Sun 22 Jun 2025 07:12:00 +0000 Files and hashes: 1: R6YZCsBcMIB-0V9AkhuyMttVJIQ.crl (hash: xlGIE2MpnJBfOFY/b5nInEbD6sacVV+LUHCnefWUSeQ=) 2: B0E8BC383B9911F09DE90D79C4F9AE02.roa (hash: DBehkehjj1Vjada20+g+EkMiIesYAdzyY1KoJXBbQUk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91583E2/4D3CC08A3B9911F0A0CC5978C4F9AE02/R6YZCsBcMIB-0V9AkhuyMttVJIQ.crl rsync://rpki.apnic.net/member_repository/A91583E2/4D3CC08A3B9911F0A0CC5978C4F9AE02/R6YZCsBcMIB-0V9AkhuyMttVJIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6YZCsBcMIB-0V9AkhuyMttVJIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 07:11:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91583E2, serialNumber=47A6190AC05C30807ED15F40921BB232DB552484 Validity Not Before: Jun 15 07:12:00 2025 GMT Not After : Jun 22 07:12:00 2025 GMT Subject: CN=684e7240-dfa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:46:9e:c6:a6:0f:02:0c:ea:a3:0e:1b:a8:3d: 66:9a:cf:3e:81:44:3c:12:bc:9f:28:4b:eb:14:09: 63:40:d2:02:65:02:3b:b5:a2:58:60:3d:e1:3c:89: 8d:7a:ce:83:5b:3f:98:ad:84:de:a6:00:fe:72:78: c6:1e:79:5a:a3:8a:69:f9:4f:31:9d:66:2c:a0:5f: 74:dc:77:7f:f0:fe:df:2a:67:ae:01:d2:c4:b6:9c: 60:b8:c2:c4:b0:ee:03:64:4c:39:a1:07:ad:8f:5c: 28:ed:8d:83:4c:f4:29:02:93:bf:17:c5:f6:95:fd: 56:9d:cb:50:08:f1:09:99:e5:dc:99:67:e2:2d:c3: 80:a2:4b:b6:b4:e2:11:fa:76:93:4b:d7:36:37:f6: f5:6a:52:a3:4e:d1:c5:1b:a0:cb:4f:53:91:5a:2a: a8:d5:1e:d5:7d:f8:3d:68:4e:a0:f6:ec:40:ab:c3: 93:14:c3:d5:42:5e:7b:75:f2:28:b7:55:f7:c3:1c: 42:7b:78:17:5a:3b:23:fe:27:45:08:fe:08:47:a1: 2c:ed:b0:3d:33:3a:dc:61:22:39:2a:e5:10:b8:a1: e7:ee:16:3a:60:e8:9a:f7:5e:cc:48:45:2b:0e:de: 16:8f:d3:d7:3a:1e:bf:84:14:66:f3:8d:73:6e:98: ae:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:A1:9F:A7:67:34:2B:07:4D:36:06:C3:52:CC:C6:50:92:43:1A:1A X509v3 Authority Key Identifier: keyid:47:A6:19:0A:C0:5C:30:80:7E:D1:5F:40:92:1B:B2:32:DB:55:24:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91583E2/4D3CC08A3B9911F0A0CC5978C4F9AE02/R6YZCsBcMIB-0V9AkhuyMttVJIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6YZCsBcMIB-0V9AkhuyMttVJIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91583E2/4D3CC08A3B9911F0A0CC5978C4F9AE02/R6YZCsBcMIB-0V9AkhuyMttVJIQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:a1:77:67:29:98:ec:eb:bc:bd:64:b0:96:7f:56:e5:fa:6f: 7d:e7:35:5d:54:8d:65:a8:a5:e4:48:40:23:81:b3:b0:af:2c: 96:24:4e:13:82:c0:00:55:58:5f:e7:47:2a:ee:92:da:8a:3c: 1a:07:90:2b:b0:45:1d:05:ca:36:14:67:c1:69:4c:3b:78:ae: 03:c4:a9:0c:df:a8:aa:97:86:4e:32:0b:2f:5b:9a:2d:03:18: ca:f8:dd:83:6d:3d:24:df:16:f8:8a:3e:a7:34:11:80:09:15: 7d:d5:52:fa:fe:bc:32:dc:16:7a:ab:ff:b7:78:3b:75:9b:7f: eb:18:dd:2e:2b:f4:97:8f:ff:62:c5:8d:76:bf:d4:6b:fc:4a: 57:68:70:e4:95:62:70:9d:38:63:87:74:1c:40:74:86:2d:a0: 80:84:46:42:96:bc:09:b1:7d:d7:58:83:60:13:83:7f:a9:9d: 61:87:d7:66:6e:59:f4:44:b5:5d:78:bc:ba:62:3e:ee:94:cc: 0d:85:1b:f7:04:21:d1:f1:7d:16:99:c9:0c:7b:0e:e5:86:0d: 80:04:7a:cf:cc:95:c2:92:4d:48:c0:4a:cb:a8:b0:8a:1a:41: 4d:f2:26:10:0e:c2:0e:b1:62:99:63:99:32:a5:e1:77:02:db: 81:10:4a:83 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 ODNFMjExMC8GA1UEBRMoNDdBNjE5MEFDMDVDMzA4MDdFRDE1RjQwOTIxQkIyMzJE QjU1MjQ4NDAeFw0yNTA2MTUwNzEyMDBaFw0yNTA2MjIwNzEyMDBaMBgxFjAUBgNV BAMTDTY4NGU3MjQwLWRmYTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9Rp7Gpg8CDOqjDhuoPWaazz6BRDwSvJ8oS+sUCWNA0gJlAju1olhgPeE8iY16 zoNbP5ithN6mAP5yeMYeeVqjimn5TzGdZiygX3Tcd3/w/t8qZ64B0sS2nGC4wsSw 7gNkTDmhB62PXCjtjYNM9CkCk78XxfaV/Vady1AI8QmZ5dyZZ+Itw4CiS7a04hH6 dpNL1zY39vVqUqNO0cUboMtPU5FaKqjVHtV9+D1oTqD27ECrw5MUw9VCXnt18ii3 VffDHEJ7eBdaOyP+J0UI/ghHoSztsD0zOtxhIjkq5RC4oefuFjpg6Jr3XsxIRSsO 3haP09c6Hr+EFGbzjXNumK6xAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU66Gfp2c0 KwdNNgbDUszGUJJDGhowHwYDVR0jBBgwFoAUR6YZCsBcMIB+0V9AkhuyMttVJIQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4M0UyLzREM0NDMDhBM0I5 OTExRjBBMENDNTk3OEM0RjlBRTAyL1I2WVpDc0JjTUlCLTBWOUFraHV5TXR0VkpJ US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUjZZWkNzQmNNSUItMFY5QWtodXlNdHRWSklRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4 M0UyLzREM0NDMDhBM0I5OTExRjBBMENDNTk3OEM0RjlBRTAyL1I2WVpDc0JjTUlC LTBWOUFraHV5TXR0VkpJUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJmhd2cpmOzrvL1ksJZ/VuX6b33nNV1UjWWopeRIQCOBs7CvLJYkThOC wABVWF/nRyruktqKPBoHkCuwRR0FyjYUZ8FpTDt4rgPEqQzfqKqXhk4yCy9bmi0D GMr43YNtPSTfFviKPqc0EYAJFX3VUvr+vDLcFnqr/7d4O3Wbf+sY3S4r9JeP/2LF jXa/1Gv8SldocOSVYnCdOGOHdBxAdIYtoICERkKWvAmxfddYg2ATg3+pnWGH12Zu WfREtV14vLpiPu6UzA2FG/cEIdHxfRaZyQx7DuWGDYAEes/MlcKSTUjASsuosIoa QU3yJhAOwg6xYpljmTKl4XcC24EQSoM= -----END CERTIFICATE-----Generated at Tue Jun 17 01:31:19 2025 by rpki-client