$ rpki-client -vvf rpki.apnic.net/member_repository/A91821EE/F6CAA0AACC8A11EA9AEFCE2EC4F9AE02/a6i-wGygtAdTNe2mqSY4hNWuAys.mft File: a6i-wGygtAdTNe2mqSY4hNWuAys.mft (raw, json) Hash identifier: juu5X2jO+Rp07Nx0iLvXuK5OeFOLpqlpa1BYxC+44CI= Subject key identifier: 6F:1A:A5:A5:0A:47:DF:2F:42:D7:9C:E0:90:19:73:18:4D:66:E9:91 Authority key identifier: 6B:A8:BE:C0:6C:A0:B4:07:53:35:ED:A6:A9:26:38:84:D5:AE:03:2B Certificate issuer: /CN=A91821EE/serialNumber=6BA8BEC06CA0B4075335EDA6A9263884D5AE032B Certificate serial: 0850 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6i-wGygtAdTNe2mqSY4hNWuAys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91821EE/F6CAA0AACC8A11EA9AEFCE2EC4F9AE02/a6i-wGygtAdTNe2mqSY4hNWuAys.mft Manifest number: 084A Signing time: Mon 16 Jun 2025 20:31:27 +0000 Manifest this update: Mon 16 Jun 2025 20:31:27 +0000 Manifest next update: Mon 23 Jun 2025 20:31:27 +0000 Files and hashes: 1: a6i-wGygtAdTNe2mqSY4hNWuAys.crl (hash: w4D5hFlz7KNvvQVSaTgdSjgaIsKvI6kYvlFcHrZBYWQ=) 2: E035CD6ECC8B11EA9169032FC4F9AE02.roa (hash: LqzS6UFr2joe/ASisAsS4V1BqArsY/UdnYeqtb0HOGM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91821EE/F6CAA0AACC8A11EA9AEFCE2EC4F9AE02/a6i-wGygtAdTNe2mqSY4hNWuAys.crl rsync://rpki.apnic.net/member_repository/A91821EE/F6CAA0AACC8A11EA9AEFCE2EC4F9AE02/a6i-wGygtAdTNe2mqSY4hNWuAys.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6i-wGygtAdTNe2mqSY4hNWuAys.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 20:31:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2128 (0x850) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91821EE, serialNumber=6BA8BEC06CA0B4075335EDA6A9263884D5AE032B Validity Not Before: Jun 16 20:31:27 2025 GMT Not After : Jun 23 20:31:27 2025 GMT Subject: CN=68507f1f-ea6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f7:31:28:75:cb:85:9b:d4:e9:7e:ad:3a:6f: 66:32:2c:8b:ae:04:71:60:e7:3d:91:96:8f:b4:6d: ef:75:23:38:c7:01:23:10:5d:82:43:a7:94:4d:b4: e2:9e:a6:90:7a:71:3a:8f:f3:93:88:b2:4a:a2:c0: e7:73:cf:0e:6c:34:dd:32:4c:35:88:51:d6:c6:94: b0:3c:5b:eb:e3:0a:89:b9:de:e6:29:07:8f:cb:37: c9:8f:95:d5:4d:3c:5c:21:a7:f6:b4:d3:7b:c7:88: 63:3b:81:8d:d3:cc:b0:f4:ac:51:2e:8b:85:82:ed: 31:1b:3b:56:a6:88:83:d8:b6:eb:42:12:86:67:15: da:ec:2b:ee:8c:f4:76:04:b5:29:63:82:46:9c:f8: 9a:08:e7:6a:c7:79:9d:24:45:54:0f:33:ce:ea:1d: d0:8e:26:84:c2:3f:e9:a3:4f:ad:d8:3e:2f:2d:3b: fd:f7:11:ac:be:de:e5:0b:5b:6d:c5:1f:dc:36:58: c0:62:77:8e:ee:f2:98:e1:e1:b2:7e:b0:4a:d4:79: 39:39:5b:51:43:78:c5:8a:c8:19:f5:e5:1e:c1:db: 3d:d3:9d:db:ab:bf:5c:c7:12:98:e7:05:02:93:ca: 45:ed:6f:eb:db:d8:54:be:f2:61:72:bb:a1:6a:e9: 06:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:1A:A5:A5:0A:47:DF:2F:42:D7:9C:E0:90:19:73:18:4D:66:E9:91 X509v3 Authority Key Identifier: keyid:6B:A8:BE:C0:6C:A0:B4:07:53:35:ED:A6:A9:26:38:84:D5:AE:03:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91821EE/F6CAA0AACC8A11EA9AEFCE2EC4F9AE02/a6i-wGygtAdTNe2mqSY4hNWuAys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6i-wGygtAdTNe2mqSY4hNWuAys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91821EE/F6CAA0AACC8A11EA9AEFCE2EC4F9AE02/a6i-wGygtAdTNe2mqSY4hNWuAys.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:fe:59:41:2b:db:00:03:3a:b1:38:32:8a:b5:c5:1b:fb:49: 17:cf:69:36:4a:1c:51:a7:6c:9b:68:44:d1:54:7d:61:cc:72: f6:74:36:de:3b:da:c5:33:30:63:33:98:0c:4c:7f:d7:ad:6d: 5f:57:0c:9b:c6:fe:0a:93:cf:b0:f9:71:65:ac:76:da:1a:d8: 32:22:0b:7c:81:50:bb:7e:ff:13:27:ae:61:f4:31:56:50:d7: d6:0d:32:2d:7d:42:d9:b9:18:84:82:34:5e:f2:52:28:64:0f: 49:35:76:97:d3:a7:60:1f:e9:c2:b7:30:e5:ed:7a:52:70:5c: 9f:08:89:89:7f:03:a3:a5:00:0d:d9:3b:de:cf:2d:85:67:07: ab:e7:44:4d:b1:e7:97:a6:14:f2:62:0c:6b:37:b2:3d:e2:9c: a6:1b:30:6d:c7:f7:91:8d:6b:3d:bc:57:3d:4c:3d:1d:36:32: d8:3c:e3:87:58:35:a3:f1:ed:61:fb:91:c8:23:54:42:28:bf: f5:f9:d9:3c:aa:f9:2a:04:f7:83:15:cf:9c:81:a2:39:25:eb: 57:15:9c:88:a5:a0:b5:4f:89:c2:ea:a8:25:80:88:f0:13:d0: d4:5c:62:c4:9f:98:32:9d:06:4c:cf:1b:09:46:aa:7f:60:8e: f2:4c:6e:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIxRUUxMTAvBgNVBAUTKDZCQThCRUMwNkNBMEI0MDc1MzM1RURBNkE5MjYzODg0 RDVBRTAzMkIwHhcNMjUwNjE2MjAzMTI3WhcNMjUwNjIzMjAzMTI3WjAYMRYwFAYD VQQDEw02ODUwN2YxZi1lYTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0PcxKHXLhZvU6X6tOm9mMiyLrgRxYOc9kZaPtG3vdSM4xwEjEF2CQ6eUTbTi nqaQenE6j/OTiLJKosDnc88ObDTdMkw1iFHWxpSwPFvr4wqJud7mKQePyzfJj5XV TTxcIaf2tNN7x4hjO4GN08yw9KxRLouFgu0xGztWpoiD2LbrQhKGZxXa7CvujPR2 BLUpY4JGnPiaCOdqx3mdJEVUDzPO6h3QjiaEwj/po0+t2D4vLTv99xGsvt7lC1tt xR/cNljAYneO7vKY4eGyfrBK1Hk5OVtRQ3jFisgZ9eUewds9053bq79cxxKY5wUC k8pF7W/r29hUvvJhcruhaukGNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG8apaUK R98vQtec4JAZcxhNZumRMB8GA1UdIwQYMBaAFGuovsBsoLQHUzXtpqkmOITVrgMr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjFFRS9GNkNBQTBBQUND OEExMUVBOUFFRkNFMkVDNEY5QUUwMi9hNmktd0d5Z3RBZFROZTJtcVNZNGhOV3VB eXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E2aS13R3lndEFkVE5lMm1xU1k0aE5XdUF5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjFFRS9GNkNBQTBBQUNDOEExMUVBOUFFRkNFMkVDNEY5QUUwMi9hNmktd0d5Z3RB ZFROZTJtcVNZNGhOV3VBeXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAg/llBK9sAAzqxODKKtcUb+0kXz2k2ShxRp2ybaETRVH1hzHL2dDbe O9rFMzBjM5gMTH/XrW1fVwybxv4Kk8+w+XFlrHbaGtgyIgt8gVC7fv8TJ65h9DFW UNfWDTItfULZuRiEgjRe8lIoZA9JNXaX06dgH+nCtzDl7XpScFyfCImJfwOjpQAN 2Tvezy2FZwer50RNseeXphTyYgxrN7I94pymGzBtx/eRjWs9vFc9TD0dNjLYPOOH WDWj8e1h+5HII1RCKL/1+dk8qvkqBPeDFc+cgaI5JetXFZyIpaC1T4nC6qglgIjw E9DUXGLEn5gynQZMzxsJRqp/YI7yTG4D -----END CERTIFICATE-----Generated at Tue Jun 17 11:45:51 2025 by rpki-client