$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/6DpZuIHOHlc10a3c2LrgXlO4U9A.mft File: 6DpZuIHOHlc10a3c2LrgXlO4U9A.mft (raw, json) Hash identifier: VIy2RCXPFrUxjilAF96mev4ciEoXixAEMMvCX2QbeMw= Subject key identifier: 07:E8:40:D7:42:1A:CE:40:DE:A0:56:FB:D8:9A:91:A7:0D:D2:31:AE Authority key identifier: E8:3A:59:B8:81:CE:1E:57:35:D1:AD:DC:D8:BA:E0:5E:53:B8:53:D0 Certificate issuer: /CN=A91A3BB1/serialNumber=E83A59B881CE1E5735D1ADDCD8BAE05E53B853D0 Certificate serial: 34CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6DpZuIHOHlc10a3c2LrgXlO4U9A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/6DpZuIHOHlc10a3c2LrgXlO4U9A.mft Manifest number: 34A9 Signing time: Sat 14 Jun 2025 14:50:12 +0000 Manifest this update: Sat 14 Jun 2025 14:50:11 +0000 Manifest next update: Sat 21 Jun 2025 14:50:11 +0000 Files and hashes: 1: 6DpZuIHOHlc10a3c2LrgXlO4U9A.crl (hash: 3YCNhhA7gRQsMQ3zteUcv9HOJZAnlHpgdgkhqFbJCoc=) 2: 0B3FC58CB0DA11E5A8C8BF13C4F9AE02.roa (hash: IB+Pst0/hjjnT/aD3F4nsmgPYgJjXgVIAOW0RdKrpkY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/6DpZuIHOHlc10a3c2LrgXlO4U9A.crl rsync://rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/6DpZuIHOHlc10a3c2LrgXlO4U9A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6DpZuIHOHlc10a3c2LrgXlO4U9A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 14:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13519 (0x34cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3BB1, serialNumber=E83A59B881CE1E5735D1ADDCD8BAE05E53B853D0 Validity Not Before: Jun 14 14:50:11 2025 GMT Not After : Jun 21 14:50:11 2025 GMT Subject: CN=684d8c23-321e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:2f:ce:3f:5b:36:ba:cf:e2:aa:39:a4:7e:79: 74:ec:10:49:be:90:ad:49:8c:66:98:94:9c:22:56: 02:ec:f7:63:c5:58:45:0f:13:61:91:e8:d7:67:6a: 92:3b:d4:cb:4a:75:51:3a:4b:07:7b:55:c8:8a:68: fa:24:ef:b2:5d:78:8b:4e:0c:22:b5:4d:38:53:d1: b3:7e:63:fa:64:fb:2f:a3:24:94:69:6f:00:38:d0: f6:a8:b2:ee:05:48:7b:52:6d:05:de:1b:57:df:9d: b3:cd:7c:c1:4f:9b:ef:2d:cc:a1:22:9b:a9:ff:04: 97:4a:cb:f3:28:7c:f2:52:45:62:c9:97:c4:d6:8f: 16:07:ab:a3:ce:31:e8:c5:e9:10:53:50:27:00:2e: d6:ca:c1:02:06:99:d6:db:35:c0:21:c0:e7:35:ef: d9:9f:9a:6a:81:c3:58:37:0e:7b:67:5f:2f:37:6d: a3:a0:c9:c7:26:ee:65:02:36:15:41:7f:df:e5:c9: e7:07:d4:05:c7:1c:b2:01:a5:a6:28:a5:cd:27:07: b6:67:b2:8e:6f:c2:9c:67:a0:60:c1:79:dc:7a:d1: 80:78:ff:11:0a:76:bb:d0:a2:a6:49:f8:ee:b0:c4: bd:29:ac:2e:77:32:9a:d8:6e:51:42:36:35:e5:7f: 7f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:E8:40:D7:42:1A:CE:40:DE:A0:56:FB:D8:9A:91:A7:0D:D2:31:AE X509v3 Authority Key Identifier: keyid:E8:3A:59:B8:81:CE:1E:57:35:D1:AD:DC:D8:BA:E0:5E:53:B8:53:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/6DpZuIHOHlc10a3c2LrgXlO4U9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6DpZuIHOHlc10a3c2LrgXlO4U9A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/6DpZuIHOHlc10a3c2LrgXlO4U9A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:54:a1:03:58:22:b7:04:55:e0:30:85:c1:7a:e9:ca:7f:5c: 63:56:94:15:26:80:91:74:59:89:25:66:cb:82:45:7f:30:07: b5:30:3a:c6:30:84:e3:af:8a:6a:96:a4:23:11:16:43:2a:b3: 13:a8:b1:a8:96:8d:ef:a6:9d:5e:d2:1c:bf:39:ac:9d:12:c2: 9f:87:74:5e:48:9f:c9:36:9d:c9:d4:4c:54:50:d0:60:8f:8a: 97:0d:5c:29:47:21:8c:35:aa:13:04:a0:b4:22:2b:9b:17:a3: a6:56:b0:c2:f7:b1:88:fa:c5:44:18:1d:c1:38:3e:4d:c2:46: dd:06:a2:cb:33:64:27:a1:b3:df:0d:3a:f9:0b:89:45:d4:06: a5:94:70:27:37:6d:4e:f9:82:cd:75:8f:01:51:32:7f:48:57: f4:ed:15:62:79:9c:a3:f9:82:7a:6c:31:f0:88:65:1c:ef:f4: 15:a9:36:f6:ec:1d:42:e1:74:4c:f5:55:32:49:be:02:02:a7: 39:2d:58:af:35:68:a9:56:9b:02:c1:48:97:50:d3:fc:8b:6f: 89:71:e7:3e:13:30:0c:46:51:e9:bb:50:9b:22:10:a0:49:8b: 44:7c:a0:a9:63:2a:4e:ee:d6:af:5b:56:26:b7:0f:d8:ad:23: 01:b4:f5:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNCQjExMTAvBgNVBAUTKEU4M0E1OUI4ODFDRTFFNTczNUQxQUREQ0Q4QkFFMDVF NTNCODUzRDAwHhcNMjUwNjE0MTQ1MDExWhcNMjUwNjIxMTQ1MDExWjAYMRYwFAYD VQQDEw02ODRkOGMyMy0zMjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3y/OP1s2us/iqjmkfnl07BBJvpCtSYxmmJScIlYC7PdjxVhFDxNhkejXZ2qS O9TLSnVROksHe1XIimj6JO+yXXiLTgwitU04U9GzfmP6ZPsvoySUaW8AOND2qLLu BUh7Um0F3htX352zzXzBT5vvLcyhIpup/wSXSsvzKHzyUkViyZfE1o8WB6ujzjHo xekQU1AnAC7WysECBpnW2zXAIcDnNe/Zn5pqgcNYNw57Z18vN22joMnHJu5lAjYV QX/f5cnnB9QFxxyyAaWmKKXNJwe2Z7KOb8KcZ6BgwXncetGAeP8RCna70KKmSfju sMS9KawudzKa2G5RQjY15X9/vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAfoQNdC Gs5A3qBW+9iakacN0jGuMB8GA1UdIwQYMBaAFOg6WbiBzh5XNdGt3Ni64F5TuFPQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0JCMS9FQTFCMjJFMDFE OTYxMUUyOTgwNkM1N0YwOEIwMkNEMi82RHBadUlIT0hsYzEwYTNjMkxyZ1hsTzRV OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZEcFp1SUhPSGxjMTBhM2MyTHJnWGxPNFU5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0JCMS9FQTFCMjJFMDFEOTYxMUUyOTgwNkM1N0YwOEIwMkNEMi82RHBadUlIT0hs YzEwYTNjMkxyZ1hsTzRVOUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqVKEDWCK3BFXgMIXBeunKf1xjVpQVJoCRdFmJJWbLgkV/MAe1MDrG MITjr4pqlqQjERZDKrMTqLGolo3vpp1e0hy/OaydEsKfh3ReSJ/JNp3J1ExUUNBg j4qXDVwpRyGMNaoTBKC0IiubF6OmVrDC97GI+sVEGB3BOD5NwkbdBqLLM2QnobPf DTr5C4lF1AallHAnN21O+YLNdY8BUTJ/SFf07RVieZyj+YJ6bDHwiGUc7/QVqTb2 7B1C4XRM9VUySb4CAqc5LVivNWipVpsCwUiXUNP8i2+Jcec+EzAMRlHpu1CbIhCg SYtEfKCpYypO7tavW1Ymtw/YrSMBtPVE -----END CERTIFICATE-----Generated at Sat Jun 14 19:33:57 2025 by rpki-client