$ rpki-client -vvf rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft File: b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft (raw, json) Hash identifier: wNRQQUWHnPVOSE0Z/B6uYRV2cJ1KJwZKcPUWIJwEtXg= Subject key identifier: 2A:74:62:C5:F1:30:D5:DE:0A:8E:48:0D:C8:9D:D4:15:88:4B:25:93 Authority key identifier: 6F:C7:09:06:FB:A6:F4:53:94:52:09:19:32:C4:5F:FA:4D:85:72:B8 Certificate issuer: /CN=A91A54FE/serialNumber=6FC70906FBA6F4539452091932C45FFA4D8572B8 Certificate serial: E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft Manifest number: E2 Signing time: Sun 15 Jun 2025 04:39:33 +0000 Manifest this update: Sun 15 Jun 2025 04:39:33 +0000 Manifest next update: Sun 22 Jun 2025 04:39:33 +0000 Files and hashes: 1: b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl (hash: Q6/yHks5yHoOJBA7QvloCW6bI019sZgqk2m8DTlFJjM=) 2: CD24A702015411EF83144341C4F9AE02.roa (hash: SU2k4PWMP2JoSPhT5sG0pYL6WcQ+PmgmS1rYcFY3jYc=) 3: CC9ED4E2015411EF83144341C4F9AE02.roa (hash: Osq8N7LGubtgKdKl5sdZkfb4P1d2cMS4bJ6mYPyXEPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 04:39:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 230 (0xe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A54FE, serialNumber=6FC70906FBA6F4539452091932C45FFA4D8572B8 Validity Not Before: Jun 15 04:39:33 2025 GMT Not After : Jun 22 04:39:33 2025 GMT Subject: CN=684e4e85-974f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:26:24:3b:7e:7e:e5:31:d8:6e:9a:54:1e:f7: b2:1a:98:2d:c2:20:11:1d:16:c9:86:f9:04:5e:5f: 5e:55:9d:cb:38:f3:6a:24:b4:f6:82:a3:44:2c:6a: 83:25:3c:e6:5c:9e:b3:56:24:17:84:5b:10:68:ef: c0:bb:b8:7c:c9:71:a2:f5:32:97:73:92:59:c7:9d: 25:3b:9b:d0:a6:f9:e4:79:26:42:5d:22:e6:cf:9f: 34:5b:12:15:47:05:b1:10:45:ed:0f:1b:e4:9c:6e: 3e:c7:e9:0b:f2:0c:bf:27:bf:66:5e:84:be:d2:0f: f3:00:b4:9a:66:ba:3a:91:39:60:d6:b5:48:23:8f: 84:4a:9e:5e:30:96:81:a6:8e:19:90:95:b2:9c:66: fa:99:8b:b2:d5:9a:5c:8b:75:6b:a7:48:dd:20:b4: d5:e0:13:60:ca:19:ff:28:50:df:03:ab:e8:59:24: fc:a7:21:9d:7b:91:17:2d:40:d9:f8:5c:54:3f:80: b9:27:16:f1:e9:7e:99:23:5e:7a:38:2d:0f:90:d0: df:1c:5c:ff:d5:07:8c:e8:a8:c7:65:cf:a1:10:c1: 1c:2d:64:06:2a:84:14:39:f0:fa:f9:b2:93:ef:d7: 13:13:f7:fc:db:48:4d:0d:bd:06:e6:43:5b:cf:e5: 38:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:74:62:C5:F1:30:D5:DE:0A:8E:48:0D:C8:9D:D4:15:88:4B:25:93 X509v3 Authority Key Identifier: keyid:6F:C7:09:06:FB:A6:F4:53:94:52:09:19:32:C4:5F:FA:4D:85:72:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:c6:e2:c8:e0:43:46:37:40:52:9f:45:02:f0:50:93:6d:65: c8:d5:80:84:cc:09:49:b3:56:b2:29:a0:a7:c2:eb:c2:81:08: 1e:88:9c:fe:2a:a9:18:f2:4c:99:81:18:2b:02:97:64:7c:ff: c6:d7:de:bf:49:c6:57:51:b0:2e:92:50:60:c2:4b:03:7f:4f: 8b:4c:de:98:79:f1:c9:c9:94:a8:32:b9:71:32:bb:09:f8:cc: 58:bf:1b:25:7d:15:97:91:50:f3:d5:52:5a:2b:ef:d8:10:4e: 24:20:5f:8d:ce:3b:61:fc:5c:2b:d1:2f:5a:1d:98:2d:85:65: 7f:65:1f:73:5a:61:86:dc:27:30:50:36:50:06:e0:12:ed:da: 77:51:04:e6:71:f9:bc:b7:17:f1:29:99:fe:20:2d:ae:7c:cb: 9e:4f:75:4e:6c:bd:37:58:54:34:c5:3c:d8:53:50:0c:1b:64: af:52:1f:41:31:89:36:0b:3c:ff:83:f9:b5:9b:64:74:ab:17: 2c:53:53:9a:7f:ac:50:8c:9d:b6:29:46:d2:60:47:ae:34:33: 93:46:d8:69:d4:c8:ca:96:2f:cc:b7:f1:f5:22:9f:73:23:09: 6c:9f:0a:24:9e:30:66:d8:cf:ab:8a:16:9b:22:89:be:c2:9a: eb:3c:0e:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU0RkUxMTAvBgNVBAUTKDZGQzcwOTA2RkJBNkY0NTM5NDUyMDkxOTMyQzQ1RkZB NEQ4NTcyQjgwHhcNMjUwNjE1MDQzOTMzWhcNMjUwNjIyMDQzOTMzWjAYMRYwFAYD VQQDEw02ODRlNGU4NS05NzRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6CYkO35+5THYbppUHveyGpgtwiARHRbJhvkEXl9eVZ3LOPNqJLT2gqNELGqD JTzmXJ6zViQXhFsQaO/Au7h8yXGi9TKXc5JZx50lO5vQpvnkeSZCXSLmz580WxIV RwWxEEXtDxvknG4+x+kL8gy/J79mXoS+0g/zALSaZro6kTlg1rVII4+ESp5eMJaB po4ZkJWynGb6mYuy1Zpci3Vrp0jdILTV4BNgyhn/KFDfA6voWST8pyGde5EXLUDZ +FxUP4C5Jxbx6X6ZI156OC0PkNDfHFz/1QeM6KjHZc+hEMEcLWQGKoQUOfD6+bKT 79cTE/f820hNDb0G5kNbz+U48QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCp0YsXx MNXeCo5IDcid1BWISyWTMB8GA1UdIwQYMBaAFG/HCQb7pvRTlFIJGTLEX/pNhXK4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTRGRS9ENjExN0RGNkY2 RTkxMUVFQURCRkZCNTJDNEY5QUUwMi9iOGNKQnZ1bTlGT1VVZ2taTXNSZi1rMkZj cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I4Y0pCdnVtOUZPVVVna1pNc1JmLWsyRmNyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTRGRS9ENjExN0RGNkY2RTkxMUVFQURCRkZCNTJDNEY5QUUwMi9iOGNKQnZ1bTlG T1VVZ2taTXNSZi1rMkZjcmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrxuLI4ENGN0BSn0UC8FCTbWXI1YCEzAlJs1ayKaCnwuvCgQgeiJz+ KqkY8kyZgRgrApdkfP/G196/ScZXUbAuklBgwksDf0+LTN6YefHJyZSoMrlxMrsJ +MxYvxslfRWXkVDz1VJaK+/YEE4kIF+Nzjth/Fwr0S9aHZgthWV/ZR9zWmGG3Ccw UDZQBuAS7dp3UQTmcfm8txfxKZn+IC2ufMueT3VObL03WFQ0xTzYU1AMG2SvUh9B MYk2Czz/g/m1m2R0qxcsU1Oaf6xQjJ22KUbSYEeuNDOTRthp1MjKli/Mt/H1Ip9z IwlsnwoknjBm2M+rihabIom+wprrPA7P -----END CERTIFICATE-----Generated at Mon Jun 16 15:58:31 2025 by rpki-client