$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft File: 6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft (raw, json) Hash identifier: d9Qi0JSfs9mDrBxDLqgLAvJ+2GkkSAOQMFXG//Wi3MI= Subject key identifier: 97:AB:CF:84:A0:C1:6E:9C:DC:4E:EB:AC:71:55:17:81:56:C2:28:02 Authority key identifier: E8:CF:22:A0:8E:43:91:CA:D1:50:FA:31:B4:4D:C9:3C:8A:B8:25:EA Certificate issuer: /CN=A91A9083/serialNumber=E8CF22A08E4391CAD150FA31B44DC93C8AB825EA Certificate serial: 5C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft Manifest number: 58 Signing time: Tue 17 Jun 2025 06:09:52 +0000 Manifest this update: Tue 17 Jun 2025 06:09:51 +0000 Manifest next update: Tue 24 Jun 2025 06:09:51 +0000 Files and hashes: 1: 6M8ioI5DkcrRUPoxtE3JPIq4Jeo.crl (hash: bZNP+FRMaBOd054kdgpCkRYA37dGtG5gSqhRV6wQ30Q=) 2: 0C2077B6D1B511EF944F205DC4F9AE02.roa (hash: QhqWdrTMm6OadIcKEi68Y4p+cFPG64Ol8nvunUMPUXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.crl rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 06:09:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9083, serialNumber=E8CF22A08E4391CAD150FA31B44DC93C8AB825EA Validity Not Before: Jun 17 06:09:51 2025 GMT Not After : Jun 24 06:09:51 2025 GMT Subject: CN=685106b0-f8ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:50:6a:39:42:14:ab:44:76:6f:75:7f:4c:eb: 90:f0:1e:24:d2:a3:52:4f:a1:f4:a1:20:a0:62:e0: 5b:09:e3:7f:9d:82:dd:f6:6a:3b:1c:25:29:36:fd: 82:c4:26:ae:02:f4:48:f5:76:53:5d:7a:98:27:d5: 15:f6:e9:7a:b1:18:f8:a7:19:c9:ab:05:17:bb:f0: 84:ec:df:dd:ac:ce:3f:55:68:c9:08:fe:b1:c5:d6: eb:7d:97:5c:27:11:c4:3b:22:95:ab:77:57:7d:03: af:d8:3e:a9:49:93:a6:81:94:8f:52:94:83:b2:10: 7b:66:46:d6:20:cb:88:aa:ce:0a:05:76:93:80:a0: 10:62:fd:a3:ff:c0:bf:a7:57:91:98:d6:07:9a:34: 87:89:56:1d:ca:f5:5b:75:f2:15:4d:d9:36:ac:10: e7:f7:6b:db:6d:50:f7:56:61:56:a4:38:76:49:2d: 1a:80:c2:1a:b1:d3:a7:8b:bc:41:2f:4e:a4:a9:e0: 17:2e:1c:e2:f4:24:53:8a:3b:fb:e4:5b:03:9a:fe: c0:2c:10:dd:91:db:81:d7:2e:82:df:a9:d0:4a:9a: e3:e4:5f:72:58:08:cd:f4:aa:f4:ac:8e:7e:4a:2c: d8:85:90:89:95:0a:47:64:2e:34:b1:fd:b3:fa:03: 9c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:AB:CF:84:A0:C1:6E:9C:DC:4E:EB:AC:71:55:17:81:56:C2:28:02 X509v3 Authority Key Identifier: keyid:E8:CF:22:A0:8E:43:91:CA:D1:50:FA:31:B4:4D:C9:3C:8A:B8:25:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:2f:e6:48:c1:75:b4:3d:d9:9c:c9:bd:25:5d:51:01:0d:aa: 6f:cc:f6:2d:8e:6c:19:82:83:64:4c:3d:2e:a5:28:82:83:73: a2:78:df:f7:fa:2f:f2:97:32:35:f4:11:d3:0c:97:85:49:87: e2:2d:d2:aa:8e:4d:12:48:03:ca:6e:e2:74:5d:9b:cd:9d:81: 62:ad:6a:b7:54:00:d6:6f:b0:9e:43:91:d0:d7:d2:d0:b2:7e: d1:37:54:a4:32:04:b0:45:ae:06:1b:b0:70:ad:72:38:d7:ad: 78:00:c1:f1:91:1c:f5:0b:65:59:0c:cb:c5:21:74:ed:14:3e: 58:fe:40:d4:cb:c1:f8:a5:d9:f2:81:94:ee:ec:75:89:32:c2: 0e:ba:aa:77:49:ef:ca:fe:92:62:49:22:0c:6f:f1:64:3c:d7: f0:2b:28:ef:17:6b:0f:01:f2:56:54:1b:1a:31:85:f9:56:d4: 97:aa:cb:34:25:2d:5c:97:32:53:9c:e0:84:61:2a:d6:d1:ec: 53:b1:45:ad:f2:d5:af:91:bf:49:37:34:b0:39:60:58:7c:a0: 2f:26:b5:32:77:4a:fc:e2:dd:d1:8b:3f:75:6a:a7:99:19:ae: 34:1f:10:07:b9:5e:88:72:42:6d:20:c1:e0:e1:72:92:4e:b8: a8:5b:02:af -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OTA4MzExMC8GA1UEBRMoRThDRjIyQTA4RTQzOTFDQUQxNTBGQTMxQjQ0REM5M0M4 QUI4MjVFQTAeFw0yNTA2MTcwNjA5NTFaFw0yNTA2MjQwNjA5NTFaMBgxFjAUBgNV BAMTDTY4NTEwNmIwLWY4ZWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjUGo5QhSrRHZvdX9M65DwHiTSo1JPofShIKBi4FsJ43+dgt32ajscJSk2/YLE Jq4C9Ej1dlNdepgn1RX26XqxGPinGcmrBRe78ITs392szj9VaMkI/rHF1ut9l1wn EcQ7IpWrd1d9A6/YPqlJk6aBlI9SlIOyEHtmRtYgy4iqzgoFdpOAoBBi/aP/wL+n V5GY1geaNIeJVh3K9Vt18hVN2TasEOf3a9ttUPdWYVakOHZJLRqAwhqx06eLvEEv TqSp4BcuHOL0JFOKO/vkWwOa/sAsEN2R24HXLoLfqdBKmuPkX3JYCM30qvSsjn5K LNiFkImVCkdkLjSx/bP6A5xTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUl6vPhKDB bpzcTuuscVUXgVbCKAIwHwYDVR0jBBgwFoAU6M8ioI5DkcrRUPoxtE3JPIq4Jeow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5MDgzL0MwNkYyRTQyRDFC MDExRUY4ODMzQzkzM0M0RjlBRTAyLzZNOGlvSTVEa2NyUlVQb3h0RTNKUElxNEpl by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNk04aW9JNURrY3JSVVBveHRFM0pQSXE0SmVvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 MDgzL0MwNkYyRTQyRDFCMDExRUY4ODMzQzkzM0M0RjlBRTAyLzZNOGlvSTVEa2Ny UlVQb3h0RTNKUElxNEplby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABgv5kjBdbQ92ZzJvSVdUQENqm/M9i2ObBmCg2RMPS6lKIKDc6J43/f6 L/KXMjX0EdMMl4VJh+It0qqOTRJIA8pu4nRdm82dgWKtardUANZvsJ5DkdDX0tCy ftE3VKQyBLBFrgYbsHCtcjjXrXgAwfGRHPULZVkMy8UhdO0UPlj+QNTLwfil2fKB lO7sdYkywg66qndJ78r+kmJJIgxv8WQ81/ArKO8Xaw8B8lZUGxoxhflW1JeqyzQl LVyXMlOc4IRhKtbR7FOxRa3y1a+Rv0k3NLA5YFh8oC8mtTJ3Svzi3dGLP3Vqp5kZ rjQfEAe5XohyQm0gweDhcpJOuKhbAq8= -----END CERTIFICATE-----Generated at Wed Jun 18 10:07:56 2025 by rpki-client