$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9B3C/3F3362DA86FA11EBB3C7BB29C4F9AE02/b2FOWP6Tat901zb1OS3tX9FrdYc.mft File: b2FOWP6Tat901zb1OS3tX9FrdYc.mft (raw, json) Hash identifier: /WQWBWqU3oFs3odqx1cl3jh60U+mcaRpQYRMPdWF5VI= Subject key identifier: 77:1B:7D:32:7D:E5:D9:11:ED:6B:A0:4D:22:0C:62:5A:0B:2F:C6:D5 Authority key identifier: 6F:61:4E:58:FE:93:6A:DF:74:D7:36:F5:39:2D:ED:5F:D1:6B:75:87 Certificate issuer: /CN=A91A9B3C/serialNumber=6F614E58FE936ADF74D736F5392DED5FD16B7587 Certificate serial: 0663 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2FOWP6Tat901zb1OS3tX9FrdYc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9B3C/3F3362DA86FA11EBB3C7BB29C4F9AE02/b2FOWP6Tat901zb1OS3tX9FrdYc.mft Manifest number: 065E Signing time: Mon 16 Jun 2025 22:10:43 +0000 Manifest this update: Mon 16 Jun 2025 22:10:42 +0000 Manifest next update: Mon 23 Jun 2025 22:10:42 +0000 Files and hashes: 1: b2FOWP6Tat901zb1OS3tX9FrdYc.crl (hash: d/V+5xo+GL9DyNVqQP6aERhR4rR8pgiVqq9oo2V94KQ=) 2: 00D8BE5286FC11EB8A95642DC4F9AE02.roa (hash: k0J17sE1EdNCFMHPLLouV8rIaMP7CAywUqJdG5phE9Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9B3C/3F3362DA86FA11EBB3C7BB29C4F9AE02/b2FOWP6Tat901zb1OS3tX9FrdYc.crl rsync://rpki.apnic.net/member_repository/A91A9B3C/3F3362DA86FA11EBB3C7BB29C4F9AE02/b2FOWP6Tat901zb1OS3tX9FrdYc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2FOWP6Tat901zb1OS3tX9FrdYc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 22:10:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1635 (0x663) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9B3C, serialNumber=6F614E58FE936ADF74D736F5392DED5FD16B7587 Validity Not Before: Jun 16 22:10:42 2025 GMT Not After : Jun 23 22:10:42 2025 GMT Subject: CN=68509663-496b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:6a:04:27:d7:60:35:da:f7:c7:db:2a:ac:52: cd:1c:67:b6:0e:a1:90:13:db:fe:9b:c5:a7:36:e0: 2d:a2:ff:53:97:fc:cd:4a:bb:e9:21:6e:cf:e9:c6: 7e:bb:37:08:6c:87:ae:c5:ef:fe:8d:61:80:aa:2a: 51:e5:88:e5:d9:32:5b:82:f0:3e:73:cf:ff:dc:3d: 56:bc:5c:3d:ad:35:e2:2a:a5:b1:0b:e6:28:3d:3c: 70:e0:7d:f0:00:4c:bc:52:df:c9:64:1e:b7:c7:2d: c0:2f:1a:d4:ec:9a:44:1a:cc:36:0a:32:ec:f3:cb: c3:06:5e:b5:83:42:ea:6b:6c:85:1e:65:c7:3c:0e: 45:1f:6e:79:fc:5b:c2:2d:e9:54:b2:14:24:99:69: 88:bb:ab:a4:27:3b:2b:a0:0f:9f:2c:96:cb:10:4b: a6:83:e5:67:49:6f:73:5e:e2:79:72:3b:2a:a0:68: 9c:d0:cf:dc:8b:ed:08:65:d0:28:14:b7:80:0e:bc: 58:cf:63:33:72:0f:5c:00:51:70:ec:c9:fa:63:e3: 11:6c:20:9c:00:6c:90:5e:cd:52:ec:0a:f8:bf:68: 01:e5:a6:49:9d:bf:24:19:d8:34:de:79:df:12:0f: 93:7b:6d:37:df:b6:5c:e4:a0:73:a4:12:98:55:01: 3c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:1B:7D:32:7D:E5:D9:11:ED:6B:A0:4D:22:0C:62:5A:0B:2F:C6:D5 X509v3 Authority Key Identifier: keyid:6F:61:4E:58:FE:93:6A:DF:74:D7:36:F5:39:2D:ED:5F:D1:6B:75:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9B3C/3F3362DA86FA11EBB3C7BB29C4F9AE02/b2FOWP6Tat901zb1OS3tX9FrdYc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2FOWP6Tat901zb1OS3tX9FrdYc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9B3C/3F3362DA86FA11EBB3C7BB29C4F9AE02/b2FOWP6Tat901zb1OS3tX9FrdYc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:34:ea:8c:85:cb:85:80:71:19:81:a4:a0:15:67:61:8c:ff: b0:31:30:50:a4:8e:f8:ed:6f:ab:4e:a7:56:8b:5b:a9:8f:33: a0:19:ac:3d:cb:14:65:6a:4c:4c:d6:93:55:f2:49:f7:a3:73: f7:0e:1a:f8:51:72:d0:9b:3e:8e:4b:f2:76:a9:f7:4f:71:0c: 0f:bb:ad:4e:6a:8a:bf:7e:1c:11:16:85:a6:58:2e:b0:9a:8e: c3:54:99:86:83:d9:0b:eb:28:f5:fe:56:0a:37:6c:d2:42:34: 99:ed:78:e0:fc:b2:d4:92:cf:07:bd:7e:94:22:6c:5e:e5:ff: 41:64:f5:08:0d:c4:c5:fd:6b:cf:68:33:11:f2:9c:c9:c6:db: 07:3c:41:af:2c:ef:79:43:a1:cd:ae:92:be:f3:b2:3a:d1:29: ce:de:64:9f:13:b2:60:38:3c:f0:7e:26:6d:6e:42:79:ab:38: 32:a8:1b:48:3f:83:08:92:09:82:d6:02:31:9e:af:01:ca:dd: b5:87:38:93:53:d3:a1:af:e3:e8:09:a9:c6:13:30:6a:42:e3: 32:ed:cf:86:96:97:61:48:64:c4:7e:7b:d9:a1:b6:65:9e:36: ed:0c:76:5a:dc:38:79:da:7e:01:4b:6e:4f:56:5b:15:b7:60: 18:e1:3d:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlCM0MxMTAvBgNVBAUTKDZGNjE0RTU4RkU5MzZBREY3NEQ3MzZGNTM5MkRFRDVG RDE2Qjc1ODcwHhcNMjUwNjE2MjIxMDQyWhcNMjUwNjIzMjIxMDQyWjAYMRYwFAYD VQQDEw02ODUwOTY2My00OTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4moEJ9dgNdr3x9sqrFLNHGe2DqGQE9v+m8WnNuAtov9Tl/zNSrvpIW7P6cZ+ uzcIbIeuxe/+jWGAqipR5Yjl2TJbgvA+c8//3D1WvFw9rTXiKqWxC+YoPTxw4H3w AEy8Ut/JZB63xy3ALxrU7JpEGsw2CjLs88vDBl61g0Lqa2yFHmXHPA5FH255/FvC LelUshQkmWmIu6ukJzsroA+fLJbLEEumg+VnSW9zXuJ5cjsqoGic0M/ci+0IZdAo FLeADrxYz2Mzcg9cAFFw7Mn6Y+MRbCCcAGyQXs1S7Ar4v2gB5aZJnb8kGdg03nnf Eg+Te20337Zc5KBzpBKYVQE8vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHcbfTJ9 5dkR7WugTSIMYloLL8bVMB8GA1UdIwQYMBaAFG9hTlj+k2rfdNc29Tkt7V/Ra3WH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUIzQy8zRjMzNjJEQTg2 RkExMUVCQjNDN0JCMjlDNEY5QUUwMi9iMkZPV1A2VGF0OTAxemIxT1MzdFg5RnJk WWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2IyRk9XUDZUYXQ5MDF6YjFPUzN0WDlGcmRZYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUIzQy8zRjMzNjJEQTg2RkExMUVCQjNDN0JCMjlDNEY5QUUwMi9iMkZPV1A2VGF0 OTAxemIxT1MzdFg5RnJkWWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcNOqMhcuFgHEZgaSgFWdhjP+wMTBQpI747W+rTqdWi1upjzOgGaw9 yxRlakxM1pNV8kn3o3P3Dhr4UXLQmz6OS/J2qfdPcQwPu61Oaoq/fhwRFoWmWC6w mo7DVJmGg9kL6yj1/lYKN2zSQjSZ7Xjg/LLUks8HvX6UImxe5f9BZPUIDcTF/WvP aDMR8pzJxtsHPEGvLO95Q6HNrpK+87I60SnO3mSfE7JgODzwfiZtbkJ5qzgyqBtI P4MIkgmC1gIxnq8Byt21hziTU9Ohr+PoCanGEzBqQuMy7c+GlpdhSGTEfnvZobZl njbtDHZa3Dh52n4BS25PVlsVt2AY4T1j -----END CERTIFICATE-----Generated at Tue Jun 17 12:00:21 2025 by rpki-client