$ rpki-client -vvf rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft File: 6N-NXkyE2ofXKac8HE6GETgassE.mft (raw, json) Hash identifier: 8psh9cJ4bWZ9KFjQXxAWxvX4vjp4zuZ+vG7xzDK9UoI= Subject key identifier: 6A:E0:50:90:10:7C:86:62:89:30:7F:C8:21:40:25:98:E8:D3:80:55 Authority key identifier: E8:DF:8D:5E:4C:84:DA:87:D7:29:A7:3C:1C:4E:86:11:38:1A:B2:C1 Certificate issuer: /CN=A91B01C7/serialNumber=E8DF8D5E4C84DA87D729A73C1C4E8611381AB2C1 Certificate serial: 2A36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft Manifest number: 2A16 Signing time: Sat 14 Jun 2025 15:34:09 +0000 Manifest this update: Sat 14 Jun 2025 15:34:08 +0000 Manifest next update: Sat 21 Jun 2025 15:34:08 +0000 Files and hashes: 1: 6N-NXkyE2ofXKac8HE6GETgassE.crl (hash: lXwZBVCScbSX3kOZqagQDAmxujKiuYydSY3p70ImX18=) 2: 3785190EF0FE11EEA034D07EC4F9AE02.roa (hash: 7QHA7SnGm3Slg6UtKljXqvO3oOcVcBIhggVBhihsz2U=) 3: 445DB498796011EFA7E9391DC4F9AE02.roa (hash: NM7FShW06/HQ6VqGb5G2xSzxEZkPVe4ddn8MqSf2TiQ=) 4: E86E188A795F11EFBF3B491CC4F9AE02.roa (hash: 7r3+bfJMmECiAzmN3nCQ3UiLeoGkCPSVCRUYmPSHhFI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.crl rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 15:34:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10806 (0x2a36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B01C7, serialNumber=E8DF8D5E4C84DA87D729A73C1C4E8611381AB2C1 Validity Not Before: Jun 14 15:34:08 2025 GMT Not After : Jun 21 15:34:08 2025 GMT Subject: CN=684d9671-6e8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:21:17:d4:f9:43:0b:f4:3a:a3:45:b8:3d:90: b4:05:c0:51:18:32:09:6f:46:f4:8c:91:55:37:cc: 72:a8:73:cc:21:7a:c9:b6:f9:ba:b7:6c:19:a2:01: 65:96:c7:69:24:d8:2c:e5:ed:82:46:a3:d4:9a:19: ba:fa:7f:27:5e:27:04:0f:3b:5e:f1:a6:dc:77:b9: 47:a9:46:0a:33:25:1a:ca:34:1c:38:b5:44:3a:4c: d7:aa:33:12:0d:fe:58:db:5b:9c:48:31:0e:c7:fb: 99:d7:36:91:1c:8e:58:a8:8b:32:1c:9b:ef:6f:8e: 18:da:4b:23:9d:66:8b:ed:55:1d:d3:ba:9b:c1:a7: ef:fb:bc:ec:97:7d:85:ce:57:91:6f:9d:9b:d2:08: af:9f:ed:61:09:35:82:f9:9f:c0:cc:b2:b3:9d:a1: 4a:98:da:61:83:f1:a4:f2:1f:f0:d9:d7:58:72:b6: 22:c4:00:71:8e:fa:01:ca:cf:92:0b:24:e7:2b:7f: 57:b6:6b:39:18:fe:04:89:c0:94:fe:d7:e1:31:99: 87:8c:3c:50:47:91:8f:af:b8:f0:b5:cb:59:53:c2: 3a:e0:4b:7c:97:68:ce:35:22:fc:06:d4:ea:a7:33: b5:ce:6a:21:3e:97:30:bf:91:69:0e:b6:a5:4c:f8: d1:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:E0:50:90:10:7C:86:62:89:30:7F:C8:21:40:25:98:E8:D3:80:55 X509v3 Authority Key Identifier: keyid:E8:DF:8D:5E:4C:84:DA:87:D7:29:A7:3C:1C:4E:86:11:38:1A:B2:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:8e:58:5b:a3:04:d0:be:c3:01:db:73:5b:58:65:79:f5:3b: f9:f9:e4:00:31:9c:54:53:4d:86:e2:b7:35:92:9d:b6:3e:8b: 0d:99:89:1e:4f:0c:27:5c:27:ab:ba:3e:c3:b9:8f:14:70:39: 1f:fa:57:a7:9f:70:3d:33:d1:20:af:b1:fd:f9:cf:c7:b3:eb: 4c:2f:d5:c4:39:6f:93:cf:25:aa:3a:07:1a:74:27:2f:cd:da: 20:46:fe:c0:77:1d:36:6e:92:8e:bb:fd:cc:64:67:40:9b:25: 5d:58:bc:a1:db:3e:18:1b:f3:d8:d9:7c:07:65:40:0e:7c:0a: dd:9e:d7:72:11:d4:4e:4a:c3:53:04:ff:b6:cb:66:a6:34:11: 7b:a0:f0:c1:9d:d5:20:0b:fc:94:34:51:ca:1d:e2:e2:97:07: 13:9c:8c:d1:07:70:78:0c:77:96:5b:f7:c1:d9:4c:cc:60:b4: 99:04:15:dc:c7:f8:b8:7c:a8:4e:e2:48:33:17:bb:41:67:ea: 3d:35:62:a2:f0:13:d2:3e:8d:c6:9b:2c:37:8e:09:99:c0:99: 02:4b:2f:92:25:db:61:85:82:22:5e:5a:6d:c6:7f:d1:1c:d1: c1:a9:45:49:88:68:40:6b:c4:64:62:31:80:86:3f:46:b1:31: 06:15:40:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAxQzcxMTAvBgNVBAUTKEU4REY4RDVFNEM4NERBODdENzI5QTczQzFDNEU4NjEx MzgxQUIyQzEwHhcNMjUwNjE0MTUzNDA4WhcNMjUwNjIxMTUzNDA4WjAYMRYwFAYD VQQDEw02ODRkOTY3MS02ZThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnSEX1PlDC/Q6o0W4PZC0BcBRGDIJb0b0jJFVN8xyqHPMIXrJtvm6t2wZogFl lsdpJNgs5e2CRqPUmhm6+n8nXicEDzte8abcd7lHqUYKMyUayjQcOLVEOkzXqjMS Df5Y21ucSDEOx/uZ1zaRHI5YqIsyHJvvb44Y2ksjnWaL7VUd07qbwafv+7zsl32F zleRb52b0givn+1hCTWC+Z/AzLKznaFKmNphg/Gk8h/w2ddYcrYixABxjvoBys+S CyTnK39Xtms5GP4EicCU/tfhMZmHjDxQR5GPr7jwtctZU8I64Et8l2jONSL8BtTq pzO1zmohPpcwv5FpDralTPjRswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGrgUJAQ fIZiiTB/yCFAJZjo04BVMB8GA1UdIwQYMBaAFOjfjV5MhNqH1ymnPBxOhhE4GrLB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDFDNy85N0NGMjBGQTMz MjMxMUU0QTZFNzQ5MTFDNEY5QUUwMi82Ti1OWGt5RTJvZlhLYWM4SEU2R0VUZ2Fz c0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZOLU5Ya3lFMm9mWEthYzhIRTZHRVRnYXNzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDFDNy85N0NGMjBGQTMzMjMxMUU0QTZFNzQ5MTFDNEY5QUUwMi82Ti1OWGt5RTJv ZlhLYWM4SEU2R0VUZ2Fzc0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByjlhbowTQvsMB23NbWGV59Tv5+eQAMZxUU02G4rc1kp22PosNmYke TwwnXCeruj7DuY8UcDkf+lenn3A9M9Egr7H9+c/Hs+tML9XEOW+TzyWqOgcadCcv zdogRv7Adx02bpKOu/3MZGdAmyVdWLyh2z4YG/PY2XwHZUAOfArdntdyEdROSsNT BP+2y2amNBF7oPDBndUgC/yUNFHKHeLilwcTnIzRB3B4DHeWW/fB2UzMYLSZBBXc x/i4fKhO4kgzF7tBZ+o9NWKi8BPSPo3Gmyw3jgmZwJkCSy+SJdthhYIiXlptxn/R HNHBqUVJiGhAa8RkYjGAhj9GsTEGFUBz -----END CERTIFICATE-----Generated at Sat Jun 14 19:07:28 2025 by rpki-client