$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft File: MB6kG5ONf0s895PQEveN06U5cCQ.mft (raw, json) Hash identifier: BE6R39zeDEGmLq1BlNzCZz7Tjb480fpU+dR2eTsAKyg= Subject key identifier: DF:86:43:06:84:68:98:E4:53:71:1A:8B:4C:D9:EA:26:A3:86:8D:AC Authority key identifier: 30:1E:A4:1B:93:8D:7F:4B:3C:F7:93:D0:12:F7:8D:D3:A5:39:70:24 Certificate issuer: /CN=A91B1F4F/serialNumber=301EA41B938D7F4B3CF793D012F78DD3A5397024 Certificate serial: 144D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft Manifest number: 1443 Signing time: Sat 14 Jun 2025 16:52:08 +0000 Manifest this update: Sat 14 Jun 2025 16:52:07 +0000 Manifest next update: Sat 21 Jun 2025 16:52:07 +0000 Files and hashes: 1: MB6kG5ONf0s895PQEveN06U5cCQ.crl (hash: mfj0DBGcu6nzBi1zNI/gZ5a06+mXWJAqX7QkZn8Kf6k=) 2: 61574192E37A11EB8AF29A5BC4F9AE02.roa (hash: W5cx07cNyMaDMA4R0/MWrV4hAi09Yk83hfS7ozdwiBc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.crl rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:52:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5197 (0x144d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1F4F, serialNumber=301EA41B938D7F4B3CF793D012F78DD3A5397024 Validity Not Before: Jun 14 16:52:07 2025 GMT Not After : Jun 21 16:52:07 2025 GMT Subject: CN=684da8b7-7c5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3b:de:3f:70:cc:47:12:11:05:33:69:0c:8e: d4:81:bc:9a:cf:05:df:05:ba:b0:4f:d6:c6:53:1a: 43:2d:21:67:cf:04:d9:d1:be:19:b1:c4:5f:f9:c6: 4a:7a:de:86:55:4b:af:81:9c:1d:da:ea:05:21:15: 7d:cd:99:cf:43:a6:8d:6b:28:9b:9d:ad:db:aa:61: 13:9a:a4:22:22:3b:ed:d3:17:93:f7:3c:83:6a:e4: 26:8e:af:f2:64:49:17:58:f5:94:28:1b:1b:bb:59: 08:0b:06:4c:09:0b:d1:b2:90:1f:61:7c:0d:1c:b1: c7:39:e9:48:d6:7e:d6:17:e7:a5:86:f3:7e:2c:b5: 2c:13:ad:f3:c8:9a:7b:db:8b:27:e3:61:d4:df:25: 55:9e:4b:aa:bb:3a:55:f2:98:f9:d1:10:d3:0d:a6: 21:c7:b6:2a:db:76:bd:cb:9e:cf:b1:45:33:9e:85: 67:f4:6c:b7:00:44:fe:2c:72:a4:58:6d:72:97:ea: 89:f8:ba:f4:64:72:15:1c:f7:d2:75:65:84:a9:80: 33:86:7f:23:f9:89:39:7a:c3:58:37:a8:e3:fc:65: ba:d9:5c:48:27:88:36:d1:b7:96:07:ef:8b:c8:7a: 2e:dc:26:0a:c1:19:39:c0:e3:bf:4c:f7:b1:3f:32: e7:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:86:43:06:84:68:98:E4:53:71:1A:8B:4C:D9:EA:26:A3:86:8D:AC X509v3 Authority Key Identifier: keyid:30:1E:A4:1B:93:8D:7F:4B:3C:F7:93:D0:12:F7:8D:D3:A5:39:70:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:46:2d:95:80:7c:69:5a:18:f5:f3:35:e0:86:08:a3:34:1a: 18:83:d6:22:f6:cb:31:f8:39:8a:34:15:f9:e2:69:f3:e9:07: 75:24:0e:a3:31:bd:fa:c5:7b:02:69:32:47:88:6c:9f:19:e2: fa:e5:7d:71:51:e4:6f:3d:73:ff:65:a2:dc:eb:e8:de:fd:c6: 82:54:25:3f:ab:c1:76:a8:60:b4:b8:c3:88:94:81:fc:64:fc: 1f:bb:51:cf:80:ff:71:ff:00:e3:38:5e:22:e0:90:3a:d6:29: 21:2b:ed:22:06:27:8d:b5:c1:c5:44:6b:2d:98:3a:65:9a:0e: ea:fd:0c:da:09:56:d2:a6:09:98:ec:dd:7a:ca:0e:cf:5c:be: 0a:06:44:d3:57:48:ca:6e:ad:78:3e:75:ba:83:ca:85:d8:80: f8:7b:c7:95:df:fc:b9:26:1c:f1:6a:ed:43:be:2e:e8:be:58: 32:6b:a5:f4:6f:c3:58:e6:1e:b4:d0:7a:be:74:05:71:85:26: 34:6a:a9:7a:f0:ae:a5:70:00:06:19:58:0c:6b:e2:87:01:2b: 3a:90:65:6c:96:88:ac:05:02:ae:f0:2b:8d:91:2b:30:b0:42: 5e:36:b1:d8:a6:e3:47:e2:ce:81:09:d5:ed:19:35:c2:d7:5b: 1a:8f:c7:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFE0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFGNEYxMTAvBgNVBAUTKDMwMUVBNDFCOTM4RDdGNEIzQ0Y3OTNEMDEyRjc4REQz QTUzOTcwMjQwHhcNMjUwNjE0MTY1MjA3WhcNMjUwNjIxMTY1MjA3WjAYMRYwFAYD VQQDEw02ODRkYThiNy03YzViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApzveP3DMRxIRBTNpDI7UgbyazwXfBbqwT9bGUxpDLSFnzwTZ0b4ZscRf+cZK et6GVUuvgZwd2uoFIRV9zZnPQ6aNayibna3bqmETmqQiIjvt0xeT9zyDauQmjq/y ZEkXWPWUKBsbu1kICwZMCQvRspAfYXwNHLHHOelI1n7WF+elhvN+LLUsE63zyJp7 24sn42HU3yVVnkuquzpV8pj50RDTDaYhx7Yq23a9y57PsUUznoVn9Gy3AET+LHKk WG1yl+qJ+Lr0ZHIVHPfSdWWEqYAzhn8j+Yk5esNYN6jj/GW62VxIJ4g20beWB++L yHou3CYKwRk5wOO/TPexPzLn/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN+GQwaE aJjkU3Eai0zZ6iajho2sMB8GA1UdIwQYMBaAFDAepBuTjX9LPPeT0BL3jdOlOXAk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUY0Ri8wRkRCOTc0Qzc0 RDcxMUU4QkM4MkQ0MkNDNEY5QUUwMi9NQjZrRzVPTmYwczg5NVBRRXZlTjA2VTVj Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01CNmtHNU9OZjBzODk1UFFFdmVOMDZVNWNDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUY0Ri8wRkRCOTc0Qzc0RDcxMUU4QkM4MkQ0MkNDNEY5QUUwMi9NQjZrRzVPTmYw czg5NVBRRXZlTjA2VTVjQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeRi2VgHxpWhj18zXghgijNBoYg9Yi9ssx+DmKNBX54mnz6Qd1JA6j Mb36xXsCaTJHiGyfGeL65X1xUeRvPXP/ZaLc6+je/caCVCU/q8F2qGC0uMOIlIH8 ZPwfu1HPgP9x/wDjOF4i4JA61ikhK+0iBieNtcHFRGstmDplmg7q/QzaCVbSpgmY 7N16yg7PXL4KBkTTV0jKbq14PnW6g8qF2ID4e8eV3/y5Jhzxau1Dvi7ovlgya6X0 b8NY5h600Hq+dAVxhSY0aql68K6lcAAGGVgMa+KHASs6kGVsloisBQKu8CuNkSsw sEJeNrHYpuNH4s6BCdXtGTXC11saj8fL -----END CERTIFICATE-----Generated at Sun Jun 15 08:49:24 2025 by rpki-client