$ rpki-client -vvf rpki.apnic.net/member_repository/A91B346D/70E26EA4CE6A11EBB0774E80C4F9AE02/_6CVovSifKRjG8I55X56QFtFa_8.mft File: _6CVovSifKRjG8I55X56QFtFa_8.mft (raw, json) Hash identifier: SIfs00+GV4ADl1SZ+LYMHzuNoUumeW5B9o4hqMHDusY= Subject key identifier: 1A:32:64:FB:60:8E:5E:EA:EB:E8:0E:41:10:18:9A:58:D3:3D:95:97 Authority key identifier: FF:A0:95:A2:F4:A2:7C:A4:63:1B:C2:39:E5:7E:7A:40:5B:45:6B:FF Certificate issuer: /CN=A91B346D/serialNumber=FFA095A2F4A27CA4631BC239E57E7A405B456BFF Certificate serial: 05B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_6CVovSifKRjG8I55X56QFtFa_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B346D/70E26EA4CE6A11EBB0774E80C4F9AE02/_6CVovSifKRjG8I55X56QFtFa_8.mft Manifest number: 05AA Signing time: Sat 14 Jun 2025 22:54:10 +0000 Manifest this update: Sat 14 Jun 2025 22:54:10 +0000 Manifest next update: Sat 21 Jun 2025 22:54:10 +0000 Files and hashes: 1: _6CVovSifKRjG8I55X56QFtFa_8.crl (hash: 9jBKVjykG5w905a1lo1gY7VSqRqNTdVS27+SpuqvVKA=) 2: 2F7C5A70968A11EEB50D1D33C4F9AE02.roa (hash: Zv8tWZ5PS/AsNxyN72Eh+kXECLAaQmTfm/PY+5VYT/I=) 3: C708809CD06E11EBBBC4C43DC4F9AE02.roa (hash: yOgljvPhlJfq06U7oKLYib7/GJzDf+ZYOoVC0PAr/6Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B346D/70E26EA4CE6A11EBB0774E80C4F9AE02/_6CVovSifKRjG8I55X56QFtFa_8.crl rsync://rpki.apnic.net/member_repository/A91B346D/70E26EA4CE6A11EBB0774E80C4F9AE02/_6CVovSifKRjG8I55X56QFtFa_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_6CVovSifKRjG8I55X56QFtFa_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 22:54:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1460 (0x5b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B346D, serialNumber=FFA095A2F4A27CA4631BC239E57E7A405B456BFF Validity Not Before: Jun 14 22:54:10 2025 GMT Not After : Jun 21 22:54:10 2025 GMT Subject: CN=684dfd92-f49f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a8:3f:31:22:bb:44:de:93:e1:f5:c1:61:4b: 82:6d:5a:9b:a0:01:b3:28:1c:8d:1c:65:0a:bb:08: 57:1a:c7:5d:0a:c1:fb:2c:49:aa:ee:af:bb:84:df: 34:6e:33:c2:c8:1c:41:3d:7c:f4:82:29:be:07:a6: 3e:d9:cc:66:f5:07:35:36:a7:07:a3:b3:81:37:87: 69:b2:b8:99:b6:1e:53:64:e0:b6:df:54:da:58:da: 95:7d:ff:e9:75:ab:ca:0f:04:31:62:78:a2:8f:23: 9e:14:4e:a1:dc:76:2f:fd:80:b8:97:08:1f:08:29: c4:70:c0:9e:f3:17:d4:6f:75:04:95:1f:2c:f2:98: 3b:42:21:1e:cc:5c:ea:6d:78:41:b5:22:c8:9f:9a: 22:69:37:0c:09:45:67:2b:6b:80:1b:1a:8c:01:9b: 69:1d:09:3e:32:22:9f:a5:95:3b:13:94:4d:56:08: 64:96:09:50:97:ab:35:df:79:56:c1:6f:2b:fc:08: 63:fe:5d:0d:cc:1a:38:e1:12:29:6f:a5:17:4e:78: 00:bb:34:de:a8:51:42:07:3e:7e:7f:31:53:fb:77: 34:1f:ab:3a:14:12:f0:e0:9c:7b:c3:e4:6a:24:fa: 34:01:c9:93:5e:c9:7b:41:ff:42:83:8a:ad:16:1a: d4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:32:64:FB:60:8E:5E:EA:EB:E8:0E:41:10:18:9A:58:D3:3D:95:97 X509v3 Authority Key Identifier: keyid:FF:A0:95:A2:F4:A2:7C:A4:63:1B:C2:39:E5:7E:7A:40:5B:45:6B:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B346D/70E26EA4CE6A11EBB0774E80C4F9AE02/_6CVovSifKRjG8I55X56QFtFa_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_6CVovSifKRjG8I55X56QFtFa_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B346D/70E26EA4CE6A11EBB0774E80C4F9AE02/_6CVovSifKRjG8I55X56QFtFa_8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:38:a5:c1:2e:0c:bf:04:40:b6:1a:34:e8:2f:c2:6f:fd:6e: 37:75:47:73:f8:85:92:0f:d4:e2:70:42:92:00:f3:d8:9a:9b: 9d:ae:0d:b1:78:d6:a0:83:fe:e1:67:10:f9:97:e3:8b:f8:de: 73:f5:56:3e:14:3e:20:2c:f5:78:c8:4e:7b:88:ef:07:fc:ed: cc:33:12:f2:2a:2c:9b:d2:ad:39:4c:8c:bc:52:fb:f1:90:54: 47:be:7b:c1:f8:02:34:72:11:be:a2:33:77:46:56:18:3d:4b: e9:86:35:f5:f2:49:4a:f9:ca:6d:d8:d8:71:5c:85:5f:35:38: 25:0a:f6:0f:b1:13:58:1d:24:c6:41:0f:9f:7e:48:8e:7d:c2: ca:47:d4:11:08:fc:b7:6f:f8:af:e7:82:64:f0:f7:c7:af:08: c9:7c:58:88:d1:70:4e:14:47:ae:c4:27:9f:ad:dc:34:86:bb: 10:40:e5:16:93:5c:59:45:19:22:9b:db:66:8e:8f:fb:92:37: ab:c0:19:eb:77:d5:9b:1c:7b:e6:eb:00:67:57:b7:49:da:72: 7e:ae:fa:14:93:da:46:a0:1c:76:c7:a4:08:54:ce:d4:86:a6: 59:d2:58:df:c1:2f:bc:97:29:97:8b:82:90:78:1f:ba:58:87: dd:bc:2c:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM0NkQxMTAvBgNVBAUTKEZGQTA5NUEyRjRBMjdDQTQ2MzFCQzIzOUU1N0U3QTQw NUI0NTZCRkYwHhcNMjUwNjE0MjI1NDEwWhcNMjUwNjIxMjI1NDEwWjAYMRYwFAYD VQQDEw02ODRkZmQ5Mi1mNDlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr6g/MSK7RN6T4fXBYUuCbVqboAGzKByNHGUKuwhXGsddCsH7LEmq7q+7hN80 bjPCyBxBPXz0gim+B6Y+2cxm9Qc1NqcHo7OBN4dpsriZth5TZOC231TaWNqVff/p davKDwQxYniijyOeFE6h3HYv/YC4lwgfCCnEcMCe8xfUb3UElR8s8pg7QiEezFzq bXhBtSLIn5oiaTcMCUVnK2uAGxqMAZtpHQk+MiKfpZU7E5RNVghklglQl6s133lW wW8r/Ahj/l0NzBo44RIpb6UXTngAuzTeqFFCBz5+fzFT+3c0H6s6FBLw4Jx7w+Rq JPo0AcmTXsl7Qf9Cg4qtFhrUXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBoyZPtg jl7q6+gOQRAYmljTPZWXMB8GA1UdIwQYMBaAFP+glaL0onykYxvCOeV+ekBbRWv/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzQ2RC83MEUyNkVBNENF NkExMUVCQjA3NzRFODBDNEY5QUUwMi9fNkNWb3ZTaWZLUmpHOEk1NVg1NlFGdEZh XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL182Q1ZvdlNpZktSakc4STU1WDU2UUZ0RmFfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzQ2RC83MEUyNkVBNENFNkExMUVCQjA3NzRFODBDNEY5QUUwMi9fNkNWb3ZTaWZL UmpHOEk1NVg1NlFGdEZhXzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnOKXBLgy/BEC2GjToL8Jv/W43dUdz+IWSD9TicEKSAPPYmpudrg2x eNagg/7hZxD5l+OL+N5z9VY+FD4gLPV4yE57iO8H/O3MMxLyKiyb0q05TIy8Uvvx kFRHvnvB+AI0chG+ojN3RlYYPUvphjX18klK+cpt2NhxXIVfNTglCvYPsRNYHSTG QQ+ffkiOfcLKR9QRCPy3b/iv54Jk8PfHrwjJfFiI0XBOFEeuxCefrdw0hrsQQOUW k1xZRRkim9tmjo/7kjerwBnrd9WbHHvm6wBnV7dJ2nJ+rvoUk9pGoBx2x6QIVM7U hqZZ0ljfwS+8lymXi4KQeB+6WIfdvCza -----END CERTIFICATE-----Generated at Sun Jun 15 09:31:02 2025 by rpki-client