$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft File: a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft (raw, json) Hash identifier: y6c1Fk944w89AaaXvtUgM8yHYetGbHXiV+HKQ16hT3c= Subject key identifier: D3:66:9B:2F:5E:F2:C5:5B:F3:E3:31:F8:B5:D8:B9:C6:D3:36:42:E6 Authority key identifier: 6B:5E:BF:E9:8A:37:87:64:C1:B1:2D:CB:69:04:E4:61:0B:50:AC:57 Certificate issuer: /CN=A91B5418/serialNumber=6B5EBFE98A378764C1B12DCB6904E4610B50AC57 Certificate serial: 0CDF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft Manifest number: 0CAE Signing time: Thu 12 Jun 2025 18:04:19 +0000 Manifest this update: Thu 12 Jun 2025 18:04:19 +0000 Manifest next update: Thu 19 Jun 2025 18:04:19 +0000 Files and hashes: 1: a16_6Yo3h2TBsS3LaQTkYQtQrFc.crl (hash: 8MA2Gi4CuMkg3kq4LQxHI7CqNIBYoTI4UB0CihVn4DE=) 2: D3EC028C2AF511EE90800A65C4F9AE02.roa (hash: +hALYP3fmXiUu1g2+UCKikl1Y9WM+rKXEqvZUSDNE8I=) 3: 990D779897A211EF8F258761C4F9AE02.roa (hash: 7rnRdj6F+HEg+i7aB4aUe+GD+60bEZJEJnTlO3LVi6E=) 4: 0D036EB680BC11EBAF2A1C0EC4F9AE02.roa (hash: 1TLr5oM7v/qdbXCuWglO9MT2WfClZILhcDQljm7O2lk=) 5: 919D74562AF511EEA2663F52C4F9AE02.roa (hash: h0QhuXjDa5LUS0ETeRi4LQZ7+udZrItG82FhW+NYc/0=) 6: FD2A54D8DD6311EA9EFD035CC4F9AE02.roa (hash: 9m0UQLhCfmSnooX3c/o+r8ndL1ume0rI54qO9D+eF4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.crl rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 18:04:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3295 (0xcdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5418, serialNumber=6B5EBFE98A378764C1B12DCB6904E4610B50AC57 Validity Not Before: Jun 12 18:04:19 2025 GMT Not After : Jun 19 18:04:19 2025 GMT Subject: CN=684b16a3-0d01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:43:df:44:2a:73:c4:3c:86:a1:c8:4b:41:cc: 1c:17:76:00:39:6e:60:7f:ad:fa:9c:13:89:e7:23: 28:3e:10:8c:de:56:5e:9c:78:24:42:2a:01:7a:c7: 83:06:73:bb:08:1d:f7:f7:dc:fe:bc:4c:f8:96:43: 8c:46:54:a7:6a:cd:38:d9:69:cc:07:83:49:2a:95: 05:cd:ae:df:64:aa:d5:a5:b2:4e:8d:e8:4c:79:e8: 06:b5:eb:f5:ea:fc:d5:01:5a:5b:1c:ae:15:de:b5: d9:b4:5b:bb:4a:26:4d:53:61:5e:2e:25:f7:10:47: df:dd:e7:84:b1:3f:6e:e2:55:22:24:65:8d:e5:2c: 0b:61:94:bf:cf:63:9b:df:8b:4c:4b:b3:e9:69:2b: 72:cd:43:c5:d5:9f:d2:56:64:dc:30:37:43:13:75: 4c:ac:9c:09:94:bf:9d:58:57:15:56:82:ea:3b:c9: f7:a8:d7:3d:30:8e:0f:4f:96:aa:58:c8:40:55:a3: 9c:c6:e0:87:0a:71:9a:45:36:08:e8:8f:67:6c:13: a5:5d:44:ab:32:a7:6e:2c:5a:46:b6:43:93:03:96: a2:12:f2:ba:66:2a:92:00:08:8d:28:52:71:92:2d: 02:e3:00:f7:7d:3e:14:47:4e:91:d5:e0:ea:b4:cd: 14:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:66:9B:2F:5E:F2:C5:5B:F3:E3:31:F8:B5:D8:B9:C6:D3:36:42:E6 X509v3 Authority Key Identifier: keyid:6B:5E:BF:E9:8A:37:87:64:C1:B1:2D:CB:69:04:E4:61:0B:50:AC:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:3c:05:96:9e:80:8f:e8:d8:26:86:91:92:1b:96:d1:fd:39: b4:41:d7:b7:06:b6:a3:86:6d:42:78:3e:8c:5a:d0:a1:11:83: 73:6b:22:18:99:15:d1:c0:88:f9:02:5b:ed:fb:b2:83:59:72: 31:09:95:5f:dc:da:8f:00:48:08:fe:3b:8f:8c:59:b5:ca:d3: 8c:4a:87:75:9e:72:b5:5f:0d:fc:af:83:1b:48:30:2a:cd:ba: d7:fc:0f:78:cd:93:5d:e5:b4:9e:47:ed:5c:51:c9:d5:81:4d: cb:ef:99:3a:45:23:fc:40:1c:a6:b9:16:80:32:70:ab:f0:88: b5:9f:ea:7c:66:45:96:14:2f:52:e6:13:a2:a7:65:0c:3e:0a: b2:6c:31:34:ab:1d:47:85:2d:8e:32:a8:58:5e:11:ee:9a:64: 9e:11:1a:16:ff:3c:31:fb:c2:b7:6e:34:a3:67:d2:7d:7f:19: 9e:d1:3d:31:a0:e8:a7:75:a4:90:a6:da:24:af:91:7a:a9:60: fe:1c:bd:b4:e0:d8:89:64:dc:52:d9:4c:f1:54:9b:ed:f6:a6: 11:00:88:c0:12:6d:92:29:a6:64:c7:ea:fe:b9:48:91:98:b9: 67:65:ae:dd:56:9d:8f:8b:fd:fe:dc:83:42:10:86:b4:f8:bd: 1c:43:01:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU0MTgxMTAvBgNVBAUTKDZCNUVCRkU5OEEzNzg3NjRDMUIxMkRDQjY5MDRFNDYx MEI1MEFDNTcwHhcNMjUwNjEyMTgwNDE5WhcNMjUwNjE5MTgwNDE5WjAYMRYwFAYD VQQDEw02ODRiMTZhMy0wZDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvkPfRCpzxDyGochLQcwcF3YAOW5gf636nBOJ5yMoPhCM3lZenHgkQioBeseD BnO7CB3399z+vEz4lkOMRlSnas042WnMB4NJKpUFza7fZKrVpbJOjehMeegGtev1 6vzVAVpbHK4V3rXZtFu7SiZNU2FeLiX3EEff3eeEsT9u4lUiJGWN5SwLYZS/z2Ob 34tMS7PpaStyzUPF1Z/SVmTcMDdDE3VMrJwJlL+dWFcVVoLqO8n3qNc9MI4PT5aq WMhAVaOcxuCHCnGaRTYI6I9nbBOlXUSrMqduLFpGtkOTA5aiEvK6ZiqSAAiNKFJx ki0C4wD3fT4UR06R1eDqtM0UjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNNmmy9e 8sVb8+Mx+LXYucbTNkLmMB8GA1UdIwQYMBaAFGtev+mKN4dkwbEty2kE5GELUKxX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTQxOC8wQzBCODAwRUY2 ODIxMUU5QTg5OTYxNDZDNEY5QUUwMi9hMTZfNllvM2gyVEJzUzNMYVFUa1lRdFFy RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ExNl82WW8zaDJUQnNTM0xhUVRrWVF0UXJGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTQxOC8wQzBCODAwRUY2ODIxMUU5QTg5OTYxNDZDNEY5QUUwMi9hMTZfNllvM2gy VEJzUzNMYVFUa1lRdFFyRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcPAWWnoCP6NgmhpGSG5bR/Tm0Qde3Brajhm1CeD6MWtChEYNzayIY mRXRwIj5Alvt+7KDWXIxCZVf3NqPAEgI/juPjFm1ytOMSod1nnK1Xw38r4MbSDAq zbrX/A94zZNd5bSeR+1cUcnVgU3L75k6RSP8QBymuRaAMnCr8Ii1n+p8ZkWWFC9S 5hOip2UMPgqybDE0qx1HhS2OMqhYXhHummSeERoW/zwx+8K3bjSjZ9J9fxme0T0x oOindaSQptokr5F6qWD+HL204NiJZNxS2UzxVJvt9qYRAIjAEm2SKaZkx+r+uUiR mLlnZa7dVp2Pi/3+3INCEIa0+L0cQwGF -----END CERTIFICATE-----Generated at Sat Jun 14 17:33:32 2025 by rpki-client