$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.mft File: CB6icKn0s2sOyJai0hSO5Ok-Xys.mft (raw, json) Hash identifier: oZpuzllqG5MRMwmPV1WHaZozzbkZtvDVP6B30jFt3Go= Subject key identifier: AB:54:23:D6:67:08:7E:01:9A:24:10:FF:2C:94:75:70:B9:EF:E7:DA Authority key identifier: 08:1E:A2:70:A9:F4:B3:6B:0E:C8:96:A2:D2:14:8E:E4:E9:3E:5F:2B Certificate issuer: /CN=A91BB921/serialNumber=081EA270A9F4B36B0EC896A2D2148EE4E93E5F2B Certificate serial: 0133 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CB6icKn0s2sOyJai0hSO5Ok-Xys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.mft Manifest number: 0131 Signing time: Sun 15 Jun 2025 03:43:19 +0000 Manifest this update: Sun 15 Jun 2025 03:43:19 +0000 Manifest next update: Sun 22 Jun 2025 03:43:19 +0000 Files and hashes: 1: CB6icKn0s2sOyJai0hSO5Ok-Xys.crl (hash: fUThIMh2sjjKsuSvbhl03ZaEciuvGvhGNA4tI+qzf20=) 2: 5A387584756311EEA256FD57C4F9AE02.roa (hash: UFjrfeuvHWS1oxtfXr6IVRfPvTnGzzV9TdVJHu2o8cI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.crl rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CB6icKn0s2sOyJai0hSO5Ok-Xys.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB921, serialNumber=081EA270A9F4B36B0EC896A2D2148EE4E93E5F2B Validity Not Before: Jun 15 03:43:19 2025 GMT Not After : Jun 22 03:43:19 2025 GMT Subject: CN=684e4157-9593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c7:56:de:24:b0:1b:69:38:8f:94:ec:87:ff: ee:12:1b:b0:15:8d:f8:3c:f2:44:e5:0a:24:67:94: 67:0a:d5:90:da:ea:6e:ea:f3:4a:14:12:8a:72:54: 3c:77:eb:85:75:01:df:7f:22:3c:6b:24:67:80:fb: 17:3b:12:8c:09:9b:96:be:0e:95:48:72:cd:8c:0a: e9:28:bb:f3:6f:b5:34:3b:08:b6:6d:0c:b8:6d:23: f9:4d:25:d8:ef:bd:48:51:a3:c6:f8:ce:21:b3:15: 57:1a:0a:ab:7b:5f:07:1a:55:34:bc:ed:89:89:94: 42:62:8f:6f:cf:c5:27:a1:e3:c7:61:13:f2:48:45: c4:67:8d:e1:28:5e:17:83:43:6f:f2:80:e6:18:fc: 4e:a1:f5:55:ef:d5:6a:78:c1:44:9a:e7:01:4b:bf: 59:be:cc:53:50:d8:27:70:aa:a2:ea:2d:62:c3:f3: 35:2b:77:a8:77:48:0e:02:0f:93:1b:d8:f5:4a:72: 1b:7c:a4:6f:4e:f3:7a:8f:5a:e2:a1:1d:10:08:5f: 93:59:2b:a5:a9:11:a3:21:7e:5d:10:41:49:d7:a0: 45:3e:c5:8a:ef:72:b0:32:0f:69:9b:70:9e:b1:0f: 17:b3:d4:78:50:9a:f3:a7:74:86:bd:e1:23:1e:68: 02:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:54:23:D6:67:08:7E:01:9A:24:10:FF:2C:94:75:70:B9:EF:E7:DA X509v3 Authority Key Identifier: keyid:08:1E:A2:70:A9:F4:B3:6B:0E:C8:96:A2:D2:14:8E:E4:E9:3E:5F:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CB6icKn0s2sOyJai0hSO5Ok-Xys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:5c:67:37:36:e4:fa:2d:95:e6:c0:a6:51:36:95:48:89:da: 6e:7e:a2:0e:45:19:d1:02:89:a7:1f:a2:31:0f:22:87:9f:20: 91:43:82:0d:16:ee:dc:28:14:90:17:f2:4f:a3:c8:aa:c0:24: 9d:24:2e:96:54:6d:39:88:47:17:81:fe:48:d2:e1:43:68:3e: 7c:1e:c3:16:99:b9:8e:a0:19:cd:8b:ce:aa:0b:6d:18:fd:da: d7:b2:f9:cd:4b:13:1d:99:02:11:1a:19:4c:0e:ea:50:2a:2b: d8:fc:9d:22:a9:d9:fd:6c:e9:09:58:f6:f3:8f:2d:3a:46:14: 3f:0b:f3:94:49:b1:66:9b:6b:a8:e1:82:85:57:c6:8a:e3:0e: 04:f5:14:db:ad:49:c8:78:1a:ba:07:e1:a5:e0:61:1e:86:8b: 40:81:b3:ce:d7:27:63:52:f4:40:b5:38:91:87:f8:38:d5:51: a6:f2:7e:43:8a:ca:40:4c:ce:82:9d:9f:2a:39:95:0e:41:d7: b7:be:c5:ba:f7:c5:4d:9a:bc:11:9e:95:7c:e0:08:6a:83:28: 92:dc:11:b3:35:b0:1a:3a:4a:f2:41:31:ce:99:96:01:23:7c: 2a:b5:f6:aa:5e:47:6e:3c:ec:05:76:d6:25:51:06:75:56:c8: 65:49:dd:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI5MjExMTAvBgNVBAUTKDA4MUVBMjcwQTlGNEIzNkIwRUM4OTZBMkQyMTQ4RUU0 RTkzRTVGMkIwHhcNMjUwNjE1MDM0MzE5WhcNMjUwNjIyMDM0MzE5WjAYMRYwFAYD VQQDEw02ODRlNDE1Ny05NTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArsdW3iSwG2k4j5Tsh//uEhuwFY34PPJE5QokZ5RnCtWQ2upu6vNKFBKKclQ8 d+uFdQHffyI8ayRngPsXOxKMCZuWvg6VSHLNjArpKLvzb7U0Owi2bQy4bSP5TSXY 771IUaPG+M4hsxVXGgqre18HGlU0vO2JiZRCYo9vz8UnoePHYRPySEXEZ43hKF4X g0Nv8oDmGPxOofVV79VqeMFEmucBS79ZvsxTUNgncKqi6i1iw/M1K3eod0gOAg+T G9j1SnIbfKRvTvN6j1rioR0QCF+TWSulqRGjIX5dEEFJ16BFPsWK73KwMg9pm3Ce sQ8Xs9R4UJrzp3SGveEjHmgCYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKtUI9Zn CH4BmiQQ/yyUdXC57+faMB8GA1UdIwQYMBaAFAgeonCp9LNrDsiWotIUjuTpPl8r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjkyMS9EREI4RTE0Qzc1 NjIxMUVFQkI4MjUyNTdDNEY5QUUwMi9DQjZpY0tuMHMyc095SmFpMGhTTzVPay1Y eXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NCNmljS24wczJzT3lKYWkwaFNPNU9rLVh5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjkyMS9EREI4RTE0Qzc1NjIxMUVFQkI4MjUyNTdDNEY5QUUwMi9DQjZpY0tuMHMy c095SmFpMGhTTzVPay1YeXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApXGc3NuT6LZXmwKZRNpVIidpufqIORRnRAomnH6IxDyKHnyCRQ4IN Fu7cKBSQF/JPo8iqwCSdJC6WVG05iEcXgf5I0uFDaD58HsMWmbmOoBnNi86qC20Y /drXsvnNSxMdmQIRGhlMDupQKivY/J0iqdn9bOkJWPbzjy06RhQ/C/OUSbFmm2uo 4YKFV8aK4w4E9RTbrUnIeBq6B+Gl4GEehotAgbPO1ydjUvRAtTiRh/g41VGm8n5D ispATM6CnZ8qOZUOQde3vsW698VNmrwRnpV84AhqgyiS3BGzNbAaOkryQTHOmZYB I3wqtfaqXkduPOwFdtYlUQZ1VshlSd3f -----END CERTIFICATE-----Generated at Sun Jun 15 08:44:44 2025 by rpki-client