$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.mft File: bKayrB3RewFNtsdnJ50Ixm5O_AU.mft (raw, json) Hash identifier: B3XwWRgEsbWCZ4q/23CU0MdxKDCwZjiMB70oQ1eMOnU= Subject key identifier: 07:9D:90:0D:F8:0A:87:16:99:8F:4A:3C:6C:86:0B:AC:CE:C2:EE:23 Authority key identifier: 6C:A6:B2:AC:1D:D1:7B:01:4D:B6:C7:67:27:9D:08:C6:6E:4E:FC:05 Certificate issuer: /CN=A91BC6B4/serialNumber=6CA6B2AC1DD17B014DB6C767279D08C66E4EFC05 Certificate serial: 0FA8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKayrB3RewFNtsdnJ50Ixm5O_AU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.mft Manifest number: 0F85 Signing time: Sat 14 Jun 2025 17:28:29 +0000 Manifest this update: Sat 14 Jun 2025 17:28:29 +0000 Manifest next update: Sat 21 Jun 2025 17:28:29 +0000 Files and hashes: 1: bKayrB3RewFNtsdnJ50Ixm5O_AU.crl (hash: Emwp5qlakCkBvxIXYxDg5VXVX499zyfurRGLnnCbPDA=) 2: 61A85BEE21CF11EBA0C85857C4F9AE02.roa (hash: A3Tpub6p9P/++fbZ37k+IAk9EhP0OOzrI3+cFHFK9sU=) 3: FD22BBAE231F11EB99F53580C4F9AE02.roa (hash: 9qOXZArIIUyJUewjOCf9oYo9vbgS16mz3+p2fdmL0tQ=) 4: 425BF5FE7A4711EBAD125258C4F9AE02.roa (hash: 3q7a1bzBtmZRU9dyvbAJLpQiP+tIpP+39d4X4Gnm4cs=) 5: A850C476026E11EBB2E0E72FC4F9AE02.roa (hash: KYPMpugh4wkqi8c9+YZ4KJfTituHSP1OZb9rD6oRk2Y=) 6: 5FB07B1421CF11EBA0C85857C4F9AE02.roa (hash: Wlp7VJ4S/0DHPTZqsCcIenAV+N4iB3x2c/KGZJRvjlg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.crl rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKayrB3RewFNtsdnJ50Ixm5O_AU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4008 (0xfa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC6B4, serialNumber=6CA6B2AC1DD17B014DB6C767279D08C66E4EFC05 Validity Not Before: Jun 14 17:28:29 2025 GMT Not After : Jun 21 17:28:29 2025 GMT Subject: CN=684db13d-a64d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:dc:fc:aa:de:c4:d3:05:9d:98:8c:ad:a2:3c: 9a:8a:25:bf:e7:53:99:85:bd:16:72:df:4c:6c:28: 26:fb:5d:83:67:bc:10:ab:4e:8e:0d:3d:94:71:c7: d0:67:59:8a:c6:e2:ef:88:2d:43:a8:f3:62:f9:3a: f9:a2:33:44:8f:4e:40:93:a6:40:c6:bb:77:74:af: de:67:84:9b:10:d3:5b:f5:5c:da:d6:76:97:bd:96: 1f:ff:3a:b1:74:72:a5:2e:1d:e5:aa:b0:1c:57:ca: bd:94:39:ef:c0:93:62:89:59:82:ed:a7:04:5f:b5: bd:20:cd:df:0a:d9:db:86:8d:36:be:6b:d1:56:29: 0b:14:9e:ba:23:29:e9:fd:02:bb:b6:f0:e1:93:9a: f7:af:e1:0f:e5:7a:57:05:7a:6d:7b:ab:27:db:29: 58:36:70:f7:c5:41:04:3a:46:f4:a3:59:43:36:5c: 9f:33:d6:18:37:97:26:19:96:a5:96:94:6c:71:22: 8f:23:d2:c3:d6:31:44:9a:b8:25:9f:9b:f1:71:21: 20:1f:d6:84:35:4d:a6:9f:94:46:cf:81:a5:a5:91: 87:26:fb:c2:7e:04:fd:7e:3a:d2:50:2f:8f:21:ef: 7b:5b:82:80:db:0e:16:1d:35:1e:d7:14:0b:f8:38: a8:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:9D:90:0D:F8:0A:87:16:99:8F:4A:3C:6C:86:0B:AC:CE:C2:EE:23 X509v3 Authority Key Identifier: keyid:6C:A6:B2:AC:1D:D1:7B:01:4D:B6:C7:67:27:9D:08:C6:6E:4E:FC:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKayrB3RewFNtsdnJ50Ixm5O_AU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:ab:f7:af:63:05:77:6e:04:89:cd:e5:c6:c3:d0:07:0f:47: 17:9c:39:70:fa:8d:a2:19:73:fe:c5:21:15:28:6a:3e:ea:81: d6:38:a0:74:5f:d9:a1:a1:e5:c5:4a:b8:71:5b:73:d9:4a:7e: 0e:fa:92:cd:c2:68:c8:3c:ab:07:81:be:25:5e:f7:29:2d:38: 18:80:c9:5e:4a:1e:26:a7:d6:d0:2b:79:92:8c:7b:93:6c:80: 97:27:a1:2d:d7:bb:21:ef:fc:3c:00:69:1f:31:e2:21:67:7b: 0e:4e:89:c7:9e:92:e9:6a:48:0e:bd:4b:ad:a4:77:bc:98:cf: 30:04:eb:42:fc:ea:ac:ba:e2:c8:c1:9d:6b:db:29:d2:09:26: e8:7d:db:ab:6a:f7:99:b2:4e:f7:4f:29:fd:9a:52:bf:e9:56: 57:8c:ea:8a:c1:d5:66:01:0d:19:13:12:c4:0b:c3:e9:95:69: 25:0a:2d:18:8d:11:e2:12:68:34:c2:52:dc:66:0d:33:d8:4c: 9e:71:24:02:15:09:3c:18:61:11:ad:ad:94:07:41:e2:2d:d3: 47:cf:f7:c8:0c:75:dc:52:39:79:14:61:02:51:d7:3d:c1:cf: 63:1a:b1:44:d9:a6:a0:b1:24:3d:c0:d4:1f:17:4e:0f:69:83: cc:01:24:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD6gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM2QjQxMTAvBgNVBAUTKDZDQTZCMkFDMUREMTdCMDE0REI2Qzc2NzI3OUQwOEM2 NkU0RUZDMDUwHhcNMjUwNjE0MTcyODI5WhcNMjUwNjIxMTcyODI5WjAYMRYwFAYD VQQDEw02ODRkYjEzZC1hNjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvtz8qt7E0wWdmIytojyaiiW/51OZhb0Wct9MbCgm+12DZ7wQq06ODT2UccfQ Z1mKxuLviC1DqPNi+Tr5ojNEj05Ak6ZAxrt3dK/eZ4SbENNb9Vza1naXvZYf/zqx dHKlLh3lqrAcV8q9lDnvwJNiiVmC7acEX7W9IM3fCtnbho02vmvRVikLFJ66Iynp /QK7tvDhk5r3r+EP5XpXBXpte6sn2ylYNnD3xUEEOkb0o1lDNlyfM9YYN5cmGZal lpRscSKPI9LD1jFEmrgln5vxcSEgH9aENU2mn5RGz4GlpZGHJvvCfgT9fjrSUC+P Ie97W4KA2w4WHTUe1xQL+DioywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAedkA34 CocWmY9KPGyGC6zOwu4jMB8GA1UdIwQYMBaAFGymsqwd0XsBTbbHZyedCMZuTvwF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzZCNC83MjZGNTFDMjYz RjIxMUU5QkIyMERENDVDNEY5QUUwMi9iS2F5ckIzUmV3Rk50c2RuSjUwSXhtNU9f QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JLYXlyQjNSZXdGTnRzZG5KNTBJeG01T19BVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzZCNC83MjZGNTFDMjYzRjIxMUU5QkIyMERENDVDNEY5QUUwMi9iS2F5ckIzUmV3 Rk50c2RuSjUwSXhtNU9fQVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGq/evYwV3bgSJzeXGw9AHD0cXnDlw+o2iGXP+xSEVKGo+6oHWOKB0 X9mhoeXFSrhxW3PZSn4O+pLNwmjIPKsHgb4lXvcpLTgYgMleSh4mp9bQK3mSjHuT bICXJ6Et17sh7/w8AGkfMeIhZ3sOTonHnpLpakgOvUutpHe8mM8wBOtC/OqsuuLI wZ1r2ynSCSbofduraveZsk73Tyn9mlK/6VZXjOqKwdVmAQ0ZExLEC8PplWklCi0Y jRHiEmg0wlLcZg0z2EyecSQCFQk8GGERra2UB0HiLdNHz/fIDHXcUjl5FGECUdc9 wc9jGrFE2aagsSQ9wNQfF04PaYPMASSf -----END CERTIFICATE-----Generated at Sun Jun 15 08:40:56 2025 by rpki-client