$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.mft File: 6kGaeWKZYloHSmW3ys7_GLgGbIs.mft (raw, json) Hash identifier: CC3mlCGoFBE7ATQNhkJHJGzsAdqGDp9hy1OAudq20MM= Subject key identifier: 4B:E5:5A:1C:17:0C:35:1C:7F:E3:86:74:8C:A7:94:20:1B:50:F2:67 Authority key identifier: EA:41:9A:79:62:99:62:5A:07:4A:65:B7:CA:CE:FF:18:B8:06:6C:8B Certificate issuer: /CN=A91BEBB1/serialNumber=EA419A796299625A074A65B7CACEFF18B8066C8B Certificate serial: 01F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6kGaeWKZYloHSmW3ys7_GLgGbIs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.mft Manifest number: 01F2 Signing time: Thu 19 Jun 2025 01:57:35 +0000 Manifest this update: Thu 19 Jun 2025 01:57:34 +0000 Manifest next update: Thu 26 Jun 2025 01:57:34 +0000 Files and hashes: 1: 6kGaeWKZYloHSmW3ys7_GLgGbIs.crl (hash: nXLG6pCwEXoTwX0fTxgToIESyEWKAINkQk+nh8FYbP0=) 2: 8CD5FC2253A011EDAC40531BC4F9AE02.roa (hash: IlKGwFHV9ZEo1VbyiGg5B3egdFnPmqfH6pmscMBr3y0=) 3: FEDE61B6ED2C11EEBF8F3E49C4F9AE02.roa (hash: ceGnF1r8IOwVE50G1+2RnDibZLWap/obpLcH2ZWlhhY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.crl rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6kGaeWKZYloHSmW3ys7_GLgGbIs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 01:57:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 503 (0x1f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEBB1, serialNumber=EA419A796299625A074A65B7CACEFF18B8066C8B Validity Not Before: Jun 19 01:57:34 2025 GMT Not After : Jun 26 01:57:34 2025 GMT Subject: CN=68536e8f-edc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:43:f1:86:59:36:30:3a:33:cf:a6:ca:e8:b9: 07:28:8d:27:47:68:8b:81:4d:cc:57:9b:fd:fe:bf: 92:0d:fa:b9:8d:ec:80:90:49:43:d8:60:68:29:40: cd:5c:b8:93:9b:1b:5d:21:62:8d:9c:b6:58:e9:58: 60:9e:87:1f:5b:e6:1e:cb:c3:93:8b:14:34:c6:65: 19:ef:bb:a8:f1:4b:7e:b2:a1:b8:e8:c8:d1:07:a9: 40:0a:29:fe:2c:63:21:14:c0:5d:0f:f2:0d:36:22: 4b:e7:75:b6:2d:e5:f3:0c:c2:b1:f7:2d:50:c6:81: 01:18:49:72:1f:5e:95:13:6b:7c:9a:4f:08:2f:e8: 14:df:f2:bc:46:b3:3f:c4:ea:ed:11:f6:a5:7d:e1: 3b:d1:07:54:e2:cd:a5:65:f6:c0:8a:e8:7d:14:41: e0:96:e5:73:ce:0a:54:7d:49:ba:c6:42:f7:83:c2: 0e:e0:3a:11:ca:6f:b9:1f:e8:24:ab:fc:82:42:85: 32:64:aa:09:c1:5b:a4:a6:7a:c1:95:23:bd:32:c2: 0a:7f:0a:38:f9:54:52:69:88:8c:46:46:10:95:b8: d8:62:b9:8c:f0:46:7c:93:34:6d:75:90:3c:f5:7e: 05:00:17:66:f9:c3:4f:45:5d:2d:11:3f:02:05:73: 21:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:E5:5A:1C:17:0C:35:1C:7F:E3:86:74:8C:A7:94:20:1B:50:F2:67 X509v3 Authority Key Identifier: keyid:EA:41:9A:79:62:99:62:5A:07:4A:65:B7:CA:CE:FF:18:B8:06:6C:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6kGaeWKZYloHSmW3ys7_GLgGbIs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:2b:6e:af:c0:4e:ed:55:ea:3c:fb:d9:0e:17:71:1e:c6:03: 3f:6d:55:32:10:e0:fb:ee:f6:78:77:34:4c:b6:b5:fc:5e:29: 2e:a6:96:12:0a:ba:17:35:27:0e:b4:95:13:a3:8f:0f:fa:5f: 48:ac:07:47:22:6a:42:6c:cb:0a:e7:e7:03:79:9a:a8:3e:dd: 82:e1:6a:d0:10:a7:85:bb:78:b1:f7:28:16:c0:a3:72:ed:9d: 59:98:4b:7c:53:02:0d:31:98:b6:9b:b0:72:a5:98:e9:59:d8: ee:37:ae:aa:2b:0a:16:34:9a:84:94:ad:35:ac:5b:c2:ff:6e: ce:eb:a1:36:df:87:6e:2b:a2:20:bc:a7:35:12:85:d9:4b:58: b3:4c:f4:97:e0:ab:92:f2:ba:40:5b:3c:45:95:88:f2:88:f6: 56:32:03:65:6c:f4:e9:12:5d:b5:a0:5d:bc:01:97:74:59:73: 5d:09:5d:89:a1:15:d6:a2:50:bf:a8:2e:df:cc:fe:83:cf:39: 71:06:cf:9d:b4:a2:45:d7:84:cc:63:e8:70:1d:87:13:9b:fd: 90:95:d4:89:e8:4f:9f:e9:7b:de:e5:a4:6e:67:a9:6b:73:92: 7e:73:65:d1:5f:17:1f:60:35:fa:07:f1:07:ec:b7:57:b2:f9: 83:6e:a0:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVCQjExMTAvBgNVBAUTKEVBNDE5QTc5NjI5OTYyNUEwNzRBNjVCN0NBQ0VGRjE4 QjgwNjZDOEIwHhcNMjUwNjE5MDE1NzM0WhcNMjUwNjI2MDE1NzM0WjAYMRYwFAYD VQQDEw02ODUzNmU4Zi1lZGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwUPxhlk2MDozz6bK6LkHKI0nR2iLgU3MV5v9/r+SDfq5jeyAkElD2GBoKUDN XLiTmxtdIWKNnLZY6VhgnocfW+Yey8OTixQ0xmUZ77uo8Ut+sqG46MjRB6lACin+ LGMhFMBdD/INNiJL53W2LeXzDMKx9y1QxoEBGElyH16VE2t8mk8IL+gU3/K8RrM/ xOrtEfalfeE70QdU4s2lZfbAiuh9FEHgluVzzgpUfUm6xkL3g8IO4DoRym+5H+gk q/yCQoUyZKoJwVukpnrBlSO9MsIKfwo4+VRSaYiMRkYQlbjYYrmM8EZ8kzRtdZA8 9X4FABdm+cNPRV0tET8CBXMhiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEvlWhwX DDUcf+OGdIynlCAbUPJnMB8GA1UdIwQYMBaAFOpBmnlimWJaB0plt8rO/xi4BmyL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUJCMS82N0JFQTQwNjUz OUMxMUVEQUUwMDRFMTdDNEY5QUUwMi82a0dhZVdLWllsb0hTbVczeXM3X0dMZ0di SXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZrR2FlV0taWWxvSFNtVzN5czdfR0xnR2JJcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUJCMS82N0JFQTQwNjUzOUMxMUVEQUUwMDRFMTdDNEY5QUUwMi82a0dhZVdLWlls b0hTbVczeXM3X0dMZ0diSXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADK26vwE7tVeo8+9kOF3EexgM/bVUyEOD77vZ4dzRMtrX8XikuppYS CroXNScOtJUTo48P+l9IrAdHImpCbMsK5+cDeZqoPt2C4WrQEKeFu3ix9ygWwKNy 7Z1ZmEt8UwINMZi2m7BypZjpWdjuN66qKwoWNJqElK01rFvC/27O66E234duK6Ig vKc1EoXZS1izTPSX4KuS8rpAWzxFlYjyiPZWMgNlbPTpEl21oF28AZd0WXNdCV2J oRXWolC/qC7fzP6DzzlxBs+dtKJF14TMY+hwHYcTm/2QldSJ6E+f6Xve5aRuZ6lr c5J+c2XRXxcfYDX6B/EH7LdXsvmDbqAz -----END CERTIFICATE-----Generated at Fri Jun 20 13:50:58 2025 by rpki-client