$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft File: D6tO-YKPSvJnwW2K1HEKjuybu64.mft (raw, json) Hash identifier: mUqiTSufdBUTXbqtV1Or884GY/7R7Q8ffWsYFF9wxEs= Subject key identifier: B7:8A:66:C1:77:48:A9:25:9A:70:A5:B6:FF:30:CE:75:69:81:A4:00 Authority key identifier: 0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE Certificate issuer: /CN=A91BEBE9/serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE Certificate serial: 018A Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft Manifest number: 0182 Signing time: Thu 19 Jun 2025 03:01:36 +0000 Manifest this update: Thu 19 Jun 2025 03:01:35 +0000 Manifest next update: Thu 26 Jun 2025 03:01:35 +0000 Files and hashes: 1: D6tO-YKPSvJnwW2K1HEKjuybu64.crl (hash: B+BIhFB7jloDclfSKBAsmBYPrwdGQD9Fz/4Adbz0DhY=) 2: A0DEDD52FDF811EEA4D57274C4F9AE02.roa (hash: vdvXxO6hOVkfy87PEKE+BccPO1owcMEO3zlcdidAXcY=) 3: A16366C6FDF811EEA4D57274C4F9AE02.roa (hash: XPJpmrYNcSNbm9TnuwsF2hc9Dluf13QgHRh9YOFG7n8=) 4: A1C0742EFDF811EEA4D57274C4F9AE02.roa (hash: JXeJqxRjv6XY1o3PZOsZQUdvlF7VbU2rS+ppRqunUIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 03:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 394 (0x18a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEBE9, serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE Validity Not Before: Jun 19 03:01:35 2025 GMT Not After : Jun 26 03:01:35 2025 GMT Subject: CN=68537d8f-c8b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7c:78:6b:19:6f:a3:21:21:b9:83:0f:f6:d5: 84:e4:ec:c4:03:3b:96:b5:74:c3:fb:b8:ed:ef:b1: b8:6c:a2:61:8f:cb:b1:be:6b:ed:8b:e1:c7:55:90: 23:bf:5f:8c:94:7d:a1:58:21:d6:72:58:25:4c:ab: 40:19:49:22:b6:7e:af:4d:f9:66:00:28:81:2e:20: 81:6f:14:0f:83:9d:71:e2:4a:7d:9f:a7:84:3d:90: df:89:4d:fa:8e:91:b7:a1:a8:36:e5:2b:2a:a3:48: 2f:51:3d:41:60:43:ea:4c:64:d5:de:33:6a:9b:25: d0:5e:31:ae:d8:3c:b5:81:f8:c9:3b:e8:c7:16:8b: 75:c0:0a:29:db:e4:96:2d:a3:b5:71:86:62:a5:b6: cb:70:99:ef:b5:90:3c:d8:92:1a:65:8b:fc:40:19: 78:86:3a:ec:5a:9a:ee:6d:19:c3:34:1e:f2:cb:b0: 9a:1b:a4:75:cf:7a:5d:06:a1:19:2a:47:fd:ad:52: 3c:e0:86:b2:29:8e:6b:56:1b:ef:be:d2:7c:b0:02: 02:d0:10:0f:d0:79:ee:0f:f4:9e:15:ea:5d:51:de: dd:96:4f:aa:59:f8:fe:80:2b:95:54:28:23:4d:9d: 3f:a7:47:be:0f:b6:35:c8:7a:8e:8f:9f:29:8f:ec: 5b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:8A:66:C1:77:48:A9:25:9A:70:A5:B6:FF:30:CE:75:69:81:A4:00 X509v3 Authority Key Identifier: keyid:0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:14:29:61:e1:f2:ad:fc:7b:00:06:43:6f:2d:85:33:f3:9c: 15:ee:cd:a5:ff:e9:d6:d2:ba:a4:0b:af:89:54:68:09:ad:80: 62:1f:d2:3a:6f:96:1b:2b:d8:8a:0e:35:28:40:87:cb:b4:2d: 85:1a:e9:87:0c:4f:f8:02:38:1b:ab:71:b6:85:cd:16:b4:ae: 46:24:cc:e8:5c:b2:8f:23:a6:d3:a4:8c:04:3f:1d:72:81:7a: e6:96:97:af:4a:5b:93:c2:9a:4c:2d:8a:e0:ae:0c:30:9d:61: 03:8d:43:29:db:5b:74:44:46:d3:f3:ae:48:10:42:4b:9f:64: fc:93:cd:1d:e7:96:55:f5:17:a1:3d:ce:74:08:4c:64:e2:44: a9:49:1f:b9:ca:c7:89:bd:98:13:1f:b9:41:3b:86:77:37:ed: 56:3a:1e:7a:56:83:1b:1d:f0:c7:f4:aa:33:fe:2b:16:3e:d8: b0:35:22:b5:67:78:94:22:8c:35:84:f1:b9:26:39:41:f0:7e: 2a:0e:45:d4:11:6a:ba:9e:ea:f9:2b:7a:fd:35:e0:af:f7:0a: 92:ed:c2:b2:c6:5c:99:c6:2c:74:3c:bd:ed:55:79:cd:56:60: 7f:68:8b:f5:38:3a:65:4d:09:3c:a9:6d:c8:be:40:ba:8f:ad: 73:0f:65:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVCRTkxMTAvBgNVBAUTKDBGQUI0RUY5ODI4RjRBRjI2N0MxNkQ4QUQ0NzEwQThF RUM5QkJCQUUwHhcNMjUwNjE5MDMwMTM1WhcNMjUwNjI2MDMwMTM1WjAYMRYwFAYD VQQDEw02ODUzN2Q4Zi1jOGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw3x4axlvoyEhuYMP9tWE5OzEAzuWtXTD+7jt77G4bKJhj8uxvmvti+HHVZAj v1+MlH2hWCHWclglTKtAGUkitn6vTflmACiBLiCBbxQPg51x4kp9n6eEPZDfiU36 jpG3oag25Ssqo0gvUT1BYEPqTGTV3jNqmyXQXjGu2Dy1gfjJO+jHFot1wAop2+SW LaO1cYZipbbLcJnvtZA82JIaZYv8QBl4hjrsWprubRnDNB7yy7CaG6R1z3pdBqEZ Kkf9rVI84IayKY5rVhvvvtJ8sAIC0BAP0HnuD/SeFepdUd7dlk+qWfj+gCuVVCgj TZ0/p0e+D7Y1yHqOj58pj+xb5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLeKZsF3 SKklmnCltv8wznVpgaQAMB8GA1UdIwQYMBaAFA+rTvmCj0ryZ8FtitRxCo7sm7uu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUJFOS85NEM5Qjg3ODAw NUQxMUVFQkU3QTkyNDFDNEY5QUUwMi9ENnRPLVlLUFN2Sm53VzJLMUhFS2p1eWJ1 NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0Q2dE8tWUtQU3ZKbndXMksxSEVLanV5YnU2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUJFOS85NEM5Qjg3ODAwNUQxMUVFQkU3QTkyNDFDNEY5QUUwMi9ENnRPLVlLUFN2 Sm53VzJLMUhFS2p1eWJ1NjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAFClh4fKt/HsABkNvLYUz85wV7s2l/+nW0rqkC6+JVGgJrYBiH9I6 b5YbK9iKDjUoQIfLtC2FGumHDE/4Ajgbq3G2hc0WtK5GJMzoXLKPI6bTpIwEPx1y gXrmlpevSluTwppMLYrgrgwwnWEDjUMp21t0REbT865IEEJLn2T8k80d55ZV9Reh Pc50CExk4kSpSR+5yseJvZgTH7lBO4Z3N+1WOh56VoMbHfDH9Koz/isWPtiwNSK1 Z3iUIow1hPG5JjlB8H4qDkXUEWq6nur5K3r9NeCv9wqS7cKyxlyZxix0PL3tVXnN VmB/aIv1ODplTQk8qW3IvkC6j61zD2Wy -----END CERTIFICATE-----Generated at Fri Jun 20 10:18:16 2025 by rpki-client