$ rpki-client -vvf rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft File: R6cRTih-sdyDXQfpgEXvRvU-fFc.mft (raw, json) Hash identifier: TSV8WwPfcm+vEuos/1QGSMhTXfzU9hL+aYgvf4vvy3U= Subject key identifier: 42:46:B0:2A:59:29:00:03:1C:69:BE:48:BC:32:E2:96:82:B3:0D:B6 Authority key identifier: 47:A7:11:4E:28:7E:B1:DC:83:5D:07:E9:80:45:EF:46:F5:3E:7C:57 Certificate issuer: /CN=A91C16B5/serialNumber=47A7114E287EB1DC835D07E98045EF46F53E7C57 Certificate serial: 1D78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft Manifest number: 1D69 Signing time: Thu 12 Jun 2025 16:05:21 +0000 Manifest this update: Thu 12 Jun 2025 16:05:21 +0000 Manifest next update: Thu 19 Jun 2025 16:05:21 +0000 Files and hashes: 1: R6cRTih-sdyDXQfpgEXvRvU-fFc.crl (hash: j8YkQ+pSEd7yqpdZRi+ad35INJ/poMqXPOxWbQFrcFc=) 2: A264F35C8BAC11E7AFBAB71AC4F9AE02.roa (hash: WHJrUmFRBeAq4NFz6Ka5YRkE6nvBwbgHOetasLuBtuE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.crl rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 16:05:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7544 (0x1d78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C16B5, serialNumber=47A7114E287EB1DC835D07E98045EF46F53E7C57 Validity Not Before: Jun 12 16:05:21 2025 GMT Not After : Jun 19 16:05:21 2025 GMT Subject: CN=684afac1-2b93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:09:dd:0e:1f:67:a2:7d:e9:77:28:45:58:da: 4d:c3:03:0c:e9:6d:3e:7e:a1:79:3b:9e:1e:7e:4c: 06:3b:b2:6e:85:90:75:09:8d:5b:73:a4:e5:5e:ac: 1a:17:0f:b7:87:aa:38:ff:95:2c:6e:4d:c3:c0:57: f9:5e:9e:12:1e:72:9d:ef:aa:ab:7c:1d:88:a2:c6: 8a:50:bc:6c:b7:bb:89:c4:83:4a:69:de:08:66:c7: e0:7b:ae:cf:61:00:1e:9f:44:70:db:df:d4:56:9d: 73:5d:b2:88:a5:bc:82:41:1a:8e:e2:b3:87:27:eb: db:e6:96:c5:76:06:f4:e2:74:ad:0c:34:e4:f1:c5: d8:98:0d:51:d5:62:1b:fa:01:15:10:01:16:ca:db: 77:f7:36:0f:1d:b6:45:bf:43:35:87:92:e3:eb:83: d5:ec:c8:41:0e:68:a2:bd:1f:0f:14:48:49:50:90: 41:91:89:c6:fb:94:4b:64:4b:67:e3:a3:92:bb:f6: 4f:df:49:0b:6e:8c:28:74:0e:e9:01:65:41:44:f2: e4:5d:d3:20:46:c1:5e:5b:71:45:2f:3f:66:5e:bc: 8a:b0:b4:6d:3d:90:63:43:d8:30:36:29:ed:9f:30: c6:76:5e:58:76:0f:10:16:69:8d:1d:43:ce:ca:da: 52:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:46:B0:2A:59:29:00:03:1C:69:BE:48:BC:32:E2:96:82:B3:0D:B6 X509v3 Authority Key Identifier: keyid:47:A7:11:4E:28:7E:B1:DC:83:5D:07:E9:80:45:EF:46:F5:3E:7C:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:26:1a:e0:5d:f2:59:2d:48:5b:c1:39:31:bf:f8:07:d2:c7: b7:74:4d:cd:d0:0c:c6:cb:3d:e5:71:40:f1:21:20:3d:71:2d: 78:8c:90:88:2a:59:3c:42:0c:20:91:e3:15:e8:fc:4c:ff:4f: 18:35:c5:16:48:e1:d2:ff:27:37:8c:82:e5:bf:44:be:fe:99: 23:56:57:6c:1e:c6:d4:14:7e:4f:bf:d5:b4:2a:b2:1f:f7:68: c2:b5:66:51:df:35:fa:13:58:60:b6:74:90:1e:4e:70:1f:5c: 95:a8:29:51:36:c5:67:47:c1:5a:ed:81:25:e7:2e:c4:32:83: f0:29:08:84:36:3d:4d:58:ec:dc:a1:3e:7d:a5:87:2f:a0:05: 45:d9:6b:bd:54:65:33:e5:77:b3:5d:6c:21:0c:2b:ba:1f:e5: 7c:a9:c5:ff:32:32:be:ff:7c:2d:dd:cc:76:ef:30:17:34:5a: d0:d1:e1:2a:3d:75:05:3a:4f:87:bc:06:59:af:c3:08:86:f3: 8d:be:89:44:31:58:41:94:a0:ac:61:af:56:07:6a:aa:dd:38: 1e:ae:3e:63:1a:22:ce:dd:aa:f0:40:9c:6a:d1:0d:0b:fd:64: bd:0e:e7:e7:f2:f6:2f:1b:41:a2:41:a0:e5:22:3d:b1:45:02: 02:ab:4a:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE2QjUxMTAvBgNVBAUTKDQ3QTcxMTRFMjg3RUIxREM4MzVEMDdFOTgwNDVFRjQ2 RjUzRTdDNTcwHhcNMjUwNjEyMTYwNTIxWhcNMjUwNjE5MTYwNTIxWjAYMRYwFAYD VQQDEw02ODRhZmFjMS0yYjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmAndDh9non3pdyhFWNpNwwMM6W0+fqF5O54efkwGO7JuhZB1CY1bc6TlXqwa Fw+3h6o4/5Usbk3DwFf5Xp4SHnKd76qrfB2IosaKULxst7uJxINKad4IZsfge67P YQAen0Rw29/UVp1zXbKIpbyCQRqO4rOHJ+vb5pbFdgb04nStDDTk8cXYmA1R1WIb +gEVEAEWytt39zYPHbZFv0M1h5Lj64PV7MhBDmiivR8PFEhJUJBBkYnG+5RLZEtn 46OSu/ZP30kLbowodA7pAWVBRPLkXdMgRsFeW3FFLz9mXryKsLRtPZBjQ9gwNint nzDGdl5Ydg8QFmmNHUPOytpSoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEJGsCpZ KQADHGm+SLwy4paCsw22MB8GA1UdIwQYMBaAFEenEU4ofrHcg10H6YBF70b1PnxX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTZCNS9DQTZBNTVFQ0FB NUExMUU2QkRDNkI3N0ZDNEY5QUUwMi9SNmNSVGloLXNkeURYUWZwZ0VYdlJ2VS1m RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1I2Y1JUaWgtc2R5RFhRZnBnRVh2UnZVLWZGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTZCNS9DQTZBNTVFQ0FBNUExMUU2QkRDNkI3N0ZDNEY5QUUwMi9SNmNSVGloLXNk eURYUWZwZ0VYdlJ2VS1mRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwJhrgXfJZLUhbwTkxv/gH0se3dE3N0AzGyz3lcUDxISA9cS14jJCI Klk8QgwgkeMV6PxM/08YNcUWSOHS/yc3jILlv0S+/pkjVldsHsbUFH5Pv9W0KrIf 92jCtWZR3zX6E1hgtnSQHk5wH1yVqClRNsVnR8Fa7YEl5y7EMoPwKQiENj1NWOzc oT59pYcvoAVF2Wu9VGUz5XezXWwhDCu6H+V8qcX/MjK+/3wt3cx27zAXNFrQ0eEq PXUFOk+HvAZZr8MIhvONvolEMVhBlKCsYa9WB2qq3Tgerj5jGiLO3arwQJxq0Q0L /WS9Dufn8vYvG0GiQaDlIj2xRQICq0oF -----END CERTIFICATE-----Generated at Sat Jun 14 17:11:10 2025 by rpki-client