$ rpki-client -vvf rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft File: N6CiG7WFEffv59KwRIPtgLSgIzo.mft (raw, json) Hash identifier: S/3OXZ1VwywM6Gk7r/h6B8iVKT9Xo4sE/ik7p3o5X6E= Subject key identifier: E6:9F:98:EE:D0:DF:8A:06:24:FA:47:86:2B:13:F1:1A:C2:C6:D6:81 Authority key identifier: 37:A0:A2:1B:B5:85:11:F7:EF:E7:D2:B0:44:83:ED:80:B4:A0:23:3A Certificate issuer: /CN=A91C456F/serialNumber=37A0A21BB58511F7EFE7D2B04483ED80B4A0233A Certificate serial: 0398 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N6CiG7WFEffv59KwRIPtgLSgIzo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft Manifest number: 0394 Signing time: Fri 13 Jun 2025 00:23:06 +0000 Manifest this update: Fri 13 Jun 2025 00:23:06 +0000 Manifest next update: Fri 20 Jun 2025 00:23:06 +0000 Files and hashes: 1: N6CiG7WFEffv59KwRIPtgLSgIzo.crl (hash: doGgqFQuwFlNxUveZ/exQk0uFaGiCYDClOSHIhHUbkM=) 2: AF95CCA0A08711EC88A88D39C4F9AE02.roa (hash: f88t3B3XEIrStaMOLBEX51aBDTSHx6vviz1RmYW+1Aw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.crl rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N6CiG7WFEffv59KwRIPtgLSgIzo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 00:23:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 920 (0x398) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C456F, serialNumber=37A0A21BB58511F7EFE7D2B04483ED80B4A0233A Validity Not Before: Jun 13 00:23:06 2025 GMT Not After : Jun 20 00:23:06 2025 GMT Subject: CN=684b6f6a-76eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4d:9b:0b:2b:8b:0f:33:90:45:79:81:e5:2e: 5e:67:79:c9:06:9a:ce:07:8d:f2:b9:f5:b7:93:b9: 80:97:4b:81:bf:c9:17:3e:54:67:00:76:d8:12:d5: 72:0f:df:f7:66:93:5f:df:ae:7a:d4:07:2c:cf:6a: 9e:fd:14:ec:d8:30:80:71:33:80:84:9c:7d:ac:f4: 91:ba:42:b5:2d:97:42:5f:34:8f:c3:98:2d:dd:ef: 6b:e9:26:4c:c8:ec:c1:09:c2:d9:8d:3a:42:dc:81: 56:f4:f0:b2:91:92:9a:39:6a:0d:f9:29:97:2f:76: a6:86:75:79:0a:96:21:be:ae:b2:ca:00:07:67:f9: d7:9b:b3:00:11:e6:64:e6:da:36:32:eb:a9:dc:31: bf:e2:46:6d:7c:7d:13:a3:b5:01:88:f9:89:7e:e0: ac:e2:90:dc:ca:b7:e3:8a:7a:89:d6:04:db:de:d7: cf:eb:df:81:5b:41:ce:ec:a9:19:52:88:08:7c:b2: 50:61:58:0e:53:91:35:47:ea:05:ec:65:fd:0e:ff: 32:57:55:82:66:99:19:8f:d8:07:9d:be:9b:ce:d4: 45:b0:f3:c7:08:2a:8b:92:5d:d3:86:e1:c9:22:5b: ba:36:05:1c:ec:aa:05:db:3e:0d:40:c0:00:57:b7: 25:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:9F:98:EE:D0:DF:8A:06:24:FA:47:86:2B:13:F1:1A:C2:C6:D6:81 X509v3 Authority Key Identifier: keyid:37:A0:A2:1B:B5:85:11:F7:EF:E7:D2:B0:44:83:ED:80:B4:A0:23:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N6CiG7WFEffv59KwRIPtgLSgIzo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:67:37:bf:f0:30:2f:b5:cc:90:db:01:97:57:c7:0e:79:50: 87:f0:cf:7f:9e:e8:dd:35:cc:a4:6c:30:16:96:cd:1c:65:7a: 53:0e:a5:d8:56:bd:ff:61:68:76:ed:a2:51:7e:cf:5e:97:d8: ad:b9:8d:65:74:95:53:a6:a1:88:f3:71:4f:ce:10:78:92:3e: 01:fe:14:46:8d:b3:11:38:52:3e:80:7b:35:39:f7:30:b0:f0: aa:ca:05:19:95:2a:5a:10:91:86:6f:cf:63:31:67:ae:04:f0: f7:ac:4e:40:81:58:7f:54:5a:a3:ac:cb:52:fc:da:bf:c4:85: 27:67:63:b0:90:a8:89:fb:09:11:c9:e7:79:99:ec:f1:1b:c0: 9e:b3:60:66:36:0c:23:49:8f:9b:6a:30:1d:19:a6:65:64:80: c4:8b:3d:2f:13:b3:e8:e5:78:fd:6e:e7:32:6a:8c:1e:03:75: bb:40:cd:66:42:2b:29:98:9d:d0:ae:ef:4f:cc:77:14:b4:fc: 22:c8:c6:17:53:74:2c:fd:99:db:d7:d5:f3:00:54:6e:60:35: c8:1d:91:be:db:d7:37:b2:dc:a0:95:d7:52:c6:7e:df:01:59: 54:fc:19:4a:85:9d:33:a8:61:52:73:1b:a3:ed:5d:d1:78:97: 58:c6:51:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ1NkYxMTAvBgNVBAUTKDM3QTBBMjFCQjU4NTExRjdFRkU3RDJCMDQ0ODNFRDgw QjRBMDIzM0EwHhcNMjUwNjEzMDAyMzA2WhcNMjUwNjIwMDAyMzA2WjAYMRYwFAYD VQQDEw02ODRiNmY2YS03NmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv02bCyuLDzOQRXmB5S5eZ3nJBprOB43yufW3k7mAl0uBv8kXPlRnAHbYEtVy D9/3ZpNf36561Acsz2qe/RTs2DCAcTOAhJx9rPSRukK1LZdCXzSPw5gt3e9r6SZM yOzBCcLZjTpC3IFW9PCykZKaOWoN+SmXL3amhnV5CpYhvq6yygAHZ/nXm7MAEeZk 5to2Muup3DG/4kZtfH0To7UBiPmJfuCs4pDcyrfjinqJ1gTb3tfP69+BW0HO7KkZ UogIfLJQYVgOU5E1R+oF7GX9Dv8yV1WCZpkZj9gHnb6bztRFsPPHCCqLkl3ThuHJ Ilu6NgUc7KoF2z4NQMAAV7clrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOafmO7Q 34oGJPpHhisT8RrCxtaBMB8GA1UdIwQYMBaAFDegohu1hRH37+fSsESD7YC0oCM6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDU2Ri9EMzNGQzgyQUEw ODQxMUVDOTRBRDJBMzdDNEY5QUUwMi9ONkNpRzdXRkVmZnY1OUt3UklQdGdMU2dJ em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL042Q2lHN1dGRWZmdjU5S3dSSVB0Z0xTZ0l6by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDU2Ri9EMzNGQzgyQUEwODQxMUVDOTRBRDJBMzdDNEY5QUUwMi9ONkNpRzdXRkVm ZnY1OUt3UklQdGdMU2dJem8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASZze/8DAvtcyQ2wGXV8cOeVCH8M9/nujdNcykbDAWls0cZXpTDqXY Vr3/YWh27aJRfs9el9ituY1ldJVTpqGI83FPzhB4kj4B/hRGjbMROFI+gHs1Ofcw sPCqygUZlSpaEJGGb89jMWeuBPD3rE5AgVh/VFqjrMtS/Nq/xIUnZ2OwkKiJ+wkR yed5mezxG8Ces2BmNgwjSY+bajAdGaZlZIDEiz0vE7Po5Xj9bucyaoweA3W7QM1m QispmJ3Qru9PzHcUtPwiyMYXU3Qs/Znb19XzAFRuYDXIHZG+29c3styglddSxn7f AVlU/BlKhZ0zqGFScxuj7V3ReJdYxlHd -----END CERTIFICATE-----Generated at Sat Jun 14 17:21:13 2025 by rpki-client