$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.mft File: j3TBdV8YhwjM46Z97ChZk2SN8YM.mft (raw, json) Hash identifier: 6DtjAK0a0SRqKkRIazKLMYWHQ/qo9tzzWoP71JGLAfA= Subject key identifier: 1E:ED:6C:37:94:9E:7C:1F:38:68:14:CA:61:2E:56:FB:16:6D:28:87 Authority key identifier: 8F:74:C1:75:5F:18:87:08:CC:E3:A6:7D:EC:28:59:93:64:8D:F1:83 Certificate issuer: /CN=A91C5D53/serialNumber=8F74C1755F188708CCE3A67DEC285993648DF183 Certificate serial: 6B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/j3TBdV8YhwjM46Z97ChZk2SN8YM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.mft Manifest number: 6A Signing time: Thu 19 Jun 2025 06:20:33 +0000 Manifest this update: Thu 19 Jun 2025 06:20:33 +0000 Manifest next update: Thu 26 Jun 2025 06:20:33 +0000 Files and hashes: 1: j3TBdV8YhwjM46Z97ChZk2SN8YM.crl (hash: wCPvC9kNhUQxIL28sh6tvCe+d2bu5Qb9ra0RhfPzhNI=) 2: 916E1DB8C1D611EFB61BE32DC4F9AE02.roa (hash: JnGUEG/UELgRSrXf0UwtaiJ+4LEhgtXWroHpv/a9KQM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.crl rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/j3TBdV8YhwjM46Z97ChZk2SN8YM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 06:20:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 107 (0x6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5D53, serialNumber=8F74C1755F188708CCE3A67DEC285993648DF183 Validity Not Before: Jun 19 06:20:33 2025 GMT Not After : Jun 26 06:20:33 2025 GMT Subject: CN=6853ac31-28f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3b:c2:ad:65:c0:03:ad:5c:ce:dc:f0:ac:d6: f8:55:f8:46:61:b5:26:4f:4c:90:2e:42:b0:38:5e: c2:3b:ed:3f:f7:78:72:13:30:a3:f4:23:32:73:ad: 6c:7f:79:61:02:d4:d4:cb:74:1e:cd:59:83:60:1a: 47:28:2e:96:32:ab:ca:b9:e1:4d:36:49:1e:e2:80: eb:24:23:c4:10:96:12:ec:cc:9d:3a:25:4e:62:dd: f8:28:ea:5d:e2:f4:9f:3f:70:84:4f:99:1e:95:0d: 91:3b:63:34:86:4b:75:52:34:ef:ca:fd:56:6c:84: e5:69:41:57:b2:b6:60:a8:5a:50:50:99:96:57:c6: 5b:2b:bd:87:2d:a2:00:a8:d2:0e:46:2b:db:07:d3: a3:a1:9e:36:d1:af:c9:8a:9d:2a:71:15:b8:ef:1d: 60:7f:15:73:3f:e3:93:bc:db:e4:48:d5:86:22:0f: 33:24:dc:71:23:04:d3:a0:71:78:83:7b:9a:05:8b: 81:4c:8f:3c:b7:61:c2:21:d8:32:ee:5f:3d:5a:56: d0:0c:37:c5:83:10:ba:56:34:d9:72:38:77:06:c9: bc:fb:fb:a5:59:49:15:1e:c9:8c:7a:de:64:cf:3e: 10:be:22:04:bb:7e:95:4f:44:a2:5d:9b:ea:e4:6f: 6c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:ED:6C:37:94:9E:7C:1F:38:68:14:CA:61:2E:56:FB:16:6D:28:87 X509v3 Authority Key Identifier: keyid:8F:74:C1:75:5F:18:87:08:CC:E3:A6:7D:EC:28:59:93:64:8D:F1:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/j3TBdV8YhwjM46Z97ChZk2SN8YM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:e4:52:e2:10:80:f7:87:ad:9c:88:e9:7e:9a:60:de:a6:d8: 0d:d6:8b:de:43:51:7f:44:1c:a8:3c:5c:54:ed:78:50:1b:7f: 0a:9e:12:d5:3f:ab:21:4f:6f:e3:71:7f:c1:bd:23:e2:59:5b: 06:1b:d0:ee:ee:4f:9d:7f:02:bd:42:73:62:17:95:d3:43:42: 9e:37:16:e1:19:c4:cb:4a:90:1c:fc:21:c8:05:a7:ee:4b:2e: 91:54:28:b2:59:0d:d3:c1:2e:72:1d:9f:e1:ae:8b:a8:05:95: a7:61:b9:e3:96:23:d0:cd:2f:57:11:43:e5:9f:d0:aa:93:d6: 74:0f:12:18:74:ca:6a:61:eb:eb:43:25:42:5c:de:36:5a:b5: 91:fc:59:c0:92:3b:1b:5c:9a:d2:41:b4:ab:e7:dd:66:a5:30: 31:d4:f4:66:3a:08:12:f7:1e:fb:b8:75:67:6e:8a:50:4b:b4: 9b:be:e9:24:97:18:da:e1:ab:5a:c3:71:1b:9d:72:37:56:50: d2:fa:78:92:6d:fe:5c:29:67:1a:e1:49:2c:72:85:24:35:19: 28:8b:a8:00:5f:55:23:97:6c:49:a4:ea:b2:a9:f6:5f:f1:b0: 03:b9:68:1b:8b:dd:8e:af:6e:6d:f3:03:03:27:0d:9c:be:de: ba:1c:3b:93 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NUQ1MzExMC8GA1UEBRMoOEY3NEMxNzU1RjE4ODcwOENDRTNBNjdERUMyODU5OTM2 NDhERjE4MzAeFw0yNTA2MTkwNjIwMzNaFw0yNTA2MjYwNjIwMzNaMBgxFjAUBgNV BAMTDTY4NTNhYzMxLTI4ZjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDaO8KtZcADrVzO3PCs1vhV+EZhtSZPTJAuQrA4XsI77T/3eHITMKP0IzJzrWx/ eWEC1NTLdB7NWYNgGkcoLpYyq8q54U02SR7igOskI8QQlhLszJ06JU5i3fgo6l3i 9J8/cIRPmR6VDZE7YzSGS3VSNO/K/VZshOVpQVeytmCoWlBQmZZXxlsrvYctogCo 0g5GK9sH06OhnjbRr8mKnSpxFbjvHWB/FXM/45O82+RI1YYiDzMk3HEjBNOgcXiD e5oFi4FMjzy3YcIh2DLuXz1aVtAMN8WDELpWNNlyOHcGybz7+6VZSRUeyYx63mTP PhC+IgS7fpVPRKJdm+rkb2xpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHu1sN5Se fB84aBTKYS5W+xZtKIcwHwYDVR0jBBgwFoAUj3TBdV8YhwjM46Z97ChZk2SN8YMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1RDUzL0ZDN0Q2MDg2QUM4 MzExRUY4MjE0OTcyQkM0RjlBRTAyL2ozVEJkVjhZaHdqTTQ2Wjk3Q2haazJTTjhZ TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvajNUQmRWOFlod2pNNDZaOTdDaFprMlNOOFlNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1 RDUzL0ZDN0Q2MDg2QUM4MzExRUY4MjE0OTcyQkM0RjlBRTAyL2ozVEJkVjhZaHdq TTQ2Wjk3Q2haazJTTjhZTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADjkUuIQgPeHrZyI6X6aYN6m2A3Wi95DUX9EHKg8XFTteFAbfwqeEtU/ qyFPb+Nxf8G9I+JZWwYb0O7uT51/Ar1Cc2IXldNDQp43FuEZxMtKkBz8IcgFp+5L LpFUKLJZDdPBLnIdn+Gui6gFladhueOWI9DNL1cRQ+Wf0KqT1nQPEhh0ymph6+tD JUJc3jZatZH8WcCSOxtcmtJBtKvn3WalMDHU9GY6CBL3Hvu4dWduilBLtJu+6SSX GNrhq1rDcRudcjdWUNL6eJJt/lwpZxrhSSxyhSQ1GSiLqABfVSOXbEmk6rKp9l/x sAO5aBuL3Y6vbm3zAwMnDZy+3rocO5M= -----END CERTIFICATE-----Generated at Sat Jun 21 06:11:04 2025 by rpki-client