$ rpki-client -vvf rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft File: 6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft (raw, json) Hash identifier: SaLBVsd3BMrwhx4Bk06tspxs5I2pZ9IjJRjdZWeX3Bs= Subject key identifier: 70:16:C2:F6:6D:72:DD:43:AF:72:A3:66:44:1D:D7:11:C0:55:BA:E3 Authority key identifier: E9:F2:CE:48:3F:1B:06:D2:9D:5E:A2:AB:E3:75:BD:1D:22:A9:E1:C4 Certificate issuer: /CN=A91C68AD/serialNumber=E9F2CE483F1B06D29D5EA2ABE375BD1D22A9E1C4 Certificate serial: 84 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft Manifest number: 83 Signing time: Thu 19 Jun 2025 05:56:53 +0000 Manifest this update: Thu 19 Jun 2025 05:56:53 +0000 Manifest next update: Thu 26 Jun 2025 05:56:53 +0000 Files and hashes: 1: 6fLOSD8bBtKdXqKr43W9HSKp4cQ.crl (hash: lMOaOACwI42tcAa2yqdUuKBzrU5tDza9skTNQzXMMfg=) 2: FC3E29FC85E111EFB365E459C4F9AE02.roa (hash: 0DxgUjIqfTQVxs1j3QKSFbDtA+jK21POEd6C/CDA/hA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.crl rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 05:56:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 132 (0x84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C68AD, serialNumber=E9F2CE483F1B06D29D5EA2ABE375BD1D22A9E1C4 Validity Not Before: Jun 19 05:56:53 2025 GMT Not After : Jun 26 05:56:53 2025 GMT Subject: CN=6853a6a5-a292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:86:d4:69:1f:9f:37:4d:21:db:98:32:5e:ee: 47:b9:25:e0:a7:a8:08:6e:c4:8e:12:f4:59:02:0d: 24:46:ba:6c:cd:c7:a7:7d:5d:3a:9c:64:92:66:ba: 96:11:91:26:5b:18:a4:1d:4b:45:be:33:d6:bc:5c: ff:95:6d:2e:0a:20:39:49:d3:cc:10:6b:2b:15:62: 1e:af:58:d9:ff:e6:46:d7:12:14:38:5c:3b:02:59: bf:96:84:e3:d6:e8:d5:5e:a2:d2:a3:fb:ef:1a:dc: ca:ff:fc:70:9d:36:ac:06:8e:74:65:71:31:d8:af: aa:6d:0c:09:50:47:46:9e:1c:c7:e7:e2:b6:da:55: 97:88:1c:5b:81:11:44:b0:e8:ce:6b:39:96:48:90: 29:25:c4:4a:ca:5b:20:f7:f7:d8:f4:01:10:e8:39: 3f:68:5c:b7:6a:6e:52:67:95:d7:6e:2c:58:f9:62: 70:ff:1f:64:7f:c7:09:79:4b:17:30:ca:f0:2d:a9: 62:7c:24:ea:8d:38:da:2f:a6:b9:80:bf:48:af:96: f3:ec:e3:70:80:0f:45:0f:70:a9:4f:45:db:b2:4f: 7d:da:f4:84:ed:32:c5:7e:61:b5:a0:7f:13:6d:46: ac:d7:21:a1:0c:a4:7f:fd:7f:dc:c6:9f:d3:fc:b8: a6:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:16:C2:F6:6D:72:DD:43:AF:72:A3:66:44:1D:D7:11:C0:55:BA:E3 X509v3 Authority Key Identifier: keyid:E9:F2:CE:48:3F:1B:06:D2:9D:5E:A2:AB:E3:75:BD:1D:22:A9:E1:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:0d:01:f3:c3:a8:7e:e7:0d:f0:76:6c:1d:d2:6c:1b:1f:1c: 6a:5c:42:70:9f:3a:06:ef:f4:bd:56:d9:57:b2:f3:88:f2:77: 5b:d7:fa:d2:1a:19:bb:60:60:ea:af:f0:ee:a3:fa:2a:ba:a9: 6f:79:7c:9b:17:fc:a4:cb:be:5f:d9:0f:87:d3:6b:7b:ea:aa: d0:1a:fb:fd:30:0e:61:58:11:1e:69:d9:01:47:10:af:33:17: e9:c0:f2:a1:3f:3a:72:04:4b:6e:c2:c5:32:40:d8:8c:90:c1: 92:f8:e7:c8:88:8b:b9:dd:13:b7:19:3d:99:e8:de:94:56:f5: 32:0b:7a:87:48:5a:7b:f1:cd:34:2e:ae:dc:a5:63:b5:8b:57: 65:17:b4:5b:42:ab:4a:54:5f:68:e3:c9:73:53:98:d1:92:07: 69:98:22:59:b7:61:90:03:2a:a0:c0:1e:77:d1:2e:87:a8:48: 8a:52:93:66:01:da:39:2e:da:bc:da:91:d0:07:2a:ba:d3:ad: 74:8d:93:bf:0b:f7:92:9f:01:fe:02:33:0e:e7:4a:34:cd:71: 25:2a:77:1f:31:95:26:42:99:8b:34:4c:ef:66:23:eb:94:47: b6:d9:87:81:2f:90:47:39:ea:25:86:80:37:6c:34:d9:1a:da: f8:72:5a:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY4QUQxMTAvBgNVBAUTKEU5RjJDRTQ4M0YxQjA2RDI5RDVFQTJBQkUzNzVCRDFE MjJBOUUxQzQwHhcNMjUwNjE5MDU1NjUzWhcNMjUwNjI2MDU1NjUzWjAYMRYwFAYD VQQDEw02ODUzYTZhNS1hMjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvobUaR+fN00h25gyXu5HuSXgp6gIbsSOEvRZAg0kRrpszcenfV06nGSSZrqW EZEmWxikHUtFvjPWvFz/lW0uCiA5SdPMEGsrFWIer1jZ/+ZG1xIUOFw7Alm/loTj 1ujVXqLSo/vvGtzK//xwnTasBo50ZXEx2K+qbQwJUEdGnhzH5+K22lWXiBxbgRFE sOjOazmWSJApJcRKylsg9/fY9AEQ6Dk/aFy3am5SZ5XXbixY+WJw/x9kf8cJeUsX MMrwLalifCTqjTjaL6a5gL9Ir5bz7ONwgA9FD3CpT0Xbsk992vSE7TLFfmG1oH8T bUas1yGhDKR//X/cxp/T/LimwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHAWwvZt ct1Dr3KjZkQd1xHAVbrjMB8GA1UdIwQYMBaAFOnyzkg/GwbSnV6iq+N1vR0iqeHE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjhBRC80OURFRUU2NDg1 RTAxMUVGQTc1ODc2NTVDNEY5QUUwMi82ZkxPU0Q4YkJ0S2RYcUtyNDNXOUhTS3A0 Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZmTE9TRDhiQnRLZFhxS3I0M1c5SFNLcDRjUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjhBRC80OURFRUU2NDg1RTAxMUVGQTc1ODc2NTVDNEY5QUUwMi82ZkxPU0Q4YkJ0 S2RYcUtyNDNXOUhTS3A0Y1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnDQHzw6h+5w3wdmwd0mwbHxxqXEJwnzoG7/S9VtlXsvOI8ndb1/rS Ghm7YGDqr/Duo/oquqlveXybF/yky75f2Q+H02t76qrQGvv9MA5hWBEeadkBRxCv MxfpwPKhPzpyBEtuwsUyQNiMkMGS+OfIiIu53RO3GT2Z6N6UVvUyC3qHSFp78c00 Lq7cpWO1i1dlF7RbQqtKVF9o48lzU5jRkgdpmCJZt2GQAyqgwB530S6HqEiKUpNm Ado5Ltq82pHQByq60610jZO/C/eSnwH+AjMO50o0zXElKncfMZUmQpmLNEzvZiPr lEe22YeBL5BHOeolhoA3bDTZGtr4clpV -----END CERTIFICATE-----Generated at Thu Jun 19 18:58:40 2025 by rpki-client