$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft File: CuIi7F4XpuYytVnUnFse8zLaQ8s.mft (raw, json) Hash identifier: 1XAkSgPN95Yg9uaU3kD62iyNNr2SEyRdWWdjHsc8cx8= Subject key identifier: 1A:EA:4C:10:16:57:72:85:2F:E6:AE:EF:D2:80:B4:81:C1:A5:49:7E Authority key identifier: 0A:E2:22:EC:5E:17:A6:E6:32:B5:59:D4:9C:5B:1E:F3:32:DA:43:CB Certificate issuer: /CN=A91C7C04/serialNumber=0AE222EC5E17A6E632B559D49C5B1EF332DA43CB Certificate serial: 06F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft Manifest number: 06DA Signing time: Thu 12 Jun 2025 21:46:01 +0000 Manifest this update: Thu 12 Jun 2025 21:46:01 +0000 Manifest next update: Thu 19 Jun 2025 21:46:01 +0000 Files and hashes: 1: CuIi7F4XpuYytVnUnFse8zLaQ8s.crl (hash: JXuQ4jtcFOiU5g6CUgDjhqfEcCfrrkb9jHvUoQSnh5w=) 2: A825CC96324011EC9E90243EC4F9AE02.roa (hash: Csw4qj9xE9hGEDImUH/XPPY2KPdm1RGZvA3bAW3MNCY=) 3: DA45147EB35E11EE8EED0E37C4F9AE02.roa (hash: MLem2RJrmzD72xixiKpCd0XFlZ6/VicCf/qXTlSWENc=) 4: F097281C169A11EF8927EC2DC4F9AE02.roa (hash: w3Ln1KV8lxVl5Uw2YRQh7wulnVukzVJfQnsYtJXybYU=) 5: 0C42C86EF38611EF92753935C4F9AE02.roa (hash: MdSSPQnzwPVIzYg1f83uFbIF+zvXp1fZov2cahwOMzI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.crl rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 21:46:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1782 (0x6f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7C04, serialNumber=0AE222EC5E17A6E632B559D49C5B1EF332DA43CB Validity Not Before: Jun 12 21:46:01 2025 GMT Not After : Jun 19 21:46:01 2025 GMT Subject: CN=684b4a99-6c37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c6:fe:b6:d5:55:7d:eb:7a:8b:ab:92:62:81: d5:e0:05:bc:4a:ba:1c:d4:4c:a7:35:63:59:72:10: 7d:25:22:db:b3:93:b4:9b:38:4c:7f:19:c0:6f:a2: a0:e4:82:0b:3d:a3:c6:d6:fd:34:9b:8f:b7:c2:6e: 8a:eb:72:1f:22:f7:1d:b3:e9:86:fb:01:e2:fe:9b: 8a:b3:af:e2:a0:59:29:d8:33:c1:88:55:64:af:55: 35:5e:58:9d:ba:48:bf:cf:6b:c1:4d:1f:c4:93:97: 48:85:87:ff:94:dc:4b:ee:d9:14:71:aa:67:7e:12: 79:1c:d3:66:0f:59:45:4b:41:be:68:e9:69:32:be: f1:1b:98:e3:53:08:f9:ce:6d:82:28:b8:ba:c7:dc: 23:47:60:25:c0:84:9d:22:6d:c6:c0:ed:9e:36:a5: 75:b9:52:1d:67:fb:2c:4d:9f:b7:fc:c8:c7:a5:fe: f2:2b:af:c6:56:0b:f7:16:6e:9d:91:fd:6d:bc:f6: b2:a8:a2:60:e5:6b:23:b2:5a:53:0c:c7:75:f3:25: 43:d2:79:87:71:db:80:c5:a7:0f:dc:d6:9a:f1:7f: 0c:5a:83:3b:b9:04:57:ac:e4:16:e6:5f:68:08:d7: ee:e1:a9:b4:c1:db:35:42:65:f2:58:9f:f1:4c:9b: 85:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:EA:4C:10:16:57:72:85:2F:E6:AE:EF:D2:80:B4:81:C1:A5:49:7E X509v3 Authority Key Identifier: keyid:0A:E2:22:EC:5E:17:A6:E6:32:B5:59:D4:9C:5B:1E:F3:32:DA:43:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:02:a8:63:38:09:32:81:ba:31:0a:b4:47:f6:a7:a7:88:58: c3:1e:1a:a4:8a:18:c6:a3:d4:c0:5a:03:08:90:36:07:a5:70: cf:1e:18:a2:19:b0:9a:d7:4e:96:9c:93:99:f5:37:6a:e1:97: e0:cb:2b:e2:83:3f:cf:5d:00:87:d0:61:2b:86:d2:00:23:6c: 8e:4d:80:19:a2:19:9c:74:88:c3:55:11:16:44:35:2b:b4:1b: e6:d4:b4:0a:37:9a:e5:2d:4b:60:36:7f:46:a2:25:b5:ca:15: 63:cb:42:e8:ba:c9:8e:34:2e:ac:1e:03:73:81:18:22:39:7a: aa:82:fb:d8:d1:bc:ee:96:c9:2f:87:d8:e3:83:5d:94:e6:68: 0f:b2:2c:cb:6f:1c:d3:77:65:68:23:7c:23:89:e1:dd:81:51: 91:f2:b2:f9:8f:95:ce:12:14:58:94:30:ae:e7:36:85:00:2b: 4d:a7:7b:29:e1:80:b6:93:0d:86:35:f5:c8:3b:b3:54:16:a0: fd:19:47:26:c0:94:db:19:48:a0:cb:bd:fe:58:8e:07:68:13: 1b:91:0d:37:75:5c:a7:4b:bd:74:b8:02:7c:79:f6:53:17:0a: d4:45:0d:db:b1:59:dd:e9:8b:67:cb:4d:e6:3d:9b:1c:bd:3f: fa:80:1c:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdDMDQxMTAvBgNVBAUTKDBBRTIyMkVDNUUxN0E2RTYzMkI1NTlENDlDNUIxRUYz MzJEQTQzQ0IwHhcNMjUwNjEyMjE0NjAxWhcNMjUwNjE5MjE0NjAxWjAYMRYwFAYD VQQDEw02ODRiNGE5OS02YzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu8b+ttVVfet6i6uSYoHV4AW8Sroc1EynNWNZchB9JSLbs5O0mzhMfxnAb6Kg 5IILPaPG1v00m4+3wm6K63IfIvcds+mG+wHi/puKs6/ioFkp2DPBiFVkr1U1Xlid uki/z2vBTR/Ek5dIhYf/lNxL7tkUcapnfhJ5HNNmD1lFS0G+aOlpMr7xG5jjUwj5 zm2CKLi6x9wjR2AlwISdIm3GwO2eNqV1uVIdZ/ssTZ+3/MjHpf7yK6/GVgv3Fm6d kf1tvPayqKJg5WsjslpTDMd18yVD0nmHcduAxacP3Naa8X8MWoM7uQRXrOQW5l9o CNfu4am0wds1QmXyWJ/xTJuFtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBrqTBAW V3KFL+au79KAtIHBpUl+MB8GA1UdIwQYMBaAFAriIuxeF6bmMrVZ1JxbHvMy2kPL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0MwNC9BMERCMzU1MjVG QjQxMUVCQUI3QzZBMjNDNEY5QUUwMi9DdUlpN0Y0WHB1WXl0Vm5VbkZzZTh6TGFR OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N1SWk3RjRYcHVZeXRWblVuRnNlOHpMYVE4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0MwNC9BMERCMzU1MjVGQjQxMUVCQUI3QzZBMjNDNEY5QUUwMi9DdUlpN0Y0WHB1 WXl0Vm5VbkZzZTh6TGFROHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASAqhjOAkygboxCrRH9qeniFjDHhqkihjGo9TAWgMIkDYHpXDPHhii GbCa106WnJOZ9Tdq4Zfgyyvigz/PXQCH0GErhtIAI2yOTYAZohmcdIjDVREWRDUr tBvm1LQKN5rlLUtgNn9GoiW1yhVjy0LousmONC6sHgNzgRgiOXqqgvvY0bzulskv h9jjg12U5mgPsizLbxzTd2VoI3wjieHdgVGR8rL5j5XOEhRYlDCu5zaFACtNp3sp 4YC2kw2GNfXIO7NUFqD9GUcmwJTbGUigy73+WI4HaBMbkQ03dVynS710uAJ8efZT FwrURQ3bsVnd6Ytny03mPZscvT/6gBzv -----END CERTIFICATE-----Generated at Sat Jun 14 19:27:32 2025 by rpki-client