$ rpki-client -vvf rpki.apnic.net/member_repository/A91C882A/B9C0C97A21A211EFB9069A6AC4F9AE02/b6Yr4K15obTDhpuhmQ8hTfazzic.mft File: b6Yr4K15obTDhpuhmQ8hTfazzic.mft (raw, json) Hash identifier: oF7O5ubEuQqZUuaTqbLwVTeae+QZ6mhPLya6Vt/WuAc= Subject key identifier: C5:D4:5B:D2:F0:EA:66:8B:12:A7:A9:F9:2B:2A:43:F1:C3:2E:C1:87 Authority key identifier: 6F:A6:2B:E0:AD:79:A1:B4:C3:86:9B:A1:99:0F:21:4D:F6:B3:CE:27 Certificate issuer: /CN=A91C882A/serialNumber=6FA62BE0AD79A1B4C3869BA1990F214DF6B3CE27 Certificate serial: CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b6Yr4K15obTDhpuhmQ8hTfazzic.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C882A/B9C0C97A21A211EFB9069A6AC4F9AE02/b6Yr4K15obTDhpuhmQ8hTfazzic.mft Manifest number: C8 Signing time: Sun 15 Jun 2025 04:56:34 +0000 Manifest this update: Sun 15 Jun 2025 04:56:33 +0000 Manifest next update: Sun 22 Jun 2025 04:56:33 +0000 Files and hashes: 1: b6Yr4K15obTDhpuhmQ8hTfazzic.crl (hash: WKOmoFgrrRJQxN5IC249eFuS1j886sFVfSDXelI4CJY=) 2: 24C853F2AE6411EF9E94822AC4F9AE02.roa (hash: JDZyv3s2Qwc3bu83urEP0uEoNAGKRBqIwwX8qTLx3RQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C882A/B9C0C97A21A211EFB9069A6AC4F9AE02/b6Yr4K15obTDhpuhmQ8hTfazzic.crl rsync://rpki.apnic.net/member_repository/A91C882A/B9C0C97A21A211EFB9069A6AC4F9AE02/b6Yr4K15obTDhpuhmQ8hTfazzic.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b6Yr4K15obTDhpuhmQ8hTfazzic.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 04:56:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 204 (0xcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C882A, serialNumber=6FA62BE0AD79A1B4C3869BA1990F214DF6B3CE27 Validity Not Before: Jun 15 04:56:33 2025 GMT Not After : Jun 22 04:56:33 2025 GMT Subject: CN=684e5281-e921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:87:eb:a7:10:f5:e2:b4:d4:ab:13:e8:41:99: 89:5b:8e:57:9c:8c:fd:05:03:a4:3b:66:99:9b:50: 78:46:90:3a:6e:b7:f0:cc:48:e5:51:03:31:0c:8d: 64:8b:cf:03:91:d6:6e:1d:2a:6c:0d:9c:04:e7:c0: 6b:05:4f:7d:6a:db:95:f2:21:0b:57:f2:34:3c:18: f2:5a:65:ab:36:13:7d:39:b9:89:ae:5c:db:5c:a5: c4:67:eb:cd:22:d6:80:c3:5c:ef:0a:1a:2f:71:1e: 84:74:f7:c5:5f:c3:4b:4c:94:d8:8d:3a:f6:e2:5c: 56:f7:b5:d0:f0:34:6a:54:a6:46:7a:6d:3f:69:d0: 6c:84:b4:84:68:6b:3e:e5:8b:c9:af:7b:ad:2e:59: da:d1:b0:b9:16:bf:ba:36:c6:47:26:15:2b:ac:c0: 5e:07:c8:2f:f9:6c:40:64:cb:b2:99:c5:43:aa:05: c7:db:d9:c2:c8:b2:5d:8e:e0:68:89:c1:4b:6d:60: d9:f2:43:86:de:7f:95:d3:d0:3c:93:4d:2a:eb:4c: 0c:c2:24:aa:77:27:75:74:4b:c6:38:60:db:b3:02: 2f:94:cc:02:e7:94:f8:d3:c8:1a:58:7c:b9:8c:02: 45:4b:aa:97:4a:71:24:2f:9d:98:48:ca:c7:b7:bf: 6c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D4:5B:D2:F0:EA:66:8B:12:A7:A9:F9:2B:2A:43:F1:C3:2E:C1:87 X509v3 Authority Key Identifier: keyid:6F:A6:2B:E0:AD:79:A1:B4:C3:86:9B:A1:99:0F:21:4D:F6:B3:CE:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C882A/B9C0C97A21A211EFB9069A6AC4F9AE02/b6Yr4K15obTDhpuhmQ8hTfazzic.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b6Yr4K15obTDhpuhmQ8hTfazzic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C882A/B9C0C97A21A211EFB9069A6AC4F9AE02/b6Yr4K15obTDhpuhmQ8hTfazzic.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:f0:9a:8e:30:ce:33:ed:67:47:77:61:1a:7f:56:b5:99:9c: 26:87:f6:18:9d:44:be:b9:84:fc:06:ff:2f:ca:fb:73:27:f3: 57:f0:20:77:af:78:06:a8:be:6d:a4:4e:6e:41:55:74:86:ea: 8b:bc:aa:c9:14:32:0a:2c:4e:59:1e:7c:d0:0b:cb:ce:b7:3a: eb:da:80:15:53:ad:7d:9b:44:eb:89:26:b6:00:b2:5a:ad:ae: da:56:81:b0:1c:9c:a4:50:52:80:04:e7:97:17:ff:0a:26:9f: 30:41:02:a3:95:19:c2:65:c0:55:eb:e8:ef:62:d4:fd:0a:93: 23:16:f1:57:cf:cb:0f:f6:f1:aa:ce:5f:86:dd:72:3e:a2:49: a6:b8:c4:b4:08:ca:70:39:a9:4f:fa:10:e7:53:35:76:48:48: 86:6d:11:42:b1:d7:e6:2c:be:35:ec:cc:e8:ba:ee:31:06:d4: 78:05:64:83:00:50:41:7c:3b:61:e1:7f:68:0b:93:46:48:60: b1:63:ec:be:be:25:bb:36:c9:45:c7:e5:9b:d1:58:d3:e0:59: 0e:42:b7:f2:cc:f8:a6:5b:7b:bf:6d:cf:e1:db:3e:2e:bd:cc: 3c:38:ee:ab:9d:69:13:ed:97:51:3e:ed:22:83:ca:e2:80:b5: bd:53:f6:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzg4MkExMTAvBgNVBAUTKDZGQTYyQkUwQUQ3OUExQjRDMzg2OUJBMTk5MEYyMTRE RjZCM0NFMjcwHhcNMjUwNjE1MDQ1NjMzWhcNMjUwNjIyMDQ1NjMzWjAYMRYwFAYD VQQDEw02ODRlNTI4MS1lOTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1YfrpxD14rTUqxPoQZmJW45XnIz9BQOkO2aZm1B4RpA6brfwzEjlUQMxDI1k i88DkdZuHSpsDZwE58BrBU99atuV8iELV/I0PBjyWmWrNhN9ObmJrlzbXKXEZ+vN ItaAw1zvChovcR6EdPfFX8NLTJTYjTr24lxW97XQ8DRqVKZGem0/adBshLSEaGs+ 5YvJr3utLlna0bC5Fr+6NsZHJhUrrMBeB8gv+WxAZMuymcVDqgXH29nCyLJdjuBo icFLbWDZ8kOG3n+V09A8k00q60wMwiSqdyd1dEvGOGDbswIvlMwC55T408gaWHy5 jAJFS6qXSnEkL52YSMrHt79sQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMXUW9Lw 6maLEqep+SsqQ/HDLsGHMB8GA1UdIwQYMBaAFG+mK+CteaG0w4aboZkPIU32s84n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODgyQS9COUMwQzk3QTIx QTIxMUVGQjkwNjlBNkFDNEY5QUUwMi9iNllyNEsxNW9iVERocHVobVE4aFRmYXp6 aWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I2WXI0SzE1b2JURGhwdWhtUThoVGZhenppYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODgyQS9COUMwQzk3QTIxQTIxMUVGQjkwNjlBNkFDNEY5QUUwMi9iNllyNEsxNW9i VERocHVobVE4aFRmYXp6aWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCd8JqOMM4z7WdHd2Eaf1a1mZwmh/YYnUS+uYT8Bv8vyvtzJ/NX8CB3 r3gGqL5tpE5uQVV0huqLvKrJFDIKLE5ZHnzQC8vOtzrr2oAVU619m0TriSa2ALJa ra7aVoGwHJykUFKABOeXF/8KJp8wQQKjlRnCZcBV6+jvYtT9CpMjFvFXz8sP9vGq zl+G3XI+okmmuMS0CMpwOalP+hDnUzV2SEiGbRFCsdfmLL417Mzouu4xBtR4BWSD AFBBfDth4X9oC5NGSGCxY+y+viW7NslFx+Wb0VjT4FkOQrfyzPimW3u/bc/h2z4u vcw8OO6rnWkT7ZdRPu0ig8rigLW9U/bd -----END CERTIFICATE-----Generated at Sun Jun 15 18:02:30 2025 by rpki-client