$ rpki-client -vvf rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft File: S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft (raw, json) Hash identifier: ILHkmqM6Fd52bjWjmseMWNuzhMVn/b+twlEdCGaM2wE= Subject key identifier: A8:C8:75:59:55:9A:0D:31:25:F6:4B:42:79:39:3B:A8:6C:C6:52:F4 Authority key identifier: 4B:EA:EC:33:7C:6E:89:F2:79:4A:97:44:E1:6D:91:9C:9C:79:3B:1E Certificate issuer: /CN=A91D82F4/serialNumber=4BEAEC337C6E89F2794A9744E16D919C9C793B1E Certificate serial: 06EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft Manifest number: 06E6 Signing time: Wed 18 Jun 2025 21:48:37 +0000 Manifest this update: Wed 18 Jun 2025 21:48:36 +0000 Manifest next update: Wed 25 Jun 2025 21:48:36 +0000 Files and hashes: 1: S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl (hash: f+LLFmWo2J6qgr9v8Zw4zpUBHS4I/+UbJPij+0ndg48=) 2: A2EF68E66EAD11EC8796A251C4F9AE02.roa (hash: hiz98+Tla2jui/7o4KW1a6oKm5a+tUfazFi0UQ7ozaI=) 3: 56617572537F11EB9C970658C4F9AE02.roa (hash: xS7amPwlmGL+CP12HQjnbonilF649h5RUnRZcUUg8FE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 21:48:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1775 (0x6ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D82F4, serialNumber=4BEAEC337C6E89F2794A9744E16D919C9C793B1E Validity Not Before: Jun 18 21:48:36 2025 GMT Not After : Jun 25 21:48:36 2025 GMT Subject: CN=68533435-6cbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ff:a4:8b:95:c5:d2:b1:07:24:c8:b8:f5:ba: f2:d7:8b:cb:29:9e:1a:97:98:2d:9f:82:7c:25:29: 5f:83:f9:aa:77:7a:25:0f:b6:1c:d6:cc:33:d9:db: 8c:f2:fa:14:02:b7:35:97:06:5a:38:d7:35:53:b2: 5d:2f:3e:a4:0e:d7:ed:fe:a9:89:4e:c3:41:81:f5: fc:45:31:ac:59:6f:d2:e5:d7:33:1e:67:fe:3e:ca: f2:19:f8:07:b4:05:5c:c6:6c:cb:d7:b9:31:a4:61: 4d:bb:24:4e:ba:0f:a7:34:d9:b6:68:52:35:e7:4d: 99:15:0c:84:c8:4a:79:7b:66:72:e8:9e:9c:78:e7: dc:56:a8:4b:a2:3c:d7:23:4b:6e:4c:09:89:05:0a: ee:01:5f:f0:8e:cb:7f:15:9c:ec:5c:38:f1:88:31: dd:71:d7:33:48:b2:91:bd:14:34:e2:59:e3:65:d2: 3f:2c:f8:3e:1f:12:ed:ec:40:0b:69:cc:36:a4:ca: 73:cc:81:89:21:00:94:80:6d:55:48:47:e6:0b:f8: ee:a7:ca:ac:70:fe:ba:59:8d:1f:4e:6b:dc:e4:a9: 1a:04:67:74:ed:08:b2:e1:ae:df:80:08:57:62:d0: e2:d4:e2:0d:9e:07:6a:4c:71:b2:36:03:8a:eb:3c: 04:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:C8:75:59:55:9A:0D:31:25:F6:4B:42:79:39:3B:A8:6C:C6:52:F4 X509v3 Authority Key Identifier: keyid:4B:EA:EC:33:7C:6E:89:F2:79:4A:97:44:E1:6D:91:9C:9C:79:3B:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:ce:21:e6:bb:1a:23:7c:de:e0:88:c8:f7:aa:db:df:6e:a6: 57:12:70:fd:9e:30:97:d5:70:33:9d:a7:f3:14:94:c7:ce:61: ac:b4:82:f2:d4:27:44:3e:0b:8c:e8:c2:73:8f:f0:32:d7:73: 6a:6b:c3:5a:a3:22:07:18:8b:f8:d1:a5:26:15:cf:6b:2b:ca: e2:a9:0f:dc:55:d1:e2:b1:52:d8:08:d9:02:0d:76:d8:e4:a7: 95:51:49:d2:a4:d7:4f:9e:70:a4:19:83:93:de:33:53:3f:5f: b5:6e:80:d3:c1:1e:60:e9:e7:37:b6:2d:87:e2:03:8a:9b:61: e7:2c:92:7f:cc:e7:44:98:a6:7b:c8:71:fd:32:0d:7c:7b:b4: 1b:ce:58:1f:80:f1:72:0a:33:44:bd:23:a8:15:dd:55:8d:b7: 2d:b4:6c:37:d8:24:cb:f8:62:a3:88:c6:53:ed:ab:c8:12:e5: ab:cc:b1:fe:68:9b:b1:37:ce:fc:73:92:99:69:4c:8d:84:01: 44:d8:33:23:f6:4e:9c:8a:87:78:f6:66:ce:f5:fc:4f:e2:d5: f8:b3:82:07:ca:cc:ef:1d:7b:6d:66:76:26:80:57:87:0f:00: dc:a3:8d:9d:62:57:93:8b:77:56:57:1e:23:85:a6:6e:fc:2f: 7b:fb:db:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBu8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgyRjQxMTAvBgNVBAUTKDRCRUFFQzMzN0M2RTg5RjI3OTRBOTc0NEUxNkQ5MTlD OUM3OTNCMUUwHhcNMjUwNjE4MjE0ODM2WhcNMjUwNjI1MjE0ODM2WjAYMRYwFAYD VQQDEw02ODUzMzQzNS02Y2JjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxf+ki5XF0rEHJMi49bry14vLKZ4al5gtn4J8JSlfg/mqd3olD7Yc1swz2duM 8voUArc1lwZaONc1U7JdLz6kDtft/qmJTsNBgfX8RTGsWW/S5dczHmf+PsryGfgH tAVcxmzL17kxpGFNuyROug+nNNm2aFI1502ZFQyEyEp5e2Zy6J6ceOfcVqhLojzX I0tuTAmJBQruAV/wjst/FZzsXDjxiDHdcdczSLKRvRQ04lnjZdI/LPg+HxLt7EAL acw2pMpzzIGJIQCUgG1VSEfmC/jup8qscP66WY0fTmvc5KkaBGd07Qiy4a7fgAhX YtDi1OINngdqTHGyNgOK6zwEXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKjIdVlV mg0xJfZLQnk5O6hsxlL0MB8GA1UdIwQYMBaAFEvq7DN8bonyeUqXROFtkZyceTse MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODJGNC85MzZFNTlCRTUz N0QxMUVCQjJCRDdCNTNDNEY5QUUwMi9TLXJzTTN4dWlmSjVTcGRFNFcyUm5KeDVP eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MtcnNNM3h1aWZKNVNwZEU0VzJSbkp4NU94NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODJGNC85MzZFNTlCRTUzN0QxMUVCQjJCRDdCNTNDNEY5QUUwMi9TLXJzTTN4dWlm SjVTcGRFNFcyUm5KeDVPeDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYziHmuxojfN7giMj3qtvfbqZXEnD9njCX1XAznafzFJTHzmGstILy 1CdEPguM6MJzj/Ay13Nqa8NaoyIHGIv40aUmFc9rK8riqQ/cVdHisVLYCNkCDXbY 5KeVUUnSpNdPnnCkGYOT3jNTP1+1boDTwR5g6ec3ti2H4gOKm2HnLJJ/zOdEmKZ7 yHH9Mg18e7QbzlgfgPFyCjNEvSOoFd1VjbcttGw32CTL+GKjiMZT7avIEuWrzLH+ aJuxN878c5KZaUyNhAFE2DMj9k6ciod49mbO9fxP4tX4s4IHyszvHXttZnYmgFeH DwDco42dYleTi3dWVx4jhaZu/C97+9t+ -----END CERTIFICATE-----Generated at Fri Jun 20 19:45:26 2025 by rpki-client