$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.mft File: 62gLfeTEobRDq9eZuvUkndSw6pA.mft (raw, json) Hash identifier: Mlb7KoEDnglJ7WJApBB7s2Y8Tz8wRWx/buaHB0nMaEI= Subject key identifier: 09:7A:72:03:74:1B:DE:7A:34:34:36:97:4E:76:9C:B0:AD:F9:93:35 Authority key identifier: EB:68:0B:7D:E4:C4:A1:B4:43:AB:D7:99:BA:F5:24:9D:D4:B0:EA:90 Certificate issuer: /CN=A91DC866/serialNumber=EB680B7DE4C4A1B443ABD799BAF5249DD4B0EA90 Certificate serial: 34B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62gLfeTEobRDq9eZuvUkndSw6pA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.mft Manifest number: 34A1 Signing time: Sat 14 Jun 2025 14:49:32 +0000 Manifest this update: Sat 14 Jun 2025 14:49:31 +0000 Manifest next update: Sat 21 Jun 2025 14:49:31 +0000 Files and hashes: 1: 62gLfeTEobRDq9eZuvUkndSw6pA.crl (hash: 86qBZj/8afdIKbKCaGiRuwjAkeV+x6oEdVBHVOQkgEk=) 2: D55D2990561F11E7B9B5FB2CC4F9AE02.roa (hash: 6l+okkOVayeN3r7Oa8ISbsZRxypv5sX/p1C5qPHUzI4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.crl rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62gLfeTEobRDq9eZuvUkndSw6pA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 14:49:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13491 (0x34b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC866, serialNumber=EB680B7DE4C4A1B443ABD799BAF5249DD4B0EA90 Validity Not Before: Jun 14 14:49:31 2025 GMT Not After : Jun 21 14:49:31 2025 GMT Subject: CN=684d8bfc-86b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:19:01:68:10:0c:46:17:86:72:52:39:8f:1c: 53:6d:88:dc:aa:66:e8:db:26:34:ac:5f:d2:7b:c7: fe:20:7c:ef:6d:41:ab:4f:f6:0d:31:1b:fa:a0:a5: 28:16:a1:6d:81:9c:9d:10:f4:7a:5b:91:5d:b2:37: 66:ec:77:f7:b8:75:84:18:0d:ac:0f:18:2e:61:6b: 85:6a:71:71:4c:af:5d:39:9c:61:3a:a8:ee:4c:de: 21:cc:52:43:f3:ec:08:29:d6:bf:a5:a2:8c:38:7e: 54:85:a2:ab:f1:61:0e:d0:e7:bc:64:93:6c:c2:55: 5a:3b:e6:96:25:7b:d7:b5:45:c3:99:a2:fc:e6:7e: 72:e1:3f:08:7c:15:1c:77:61:f3:53:8b:b9:73:74: fc:4a:a4:e0:f9:36:f4:4a:89:16:d2:b6:d0:69:f0: be:66:18:bb:47:b9:a4:07:2a:25:42:96:a4:d9:c8: 39:5b:f9:0a:5f:fb:ff:36:60:74:ea:8d:2c:ca:ef: 01:a8:2c:1a:43:a8:aa:27:b1:61:76:9e:22:4a:90: ce:ef:45:10:0b:cf:72:70:8b:fb:56:63:b7:e3:36: 85:ae:56:29:d8:1e:66:98:85:76:1c:76:11:9d:ba: 15:17:42:f3:91:9f:fd:a4:5f:ae:70:0a:02:07:16: 85:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:7A:72:03:74:1B:DE:7A:34:34:36:97:4E:76:9C:B0:AD:F9:93:35 X509v3 Authority Key Identifier: keyid:EB:68:0B:7D:E4:C4:A1:B4:43:AB:D7:99:BA:F5:24:9D:D4:B0:EA:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62gLfeTEobRDq9eZuvUkndSw6pA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:1e:17:7c:d0:57:0e:7c:f2:ac:49:5b:76:1d:42:ac:63:ba: d1:ee:ba:36:c5:28:26:11:02:ac:01:79:28:fe:ac:a2:d0:05: 87:d7:37:f6:4e:62:f1:5a:a6:14:65:a4:16:54:2d:14:34:f9: ed:75:d5:ad:79:8e:80:a7:f6:c3:c6:87:b6:bc:7b:d0:d9:68: c8:3e:a0:8d:96:2e:bc:c8:f9:15:99:3c:15:93:b5:34:ea:09: dc:77:3c:19:24:68:4c:3a:3c:9b:01:e3:9a:10:a9:80:71:90: 93:54:34:2a:1c:28:29:3a:71:2a:66:2c:74:59:47:86:30:b2: 81:99:2b:f9:d1:33:f2:03:3e:b4:cf:ea:16:ea:b8:74:70:6d: 10:47:71:06:28:49:fd:99:9d:f6:00:b5:54:f1:b7:29:50:18: c9:f4:92:19:be:6f:e8:8f:43:cb:43:28:2e:05:0c:ef:3a:3c: 51:73:2c:bb:91:66:39:88:bb:a2:93:1d:e4:c1:09:35:3f:54: 33:e3:66:e2:10:79:df:c2:dc:48:b0:3e:80:eb:53:ad:4d:57: e9:84:d6:ec:34:09:f6:cb:9c:14:fa:44:30:4d:16:00:ea:19: d1:a8:41:6c:af:7b:13:38:ec:da:27:66:7d:fd:ca:59:e3:b0: 8f:df:e3:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM4NjYxMTAvBgNVBAUTKEVCNjgwQjdERTRDNEExQjQ0M0FCRDc5OUJBRjUyNDlE RDRCMEVBOTAwHhcNMjUwNjE0MTQ0OTMxWhcNMjUwNjIxMTQ0OTMxWjAYMRYwFAYD VQQDEw02ODRkOGJmYy04NmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuRkBaBAMRheGclI5jxxTbYjcqmbo2yY0rF/Se8f+IHzvbUGrT/YNMRv6oKUo FqFtgZydEPR6W5Fdsjdm7Hf3uHWEGA2sDxguYWuFanFxTK9dOZxhOqjuTN4hzFJD 8+wIKda/paKMOH5UhaKr8WEO0Oe8ZJNswlVaO+aWJXvXtUXDmaL85n5y4T8IfBUc d2HzU4u5c3T8SqTg+Tb0SokW0rbQafC+Zhi7R7mkByolQpak2cg5W/kKX/v/NmB0 6o0syu8BqCwaQ6iqJ7Fhdp4iSpDO70UQC89ycIv7VmO34zaFrlYp2B5mmIV2HHYR nboVF0LzkZ/9pF+ucAoCBxaF1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAl6cgN0 G956NDQ2l052nLCt+ZM1MB8GA1UdIwQYMBaAFOtoC33kxKG0Q6vXmbr1JJ3UsOqQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzg2Ni82QTBERjlCQTFE OTYxMUUyQjdCNTA1N0YwOEIwMkNEMi82MmdMZmVURW9iUkRxOWVadXZVa25kU3c2 cEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzYyZ0xmZVRFb2JSRHE5ZVp1dlVrbmRTdzZwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Qzg2Ni82QTBERjlCQTFEOTYxMUUyQjdCNTA1N0YwOEIwMkNEMi82MmdMZmVURW9i UkRxOWVadXZVa25kU3c2cEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5Hhd80FcOfPKsSVt2HUKsY7rR7ro2xSgmEQKsAXko/qyi0AWH1zf2 TmLxWqYUZaQWVC0UNPntddWteY6Ap/bDxoe2vHvQ2WjIPqCNli68yPkVmTwVk7U0 6gncdzwZJGhMOjybAeOaEKmAcZCTVDQqHCgpOnEqZix0WUeGMLKBmSv50TPyAz60 z+oW6rh0cG0QR3EGKEn9mZ32ALVU8bcpUBjJ9JIZvm/oj0PLQyguBQzvOjxRcyy7 kWY5iLuikx3kwQk1P1Qz42biEHnfwtxIsD6A61OtTVfphNbsNAn2y5wU+kQwTRYA 6hnRqEFsr3sTOOzaJ2Z9/cpZ47CP3+PJ -----END CERTIFICATE-----Generated at Sat Jun 14 18:46:55 2025 by rpki-client