$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft File: B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft (raw, json) Hash identifier: rmtG9ITwqUN1uAmg5B+LAirl4bIuYeVynxZF6qLkXiM= Subject key identifier: 20:8E:81:B1:DA:3E:18:92:14:57:46:77:62:FD:E9:38:35:13:13:28 Authority key identifier: 07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60 Certificate issuer: /CN=A91DF93A/serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260 Certificate serial: 08B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft Manifest number: 0856 Signing time: Sat 14 Jun 2025 20:42:48 +0000 Manifest this update: Sat 14 Jun 2025 20:42:48 +0000 Manifest next update: Sat 21 Jun 2025 20:42:48 +0000 Files and hashes: 1: B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl (hash: 3Tz4HuOYx1ifcNCBaFUpGfabEy7OCw+yIFlPjFALP7A=) 2: F8C02F3CDA4E11EC9C09A446C4F9AE02.roa (hash: ek3DgpwlstOVnuguW/pHkiP1RxK/zlxH+dHxarNuX94=) 3: BA1752AE176B11EF9ADED980C4F9AE02.roa (hash: gNhMiv6IOJKkeLTLwPi9wU4oN+h+wv5IF758wi0C6FI=) 4: E518ECC6D52A11ED99D55E2EC4F9AE02.roa (hash: /8xSOlLPXmPawwC5JqVN/51Xoq+s+zm8+cCCkXo4uBE=) 5: FEEC2C90643811EB9D7F624EC4F9AE02.roa (hash: J1xLa8yTtXAlg7OlLT4nxVjtOt9A7iYZpXvZJDERl8o=) 6: 007CF9924F1111EFA7D2F345C4F9AE02.roa (hash: USwhKOtUAYw8MFn1BXt5pSc1VM2o2X7NQRCh9KM+x7o=) 7: 5B5CBC68751B11EB9065A822C4F9AE02.roa (hash: 5HlGKag658JvYwBq45MtXDAz/r3WmbZjF3WX8Bnxu6I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 20:42:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2231 (0x8b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF93A, serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260 Validity Not Before: Jun 14 20:42:48 2025 GMT Not After : Jun 21 20:42:48 2025 GMT Subject: CN=684ddec8-a25d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a3:0c:3e:54:6a:69:0e:3e:63:07:43:09:03: c0:8e:67:95:dc:fc:f3:a7:e3:f7:0e:db:c3:d1:2e: b0:1f:b7:70:51:04:63:0b:f8:59:af:08:61:8f:aa: 81:4e:ec:5e:ee:1c:e6:54:2a:ff:26:e0:85:6f:0d: fd:49:d7:8e:2d:aa:cb:cc:39:c1:08:da:87:00:a2: 9e:87:87:18:32:a1:cc:93:e9:2b:02:c1:27:4e:a7: a9:c1:27:19:ba:ee:61:56:62:49:92:ae:da:eb:33: 53:ef:95:61:7e:ac:e6:b3:19:7b:7b:81:f1:46:72: 07:5f:f2:46:19:55:22:dd:2a:5a:27:17:10:db:0c: 00:d7:97:00:47:99:26:1d:8f:8a:00:53:95:bb:4d: e4:63:1b:79:89:52:da:1f:87:0b:ae:5c:43:40:29: a2:68:cc:71:06:56:7e:5b:d9:14:41:87:44:be:41: e6:fd:a2:e4:f3:f1:01:8f:35:13:fa:2e:a0:29:12: 65:0f:76:97:18:6e:9c:4e:7c:09:98:cc:c3:b6:f5: e2:89:06:d1:f4:14:6f:a1:6f:c5:4f:32:f1:ea:4e: 08:b0:97:65:2a:fa:91:40:11:fb:f7:2c:5d:81:db: 07:3a:2b:59:7c:f6:db:66:a1:a8:3d:dc:b2:84:09: 1e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:8E:81:B1:DA:3E:18:92:14:57:46:77:62:FD:E9:38:35:13:13:28 X509v3 Authority Key Identifier: keyid:07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:b3:8a:2e:02:65:c6:8e:f0:e5:7c:d3:64:7e:e0:6b:d2:cf: 49:5e:df:de:e8:f5:6f:df:df:7e:11:02:5f:43:35:20:7c:9c: dc:60:b1:01:c3:f3:f0:a2:74:f3:f8:69:ba:fc:59:b6:1e:6f: 83:c4:ed:98:07:8b:c7:6b:83:2a:ee:87:0c:a5:c9:89:a1:a2: c1:a8:df:c5:28:8d:67:82:9d:fb:5a:1e:41:73:10:1c:b5:ee: ed:ba:9d:75:99:12:bc:0b:b3:c2:bf:71:f7:98:6c:e7:c7:85: 72:95:92:8c:87:06:67:40:1e:47:f2:85:2f:9f:1c:c9:a8:e0: 63:c7:e9:fc:ec:fb:0c:8b:f4:5f:d8:67:9e:80:a5:15:02:2f: 6a:66:27:4c:2f:ae:60:ea:ca:5e:b5:0d:be:1a:66:5e:3d:ae: 4a:72:b4:89:bc:71:ec:61:48:f8:70:d8:fa:fb:5c:ea:96:40: 1b:73:85:7d:7e:a4:be:1f:73:32:1a:4f:f1:11:ad:a2:df:e2: 9c:0c:dd:42:c7:d9:80:a1:19:58:87:dd:17:02:44:c6:63:06: ec:37:64:cf:a0:fe:0b:a6:96:3e:0a:55:b8:a4:92:4f:c1:77: 54:2a:1a:a5:21:77:0f:29:1b:fa:ce:4e:a0:d6:87:e5:bc:0d: 2c:4c:07:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY5M0ExMTAvBgNVBAUTKDA3QTFDMDg1NDVDQUNDNjVFMDg4MkQ0OUU5RjJGOENG RDJCRTgyNjAwHhcNMjUwNjE0MjA0MjQ4WhcNMjUwNjIxMjA0MjQ4WjAYMRYwFAYD VQQDEw02ODRkZGVjOC1hMjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA46MMPlRqaQ4+YwdDCQPAjmeV3Pzzp+P3DtvD0S6wH7dwUQRjC/hZrwhhj6qB Tuxe7hzmVCr/JuCFbw39SdeOLarLzDnBCNqHAKKeh4cYMqHMk+krAsEnTqepwScZ uu5hVmJJkq7a6zNT75Vhfqzmsxl7e4HxRnIHX/JGGVUi3SpaJxcQ2wwA15cAR5km HY+KAFOVu03kYxt5iVLaH4cLrlxDQCmiaMxxBlZ+W9kUQYdEvkHm/aLk8/EBjzUT +i6gKRJlD3aXGG6cTnwJmMzDtvXiiQbR9BRvoW/FTzLx6k4IsJdlKvqRQBH79yxd gdsHOitZfPbbZqGoPdyyhAkeAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCCOgbHa PhiSFFdGd2L96Tg1ExMoMB8GA1UdIwQYMBaAFAehwIVFysxl4IgtSeny+M/SvoJg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjkzQS9GRjUxRTU5RUU1 RjMxMUVBQjNBOTE1NjFDNEY5QUUwMi9CNkhBaFVYS3pHWGdpQzFKNmZMNHo5Sy1n bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I2SEFoVVhLekdYZ2lDMUo2Zkw0ejlLLWdtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjkzQS9GRjUxRTU5RUU1RjMxMUVBQjNBOTE1NjFDNEY5QUUwMi9CNkhBaFVYS3pH WGdpQzFKNmZMNHo5Sy1nbUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9s4ouAmXGjvDlfNNkfuBr0s9JXt/e6PVv399+EQJfQzUgfJzcYLEB w/PwonTz+Gm6/Fm2Hm+DxO2YB4vHa4Mq7ocMpcmJoaLBqN/FKI1ngp37Wh5BcxAc te7tup11mRK8C7PCv3H3mGznx4VylZKMhwZnQB5H8oUvnxzJqOBjx+n87PsMi/Rf 2GeegKUVAi9qZidML65g6spetQ2+GmZePa5KcrSJvHHsYUj4cNj6+1zqlkAbc4V9 fqS+H3MyGk/xEa2i3+KcDN1Cx9mAoRlYh90XAkTGYwbsN2TPoP4LppY+ClW4pJJP wXdUKhqlIXcPKRv6zk6g1oflvA0sTAeh -----END CERTIFICATE-----Generated at Mon Jun 16 14:59:18 2025 by rpki-client