$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/Vo0XkVJHPICaYuWF5a3JQoZr5lk.mft File: Vo0XkVJHPICaYuWF5a3JQoZr5lk.mft (raw, json) Hash identifier: 1CHwFcQkB5icikAQqDdbJL4GSiItY0riFW7tjJbs/hU= Subject key identifier: A9:E9:4E:07:84:0D:A8:BB:D2:C2:FE:AF:28:39:29:E2:6A:53:FD:26 Authority key identifier: 56:8D:17:91:52:47:3C:80:9A:62:E5:85:E5:AD:C9:42:86:6B:E6:59 Certificate issuer: /CN=A91E0D8B/serialNumber=568D179152473C809A62E585E5ADC942866BE659 Certificate serial: 06BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vo0XkVJHPICaYuWF5a3JQoZr5lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/Vo0XkVJHPICaYuWF5a3JQoZr5lk.mft Manifest number: 06B5 Signing time: Mon 16 Jun 2025 21:50:45 +0000 Manifest this update: Mon 16 Jun 2025 21:50:44 +0000 Manifest next update: Mon 23 Jun 2025 21:50:44 +0000 Files and hashes: 1: Vo0XkVJHPICaYuWF5a3JQoZr5lk.crl (hash: +KphGoPzf1gafLLlf2rzj7ijQBvO6j4E67iHk+t+O60=) 2: 146FD366653611EB99BE491DC4F9AE02.roa (hash: vDTtnYK0urRCnkWdVJaHunlHhYBCBiIEuZyHl4rL/x4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/Vo0XkVJHPICaYuWF5a3JQoZr5lk.crl rsync://rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/Vo0XkVJHPICaYuWF5a3JQoZr5lk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vo0XkVJHPICaYuWF5a3JQoZr5lk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 21:50:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1723 (0x6bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0D8B, serialNumber=568D179152473C809A62E585E5ADC942866BE659 Validity Not Before: Jun 16 21:50:44 2025 GMT Not After : Jun 23 21:50:44 2025 GMT Subject: CN=685091b5-35f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a9:2c:36:6f:3b:e9:a4:dc:94:66:0b:2d:31: d0:42:01:c0:e5:43:f7:6e:7b:75:b3:b1:7e:53:f8: e4:5a:c5:8e:a8:b7:b2:77:bf:14:db:15:b0:c5:93: a4:4a:30:e0:00:4f:8c:ea:92:55:40:28:c3:91:d8: 08:c2:bc:a0:8e:15:68:81:44:87:e7:01:d4:18:3b: 6a:a4:ae:a8:58:dc:cd:12:f2:73:a0:80:e4:66:f0: 75:b8:85:0c:78:2b:8d:03:fd:02:e1:9c:ff:59:75: 39:f1:78:1a:6a:39:e2:b3:0e:8a:93:81:26:6b:b7: d3:9c:78:89:d8:ee:d5:5f:52:44:c5:ac:b8:4f:09: 3d:bc:10:61:94:f0:67:6c:31:67:e9:ae:a5:cb:28: 09:df:2b:e2:ea:d1:2d:38:7f:46:dd:c2:89:ce:7e: dd:07:0c:f0:2e:1f:ae:bb:4d:58:a8:74:bf:e4:2f: 75:67:b6:bd:19:a5:72:35:5a:ef:12:b5:6f:60:2a: 72:09:d3:d6:f6:09:36:c5:05:88:d3:c7:55:be:7b: 84:67:0e:b8:3c:c7:15:43:33:d4:6a:9e:b2:4c:17: b1:7d:5c:9e:df:a7:76:4a:09:f3:89:a9:40:90:21: 3e:73:29:c7:cc:3c:62:70:26:84:a1:a8:f0:00:5c: fb:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:E9:4E:07:84:0D:A8:BB:D2:C2:FE:AF:28:39:29:E2:6A:53:FD:26 X509v3 Authority Key Identifier: keyid:56:8D:17:91:52:47:3C:80:9A:62:E5:85:E5:AD:C9:42:86:6B:E6:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/Vo0XkVJHPICaYuWF5a3JQoZr5lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vo0XkVJHPICaYuWF5a3JQoZr5lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/Vo0XkVJHPICaYuWF5a3JQoZr5lk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:12:ab:73:fe:79:96:e7:f7:a0:6e:77:bc:f1:c5:54:14:f4: 6b:68:51:7e:30:98:95:06:dd:34:25:03:c7:34:e9:0c:2a:82: bd:be:7a:96:65:1e:43:77:15:e3:f6:e8:c4:07:65:e3:ff:1b: bb:5d:16:73:43:ed:da:ff:17:0e:48:b9:1a:e2:88:d2:46:d2: 74:8b:24:5c:19:77:ba:0d:a5:20:e7:41:d5:72:28:2b:16:f0: 45:bb:0c:e4:b6:eb:d2:60:27:1b:ac:ba:f9:94:f2:4d:f6:a9: 34:3f:7f:1c:87:84:f6:44:ce:7e:c9:53:47:51:80:c8:c5:a2: 79:ac:e9:89:18:8c:c0:06:73:19:d8:64:bd:b7:3f:06:fc:fa: 97:1e:27:73:26:8c:b4:52:09:4c:28:35:1a:bc:96:04:3f:d9: fe:e5:f9:06:43:68:3d:d9:3e:f4:8b:4e:2c:74:b8:f3:88:51: ac:2e:b7:c4:4e:bf:ab:2e:9f:f0:23:21:87:b4:a7:1e:b8:23: 22:1f:3c:de:ea:57:05:3e:98:d3:17:4c:48:25:e4:c7:fb:78: c8:d1:73:f6:11:28:d5:4d:a8:52:2c:d2:31:df:df:e1:6f:51: 24:ad:6b:c1:71:b3:d0:ff:57:10:50:50:fa:ad:46:98:9f:61: 85:bc:35:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBEOEIxMTAvBgNVBAUTKDU2OEQxNzkxNTI0NzNDODA5QTYyRTU4NUU1QURDOTQy ODY2QkU2NTkwHhcNMjUwNjE2MjE1MDQ0WhcNMjUwNjIzMjE1MDQ0WjAYMRYwFAYD VQQDEw02ODUwOTFiNS0zNWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuaksNm876aTclGYLLTHQQgHA5UP3bnt1s7F+U/jkWsWOqLeyd78U2xWwxZOk SjDgAE+M6pJVQCjDkdgIwrygjhVogUSH5wHUGDtqpK6oWNzNEvJzoIDkZvB1uIUM eCuNA/0C4Zz/WXU58Xgaajnisw6Kk4Ema7fTnHiJ2O7VX1JExay4Twk9vBBhlPBn bDFn6a6lyygJ3yvi6tEtOH9G3cKJzn7dBwzwLh+uu01YqHS/5C91Z7a9GaVyNVrv ErVvYCpyCdPW9gk2xQWI08dVvnuEZw64PMcVQzPUap6yTBexfVye36d2SgnzialA kCE+cynHzDxicCaEoajwAFz7TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKnpTgeE Dai70sL+ryg5KeJqU/0mMB8GA1UdIwQYMBaAFFaNF5FSRzyAmmLlheWtyUKGa+ZZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEQ4Qi80QTZENkMwQTY1 MzQxMUVCQjZCOEYwMTlDNEY5QUUwMi9WbzBYa1ZKSFBJQ2FZdVdGNWEzSlFvWnI1 bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZvMFhrVkpIUElDYVl1V0Y1YTNKUW9acjVsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEQ4Qi80QTZENkMwQTY1MzQxMUVCQjZCOEYwMTlDNEY5QUUwMi9WbzBYa1ZKSFBJ Q2FZdVdGNWEzSlFvWnI1bGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSEqtz/nmW5/egbne88cVUFPRraFF+MJiVBt00JQPHNOkMKoK9vnqW ZR5DdxXj9ujEB2Xj/xu7XRZzQ+3a/xcOSLka4ojSRtJ0iyRcGXe6DaUg50HVcigr FvBFuwzktuvSYCcbrLr5lPJN9qk0P38ch4T2RM5+yVNHUYDIxaJ5rOmJGIzABnMZ 2GS9tz8G/PqXHidzJoy0UglMKDUavJYEP9n+5fkGQ2g92T70i04sdLjziFGsLrfE Tr+rLp/wIyGHtKceuCMiHzze6lcFPpjTF0xIJeTH+3jI0XP2ESjVTahSLNIx39/h b1EkrWvBcbPQ/1cQUFD6rUaYn2GFvDXs -----END CERTIFICATE-----Generated at Tue Jun 17 12:27:23 2025 by rpki-client