$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft File: 6HFyjDosJtDmCABLp9Hlo1gwlWw.mft (raw, json) Hash identifier: byY370NMNUHkf0p4Z/JnnImEReifrfct1U70YKHTb8o= Subject key identifier: 5E:28:30:CD:5D:B0:9B:A8:A4:93:7D:C5:04:FE:EF:F8:9A:03:9C:2B Authority key identifier: E8:71:72:8C:3A:2C:26:D0:E6:08:00:4B:A7:D1:E5:A3:58:30:95:6C Certificate issuer: /CN=A91E6EFE/serialNumber=E871728C3A2C26D0E608004BA7D1E5A35830956C Certificate serial: 01E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HFyjDosJtDmCABLp9Hlo1gwlWw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft Manifest number: 01E2 Signing time: Sun 15 Jun 2025 01:59:00 +0000 Manifest this update: Sun 15 Jun 2025 01:58:59 +0000 Manifest next update: Sun 22 Jun 2025 01:58:59 +0000 Files and hashes: 1: 6HFyjDosJtDmCABLp9Hlo1gwlWw.crl (hash: /QqTNt2ce89tjFO+uoYUbR+5NS0aeDY7+D41AIiCHCE=) 2: 8367C13A6CA411ED9DD6425CC4F9AE02.roa (hash: qStgTKoKUIh+qGv4WydL84alI8T6N4vvNinWDR/WOZo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.crl rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HFyjDosJtDmCABLp9Hlo1gwlWw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 01:58:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 487 (0x1e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6EFE, serialNumber=E871728C3A2C26D0E608004BA7D1E5A35830956C Validity Not Before: Jun 15 01:58:59 2025 GMT Not After : Jun 22 01:58:59 2025 GMT Subject: CN=684e28e3-0dd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:4f:52:15:c5:3e:cc:a3:1d:de:2a:94:a8:b2: bf:9b:21:aa:3e:7a:67:6b:6f:fa:cc:44:c0:f1:dd: 47:71:ad:57:b9:4d:f7:85:e6:87:b9:5e:71:3a:23: 73:9c:e0:39:64:80:6d:f8:11:1c:d8:b9:97:74:4f: b5:5b:30:6c:31:ad:90:3f:e5:51:04:95:c3:ff:ac: e3:09:19:e6:71:fe:a4:8e:ef:00:13:69:59:f6:ce: 40:fb:dd:e0:3d:d7:45:06:d5:96:5e:e8:0c:05:a0: b8:f0:91:d6:d7:77:34:c2:29:80:27:48:b9:3d:f2: 1f:28:b6:eb:9f:a2:cf:d4:b4:2c:d6:b9:b8:98:85: da:de:13:67:f6:7e:c1:a5:8a:2d:14:0a:24:72:dd: a9:c7:e5:8c:f0:60:3b:1d:d1:80:b8:b9:6d:9e:25: 3a:2a:7d:cb:bf:c3:69:72:50:47:32:a9:a1:a7:d8: 91:1a:cc:d9:e9:53:58:57:71:e7:24:55:50:4d:64: be:a8:78:89:0b:1e:bd:66:14:93:4d:c2:53:d3:76: c4:a0:a7:32:72:b3:b1:55:e1:e2:97:e3:d6:40:60: ad:3c:f4:42:7d:b6:de:60:c0:d4:ba:5a:8a:b5:79: 74:59:02:88:f2:93:5c:cc:89:71:f1:41:a7:fa:e3: 3b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:28:30:CD:5D:B0:9B:A8:A4:93:7D:C5:04:FE:EF:F8:9A:03:9C:2B X509v3 Authority Key Identifier: keyid:E8:71:72:8C:3A:2C:26:D0:E6:08:00:4B:A7:D1:E5:A3:58:30:95:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HFyjDosJtDmCABLp9Hlo1gwlWw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:9b:f2:42:70:d8:da:b0:17:7f:ba:1f:be:81:50:18:3d:6b: 0b:c8:55:da:f2:30:2f:bd:ff:50:ab:52:2f:b1:7e:da:60:77: 54:54:5e:5a:6e:d0:e7:48:25:d2:cd:d3:ab:a0:58:39:b8:8b: 31:0c:66:89:03:4c:cb:c5:18:75:49:51:cd:c9:2f:62:34:b0: 64:da:70:4c:15:8e:6f:6b:0f:a3:cf:8d:aa:a0:08:73:8e:03: e8:77:00:cd:41:0e:83:a9:bd:93:7c:10:e5:96:f7:c6:b8:a9: cc:d6:c4:9c:cd:12:6e:59:63:99:ba:11:2f:8f:2b:fa:1c:dd: 52:e7:81:38:9f:c7:62:c0:8c:58:bc:4d:48:ed:e4:61:d8:8f: 52:fd:a5:fb:f1:6b:9d:e3:5c:21:50:a9:11:c7:7e:35:04:af: 1b:37:c9:f5:1d:74:22:11:83:fc:4d:55:15:c9:9e:00:c3:b2: db:0d:2e:6a:9a:c7:23:00:6f:db:21:41:ff:f7:3e:c9:a8:99: 53:3a:fa:a0:28:b6:fd:dc:b0:ac:c6:e6:49:85:95:a7:00:99: 57:c0:a8:81:bf:92:8b:af:5b:fa:82:fd:4b:4f:dd:74:9d:b2: 94:7c:75:d8:c6:7a:45:7e:93:9f:5a:87:c5:b6:fb:e1:d2:8d: 8d:f1:b6:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZFRkUxMTAvBgNVBAUTKEU4NzE3MjhDM0EyQzI2RDBFNjA4MDA0QkE3RDFFNUEz NTgzMDk1NkMwHhcNMjUwNjE1MDE1ODU5WhcNMjUwNjIyMDE1ODU5WjAYMRYwFAYD VQQDEw02ODRlMjhlMy0wZGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1U9SFcU+zKMd3iqUqLK/myGqPnpna2/6zETA8d1Hca1XuU33heaHuV5xOiNz nOA5ZIBt+BEc2LmXdE+1WzBsMa2QP+VRBJXD/6zjCRnmcf6kju8AE2lZ9s5A+93g PddFBtWWXugMBaC48JHW13c0wimAJ0i5PfIfKLbrn6LP1LQs1rm4mIXa3hNn9n7B pYotFAokct2px+WM8GA7HdGAuLltniU6Kn3Lv8NpclBHMqmhp9iRGszZ6VNYV3Hn JFVQTWS+qHiJCx69ZhSTTcJT03bEoKcycrOxVeHil+PWQGCtPPRCfbbeYMDUulqK tXl0WQKI8pNczIlx8UGn+uM75wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF4oMM1d sJuopJN9xQT+7/iaA5wrMB8GA1UdIwQYMBaAFOhxcow6LCbQ5ggAS6fR5aNYMJVs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkVGRS9FNEMwMEQzQzZD QTExMUVEQjQ0RTc2NUJDNEY5QUUwMi82SEZ5akRvc0p0RG1DQUJMcDlIbG8xZ3ds V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZIRnlqRG9zSnREbUNBQkxwOUhsbzFnd2xXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkVGRS9FNEMwMEQzQzZDQTExMUVEQjQ0RTc2NUJDNEY5QUUwMi82SEZ5akRvc0p0 RG1DQUJMcDlIbG8xZ3dsV3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8m/JCcNjasBd/uh++gVAYPWsLyFXa8jAvvf9Qq1IvsX7aYHdUVF5a btDnSCXSzdOroFg5uIsxDGaJA0zLxRh1SVHNyS9iNLBk2nBMFY5vaw+jz42qoAhz jgPodwDNQQ6Dqb2TfBDllvfGuKnM1sSczRJuWWOZuhEvjyv6HN1S54E4n8diwIxY vE1I7eRh2I9S/aX78Wud41whUKkRx341BK8bN8n1HXQiEYP8TVUVyZ4Aw7LbDS5q mscjAG/bIUH/9z7JqJlTOvqgKLb93LCsxuZJhZWnAJlXwKiBv5KLr1v6gv1LT910 nbKUfHXYxnpFfpOfWofFtvvh0o2N8bae -----END CERTIFICATE-----Generated at Sun Jun 15 09:30:47 2025 by rpki-client