$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7FB1/AAD69040543811ED938C6628C4F9AE02/6Mzcv70o1xGQ6JN_PapZWP1IFUE.mft File: 6Mzcv70o1xGQ6JN_PapZWP1IFUE.mft (raw, json) Hash identifier: S/bng98qxrMe22+bzK8zadn9mKYntlIqRB9QkHUvJz0= Subject key identifier: 50:06:18:80:E4:2A:AB:F4:3F:A2:20:07:59:26:A1:B2:4C:C5:D8:7D Authority key identifier: E8:CC:DC:BF:BD:28:D7:11:90:E8:93:7F:3D:AA:59:58:FD:48:15:41 Certificate issuer: /CN=A91E7FB1/serialNumber=E8CCDCBFBD28D71190E8937F3DAA5958FD481541 Certificate serial: 01F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Mzcv70o1xGQ6JN_PapZWP1IFUE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7FB1/AAD69040543811ED938C6628C4F9AE02/6Mzcv70o1xGQ6JN_PapZWP1IFUE.mft Manifest number: 01EE Signing time: Fri 13 Jun 2025 01:37:48 +0000 Manifest this update: Fri 13 Jun 2025 01:37:47 +0000 Manifest next update: Fri 20 Jun 2025 01:37:47 +0000 Files and hashes: 1: 6Mzcv70o1xGQ6JN_PapZWP1IFUE.crl (hash: wcp0bz8OrvhTITbFCCtXc07tyA2vrmHOoysZ1a6nMfY=) 2: FE79EA9A543C11ED972CDD2FC4F9AE02.roa (hash: TXPIWerNT1GXv7TyCQJNbBBoD6VtScjOMdZFAdd3h8A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7FB1/AAD69040543811ED938C6628C4F9AE02/6Mzcv70o1xGQ6JN_PapZWP1IFUE.crl rsync://rpki.apnic.net/member_repository/A91E7FB1/AAD69040543811ED938C6628C4F9AE02/6Mzcv70o1xGQ6JN_PapZWP1IFUE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Mzcv70o1xGQ6JN_PapZWP1IFUE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 01:37:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 499 (0x1f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7FB1, serialNumber=E8CCDCBFBD28D71190E8937F3DAA5958FD481541 Validity Not Before: Jun 13 01:37:47 2025 GMT Not After : Jun 20 01:37:47 2025 GMT Subject: CN=684b80ec-29f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f8:b3:c8:c3:da:68:32:f1:1a:7b:78:90:0c: 5a:2e:6c:e6:b0:68:bc:c1:11:8d:e2:f7:04:5a:ca: 5f:25:02:a1:8c:be:66:1e:57:5b:ca:d3:82:75:ef: ee:35:16:2e:f2:8f:02:7d:2c:49:d3:49:68:62:19: 51:09:9c:2a:a8:70:67:dc:70:67:97:12:c0:ba:84: d0:11:6a:46:8b:15:ce:73:38:9d:4f:5f:c3:d8:31: 01:88:f6:44:7e:7f:cc:5a:87:80:84:b1:21:5b:aa: 3c:3a:09:9a:de:b9:40:08:75:bd:04:73:90:54:0e: 8c:d9:85:de:74:b0:bc:86:f8:c5:ac:47:b7:28:d2: 2b:a3:2e:70:a9:25:09:60:1f:0c:b2:6b:d8:7e:b9: f8:73:13:9a:e8:b5:a8:04:72:c1:e2:d4:7c:5c:d5: b1:76:07:38:ac:5f:ea:c1:4e:b8:a6:e1:23:ac:e6: c9:b0:e1:45:63:ce:d3:d8:00:f8:c3:23:83:f1:7c: 86:2f:9d:42:44:ed:21:a9:86:33:d6:fa:8d:45:58: 95:29:fd:21:e4:58:ee:72:e9:3e:b3:c5:4e:39:14: 83:42:f3:3b:a2:2c:70:c4:56:ed:0f:71:1e:33:9b: b5:41:78:ab:9b:d3:d1:ab:41:c1:67:1d:e0:c0:eb: e7:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:06:18:80:E4:2A:AB:F4:3F:A2:20:07:59:26:A1:B2:4C:C5:D8:7D X509v3 Authority Key Identifier: keyid:E8:CC:DC:BF:BD:28:D7:11:90:E8:93:7F:3D:AA:59:58:FD:48:15:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7FB1/AAD69040543811ED938C6628C4F9AE02/6Mzcv70o1xGQ6JN_PapZWP1IFUE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Mzcv70o1xGQ6JN_PapZWP1IFUE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7FB1/AAD69040543811ED938C6628C4F9AE02/6Mzcv70o1xGQ6JN_PapZWP1IFUE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:be:b6:0e:b9:6f:6b:5e:c1:81:3b:ec:10:ef:cb:3c:3e:b1: 39:3d:f7:28:1a:b3:22:f1:68:d0:9e:47:d0:cc:2c:1c:54:09: dc:f6:a0:1c:3d:21:88:1a:a3:2a:61:0c:8f:2c:b7:90:02:aa: 3c:3a:65:89:4f:34:70:d9:36:63:d7:88:0a:be:f6:fe:4b:ad: b6:22:c1:b3:75:07:d6:c4:51:36:1e:f2:52:b5:ee:4e:87:84: 5b:ed:15:d8:eb:70:9a:7b:21:ff:dd:cb:ab:9b:67:46:c1:f0: 0b:2a:43:90:5d:1c:9d:cd:1e:11:bd:d8:56:3a:e1:7a:e9:ec: 05:d7:97:c5:5a:59:f7:64:9d:47:23:48:26:45:19:a1:ed:68: 48:55:fd:a1:2f:4a:cd:14:f2:bd:ec:5c:98:6c:c6:80:9b:9b: 72:f2:1d:55:7e:4b:c5:25:55:7c:e6:81:02:40:26:00:2e:41: 72:f2:5b:7d:d5:25:63:7c:2f:1e:83:2d:8b:3c:9f:db:6f:f7: f5:d6:92:f7:0e:cb:5c:93:4d:f5:49:c0:f1:88:9f:e0:a1:0d: 7c:cd:9d:74:fe:76:b6:09:d2:99:1c:58:32:8b:35:af:51:ac: 0d:41:0a:33:b4:58:7e:29:dc:8c:86:d5:27:4c:6f:29:aa:1c: a6:d7:3b:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdGQjExMTAvBgNVBAUTKEU4Q0NEQ0JGQkQyOEQ3MTE5MEU4OTM3RjNEQUE1OTU4 RkQ0ODE1NDEwHhcNMjUwNjEzMDEzNzQ3WhcNMjUwNjIwMDEzNzQ3WjAYMRYwFAYD VQQDEw02ODRiODBlYy0yOWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApfizyMPaaDLxGnt4kAxaLmzmsGi8wRGN4vcEWspfJQKhjL5mHldbytOCde/u NRYu8o8CfSxJ00loYhlRCZwqqHBn3HBnlxLAuoTQEWpGixXOczidT1/D2DEBiPZE fn/MWoeAhLEhW6o8Ogma3rlACHW9BHOQVA6M2YXedLC8hvjFrEe3KNIroy5wqSUJ YB8MsmvYfrn4cxOa6LWoBHLB4tR8XNWxdgc4rF/qwU64puEjrObJsOFFY87T2AD4 wyOD8XyGL51CRO0hqYYz1vqNRViVKf0h5Fjucuk+s8VOORSDQvM7oixwxFbtD3Ee M5u1QXirm9PRq0HBZx3gwOvnfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFAGGIDk Kqv0P6IgB1kmobJMxdh9MB8GA1UdIwQYMBaAFOjM3L+9KNcRkOiTfz2qWVj9SBVB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0ZCMS9BQUQ2OTA0MDU0 MzgxMUVEOTM4QzY2MjhDNEY5QUUwMi82TXpjdjcwbzF4R1E2Sk5fUGFwWldQMUlG VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZNemN2NzBvMXhHUTZKTl9QYXBaV1AxSUZVRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0ZCMS9BQUQ2OTA0MDU0MzgxMUVEOTM4QzY2MjhDNEY5QUUwMi82TXpjdjcwbzF4 R1E2Sk5fUGFwWldQMUlGVUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkvrYOuW9rXsGBO+wQ78s8PrE5PfcoGrMi8WjQnkfQzCwcVAnc9qAc PSGIGqMqYQyPLLeQAqo8OmWJTzRw2TZj14gKvvb+S622IsGzdQfWxFE2HvJSte5O h4Rb7RXY63CaeyH/3curm2dGwfALKkOQXRydzR4RvdhWOuF66ewF15fFWln3ZJ1H I0gmRRmh7WhIVf2hL0rNFPK97FyYbMaAm5ty8h1VfkvFJVV85oECQCYALkFy8lt9 1SVjfC8egy2LPJ/bb/f11pL3Dstck031ScDxiJ/goQ18zZ10/na2CdKZHFgyizWv UawNQQoztFh+KdyMhtUnTG8pqhym1zuD -----END CERTIFICATE-----Generated at Sat Jun 14 19:08:08 2025 by rpki-client