$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft File: r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft (raw, json) Hash identifier: TJY8AvM9jaB2fyJxodWTb905CUihObHYNgk8kvluzxg= Subject key identifier: 49:3D:E1:75:B9:95:44:6A:55:AA:2C:9E:5F:CA:26:AC:73:EC:59:DC Authority key identifier: AF:A6:D7:BD:C3:7B:64:C8:F1:46:EE:A6:17:36:D3:D4:51:78:FB:37 Certificate issuer: /CN=A91E8CB0/serialNumber=AFA6D7BDC37B64C8F146EEA61736D3D45178FB37 Certificate serial: 01E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft Manifest number: 01E3 Signing time: Tue 17 Jun 2025 01:49:47 +0000 Manifest this update: Tue 17 Jun 2025 01:49:47 +0000 Manifest next update: Tue 24 Jun 2025 01:49:47 +0000 Files and hashes: 1: r6bXvcN7ZMjxRu6mFzbT1FF4-zc.crl (hash: GJL6ELdKeo+2nv5bcdcDHquNeUDwRCx+K3ANd+bRbhk=) 2: F11BA4EA75B811EDA34F9687C4F9AE02.roa (hash: ZxJWdKT+dhhJyfungVSpx3334JD5sGMO+S5A+zHFl74=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.crl rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 01:49:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 488 (0x1e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8CB0, serialNumber=AFA6D7BDC37B64C8F146EEA61736D3D45178FB37 Validity Not Before: Jun 17 01:49:47 2025 GMT Not After : Jun 24 01:49:47 2025 GMT Subject: CN=6850c9bb-4dce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f9:9b:ab:e4:af:03:01:c9:b3:d2:88:89:e9: 79:ad:4c:8c:2b:5a:31:c3:b0:db:86:8e:f7:9e:3f: 87:f5:96:f5:31:f8:e6:77:ad:7c:47:5b:bc:c3:41: 0f:b2:9e:fc:0a:f5:a4:0a:00:ca:1f:7f:62:59:d7: aa:0d:3e:e1:b9:42:88:bf:8d:3d:f6:3f:c9:1d:93: cf:a1:81:8a:1c:6b:b4:6f:98:a3:f6:21:1d:a6:7e: 0b:cd:c4:78:90:99:ed:1f:e5:2e:46:ae:59:c8:68: 58:ec:cc:24:d5:8c:52:1f:e1:79:0f:7f:1a:40:d4: 47:84:9d:78:ac:31:05:fb:46:d0:86:54:57:40:60: 9f:88:fd:5a:d1:00:ed:9f:29:68:cb:e8:d0:f2:77: 28:c2:90:b7:1b:b3:2f:58:a2:57:18:8b:94:e2:09: bc:ef:b6:d3:2b:ec:02:ef:67:ce:61:8a:2e:f0:dd: 9c:5b:5d:83:6a:a0:b3:e4:7a:25:16:68:37:ff:1f: ee:e9:59:3e:6d:8c:a4:04:b7:b4:77:9b:ab:05:f7: 86:75:66:c7:b4:69:f6:a2:82:6a:52:ee:ec:55:4b: 94:d2:26:89:7f:65:2b:47:90:52:6a:54:ca:ab:0d: bd:a0:fe:c1:37:e3:44:fb:4b:3c:e9:19:80:bd:a1: ba:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:3D:E1:75:B9:95:44:6A:55:AA:2C:9E:5F:CA:26:AC:73:EC:59:DC X509v3 Authority Key Identifier: keyid:AF:A6:D7:BD:C3:7B:64:C8:F1:46:EE:A6:17:36:D3:D4:51:78:FB:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:01:06:7f:18:5a:3a:71:30:e4:17:d1:88:4c:e6:09:65:cd: e3:73:72:be:85:61:80:17:45:02:25:b0:56:44:5a:00:90:7f: fa:f4:48:b0:20:38:4f:42:b8:f9:19:4a:aa:50:be:5b:62:35: 96:51:87:40:a2:47:82:cf:22:31:e6:79:32:c9:82:33:44:4f: c1:e5:94:58:03:1a:00:ba:ea:fd:0e:e6:83:63:79:b6:9c:b7: 0c:f2:8b:c6:b9:e9:a6:f1:d3:03:41:0c:3d:ae:29:5e:40:8c: c9:4a:2a:c1:f8:c1:e6:04:8a:c2:9e:da:7d:0b:ad:2e:58:da: ee:2e:dd:b5:bd:4b:7b:dd:c4:ef:0b:06:f2:9d:cc:37:5e:c2: 7d:7e:a8:4b:f0:0b:c9:d7:aa:ac:01:20:ee:b6:6f:38:3d:43: 4c:e4:86:43:9d:aa:93:11:b4:64:cd:83:a7:dd:c0:f5:b3:ed: 98:dc:df:3f:f9:9d:79:16:db:98:fb:85:43:e9:18:0d:b1:cb: e4:21:6d:16:65:42:90:18:69:17:f0:66:3f:ff:dd:ff:9c:2b: 84:31:73:9f:04:2c:4b:ba:ea:94:0d:31:b0:64:97:0a:b9:0f: 07:93:5e:de:36:96:7e:72:fb:77:26:5f:de:af:59:30:a6:b3: 99:a1:82:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThDQjAxMTAvBgNVBAUTKEFGQTZEN0JEQzM3QjY0QzhGMTQ2RUVBNjE3MzZEM0Q0 NTE3OEZCMzcwHhcNMjUwNjE3MDE0OTQ3WhcNMjUwNjI0MDE0OTQ3WjAYMRYwFAYD VQQDEw02ODUwYzliYi00ZGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsPmbq+SvAwHJs9KIiel5rUyMK1oxw7Dbho73nj+H9Zb1Mfjmd618R1u8w0EP sp78CvWkCgDKH39iWdeqDT7huUKIv4099j/JHZPPoYGKHGu0b5ij9iEdpn4LzcR4 kJntH+UuRq5ZyGhY7Mwk1YxSH+F5D38aQNRHhJ14rDEF+0bQhlRXQGCfiP1a0QDt nyloy+jQ8ncowpC3G7MvWKJXGIuU4gm877bTK+wC72fOYYou8N2cW12DaqCz5Hol Fmg3/x/u6Vk+bYykBLe0d5urBfeGdWbHtGn2ooJqUu7sVUuU0iaJf2UrR5BSalTK qw29oP7BN+NE+0s86RmAvaG6FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEk94XW5 lURqVaosnl/KJqxz7FncMB8GA1UdIwQYMBaAFK+m173De2TI8Ubuphc209RRePs3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOENCMC8zNzcwMTI0RTZC QzUxMUVEODY2QTdENUVDNEY5QUUwMi9yNmJYdmNON1pNanhSdTZtRnpiVDFGRjQt emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I2Ylh2Y043Wk1qeFJ1Nm1GemJUMUZGNC16Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OENCMC8zNzcwMTI0RTZCQzUxMUVEODY2QTdENUVDNEY5QUUwMi9yNmJYdmNON1pN anhSdTZtRnpiVDFGRjQtemMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMAQZ/GFo6cTDkF9GITOYJZc3jc3K+hWGAF0UCJbBWRFoAkH/69Eiw IDhPQrj5GUqqUL5bYjWWUYdAokeCzyIx5nkyyYIzRE/B5ZRYAxoAuur9DuaDY3m2 nLcM8ovGuemm8dMDQQw9rileQIzJSirB+MHmBIrCntp9C60uWNruLt21vUt73cTv Cwbyncw3XsJ9fqhL8AvJ16qsASDutm84PUNM5IZDnaqTEbRkzYOn3cD1s+2Y3N8/ +Z15FtuY+4VD6RgNscvkIW0WZUKQGGkX8GY//93/nCuEMXOfBCxLuuqUDTGwZJcK uQ8Hk17eNpZ+cvt3Jl/er1kwprOZoYKt -----END CERTIFICATE-----Generated at Wed Jun 18 06:33:26 2025 by rpki-client