$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.mft File: 6o2GS70rsdeM2IkKFQThETZ_ehM.mft (raw, json) Hash identifier: TjcGKG29J8fKenxQxw5t70QXK6ZNu4QY+MJiYW4Ns0o= Subject key identifier: DF:A8:20:3C:A4:04:64:D9:0D:9F:EB:3C:61:C3:C9:4F:E7:3A:28:E1 Authority key identifier: EA:8D:86:4B:BD:2B:B1:D7:8C:D8:89:0A:15:04:E1:11:36:7F:7A:13 Certificate issuer: /CN=A91F6E65/serialNumber=EA8D864BBD2BB1D78CD8890A1504E111367F7A13 Certificate serial: 1248 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6o2GS70rsdeM2IkKFQThETZ_ehM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.mft Manifest number: 1241 Signing time: Sat 14 Jun 2025 17:04:18 +0000 Manifest this update: Sat 14 Jun 2025 17:04:17 +0000 Manifest next update: Sat 21 Jun 2025 17:04:17 +0000 Files and hashes: 1: 6o2GS70rsdeM2IkKFQThETZ_ehM.crl (hash: 4qUICyxn5IIR0BQpmJfcstWxEmGCQEFJh+uK/3ZMnkQ=) 2: F87DE4E2518011E98D519C48C4F9AE02.roa (hash: lNg/c5OqFouAW+fJH2dEOVDXDmJq4ytAeqadsiAMyGA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.crl rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6o2GS70rsdeM2IkKFQThETZ_ehM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:04:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4680 (0x1248) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6E65, serialNumber=EA8D864BBD2BB1D78CD8890A1504E111367F7A13 Validity Not Before: Jun 14 17:04:17 2025 GMT Not After : Jun 21 17:04:17 2025 GMT Subject: CN=684dab92-642f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:bc:6d:28:de:26:f4:44:01:81:92:9a:fd:08: ae:2d:93:ba:9b:09:96:06:8c:a4:e3:25:40:0d:d3: f6:49:72:94:d9:63:6a:8c:b9:bf:48:4f:64:0e:3d: 6a:89:b1:ca:cc:2b:05:20:71:9f:86:0f:39:17:a2: ad:0e:b9:37:12:aa:cf:38:68:2b:45:39:cd:e4:30: 18:d7:9a:c5:e2:6e:10:2a:10:16:58:63:53:cb:bf: 37:9b:ea:b9:4d:b5:4e:27:1d:2a:8c:e0:e4:c7:98: bd:aa:6e:b1:ce:a2:80:17:9d:92:d6:7b:56:30:a0: 82:5c:1a:7b:4d:6d:99:99:43:a9:5c:34:24:ac:4d: 60:5f:f3:f3:31:af:a9:7a:48:08:47:e7:2c:e1:90: 29:46:e2:ea:2c:6b:f8:e7:38:43:be:28:ee:47:e6: e8:72:44:9d:d8:5d:09:59:5e:c4:44:ae:46:c4:05: f4:ea:5f:fc:a1:85:cb:53:c8:dd:10:42:67:da:a5: 8d:57:71:2f:b0:d7:b1:82:b9:02:9e:31:4d:cc:d5: 31:c3:d6:b3:0d:f3:01:01:82:1c:35:12:f1:fb:4b: 03:55:66:91:c9:53:1e:29:5a:4f:32:7d:71:71:fc: 1a:fa:6b:9e:a6:9c:3a:35:69:52:ff:64:87:c7:d7: 11:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:A8:20:3C:A4:04:64:D9:0D:9F:EB:3C:61:C3:C9:4F:E7:3A:28:E1 X509v3 Authority Key Identifier: keyid:EA:8D:86:4B:BD:2B:B1:D7:8C:D8:89:0A:15:04:E1:11:36:7F:7A:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6o2GS70rsdeM2IkKFQThETZ_ehM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:3f:e4:1d:04:47:5c:46:11:05:81:d0:46:c5:4b:28:30:12: 2c:91:c4:73:1c:72:27:c5:05:b3:17:97:6e:00:46:da:0b:1a: 9f:41:d8:bd:1f:0c:d2:d3:4e:08:f5:e5:3d:f2:e6:e9:f4:87: 21:0a:f5:77:92:04:ba:70:be:89:78:c8:63:cb:b0:ce:13:1d: cf:bc:8d:f3:66:e5:ac:0f:f7:86:e5:d4:e6:51:72:ab:17:a1: 05:41:13:07:87:42:39:20:ee:1a:94:a0:50:99:0f:fc:e0:5b: 63:cd:e4:e5:a3:bf:7f:e3:62:41:08:e1:15:c1:84:b4:86:5a: 18:ac:fb:d7:19:f7:3b:4a:63:f3:c5:b4:5a:cf:42:ab:b1:c8: 82:8a:13:24:6f:6a:1e:fd:58:33:36:5d:ff:cb:94:66:d5:69: 38:04:9c:4c:04:51:58:42:51:34:bf:c4:37:e6:b4:8e:1f:0b: 15:bd:71:65:b4:6e:35:51:bf:00:c3:f5:40:1c:b0:8e:af:6c: f3:26:df:13:76:65:a2:6a:f9:09:bb:9e:da:9c:cd:7f:80:68: a6:92:a2:6d:b0:cf:1d:fb:1b:b6:53:de:74:81:8c:f5:68:6f: c5:ec:c4:ff:10:eb:e1:8f:3c:9f:90:a1:91:ab:a5:c1:94:d0: 7a:f8:76:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZFNjUxMTAvBgNVBAUTKEVBOEQ4NjRCQkQyQkIxRDc4Q0Q4ODkwQTE1MDRFMTEx MzY3RjdBMTMwHhcNMjUwNjE0MTcwNDE3WhcNMjUwNjIxMTcwNDE3WjAYMRYwFAYD VQQDEw02ODRkYWI5Mi02NDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzrxtKN4m9EQBgZKa/QiuLZO6mwmWBoyk4yVADdP2SXKU2WNqjLm/SE9kDj1q ibHKzCsFIHGfhg85F6KtDrk3EqrPOGgrRTnN5DAY15rF4m4QKhAWWGNTy783m+q5 TbVOJx0qjODkx5i9qm6xzqKAF52S1ntWMKCCXBp7TW2ZmUOpXDQkrE1gX/PzMa+p ekgIR+cs4ZApRuLqLGv45zhDvijuR+bockSd2F0JWV7ERK5GxAX06l/8oYXLU8jd EEJn2qWNV3EvsNexgrkCnjFNzNUxw9azDfMBAYIcNRLx+0sDVWaRyVMeKVpPMn1x cfwa+mueppw6NWlS/2SHx9cRPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN+oIDyk BGTZDZ/rPGHDyU/nOijhMB8GA1UdIwQYMBaAFOqNhku9K7HXjNiJChUE4RE2f3oT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkU2NS9GRUQ5M0E3Q0Q4 OEExMUU4QTNFQ0ZGNERDNEY5QUUwMi82bzJHUzcwcnNkZU0ySWtLRlFUaEVUWl9l aE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZvMkdTNzByc2RlTTJJa0tGUVRoRVRaX2VoTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkU2NS9GRUQ5M0E3Q0Q4OEExMUU4QTNFQ0ZGNERDNEY5QUUwMi82bzJHUzcwcnNk ZU0ySWtLRlFUaEVUWl9laE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByP+QdBEdcRhEFgdBGxUsoMBIskcRzHHInxQWzF5duAEbaCxqfQdi9 HwzS004I9eU98ubp9IchCvV3kgS6cL6JeMhjy7DOEx3PvI3zZuWsD/eG5dTmUXKr F6EFQRMHh0I5IO4alKBQmQ/84FtjzeTlo79/42JBCOEVwYS0hloYrPvXGfc7SmPz xbRaz0KrsciCihMkb2oe/VgzNl3/y5Rm1Wk4BJxMBFFYQlE0v8Q35rSOHwsVvXFl tG41Ub8Aw/VAHLCOr2zzJt8TdmWiavkJu57anM1/gGimkqJtsM8d+xu2U950gYz1 aG/F7MT/EOvhjzyfkKGRq6XBlNB6+Hb3 -----END CERTIFICATE-----Generated at Sun Jun 15 20:21:55 2025 by rpki-client