$ rpki-client -vvf rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft File: 6O2nHIlk0p8GwkorbRt3FTyo84k.mft (raw, json) Hash identifier: OLvXXsQw8YF3AVG8k3rJHTh1xp6Pet8FqbZU5EfWj4w= Subject key identifier: 6D:07:AB:82:8B:3B:02:63:7F:61:B7:2E:D1:A0:30:9F:2E:1D:AF:6C Authority key identifier: E8:ED:A7:1C:89:64:D2:9F:06:C2:4A:2B:6D:1B:77:15:3C:A8:F3:89 Certificate issuer: /CN=A91F724B/serialNumber=E8EDA71C8964D29F06C24A2B6D1B77153CA8F389 Certificate serial: 208B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft Manifest number: 2066 Signing time: Wed 18 Jun 2025 15:58:57 +0000 Manifest this update: Wed 18 Jun 2025 15:58:57 +0000 Manifest next update: Wed 25 Jun 2025 15:58:56 +0000 Files and hashes: 1: 6O2nHIlk0p8GwkorbRt3FTyo84k.crl (hash: sGbYaI4TBGggmXD1WKdwOsARJt+3XQoKSWdjE2LSLyI=) 2: D6702FB2C51411E7A0AC1A77C4F9AE02.roa (hash: dRYh9WAvcIumZjCZ5S62u32XoLkiqwXXygrg2DE1FBI=) 3: 36AB4096C51611E7AECA8B79C4F9AE02.roa (hash: 0oF1Qfg6/q63oXyqNiJvhv+IBvlt379syGArKmuw6+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.crl rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 15:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8331 (0x208b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F724B, serialNumber=E8EDA71C8964D29F06C24A2B6D1B77153CA8F389 Validity Not Before: Jun 18 15:58:57 2025 GMT Not After : Jun 25 15:58:56 2025 GMT Subject: CN=6852e241-9e1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:34:ea:c9:e6:4a:4b:bd:a7:2a:87:83:f1:a8: 1d:f3:aa:e8:f3:ff:38:70:63:56:a7:a9:25:5b:3d: 26:0c:98:30:9d:c1:19:02:cf:0f:6b:07:b0:25:8c: f4:09:5f:27:4a:f9:bb:f7:ae:cf:b4:15:7b:7e:52: 2f:6c:50:be:d7:f7:94:3c:63:6c:12:a9:75:d6:b5: f9:36:59:5c:36:f5:e8:70:6f:f1:7d:26:21:f2:9f: 11:48:1a:48:62:f5:c4:8a:b6:d8:2e:5d:8a:87:3e: 21:82:57:7d:6f:62:8b:5a:3e:20:5b:09:0e:bd:fc: a0:c9:7a:d1:e0:02:b7:23:81:20:d3:7a:2b:8c:ea: 69:57:93:f2:cd:ed:0d:f8:58:b4:ec:86:9a:cb:07: 1a:73:85:4d:82:cb:42:82:0a:b0:ab:83:60:84:e2: 4c:83:4f:76:cc:96:74:8a:ac:1b:39:df:d0:35:d1: 5e:a5:26:17:38:cb:a8:34:75:2f:53:f4:e0:75:c5: ed:d0:72:18:8d:a6:ce:c0:cc:63:47:14:38:2b:6a: df:ab:6f:25:e4:44:dc:8f:7f:69:d7:a7:8c:17:0c: e6:6f:50:1e:b1:85:c8:d6:c8:38:8d:fb:02:ed:43: 8a:8a:29:3a:41:5f:17:2f:79:3c:eb:73:45:64:b3: 21:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:07:AB:82:8B:3B:02:63:7F:61:B7:2E:D1:A0:30:9F:2E:1D:AF:6C X509v3 Authority Key Identifier: keyid:E8:ED:A7:1C:89:64:D2:9F:06:C2:4A:2B:6D:1B:77:15:3C:A8:F3:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:0b:89:72:ec:a8:da:f8:53:03:32:73:00:72:73:77:76:cc: cc:8d:d4:12:c5:2e:a9:e4:35:b1:53:39:93:a5:5f:90:9c:ed: e3:87:55:c2:64:74:a4:1f:85:9b:9a:f5:58:a2:77:09:98:84: a8:7c:22:6d:f7:35:76:86:07:57:05:31:42:38:b9:80:83:f8: 6f:4b:ad:95:6a:26:af:dd:22:d0:ca:4a:01:26:bd:3b:6b:5c: 48:b1:b3:b2:06:99:bb:b0:95:86:27:0e:c0:11:b4:fe:c7:11: b3:a1:6f:63:f0:b2:c1:82:90:05:7e:3c:de:a4:98:27:41:c6: 7d:61:bb:be:aa:cc:3f:fd:e9:e3:b7:38:42:7f:16:0c:78:4e: dc:b1:57:9f:c6:53:d0:18:ab:dc:69:34:c0:1e:ae:74:d2:0e: 3f:f9:8d:c0:21:8b:ac:f5:81:7a:cd:d7:da:75:53:4e:e4:53: d6:df:5f:7e:1a:2f:e1:c9:5a:4b:e3:0f:a6:11:68:72:3d:ba: f2:6f:54:6b:81:9f:0d:86:49:db:fd:65:62:b6:18:db:a2:83: 2e:a2:dc:46:ec:12:a5:6a:8f:25:af:7e:50:f6:05:6b:04:a4: fa:10:ac:e2:be:bf:e8:ca:33:10:e8:33:c3:18:15:3d:4c:e0: 59:1d:71:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjcyNEIxMTAvBgNVBAUTKEU4RURBNzFDODk2NEQyOUYwNkMyNEEyQjZEMUI3NzE1 M0NBOEYzODkwHhcNMjUwNjE4MTU1ODU3WhcNMjUwNjI1MTU1ODU2WjAYMRYwFAYD VQQDEw02ODUyZTI0MS05ZTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1TTqyeZKS72nKoeD8agd86ro8/84cGNWp6klWz0mDJgwncEZAs8PawewJYz0 CV8nSvm7967PtBV7flIvbFC+1/eUPGNsEql11rX5NllcNvXocG/xfSYh8p8RSBpI YvXEirbYLl2Khz4hgld9b2KLWj4gWwkOvfygyXrR4AK3I4Eg03orjOppV5Pyze0N +Fi07Iaaywcac4VNgstCggqwq4NghOJMg092zJZ0iqwbOd/QNdFepSYXOMuoNHUv U/TgdcXt0HIYjabOwMxjRxQ4K2rfq28l5ETcj39p16eMFwzmb1AesYXI1sg4jfsC 7UOKiik6QV8XL3k863NFZLMhgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG0Hq4KL OwJjf2G3LtGgMJ8uHa9sMB8GA1UdIwQYMBaAFOjtpxyJZNKfBsJKK20bdxU8qPOJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzI0Qi8xQkM3MUE2MjE2 ODkxMUU2OEVFRkQ5N0JDNEY5QUUwMi82TzJuSElsazBwOEd3a29yYlJ0M0ZUeW84 NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZPMm5ISWxrMHA4R3drb3JiUnQzRlR5bzg0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzI0Qi8xQkM3MUE2MjE2ODkxMUU2OEVFRkQ5N0JDNEY5QUUwMi82TzJuSElsazBw OEd3a29yYlJ0M0ZUeW84NGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRC4ly7Kja+FMDMnMAcnN3dszMjdQSxS6p5DWxUzmTpV+QnO3jh1XC ZHSkH4WbmvVYoncJmISofCJt9zV2hgdXBTFCOLmAg/hvS62Vaiav3SLQykoBJr07 a1xIsbOyBpm7sJWGJw7AEbT+xxGzoW9j8LLBgpAFfjzepJgnQcZ9Ybu+qsw//enj tzhCfxYMeE7csVefxlPQGKvcaTTAHq500g4/+Y3AIYus9YF6zdfadVNO5FPW319+ Gi/hyVpL4w+mEWhyPbryb1RrgZ8Nhknb/WVithjbooMuotxG7BKlao8lr35Q9gVr BKT6EKzivr/oyjMQ6DPDGBU9TOBZHXFx -----END CERTIFICATE-----Generated at Fri Jun 20 05:54:20 2025 by rpki-client