$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.mft File: 6wFhqozbHyTNf-E9XlzlIXulj4I.mft (raw, json) Hash identifier: c17B0gJQwBgKCkfYcmkRhcG/7zMt4P3n2L3tv+sxIqY= Subject key identifier: 24:43:EC:16:B6:EF:05:0B:A0:FE:0F:57:90:37:F0:30:66:8D:24:BD Authority key identifier: EB:01:61:AA:8C:DB:1F:24:CD:7F:E1:3D:5E:5C:E5:21:7B:A5:8F:82 Certificate issuer: /CN=A91FC77C/serialNumber=EB0161AA8CDB1F24CD7FE13D5E5CE5217BA58F82 Certificate serial: 171E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wFhqozbHyTNf-E9XlzlIXulj4I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.mft Manifest number: 1714 Signing time: Sat 14 Jun 2025 16:35:34 +0000 Manifest this update: Sat 14 Jun 2025 16:35:34 +0000 Manifest next update: Sat 21 Jun 2025 16:35:33 +0000 Files and hashes: 1: 6wFhqozbHyTNf-E9XlzlIXulj4I.crl (hash: XYU2QBvPfaLK4NMXWfRON+139ZFms4KX+4ajHe6a9UM=) 2: AAAAE566E8AA11E78A615315C4F9AE02.roa (hash: IZm4bUn/JmIHtecsy8bw34L4o+Q1Xnkykngp8peDfE0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.crl rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wFhqozbHyTNf-E9XlzlIXulj4I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:35:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5918 (0x171e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC77C, serialNumber=EB0161AA8CDB1F24CD7FE13D5E5CE5217BA58F82 Validity Not Before: Jun 14 16:35:34 2025 GMT Not After : Jun 21 16:35:33 2025 GMT Subject: CN=684da4d6-2d58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:78:c0:e7:00:b3:2f:bb:5f:2b:5c:f5:7e:85: ad:e4:6f:78:8b:ba:7e:3a:ca:0e:59:20:7b:13:b4: 66:e8:93:c3:b5:c1:12:6f:af:c7:e2:54:b2:2c:c7: e0:a3:86:1b:49:1b:0e:3c:e4:d3:37:27:bc:16:d1: ba:25:24:ca:cb:d4:23:32:d9:5f:5a:1f:c8:c7:c4: 80:52:d4:72:29:5f:46:7b:ae:49:9f:c8:fe:14:b8: e9:15:b8:f8:5c:9a:8d:cd:f7:af:ef:69:23:69:53: 75:cc:d5:20:2b:77:c0:ea:32:09:b2:f0:4f:21:5e: 0a:a3:38:60:8c:a9:c1:e3:ce:4d:04:f9:4b:05:6e: 12:1b:aa:29:6e:3e:08:76:c9:78:7a:96:91:55:e7: 38:a5:dc:14:71:82:c7:30:d8:7d:2f:55:4c:c4:44: 50:8e:49:a9:0a:72:d2:96:bf:6d:09:46:d9:bb:5a: 29:82:cc:1a:95:f5:77:15:b9:14:b0:f9:5a:0e:df: 43:28:30:23:ed:c2:ab:3b:75:0b:77:5d:c3:d5:5d: e6:3e:d8:44:92:a2:3e:e6:28:15:bf:bb:88:21:06: 86:dd:53:6e:9c:1e:80:fe:3e:8a:b4:07:54:dc:78: f5:1a:64:dc:89:22:17:c0:82:23:bd:ed:54:66:7f: fb:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:43:EC:16:B6:EF:05:0B:A0:FE:0F:57:90:37:F0:30:66:8D:24:BD X509v3 Authority Key Identifier: keyid:EB:01:61:AA:8C:DB:1F:24:CD:7F:E1:3D:5E:5C:E5:21:7B:A5:8F:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wFhqozbHyTNf-E9XlzlIXulj4I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:8c:79:4b:7a:a6:85:99:0f:25:5e:72:1e:e6:df:78:19:02: f1:5c:a0:23:4b:6d:74:d7:86:9a:20:13:37:dd:a6:75:ad:af: ce:c9:f7:cc:fe:3e:50:48:7e:d8:9d:16:03:ea:bd:40:fb:51: 94:9a:d7:4d:30:e1:29:97:aa:c3:bb:d6:28:1c:78:ab:ee:1f: d1:c5:83:7f:3a:c1:56:42:d9:6c:91:9f:c6:68:9e:7f:a3:56: 17:30:6c:0f:c6:29:85:31:9b:44:e6:1d:e2:35:2c:51:a2:e2: d5:f7:53:ed:86:13:eb:23:57:06:b2:69:5e:4f:83:b6:55:12: 12:fe:11:ba:5b:ad:37:74:d4:e5:1e:bf:18:10:25:c6:de:6f: 18:b8:d5:a4:7d:87:5b:76:60:9c:6e:9b:9b:1b:22:96:5c:2e: 8e:4f:cd:eb:7a:5b:28:ac:64:a1:d0:92:60:ec:ec:9a:bd:eb: 8b:96:18:f2:e7:54:2e:29:53:dc:41:48:a4:a9:f8:f0:78:2e: 72:ef:ba:14:67:6e:27:2b:98:ff:09:59:a2:1b:f0:c7:bc:a8: 8b:73:0c:b5:31:9e:00:44:96:e6:93:eb:cb:52:36:0b:02:82: f1:57:bc:de:c3:c7:6c:59:69:5a:ca:2c:d6:c7:72:21:8d:69: e7:f3:17:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFx4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM3N0MxMTAvBgNVBAUTKEVCMDE2MUFBOENEQjFGMjRDRDdGRTEzRDVFNUNFNTIx N0JBNThGODIwHhcNMjUwNjE0MTYzNTM0WhcNMjUwNjIxMTYzNTMzWjAYMRYwFAYD VQQDEw02ODRkYTRkNi0yZDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArHjA5wCzL7tfK1z1foWt5G94i7p+OsoOWSB7E7Rm6JPDtcESb6/H4lSyLMfg o4YbSRsOPOTTNye8FtG6JSTKy9QjMtlfWh/Ix8SAUtRyKV9Ge65Jn8j+FLjpFbj4 XJqNzfev72kjaVN1zNUgK3fA6jIJsvBPIV4KozhgjKnB485NBPlLBW4SG6opbj4I dsl4epaRVec4pdwUcYLHMNh9L1VMxERQjkmpCnLSlr9tCUbZu1opgswalfV3FbkU sPlaDt9DKDAj7cKrO3ULd13D1V3mPthEkqI+5igVv7uIIQaG3VNunB6A/j6KtAdU 3Hj1GmTciSIXwIIjve1UZn/7jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCRD7Ba2 7wULoP4PV5A38DBmjSS9MB8GA1UdIwQYMBaAFOsBYaqM2x8kzX/hPV5c5SF7pY+C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzc3Qy8xQzMyRDRCMEU4 QUExMUU3QTIzMERGMTRDNEY5QUUwMi82d0ZocW96Ykh5VE5mLUU5WGx6bElYdWxq NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ3Rmhxb3piSHlUTmYtRTlYbHpsSVh1bGo0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Qzc3Qy8xQzMyRDRCMEU4QUExMUU3QTIzMERGMTRDNEY5QUUwMi82d0ZocW96Ykh5 VE5mLUU5WGx6bElYdWxqNEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxjHlLeqaFmQ8lXnIe5t94GQLxXKAjS21014aaIBM33aZ1ra/OyffM /j5QSH7YnRYD6r1A+1GUmtdNMOEpl6rDu9YoHHir7h/RxYN/OsFWQtlskZ/GaJ5/ o1YXMGwPximFMZtE5h3iNSxRouLV91PthhPrI1cGsmleT4O2VRIS/hG6W603dNTl Hr8YECXG3m8YuNWkfYdbdmCcbpubGyKWXC6OT83relsorGSh0JJg7OyaveuLlhjy 51QuKVPcQUikqfjweC5y77oUZ24nK5j/CVmiG/DHvKiLcwy1MZ4ARJbmk+vLUjYL AoLxV7zew8dsWWlayizWx3IhjWnn8xcN -----END CERTIFICATE-----Generated at Sun Jun 15 06:06:21 2025 by rpki-client