$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft File: 1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft (raw, json) Hash identifier: r7w3JiRea5DxkHDzWgMcSJpZhfoV9VeIuLzc9XG4Z7M= Subject key identifier: C1:D9:37:71:DC:86:31:44:83:A7:39:11:83:78:F0:B3:B4:6F:44:2C Authority key identifier: D6:F2:BA:AE:7A:52:0F:AA:46:82:CA:DC:36:93:66:0B:9E:1F:F1:04 Certificate issuer: /CN=A91FC8B6/serialNumber=D6F2BAAE7A520FAA4682CADC3693660B9E1FF104 Certificate serial: 0188 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vK6rnpSD6pGgsrcNpNmC54f8QQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft Manifest number: 0185 Signing time: Sun 15 Jun 2025 02:49:16 +0000 Manifest this update: Sun 15 Jun 2025 02:49:15 +0000 Manifest next update: Sun 22 Jun 2025 02:49:15 +0000 Files and hashes: 1: 1vK6rnpSD6pGgsrcNpNmC54f8QQ.crl (hash: S8+YnzgjezLjfIgV9sEFRN63pNBuSr3ZtrvVwco15sg=) 2: 37B81F7AF64511ED8C736D76C4F9AE02.roa (hash: ElQvBJV6B10UNvlVIlGas46V55/K9saRpZMoFdDMc0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.crl rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vK6rnpSD6pGgsrcNpNmC54f8QQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:49:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 392 (0x188) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC8B6, serialNumber=D6F2BAAE7A520FAA4682CADC3693660B9E1FF104 Validity Not Before: Jun 15 02:49:15 2025 GMT Not After : Jun 22 02:49:15 2025 GMT Subject: CN=684e34ac-9548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9f:44:7b:90:e6:0f:a4:0c:7b:d6:8a:21:f5: 59:89:9b:02:7f:20:c3:f5:dc:70:41:9f:cc:06:e9: a2:bd:22:9b:b2:b9:c5:af:a2:57:16:c7:02:a6:91: b9:a2:a4:16:1b:b5:65:a9:e7:ef:c5:58:aa:e5:8c: 8c:e8:ea:7c:b0:b5:88:ea:d3:1a:c5:91:d4:46:e2: 14:fb:51:f0:a9:00:5f:e7:a7:4d:12:3b:2d:47:1c: 44:1f:57:dd:20:06:a2:f0:17:fc:b3:e0:a9:78:d5: 54:d4:11:cc:00:98:af:f3:9f:63:85:0a:b8:ad:1a: 97:ba:a4:5d:91:e4:9e:46:27:c4:11:c2:36:6c:1d: 28:89:63:a2:e9:d6:74:83:08:61:a4:15:5c:1a:38: 97:67:84:33:cc:db:f5:d6:12:9c:85:21:04:50:77: 24:33:1a:31:8f:8c:65:50:1e:17:88:7d:6a:68:cb: 5f:a3:40:93:6b:91:24:4f:b3:0c:73:67:ee:42:3f: 34:a6:97:9f:69:1b:60:b3:2a:69:b0:a7:83:41:da: da:64:f5:dd:dc:e3:cb:2c:78:73:4d:ee:b8:31:32: 2c:9c:18:0b:d6:2b:19:6d:83:77:94:49:74:72:1d: b1:96:77:53:9d:f6:49:98:cb:29:ce:e2:df:76:11: 9c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:D9:37:71:DC:86:31:44:83:A7:39:11:83:78:F0:B3:B4:6F:44:2C X509v3 Authority Key Identifier: keyid:D6:F2:BA:AE:7A:52:0F:AA:46:82:CA:DC:36:93:66:0B:9E:1F:F1:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vK6rnpSD6pGgsrcNpNmC54f8QQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:0a:5f:00:64:09:f3:78:6b:ae:6e:eb:c9:53:e7:89:d4:5e: 3f:ef:60:c3:58:a2:81:ac:a3:96:23:d8:93:25:df:55:41:2c: 31:b4:e8:4a:f6:dd:f7:5a:a7:1c:59:ee:16:1c:af:dd:23:4a: 26:9e:f3:3c:e3:16:bb:3a:74:9b:d0:17:08:10:8a:12:d8:ff: 67:17:da:f4:7c:ef:a9:4f:1c:dd:bd:7a:a8:c5:06:80:29:a0: e0:1b:57:88:f2:17:12:57:09:fe:2b:a3:ea:b2:b7:eb:44:cb: 47:97:97:4d:a4:22:37:55:71:e0:94:b1:17:e4:96:03:ab:a7: fe:da:21:f9:fc:4f:82:8c:39:ea:83:d2:6e:e3:5a:d2:eb:c3: c4:13:ea:c0:fb:fa:9c:10:4d:59:9c:b8:ea:3f:ab:24:5c:27: 95:cf:9e:9d:dd:f4:81:18:66:f6:97:7a:da:fd:c0:56:d5:6c: be:88:52:4e:15:b2:ec:eb:a8:4b:79:c3:75:5b:9f:49:4b:33: de:6d:ff:1e:12:7c:23:f1:0a:a9:94:5e:28:3b:96:39:6a:14: c2:63:fa:ce:77:b8:d1:7f:75:4e:55:c7:80:bd:42:a7:03:16: 2a:4c:60:76:23:9b:4a:13:2d:d6:58:9e:cb:42:bb:11:3f:db: 82:4e:d8:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM4QjYxMTAvBgNVBAUTKEQ2RjJCQUFFN0E1MjBGQUE0NjgyQ0FEQzM2OTM2NjBC OUUxRkYxMDQwHhcNMjUwNjE1MDI0OTE1WhcNMjUwNjIyMDI0OTE1WjAYMRYwFAYD VQQDEw02ODRlMzRhYy05NTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqZ9Ee5DmD6QMe9aKIfVZiZsCfyDD9dxwQZ/MBumivSKbsrnFr6JXFscCppG5 oqQWG7VlqefvxViq5YyM6Op8sLWI6tMaxZHURuIU+1HwqQBf56dNEjstRxxEH1fd IAai8Bf8s+CpeNVU1BHMAJiv859jhQq4rRqXuqRdkeSeRifEEcI2bB0oiWOi6dZ0 gwhhpBVcGjiXZ4QzzNv11hKchSEEUHckMxoxj4xlUB4XiH1qaMtfo0CTa5EkT7MM c2fuQj80ppefaRtgsyppsKeDQdraZPXd3OPLLHhzTe64MTIsnBgL1isZbYN3lEl0 ch2xlndTnfZJmMspzuLfdhGczQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMHZN3Hc hjFEg6c5EYN48LO0b0QsMB8GA1UdIwQYMBaAFNbyuq56Ug+qRoLK3DaTZgueH/EE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzhCNi9FQzYyMkIwNkY2 M0YxMUVEOTc4ODJDNzJDNEY5QUUwMi8xdks2cm5wU0Q2cEdnc3JjTnBObUM1NGY4 UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF2SzZybnBTRDZwR2dzcmNOcE5tQzU0ZjhRUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzhCNi9FQzYyMkIwNkY2M0YxMUVEOTc4ODJDNzJDNEY5QUUwMi8xdks2cm5wU0Q2 cEdnc3JjTnBObUM1NGY4UVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACCl8AZAnzeGuubuvJU+eJ1F4/72DDWKKBrKOWI9iTJd9VQSwxtOhK 9t33WqccWe4WHK/dI0omnvM84xa7OnSb0BcIEIoS2P9nF9r0fO+pTxzdvXqoxQaA KaDgG1eI8hcSVwn+K6PqsrfrRMtHl5dNpCI3VXHglLEX5JYDq6f+2iH5/E+CjDnq g9Ju41rS68PEE+rA+/qcEE1ZnLjqP6skXCeVz56d3fSBGGb2l3ra/cBW1Wy+iFJO FbLs66hLecN1W59JSzPebf8eEnwj8QqplF4oO5Y5ahTCY/rOd7jRf3VOVceAvUKn AxYqTGB2I5tKEy3WWJ7LQrsRP9uCTthi -----END CERTIFICATE-----Generated at Mon Jun 16 15:30:22 2025 by rpki-client