$ rpki-client -vvf rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft File: A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft (raw, json) Hash identifier: jBvIS299C0XsBUm9rxwBoRLlqNhpCbv4wFoI1SuXEL0= Subject key identifier: B1:AD:BF:D1:A5:35:8B:01:4D:FD:56:8C:F6:0A:D9:A8:57:B6:B7:E3 Authority key identifier: 03:A8:56:6C:80:31:F5:62:19:9D:F9:9D:9B:99:B9:C7:E7:19:F8:90 Certificate issuer: /CN=A911FA99/serialNumber=03A8566C8031F562199DF99D9B99B9C7E719F890 Certificate serial: 0B46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft Manifest number: 0B3E Signing time: Fri 30 May 2025 19:21:05 +0000 Manifest this update: Fri 30 May 2025 19:21:04 +0000 Manifest next update: Fri 06 Jun 2025 19:21:04 +0000 Files and hashes: 1: A6hWbIAx9WIZnfmdm5m5x-cZ-JA.crl (hash: XDU4A5gKiEofQH8kgM8RUdOKZV/VZ5CUe2jJE1wC1qc=) 2: 730BD0EC384011EAADE7134BC4F9AE02.roa (hash: EJy7DgILM8z1iO6xDPQ9fjq4rQed/FbUFf1TGO0uQ3M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.crl rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2886 (0xb46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FA99, serialNumber=03A8566C8031F562199DF99D9B99B9C7E719F890 Validity Not Before: May 30 19:21:04 2025 GMT Not After : Jun 6 19:21:04 2025 GMT Subject: CN=683a0521-bca6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a9:eb:a5:d4:b2:d2:bc:a5:a8:b2:8f:9e:6a: b1:10:d5:ba:0e:e0:83:e3:3e:29:5d:37:5f:07:70: 3b:6e:3b:5c:7e:02:91:80:60:ab:cd:56:63:4c:cf: 6e:97:50:30:07:62:b7:79:bf:69:97:0f:58:0a:1d: ad:b1:bb:0e:09:73:08:21:91:14:20:b2:9c:46:1a: 2c:0a:24:1a:fd:fd:f1:47:48:00:50:4b:b5:fc:33: ef:57:e1:ec:27:1f:96:55:70:1c:84:a3:30:75:af: 64:e6:d1:1d:3e:6e:1e:47:fe:ec:01:b6:b7:bb:68: 46:57:6d:1d:45:c2:3d:fe:1a:92:1d:a3:82:f5:3e: 0d:5a:93:23:dc:d5:b1:3f:c9:73:81:b3:fe:70:85: 92:68:54:d7:16:53:25:e8:30:cd:7c:83:a3:0b:0f: 8b:ab:e7:03:4d:f3:d3:87:ca:f6:53:6f:bc:88:fd: 3c:5d:f4:8b:a9:b8:36:39:34:7a:85:08:5f:e7:af: fd:56:f5:73:24:23:7e:01:63:4d:e6:46:e9:5e:20: 4f:48:c9:38:58:83:c7:64:3b:d3:2c:27:39:90:65: 4c:e2:84:26:7f:98:45:f1:77:01:f2:a8:a5:de:c4: 00:2f:ea:f2:4d:fb:72:9a:6a:03:3b:9c:2c:b4:89: 69:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:AD:BF:D1:A5:35:8B:01:4D:FD:56:8C:F6:0A:D9:A8:57:B6:B7:E3 X509v3 Authority Key Identifier: keyid:03:A8:56:6C:80:31:F5:62:19:9D:F9:9D:9B:99:B9:C7:E7:19:F8:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:92:ea:23:ca:e6:2a:56:69:0b:39:ac:dd:97:73:cd:ab:ce: 3d:6f:2c:65:a4:85:d3:5e:29:9c:7f:dc:9a:37:d9:4a:b6:99: b9:62:d1:3b:2a:48:8a:2c:e5:ca:7a:c1:65:81:78:35:78:7a: 54:90:8f:6c:bb:17:06:4f:86:f0:ed:c0:2e:15:32:d2:ce:e4: bf:24:7c:61:b2:c8:17:b4:05:a2:b5:7e:f3:08:ab:a0:06:d9: 3f:a9:d4:e4:76:20:bd:9c:0a:09:44:ff:d4:f1:cb:c6:fd:b2: 94:aa:f2:48:08:32:e4:02:32:7d:cf:79:57:c0:80:2b:be:d9: e9:2e:9a:78:28:3f:99:6a:2a:65:14:71:7a:4c:e1:e3:b7:e6: e5:41:4c:f6:ca:41:bf:1a:34:d4:f5:d6:e0:8a:7d:a3:eb:a4: 11:10:cc:b8:90:f9:4d:aa:e8:19:62:e2:26:7f:6e:69:7d:4e: 91:20:98:04:6a:9b:d5:17:81:a7:8e:41:67:d6:5c:51:9a:08: e5:2d:11:0e:5d:fc:0e:3e:77:78:db:47:45:8b:25:60:9a:8d: 8d:7d:54:04:c5:19:3e:02:e4:eb:c9:a1:f0:3a:09:a3:e5:3b: b2:f0:e5:71:d6:92:92:b7:b4:6c:f3:34:f3:41:7a:76:26:5c: 35:6c:59:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZBOTkxMTAvBgNVBAUTKDAzQTg1NjZDODAzMUY1NjIxOTlERjk5RDlCOTlCOUM3 RTcxOUY4OTAwHhcNMjUwNTMwMTkyMTA0WhcNMjUwNjA2MTkyMTA0WjAYMRYwFAYD VQQDEw02ODNhMDUyMS1iY2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtqnrpdSy0rylqLKPnmqxENW6DuCD4z4pXTdfB3A7bjtcfgKRgGCrzVZjTM9u l1AwB2K3eb9plw9YCh2tsbsOCXMIIZEUILKcRhosCiQa/f3xR0gAUEu1/DPvV+Hs Jx+WVXAchKMwda9k5tEdPm4eR/7sAba3u2hGV20dRcI9/hqSHaOC9T4NWpMj3NWx P8lzgbP+cIWSaFTXFlMl6DDNfIOjCw+Lq+cDTfPTh8r2U2+8iP08XfSLqbg2OTR6 hQhf56/9VvVzJCN+AWNN5kbpXiBPSMk4WIPHZDvTLCc5kGVM4oQmf5hF8XcB8qil 3sQAL+ryTftymmoDO5wstIlplwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLGtv9Gl NYsBTf1WjPYK2ahXtrfjMB8GA1UdIwQYMBaAFAOoVmyAMfViGZ35nZuZucfnGfiQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkE5OS8wNjAyM0M3NjM4 M0YxMUVBQUVFODk0NDVDNEY5QUUwMi9BNmhXYklBeDlXSVpuZm1kbTVtNXgtY1ot SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E2aFdiSUF4OVdJWm5mbWRtNW01eC1jWi1KQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkE5OS8wNjAyM0M3NjM4M0YxMUVBQUVFODk0NDVDNEY5QUUwMi9BNmhXYklBeDlX SVpuZm1kbTVtNXgtY1otSkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRkuojyuYqVmkLOazdl3PNq849byxlpIXTXimcf9yaN9lKtpm5YtE7 KkiKLOXKesFlgXg1eHpUkI9suxcGT4bw7cAuFTLSzuS/JHxhssgXtAWitX7zCKug Btk/qdTkdiC9nAoJRP/U8cvG/bKUqvJICDLkAjJ9z3lXwIArvtnpLpp4KD+Zaipl FHF6TOHjt+blQUz2ykG/GjTU9dbgin2j66QREMy4kPlNqugZYuImf25pfU6RIJgE apvVF4GnjkFn1lxRmgjlLREOXfwOPnd420dFiyVgmo2NfVQExRk+AuTryaHwOgmj 5Tuy8OVx1pKSt7Rs8zTzQXp2Jlw1bFlO -----END CERTIFICATE-----Generated at Sat May 31 17:22:09 2025 by rpki-client