$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.mft File: RLx47eY9W2Ire6wDs0mWsv5C4yc.mft (raw, json) Hash identifier: uFHACo+wFAG+kxoFrToknk1JogmZsne1JezNmOqkJ0E= Subject key identifier: 4B:61:AE:33:BB:89:AB:01:AD:7A:99:07:EB:BC:8F:4C:E3:D8:A7:53 Authority key identifier: 44:BC:78:ED:E6:3D:5B:62:2B:7B:AC:03:B3:49:96:B2:FE:42:E3:27 Certificate issuer: /CN=A913B7C7/serialNumber=44BC78EDE63D5B622B7BAC03B34996B2FE42E327 Certificate serial: 6B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RLx47eY9W2Ire6wDs0mWsv5C4yc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.mft Manifest number: 6A Signing time: Sun 01 Jun 2025 06:39:06 +0000 Manifest this update: Sun 01 Jun 2025 06:39:05 +0000 Manifest next update: Sun 08 Jun 2025 06:39:05 +0000 Files and hashes: 1: RLx47eY9W2Ire6wDs0mWsv5C4yc.crl (hash: KnMTWkpNAmn73KK5aK+X+wSMqjxOLQz2NubRlWXG3W0=) 2: 0A18EF4A9D9C11EFBAF0D76AC4F9AE02.roa (hash: CckqoSL6Kl8ijND7YWEunm6CSbx21plf0BMP2SCxoy0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.crl rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RLx47eY9W2Ire6wDs0mWsv5C4yc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 06:39:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 107 (0x6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B7C7, serialNumber=44BC78EDE63D5B622B7BAC03B34996B2FE42E327 Validity Not Before: Jun 1 06:39:05 2025 GMT Not After : Jun 8 06:39:05 2025 GMT Subject: CN=683bf58a-694a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a7:a5:13:0f:04:35:34:b5:da:99:79:23:1d: 17:2b:b3:b8:ca:2d:19:eb:92:cd:54:bf:48:34:49: 94:10:d1:5e:0a:6f:8f:79:a4:cf:30:21:17:92:74: 11:b5:99:ce:d9:4a:61:6c:a2:9f:10:87:13:eb:21: 86:ed:d2:e0:1c:f6:ae:20:c2:1e:14:4d:ee:52:6d: d7:e3:09:66:6a:38:97:38:12:c4:d5:e0:e9:56:90: 1c:99:0b:2a:dc:6a:c4:21:12:04:82:61:24:ba:20: 4b:21:ab:95:01:19:05:60:b8:91:f3:c1:7a:81:fa: 0c:1c:f7:67:e2:2f:a6:bc:1a:d7:c9:c7:a3:88:da: e4:4b:79:83:2f:12:4d:c0:47:01:0b:63:63:37:0b: 52:18:4e:87:39:f8:5b:3b:f9:82:fb:ff:a8:51:a7: 8d:f5:45:05:0c:98:2e:b3:eb:14:98:d4:f9:30:c5: 8a:73:99:27:5a:50:b4:aa:80:dd:c9:d7:0c:2a:31: 64:5c:f0:29:e3:11:2c:b8:e0:12:d0:5d:64:c2:bf: 4a:85:2f:52:b8:0f:1a:32:af:73:77:c3:56:51:b6: 5e:03:e8:c6:5f:45:84:df:a6:ca:bb:34:26:af:0e: fe:7e:4c:30:1a:e8:5e:b7:04:94:01:9a:ee:46:c1: b3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:61:AE:33:BB:89:AB:01:AD:7A:99:07:EB:BC:8F:4C:E3:D8:A7:53 X509v3 Authority Key Identifier: keyid:44:BC:78:ED:E6:3D:5B:62:2B:7B:AC:03:B3:49:96:B2:FE:42:E3:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RLx47eY9W2Ire6wDs0mWsv5C4yc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:74:b6:1e:f8:fb:29:ca:92:fc:e0:ab:19:75:75:b1:46:b3: 9d:6c:ee:ef:f6:a0:68:90:b4:44:7a:6b:e3:81:d9:d4:6a:ab: f4:86:09:05:31:03:e6:dc:6d:40:4d:85:a2:fe:69:7d:3d:9a: fd:6a:bb:71:b8:7a:fa:63:da:9c:9b:a9:4f:60:44:60:5f:c2: 5e:21:02:3d:a9:c9:a3:69:c3:b7:05:b4:8f:01:9f:f4:b4:fb: af:87:08:9d:fb:8c:2b:d3:24:77:fd:c7:5f:d3:97:c4:d0:3d: 92:8e:5f:d9:42:86:12:b9:26:7a:6b:09:57:ee:84:0d:c7:af: ad:e9:5d:cb:61:86:0b:63:32:d3:df:bc:ca:90:b1:27:31:fe: ed:49:cb:81:53:2b:29:a6:ee:36:c0:5a:29:e4:ef:d8:56:5e: 3b:74:01:ce:4f:7d:27:a8:b5:74:8b:2f:36:92:b6:ad:f1:fb: 22:6b:e2:e6:7a:00:81:95:97:d1:1f:5a:8d:1a:bb:10:17:c8: f0:a5:92:98:37:63:da:d9:f0:e0:f0:58:90:28:d5:ce:6a:36: ed:c0:ce:2b:91:21:3f:05:88:b4:e0:c2:14:2e:e5:d1:02:46: e1:29:0c:ba:4a:91:ce:91:db:5c:12:25:58:58:d0:59:9b:09: 3a:1b:c1:3d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QjdDNzExMC8GA1UEBRMoNDRCQzc4RURFNjNENUI2MjJCN0JBQzAzQjM0OTk2QjJG RTQyRTMyNzAeFw0yNTA2MDEwNjM5MDVaFw0yNTA2MDgwNjM5MDVaMBgxFjAUBgNV BAMTDTY4M2JmNThhLTY5NGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwp6UTDwQ1NLXamXkjHRcrs7jKLRnrks1Uv0g0SZQQ0V4Kb495pM8wIReSdBG1 mc7ZSmFsop8QhxPrIYbt0uAc9q4gwh4UTe5SbdfjCWZqOJc4EsTV4OlWkByZCyrc asQhEgSCYSS6IEshq5UBGQVguJHzwXqB+gwc92fiL6a8GtfJx6OI2uRLeYMvEk3A RwELY2M3C1IYToc5+Fs7+YL7/6hRp431RQUMmC6z6xSY1PkwxYpzmSdaULSqgN3J 1wwqMWRc8CnjESy44BLQXWTCv0qFL1K4Dxoyr3N3w1ZRtl4D6MZfRYTfpsq7NCav Dv5+TDAa6F63BJQBmu5GwbPBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUS2GuM7uJ qwGtepkH67yPTOPYp1MwHwYDVR0jBBgwFoAURLx47eY9W2Ire6wDs0mWsv5C4ycw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNCN0M3L0EyNDUxMTQ2OUQ5 QjExRUY4NjA1MDQ2OUM0RjlBRTAyL1JMeDQ3ZVk5VzJJcmU2d0RzMG1Xc3Y1QzR5 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUkx4NDdlWTlXMklyZTZ3RHMwbVdzdjVDNHljLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNC N0M3L0EyNDUxMTQ2OUQ5QjExRUY4NjA1MDQ2OUM0RjlBRTAyL1JMeDQ3ZVk5VzJJ cmU2d0RzMG1Xc3Y1QzR5Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAER0th74+ynKkvzgqxl1dbFGs51s7u/2oGiQtER6a+OB2dRqq/SGCQUx A+bcbUBNhaL+aX09mv1qu3G4evpj2pybqU9gRGBfwl4hAj2pyaNpw7cFtI8Bn/S0 +6+HCJ37jCvTJHf9x1/Tl8TQPZKOX9lChhK5JnprCVfuhA3Hr63pXcthhgtjMtPf vMqQsScx/u1Jy4FTKymm7jbAWink79hWXjt0Ac5PfSeotXSLLzaStq3x+yJr4uZ6 AIGVl9EfWo0auxAXyPClkpg3Y9rZ8ODwWJAo1c5qNu3AziuRIT8FiLTgwhQu5dEC RuEpDLpKkc6R21wSJVhY0FmbCTobwT0= -----END CERTIFICATE-----Generated at Mon Jun 2 20:59:52 2025 by rpki-client