$ rpki-client -vvf rpki.apnic.net/member_repository/A914331D/4B45BFE8AD1E11EA94C7E581C4F9AE02/06m0znk41yolUFSgwIW_eI6wabA.mft File: 06m0znk41yolUFSgwIW_eI6wabA.mft (raw, json) Hash identifier: 11uRLtP4cGwgBkmfaN9gsj3S/HDwYskm7d4svVF/4rQ= Subject key identifier: F6:5C:E6:C5:B8:97:D9:70:09:D6:2F:6C:91:B2:49:F0:94:2A:3A:33 Authority key identifier: D3:A9:B4:CE:79:38:D7:2A:25:50:54:A0:C0:85:BF:78:8E:B0:69:B0 Certificate issuer: /CN=A914331D/serialNumber=D3A9B4CE7938D72A255054A0C085BF788EB069B0 Certificate serial: 08EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/06m0znk41yolUFSgwIW_eI6wabA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914331D/4B45BFE8AD1E11EA94C7E581C4F9AE02/06m0znk41yolUFSgwIW_eI6wabA.mft Manifest number: 08E6 Signing time: Fri 30 May 2025 20:38:10 +0000 Manifest this update: Fri 30 May 2025 20:38:10 +0000 Manifest next update: Fri 06 Jun 2025 20:38:10 +0000 Files and hashes: 1: 06m0znk41yolUFSgwIW_eI6wabA.crl (hash: b4mePWDlDKQDHhIUzOmU8+/jVFg1qfBN7Lyk2v8PIj4=) 2: 425602A0AD2111EA9510AC0DC4F9AE02.roa (hash: eiGSH0P7OA/wuySnx+L4WnNP4YI49fVfK6qem5HgBnk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914331D/4B45BFE8AD1E11EA94C7E581C4F9AE02/06m0znk41yolUFSgwIW_eI6wabA.crl rsync://rpki.apnic.net/member_repository/A914331D/4B45BFE8AD1E11EA94C7E581C4F9AE02/06m0znk41yolUFSgwIW_eI6wabA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/06m0znk41yolUFSgwIW_eI6wabA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:38:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2286 (0x8ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914331D, serialNumber=D3A9B4CE7938D72A255054A0C085BF788EB069B0 Validity Not Before: May 30 20:38:10 2025 GMT Not After : Jun 6 20:38:10 2025 GMT Subject: CN=683a1732-e3e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8a:34:41:3b:d4:03:78:e8:01:ab:dd:87:46: c5:99:43:8a:3a:1f:3a:2a:86:4c:a4:88:e7:0a:23: e2:0c:e2:c0:0f:9a:eb:37:19:fd:c9:82:3c:fc:a3: 99:4d:d0:b7:43:a4:58:0f:e5:b4:51:6c:b5:5e:12: 1c:69:53:7e:b0:a4:c7:fa:98:05:f8:32:de:c0:05: 84:a9:c2:88:fe:e9:1f:4a:7f:8e:a3:1d:b5:02:e0: b8:b5:79:f6:e3:9f:5e:52:a2:f9:fb:3f:63:fa:9c: 44:a3:09:6f:26:cb:e1:95:d7:4f:7e:60:a2:ea:86: c7:7e:e6:c8:16:95:2d:e2:dc:7f:01:94:1e:e9:82: ab:4a:b0:22:b6:db:8d:44:ee:14:cc:62:02:64:fb: ed:5e:4a:da:04:cd:9f:6f:c8:5f:c3:ea:28:dc:06: 99:0d:ed:aa:5e:0c:0b:94:b0:ec:99:dd:b5:dd:0f: 56:71:ae:ba:cd:61:a9:64:f7:6b:fe:77:7b:9f:5e: b7:c0:8e:7b:c7:c3:f9:4c:cd:6b:4a:54:ee:ea:04: 2d:c2:9b:ef:14:13:5b:9e:28:8d:86:76:57:08:5d: 19:69:a7:be:81:1d:fe:39:c6:64:4f:e7:f1:db:4a: 5e:7d:94:20:44:a9:ea:09:d6:58:02:f2:64:39:04: 37:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:5C:E6:C5:B8:97:D9:70:09:D6:2F:6C:91:B2:49:F0:94:2A:3A:33 X509v3 Authority Key Identifier: keyid:D3:A9:B4:CE:79:38:D7:2A:25:50:54:A0:C0:85:BF:78:8E:B0:69:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914331D/4B45BFE8AD1E11EA94C7E581C4F9AE02/06m0znk41yolUFSgwIW_eI6wabA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/06m0znk41yolUFSgwIW_eI6wabA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914331D/4B45BFE8AD1E11EA94C7E581C4F9AE02/06m0znk41yolUFSgwIW_eI6wabA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:f7:5c:12:ae:86:ed:f9:21:5c:4b:02:b0:54:08:5a:24:26: 34:88:44:b5:f7:c3:02:b7:b2:ee:e9:97:d2:3c:c7:93:84:eb: d6:d0:cc:1a:99:db:9a:41:fe:3e:18:e9:bf:f4:5a:f8:13:5c: 67:ba:dc:27:fd:2d:40:07:7a:23:f0:d0:a7:c7:b3:45:43:b0: 46:c9:8e:25:0a:92:e8:ba:6e:ba:53:79:c9:fa:bf:5f:f9:52: 2a:20:fc:5c:77:bc:23:d6:3d:64:4c:07:bc:22:98:5c:43:b0: 0e:6f:2c:6c:f1:e3:21:f9:a3:96:0d:fa:27:fd:c8:38:bf:3d: e7:0d:5c:ed:79:70:d1:73:25:07:48:cb:1f:6e:92:57:3a:84: db:ad:1b:50:eb:c3:e1:29:64:5e:2a:35:ae:88:10:b7:56:20: ee:42:6c:e2:4e:39:62:12:bb:6c:a0:ac:02:2c:15:ab:d0:70: 1b:af:97:9a:ee:01:5e:4e:16:05:5c:9d:d5:fb:71:d5:eb:73: db:98:6e:16:eb:5e:80:01:e2:24:64:0e:b8:24:9f:50:fb:a4: 44:c6:da:21:6a:be:06:41:01:83:c8:26:42:22:af:61:66:31: ff:cc:26:10:89:ca:dc:19:3a:8f:df:72:8e:31:c6:1e:b1:53: 2b:1d:01:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDMzMUQxMTAvBgNVBAUTKEQzQTlCNENFNzkzOEQ3MkEyNTUwNTRBMEMwODVCRjc4 OEVCMDY5QjAwHhcNMjUwNTMwMjAzODEwWhcNMjUwNjA2MjAzODEwWjAYMRYwFAYD VQQDEw02ODNhMTczMi1lM2U1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt4o0QTvUA3joAavdh0bFmUOKOh86KoZMpIjnCiPiDOLAD5rrNxn9yYI8/KOZ TdC3Q6RYD+W0UWy1XhIcaVN+sKTH+pgF+DLewAWEqcKI/ukfSn+Oox21AuC4tXn2 459eUqL5+z9j+pxEowlvJsvhlddPfmCi6obHfubIFpUt4tx/AZQe6YKrSrAittuN RO4UzGICZPvtXkraBM2fb8hfw+oo3AaZDe2qXgwLlLDsmd213Q9Wca66zWGpZPdr /nd7n163wI57x8P5TM1rSlTu6gQtwpvvFBNbniiNhnZXCF0Zaae+gR3+OcZkT+fx 20pefZQgRKnqCdZYAvJkOQQ3MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPZc5sW4 l9lwCdYvbJGySfCUKjozMB8GA1UdIwQYMBaAFNOptM55ONcqJVBUoMCFv3iOsGmw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzMxRC80QjQ1QkZFOEFE MUUxMUVBOTRDN0U1ODFDNEY5QUUwMi8wNm0wem5rNDF5b2xVRlNnd0lXX2VJNndh YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA2bTB6bms0MXlvbFVGU2d3SVdfZUk2d2FiQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzMxRC80QjQ1QkZFOEFEMUUxMUVBOTRDN0U1ODFDNEY5QUUwMi8wNm0wem5rNDF5 b2xVRlNnd0lXX2VJNndhYkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDQ91wSrobt+SFcSwKwVAhaJCY0iES198MCt7Lu6ZfSPMeThOvW0Mwa mduaQf4+GOm/9Fr4E1xnutwn/S1AB3oj8NCnx7NFQ7BGyY4lCpLoum66U3nJ+r9f +VIqIPxcd7wj1j1kTAe8IphcQ7AObyxs8eMh+aOWDfon/cg4vz3nDVzteXDRcyUH SMsfbpJXOoTbrRtQ68PhKWReKjWuiBC3ViDuQmziTjliErtsoKwCLBWr0HAbr5ea 7gFeThYFXJ3V+3HV63PbmG4W616AAeIkZA64JJ9Q+6RExtohar4GQQGDyCZCIq9h ZjH/zCYQicrcGTqP33KOMcYesVMrHQF+ -----END CERTIFICATE-----Generated at Sat May 31 17:11:24 2025 by rpki-client