$ rpki-client -vvf rpki.apnic.net/member_repository/A91557F5/EC405E165C6F11EBAC3A8856C4F9AE02/sG-Cllr-46vaGzofLWAX4AcnjOU.mft File: sG-Cllr-46vaGzofLWAX4AcnjOU.mft (raw, json) Hash identifier: kcVk6YS4Rfqmj5z1UDwNyCsHkpClhmz/D3J3NJx+TLE= Subject key identifier: E2:00:AE:85:E7:72:79:58:91:15:B7:8B:F5:6B:E7:48:DD:5B:CC:AC Authority key identifier: B0:6F:82:96:5A:FE:E3:AB:DA:1B:3A:1F:2D:60:17:E0:07:27:8C:E5 Certificate issuer: /CN=A91557F5/serialNumber=B06F82965AFEE3ABDA1B3A1F2D6017E007278CE5 Certificate serial: 06D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sG-Cllr-46vaGzofLWAX4AcnjOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91557F5/EC405E165C6F11EBAC3A8856C4F9AE02/sG-Cllr-46vaGzofLWAX4AcnjOU.mft Manifest number: 06D0 Signing time: Tue 10 Jun 2025 21:59:12 +0000 Manifest this update: Tue 10 Jun 2025 21:59:12 +0000 Manifest next update: Tue 17 Jun 2025 21:59:12 +0000 Files and hashes: 1: sG-Cllr-46vaGzofLWAX4AcnjOU.crl (hash: NFFVzUet7OFlcm0gBgH/TBOLRcHZLjn1+PrzVIdgQIw=) 2: 97D3AF84DCC611EDB75B695EC4F9AE02.roa (hash: rRipsWIPpFCqvwU6GU8CPWQ7Gw24E8Icdhb0XLzQIeY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91557F5/EC405E165C6F11EBAC3A8856C4F9AE02/sG-Cllr-46vaGzofLWAX4AcnjOU.crl rsync://rpki.apnic.net/member_repository/A91557F5/EC405E165C6F11EBAC3A8856C4F9AE02/sG-Cllr-46vaGzofLWAX4AcnjOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sG-Cllr-46vaGzofLWAX4AcnjOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 21:59:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1752 (0x6d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91557F5, serialNumber=B06F82965AFEE3ABDA1B3A1F2D6017E007278CE5 Validity Not Before: Jun 10 21:59:12 2025 GMT Not After : Jun 17 21:59:12 2025 GMT Subject: CN=6848aab0-8f8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bb:5f:b1:9d:8b:ed:ec:45:cc:d2:3d:86:1d: 83:a9:5e:32:17:c1:64:7b:b8:c2:62:9e:51:26:04: 2f:5f:46:a0:f4:c4:6b:e2:ac:3b:34:ee:66:c7:92: 69:93:45:f0:3c:c8:f1:09:ef:5f:9a:13:ed:4f:6e: 25:e3:05:97:ca:47:a4:69:42:d4:f7:dc:10:5b:f8: 47:cf:30:a4:d7:b9:aa:c3:e7:30:0c:af:79:ff:ee: 6e:20:b1:12:72:17:ad:1d:92:8f:62:85:ec:a5:9b: 18:c3:8b:89:24:ce:84:e0:e6:07:4c:e8:23:37:de: 15:28:c6:1f:95:d2:b5:4e:93:0d:3f:f7:47:1e:44: 26:25:83:71:66:bc:90:d1:7f:83:25:2f:06:9e:7f: ff:a0:c8:73:6e:b3:77:85:f2:61:5b:eb:18:83:be: 4b:1b:41:dd:70:b4:b9:1d:84:f9:61:bd:4c:f8:8a: e5:33:d7:2c:0e:98:9a:4c:91:87:7b:a5:a2:14:bd: fc:19:7a:f4:d8:2d:d5:3e:ef:f1:85:d1:c7:d6:dc: e9:65:7c:cc:52:43:04:80:d5:21:fb:f8:00:68:f4: d2:95:36:05:00:99:c6:26:52:a5:30:16:80:c8:4d: 32:fe:0f:9c:28:4c:93:44:3e:df:64:1b:e8:b7:a7: 84:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:00:AE:85:E7:72:79:58:91:15:B7:8B:F5:6B:E7:48:DD:5B:CC:AC X509v3 Authority Key Identifier: keyid:B0:6F:82:96:5A:FE:E3:AB:DA:1B:3A:1F:2D:60:17:E0:07:27:8C:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91557F5/EC405E165C6F11EBAC3A8856C4F9AE02/sG-Cllr-46vaGzofLWAX4AcnjOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sG-Cllr-46vaGzofLWAX4AcnjOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557F5/EC405E165C6F11EBAC3A8856C4F9AE02/sG-Cllr-46vaGzofLWAX4AcnjOU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:cb:29:25:ff:23:a0:14:5a:a8:3c:99:59:ed:d3:04:dd:4c: c4:31:b5:7e:19:aa:4b:f6:60:e0:0f:35:cc:b1:f8:05:47:d4: 2c:b6:06:a5:ca:1f:75:8c:bc:db:3f:a6:55:97:65:1a:51:e1: 93:0a:41:96:15:cb:3d:f8:d3:d9:13:e9:de:e3:9f:1a:22:48: f0:71:8f:4c:59:e2:d9:19:8f:b2:06:bd:9a:32:98:81:87:ca: 53:e9:b5:77:83:40:ed:78:26:c7:3b:b6:1a:6a:7a:e1:91:0e: 16:7c:ec:3d:fe:1b:e7:1c:bd:3b:38:53:5a:3c:68:f4:05:cc: 32:8e:72:ff:e7:40:fd:b0:12:30:a3:db:5d:f2:e0:0e:4f:f8: 0e:dd:54:08:dc:cd:9d:c1:73:13:55:65:89:a7:be:d2:24:96: 44:51:a4:56:ff:5a:bf:b4:ac:aa:36:8f:20:48:88:94:7b:3e: cd:1d:05:68:28:64:ce:d1:95:02:2c:12:df:c8:b5:77:10:60: f8:7c:56:37:6b:06:e3:ff:df:66:cb:cf:c5:58:11:15:e6:56: 7f:ca:f3:47:a7:5c:f4:a8:d3:7f:68:53:2d:03:12:ac:c8:d3: 78:09:ab:31:c4:7a:54:cf:66:60:6a:17:6d:3b:3e:0e:42:9b: 17:56:4f:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU3RjUxMTAvBgNVBAUTKEIwNkY4Mjk2NUFGRUUzQUJEQTFCM0ExRjJENjAxN0Uw MDcyNzhDRTUwHhcNMjUwNjEwMjE1OTEyWhcNMjUwNjE3MjE1OTEyWjAYMRYwFAYD VQQDEw02ODQ4YWFiMC04ZjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt7tfsZ2L7exFzNI9hh2DqV4yF8Fke7jCYp5RJgQvX0ag9MRr4qw7NO5mx5Jp k0XwPMjxCe9fmhPtT24l4wWXykekaULU99wQW/hHzzCk17mqw+cwDK95/+5uILES chetHZKPYoXspZsYw4uJJM6E4OYHTOgjN94VKMYfldK1TpMNP/dHHkQmJYNxZryQ 0X+DJS8Gnn//oMhzbrN3hfJhW+sYg75LG0HdcLS5HYT5Yb1M+IrlM9csDpiaTJGH e6WiFL38GXr02C3VPu/xhdHH1tzpZXzMUkMEgNUh+/gAaPTSlTYFAJnGJlKlMBaA yE0y/g+cKEyTRD7fZBvot6eE3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOIAroXn cnlYkRW3i/Vr50jdW8ysMB8GA1UdIwQYMBaAFLBvgpZa/uOr2hs6Hy1gF+AHJ4zl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTdGNS9FQzQwNUUxNjVD NkYxMUVCQUMzQTg4NTZDNEY5QUUwMi9zRy1DbGxyLTQ2dmFHem9mTFdBWDRBY25q T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NHLUNsbHItNDZ2YUd6b2ZMV0FYNEFjbmpPVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTdGNS9FQzQwNUUxNjVDNkYxMUVCQUMzQTg4NTZDNEY5QUUwMi9zRy1DbGxyLTQ2 dmFHem9mTFdBWDRBY25qT1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuyykl/yOgFFqoPJlZ7dME3UzEMbV+GapL9mDgDzXMsfgFR9Qstgal yh91jLzbP6ZVl2UaUeGTCkGWFcs9+NPZE+ne458aIkjwcY9MWeLZGY+yBr2aMpiB h8pT6bV3g0DteCbHO7YaanrhkQ4WfOw9/hvnHL07OFNaPGj0BcwyjnL/50D9sBIw o9td8uAOT/gO3VQI3M2dwXMTVWWJp77SJJZEUaRW/1q/tKyqNo8gSIiUez7NHQVo KGTO0ZUCLBLfyLV3EGD4fFY3awbj/99my8/FWBEV5lZ/yvNHp1z0qNN/aFMtAxKs yNN4CasxxHpUz2ZgahdtOz4OQpsXVk8+ -----END CERTIFICATE-----Generated at Thu Jun 12 12:43:58 2025 by rpki-client