$ rpki-client -vvf rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft File: n6yKuWoNopKfw9GHG-1vdD6MlXc.mft (raw, json) Hash identifier: 6IkLXVOZYpz7tAaEpya8cBnrg4DqIe6WA0qkJpHYqrY= Subject key identifier: 63:85:B4:16:6F:78:D7:57:30:C1:71:0C:BC:F8:C2:50:B2:53:C9:0C Authority key identifier: 9F:AC:8A:B9:6A:0D:A2:92:9F:C3:D1:87:1B:ED:6F:74:3E:8C:95:77 Certificate issuer: /CN=A916E2DC/serialNumber=9FAC8AB96A0DA2929FC3D1871BED6F743E8C9577 Certificate serial: 01EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6yKuWoNopKfw9GHG-1vdD6MlXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft Manifest number: 01E6 Signing time: Sat 31 May 2025 02:29:14 +0000 Manifest this update: Sat 31 May 2025 02:29:13 +0000 Manifest next update: Sat 07 Jun 2025 02:29:13 +0000 Files and hashes: 1: n6yKuWoNopKfw9GHG-1vdD6MlXc.crl (hash: x5KGV7jaN7awOiuTb4ETLoJ5iA39NTxTfh6yKtWEMjc=) 2: 6993B4CCD43B11EDA821F80DC4F9AE02.roa (hash: ZSI/iXYWNqdEgciLkCgrj+0eyDroB8ECUVdL5jcas7g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.crl rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6yKuWoNopKfw9GHG-1vdD6MlXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:29:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 495 (0x1ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E2DC, serialNumber=9FAC8AB96A0DA2929FC3D1871BED6F743E8C9577 Validity Not Before: May 31 02:29:13 2025 GMT Not After : Jun 7 02:29:13 2025 GMT Subject: CN=683a6979-8c82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ea:ab:51:72:c8:2a:d2:0e:a8:ca:34:89:09: ec:0e:84:10:26:44:ad:61:21:cd:3c:b4:9d:bd:a2: 54:99:c3:89:bc:39:ac:1a:0d:49:56:95:1f:cb:e5: f6:42:09:49:27:da:d9:b1:4f:8c:af:d2:53:39:bf: cf:b7:e3:e6:51:a4:a8:ac:5c:f1:3a:07:11:99:1e: fe:3f:c9:49:94:14:d7:2b:1b:25:1a:0b:53:8a:04: e6:ca:8f:6a:42:38:e6:ad:95:5b:54:3e:49:c9:ec: 1b:c8:f8:b6:bb:54:df:6d:46:b1:0f:93:3b:ff:15: 1f:2f:d9:d0:4e:09:1c:1a:66:29:f3:12:b3:47:cd: 82:28:0d:61:20:b4:95:46:03:81:fc:46:56:71:30: ad:5d:2e:44:d9:f1:0a:c6:ca:66:62:eb:db:83:14: 32:0d:1e:ef:be:45:43:8a:99:35:7d:f4:33:c0:05: 5f:71:20:63:b0:cc:53:be:8f:46:aa:12:70:f7:f7: c6:1b:9b:18:92:1e:a3:2b:2e:eb:0f:b7:0c:7c:9f: ee:22:6c:b8:ce:3a:5d:37:7b:4f:10:7b:f3:1b:8d: df:ff:5a:e4:52:7c:7e:d5:76:26:f6:6a:90:03:d2: 9e:d0:56:c5:11:8d:94:3d:ec:b0:e4:7b:03:f3:7d: be:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:85:B4:16:6F:78:D7:57:30:C1:71:0C:BC:F8:C2:50:B2:53:C9:0C X509v3 Authority Key Identifier: keyid:9F:AC:8A:B9:6A:0D:A2:92:9F:C3:D1:87:1B:ED:6F:74:3E:8C:95:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6yKuWoNopKfw9GHG-1vdD6MlXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:92:6b:4d:33:b7:33:1d:05:d2:0b:4f:05:43:64:48:cf:c1: 49:64:ef:58:1d:35:91:40:91:79:04:db:ba:62:83:4b:44:d8: 30:6d:90:89:26:11:b6:ea:b5:fb:9c:ba:f9:d0:6c:d7:df:0f: cb:0f:79:60:9f:ca:5d:47:89:52:29:fe:64:e0:b8:56:65:04: ad:f3:f2:6a:e5:72:68:b5:a0:a7:ce:ac:a7:70:75:9a:21:92: ba:5f:58:a0:c3:ca:ca:cd:ae:66:db:e0:1a:be:9e:f4:ef:f9: e1:d1:11:7e:df:28:6b:fa:03:d1:5f:5b:a4:f1:46:99:e7:50: 27:ba:74:96:d8:5b:98:02:1c:86:de:2a:96:df:69:87:f1:04: ac:11:9e:b3:3c:ee:ae:97:37:07:67:af:82:ee:ba:70:10:b1: 98:c7:74:21:ba:37:d1:64:71:85:85:80:35:28:d9:04:6c:d0: 11:7e:81:f3:a9:58:60:e0:5a:51:06:20:94:f4:76:ee:15:1c: ca:04:47:c9:47:8e:5c:f2:33:85:94:d0:64:38:11:12:d8:91: 68:30:90:fa:d8:59:53:9b:69:66:03:34:cd:68:02:dc:db:e4: ef:16:72:c3:6b:52:92:87:62:0f:1c:17:b8:e2:64:2a:0b:a7: b8:de:4d:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkUyREMxMTAvBgNVBAUTKDlGQUM4QUI5NkEwREEyOTI5RkMzRDE4NzFCRUQ2Rjc0 M0U4Qzk1NzcwHhcNMjUwNTMxMDIyOTEzWhcNMjUwNjA3MDIyOTEzWjAYMRYwFAYD VQQDEw02ODNhNjk3OS04YzgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApuqrUXLIKtIOqMo0iQnsDoQQJkStYSHNPLSdvaJUmcOJvDmsGg1JVpUfy+X2 QglJJ9rZsU+Mr9JTOb/Pt+PmUaSorFzxOgcRmR7+P8lJlBTXKxslGgtTigTmyo9q QjjmrZVbVD5JyewbyPi2u1TfbUaxD5M7/xUfL9nQTgkcGmYp8xKzR82CKA1hILSV RgOB/EZWcTCtXS5E2fEKxspmYuvbgxQyDR7vvkVDipk1ffQzwAVfcSBjsMxTvo9G qhJw9/fGG5sYkh6jKy7rD7cMfJ/uImy4zjpdN3tPEHvzG43f/1rkUnx+1XYm9mqQ A9Ke0FbFEY2UPeyw5HsD832+NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGOFtBZv eNdXMMFxDLz4wlCyU8kMMB8GA1UdIwQYMBaAFJ+sirlqDaKSn8PRhxvtb3Q+jJV3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTJEQy82RDg5NjQ0QTZB RTcxMUVEOTRCNDRDODdDNEY5QUUwMi9uNnlLdVdvTm9wS2Z3OUdIRy0xdmRENk1s WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL242eUt1V29Ob3BLZnc5R0hHLTF2ZEQ2TWxYYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTJEQy82RDg5NjQ0QTZBRTcxMUVEOTRCNDRDODdDNEY5QUUwMi9uNnlLdVdvTm9w S2Z3OUdIRy0xdmRENk1sWGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjkmtNM7czHQXSC08FQ2RIz8FJZO9YHTWRQJF5BNu6YoNLRNgwbZCJ JhG26rX7nLr50GzX3w/LD3lgn8pdR4lSKf5k4LhWZQSt8/Jq5XJotaCnzqyncHWa IZK6X1igw8rKza5m2+Aavp707/nh0RF+3yhr+gPRX1uk8UaZ51AnunSW2FuYAhyG 3iqW32mH8QSsEZ6zPO6ulzcHZ6+C7rpwELGYx3QhujfRZHGFhYA1KNkEbNARfoHz qVhg4FpRBiCU9HbuFRzKBEfJR45c8jOFlNBkOBES2JFoMJD62FlTm2lmAzTNaALc 2+TvFnLDa1KSh2IPHBe44mQqC6e43k1G -----END CERTIFICATE-----Generated at Sat May 31 17:12:56 2025 by rpki-client