$ rpki-client -vvf rpki.apnic.net/member_repository/A91722C3/1523D2E407AB11E8AE5DFE64C4F9AE02/6tNqfTCwZhVrgDAlqqpf-SetdcI.mft File: 6tNqfTCwZhVrgDAlqqpf-SetdcI.mft (raw, json) Hash identifier: pwhxaVwpw+ae/7R4NRZ0amPdW/QuhKkI3a/wYg0vj3o= Subject key identifier: 6F:EB:D2:A6:27:3C:60:D8:F1:E6:41:8C:AB:C5:37:87:4C:40:55:FB Authority key identifier: EA:D3:6A:7D:30:B0:66:15:6B:80:30:25:AA:AA:5F:F9:27:AD:75:C2 Certificate issuer: /CN=A91722C3/serialNumber=EAD36A7D30B066156B803025AAAA5FF927AD75C2 Certificate serial: 1682 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tNqfTCwZhVrgDAlqqpf-SetdcI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91722C3/1523D2E407AB11E8AE5DFE64C4F9AE02/6tNqfTCwZhVrgDAlqqpf-SetdcI.mft Manifest number: 167B Signing time: Mon 30 Jun 2025 16:51:14 +0000 Manifest this update: Mon 30 Jun 2025 16:51:13 +0000 Manifest next update: Mon 07 Jul 2025 16:51:13 +0000 Files and hashes: 1: 6tNqfTCwZhVrgDAlqqpf-SetdcI.crl (hash: tO1Jtaz+AnEofyQ2BG8Eh9x2TttT24aKaQDnNrssWE0=) 2: 3B7EBA5C7D7411EBAEFB906AC4F9AE02.roa (hash: 561yu9MGU0vumwQn4MDwqvQwRWFnU69Hgu+DoY89L9g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91722C3/1523D2E407AB11E8AE5DFE64C4F9AE02/6tNqfTCwZhVrgDAlqqpf-SetdcI.crl rsync://rpki.apnic.net/member_repository/A91722C3/1523D2E407AB11E8AE5DFE64C4F9AE02/6tNqfTCwZhVrgDAlqqpf-SetdcI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tNqfTCwZhVrgDAlqqpf-SetdcI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 16:51:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5762 (0x1682) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91722C3, serialNumber=EAD36A7D30B066156B803025AAAA5FF927AD75C2 Validity Not Before: Jun 30 16:51:13 2025 GMT Not After : Jul 7 16:51:13 2025 GMT Subject: CN=6862c082-2ad3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6d:e4:82:31:92:ea:29:4e:30:1e:49:8a:53: 23:de:3f:51:1b:e7:98:bd:95:56:35:bf:a4:c4:89: c3:c5:14:af:a4:23:80:50:3b:5a:4a:a4:f5:28:a9: 46:e8:bc:26:b6:19:d8:7f:5b:f4:a3:6d:57:fb:fc: 93:93:31:9c:4e:b2:61:5f:f6:f3:22:2c:a4:e6:55: d4:54:b6:e8:5a:7b:c0:35:1c:b3:4f:e4:78:78:ea: b5:bc:f9:8b:c2:80:77:f5:af:f3:33:f3:d8:b5:69: ae:45:ab:92:ba:6c:c7:bc:c3:5b:52:d5:04:68:04: 73:e0:f5:2a:da:7d:3f:4e:61:98:6c:c1:7d:a8:7a: 2c:23:c8:a1:cd:dc:83:68:c8:59:d3:15:5f:be:16: a3:76:c7:5d:1d:f2:4b:cf:53:73:5a:11:b1:80:21: a0:4e:d6:8c:22:e3:8b:9f:51:2f:c9:31:57:6d:ac: 8f:13:30:c1:fe:af:1c:de:13:33:22:3a:a7:4a:04: ab:bf:0b:92:b6:aa:a9:38:5e:95:20:ab:ec:ff:58: c7:b3:39:88:e9:b9:ba:20:cf:05:96:25:ef:fd:c9: 94:cb:e4:f9:22:c9:89:b2:a7:bf:af:50:5b:de:7b: 3d:7b:dd:52:cc:1a:aa:d3:37:94:85:32:ba:b5:7e: 1d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:EB:D2:A6:27:3C:60:D8:F1:E6:41:8C:AB:C5:37:87:4C:40:55:FB X509v3 Authority Key Identifier: keyid:EA:D3:6A:7D:30:B0:66:15:6B:80:30:25:AA:AA:5F:F9:27:AD:75:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91722C3/1523D2E407AB11E8AE5DFE64C4F9AE02/6tNqfTCwZhVrgDAlqqpf-SetdcI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tNqfTCwZhVrgDAlqqpf-SetdcI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91722C3/1523D2E407AB11E8AE5DFE64C4F9AE02/6tNqfTCwZhVrgDAlqqpf-SetdcI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:ff:7b:73:e5:52:6e:d5:51:df:b3:10:21:bf:ee:32:e4:90: 80:f9:85:b5:78:d8:cb:2b:d0:b1:ef:cc:60:cb:ec:1f:85:a5: 05:73:08:e7:47:36:ed:42:2b:bd:e8:45:2d:7a:d0:52:90:63: b1:05:29:a0:98:91:13:d1:3a:4c:c5:e1:ee:3b:dc:12:8c:91: d5:45:44:a0:ad:56:c0:c0:cd:40:3b:75:2f:31:eb:47:03:5b: 98:76:4a:80:6d:0c:35:ba:ac:b9:09:1c:0f:41:eb:87:ed:46: 78:54:f2:3f:80:c6:a3:a6:69:cf:07:46:21:21:52:f7:e0:b5: c5:cb:fd:49:eb:e9:5b:72:35:69:1c:49:69:98:2a:6e:e3:6a: 8d:c7:6c:58:f6:3a:aa:06:60:6b:e8:36:96:aa:b6:50:a3:6c: 36:69:8a:b3:c4:6a:77:a1:49:e5:87:34:f9:2f:49:a1:76:5f: 88:78:ca:7b:a1:79:3b:d1:2f:1d:a6:d8:1c:3b:bd:59:61:d8: 22:b5:f2:2f:5d:59:11:e1:38:67:1f:c4:12:79:a4:3f:03:79: 11:cc:66:8a:bd:12:e1:68:af:23:ed:22:fb:a0:6b:76:35:0b: 03:84:eb:55:33:eb:a9:8e:26:86:09:3b:47:95:67:91:c1:e3: cf:0a:4d:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzIyQzMxMTAvBgNVBAUTKEVBRDM2QTdEMzBCMDY2MTU2QjgwMzAyNUFBQUE1RkY5 MjdBRDc1QzIwHhcNMjUwNjMwMTY1MTEzWhcNMjUwNzA3MTY1MTEzWjAYMRYwFAYD VQQDEw02ODYyYzA4Mi0yYWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtm3kgjGS6ilOMB5JilMj3j9RG+eYvZVWNb+kxInDxRSvpCOAUDtaSqT1KKlG 6LwmthnYf1v0o21X+/yTkzGcTrJhX/bzIiyk5lXUVLboWnvANRyzT+R4eOq1vPmL woB39a/zM/PYtWmuRauSumzHvMNbUtUEaARz4PUq2n0/TmGYbMF9qHosI8ihzdyD aMhZ0xVfvhajdsddHfJLz1NzWhGxgCGgTtaMIuOLn1EvyTFXbayPEzDB/q8c3hMz IjqnSgSrvwuStqqpOF6VIKvs/1jHszmI6bm6IM8FliXv/cmUy+T5IsmJsqe/r1Bb 3ns9e91SzBqq0zeUhTK6tX4drQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG/r0qYn PGDY8eZBjKvFN4dMQFX7MB8GA1UdIwQYMBaAFOrTan0wsGYVa4AwJaqqX/knrXXC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjJDMy8xNTIzRDJFNDA3 QUIxMUU4QUU1REZFNjRDNEY5QUUwMi82dE5xZlRDd1poVnJnREFscXFwZi1TZXRk Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ0TnFmVEN3WmhWcmdEQWxxcXBmLVNldGRjSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MjJDMy8xNTIzRDJFNDA3QUIxMUU4QUU1REZFNjRDNEY5QUUwMi82dE5xZlRDd1po VnJnREFscXFwZi1TZXRkY0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBG/3tz5VJu1VHfsxAhv+4y5JCA+YW1eNjLK9Cx78xgy+wfhaUFcwjn RzbtQiu96EUtetBSkGOxBSmgmJET0TpMxeHuO9wSjJHVRUSgrVbAwM1AO3UvMetH A1uYdkqAbQw1uqy5CRwPQeuH7UZ4VPI/gMajpmnPB0YhIVL34LXFy/1J6+lbcjVp HElpmCpu42qNx2xY9jqqBmBr6DaWqrZQo2w2aYqzxGp3oUnlhzT5L0mhdl+IeMp7 oXk70S8dptgcO71ZYdgitfIvXVkR4ThnH8QSeaQ/A3kRzGaKvRLhaK8j7SL7oGt2 NQsDhOtVM+upjiaGCTtHlWeRwePPCk0k -----END CERTIFICATE-----Generated at Tue Jul 1 18:56:52 2025 by rpki-client