$ rpki-client -vvf rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.mft File: U0TWuzfqDMOR0SQgetmV_Nd7npU.mft (raw, json) Hash identifier: knN0yKyBsHj3OV+2d6drS+2S7zoS/oqxXH/2JnYKZgs= Subject key identifier: DF:DD:1F:49:20:B6:B4:E5:5C:3C:CB:0D:DA:51:11:6F:1F:7F:8C:EE Authority key identifier: 53:44:D6:BB:37:EA:0C:C3:91:D1:24:20:7A:D9:95:FC:D7:7B:9E:95 Certificate issuer: /CN=A91881D5/serialNumber=5344D6BB37EA0CC391D124207AD995FCD77B9E95 Certificate serial: 6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U0TWuzfqDMOR0SQgetmV_Nd7npU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.mft Manifest number: 6C Signing time: Thu 05 Jun 2025 06:23:22 +0000 Manifest this update: Thu 05 Jun 2025 06:23:21 +0000 Manifest next update: Thu 12 Jun 2025 06:23:21 +0000 Files and hashes: 1: U0TWuzfqDMOR0SQgetmV_Nd7npU.crl (hash: Un9scgLK3tB3CCJtGqmaXz8X56N8myvtGaXKwUMtFYU=) 2: 0C8BE222C89F11EF972B8B0FC4F9AE02.roa (hash: R1ZRqn0ylt//iP3Dpq4PDjSTmlLC/ZvrxfTWyncyjuk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.crl rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U0TWuzfqDMOR0SQgetmV_Nd7npU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 06:23:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 111 (0x6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91881D5, serialNumber=5344D6BB37EA0CC391D124207AD995FCD77B9E95 Validity Not Before: Jun 5 06:23:21 2025 GMT Not After : Jun 12 06:23:21 2025 GMT Subject: CN=684137da-7ecc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e2:e2:c8:1f:24:db:40:29:31:54:e5:51:eb: f1:0d:f8:56:0d:d9:4c:4a:d2:2c:c9:72:29:c6:45: 22:a2:67:cd:66:1f:5a:3a:57:b7:de:a4:ce:57:0b: 81:42:bc:94:3a:46:1d:bc:71:b2:10:4e:63:8c:e9: 5a:09:ef:09:79:a9:b4:14:c0:1d:21:6c:18:ce:6b: df:e0:f1:e7:4f:3c:ba:29:af:ad:c5:8d:fa:dc:6f: df:46:d6:68:61:12:de:63:f8:46:1e:72:62:a0:2e: 89:c6:f2:87:36:fa:2e:64:86:fa:79:b0:f4:2d:f2: f3:0a:84:56:fb:bf:13:ef:1b:9b:58:93:e1:ca:44: 6c:19:83:fd:f3:fb:e8:2c:6e:9a:fc:db:65:9e:9a: 26:b6:32:cc:d7:12:4e:79:17:2b:48:b0:5b:b6:3f: f6:c1:32:97:1f:12:59:14:06:c6:ab:cd:3f:51:da: 37:b2:46:4f:23:5e:14:75:05:c9:4a:e2:ff:76:d7: 99:89:2b:e7:8c:c9:45:ae:6f:75:bc:f2:30:f6:c0: af:ed:85:cd:3e:9f:de:10:57:98:6a:94:8a:9c:a2: 5c:94:7c:4d:a7:b3:bb:df:93:0f:b8:1a:e8:0d:d4: fd:b4:97:74:f3:60:82:74:e5:0c:b0:28:da:43:ae: bb:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:DD:1F:49:20:B6:B4:E5:5C:3C:CB:0D:DA:51:11:6F:1F:7F:8C:EE X509v3 Authority Key Identifier: keyid:53:44:D6:BB:37:EA:0C:C3:91:D1:24:20:7A:D9:95:FC:D7:7B:9E:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U0TWuzfqDMOR0SQgetmV_Nd7npU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:9d:69:87:5a:3d:b7:c0:f4:2e:09:10:d4:dd:75:8d:c7:50: cf:38:3c:41:10:3f:f6:8c:73:a8:4d:e9:7d:cd:ed:28:f6:3a: 29:1c:69:b9:fe:5d:62:ae:dc:e5:65:1c:d3:95:a9:24:64:5e: ba:60:8b:7d:c8:42:ad:10:c2:9a:3f:2a:d5:f9:f7:af:16:cd: 4b:5f:ed:8b:27:f2:12:d9:ee:02:f0:da:f2:c0:b2:67:81:5d: b9:9e:7f:3c:72:9c:35:2e:60:50:6f:34:83:9d:b2:2b:3e:37: 59:39:93:bf:f4:ea:80:44:e1:54:a4:21:f9:d1:86:e4:d0:55: 05:e9:6e:93:64:3f:fc:1d:6d:10:c7:32:11:52:a7:94:c2:ae: d6:ff:ac:93:ae:65:0d:f7:d4:9c:fc:b7:04:15:2b:f7:f2:36: 6c:84:a6:30:bf:4a:1c:80:17:d0:3f:d4:76:1d:2d:6b:82:e4: 01:ae:de:f0:27:d3:2e:69:13:d8:f0:9c:cf:99:ff:d8:3f:08: b5:fc:f4:bf:9a:49:2c:f2:50:08:32:86:77:77:fe:f8:ad:34: 88:a6:bb:7d:be:a2:c0:26:ce:24:b8:2b:07:0c:67:0a:5d:21: 26:4e:19:59:6c:b6:6a:57:43:7b:da:f0:24:60:c9:82:96:7c: c7:72:15:9c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 ODFENTExMC8GA1UEBRMoNTM0NEQ2QkIzN0VBMENDMzkxRDEyNDIwN0FEOTk1RkNE NzdCOUU5NTAeFw0yNTA2MDUwNjIzMjFaFw0yNTA2MTIwNjIzMjFaMBgxFjAUBgNV BAMTDTY4NDEzN2RhLTdlY2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDI4uLIHyTbQCkxVOVR6/EN+FYN2UxK0izJcinGRSKiZ81mH1o6V7fepM5XC4FC vJQ6Rh28cbIQTmOM6VoJ7wl5qbQUwB0hbBjOa9/g8edPPLopr63Fjfrcb99G1mhh Et5j+EYecmKgLonG8oc2+i5khvp5sPQt8vMKhFb7vxPvG5tYk+HKRGwZg/3z++gs bpr822Wemia2MszXEk55FytIsFu2P/bBMpcfElkUBsarzT9R2jeyRk8jXhR1BclK 4v9215mJK+eMyUWub3W88jD2wK/thc0+n94QV5hqlIqcolyUfE2ns7vfkw+4GugN 1P20l3TzYIJ05QywKNpDrrsrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU390fSSC2 tOVcPMsN2lERbx9/jO4wHwYDVR0jBBgwFoAUU0TWuzfqDMOR0SQgetmV/Nd7npUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4MUQ1LzY2NURCN0M2QTdD MDExRUY5OEJBNUUyQUM0RjlBRTAyL1UwVFd1emZxRE1PUjBTUWdldG1WX05kN25w VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVTBUV3V6ZnFETU9SMFNRZ2V0bVZfTmQ3bnBVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4 MUQ1LzY2NURCN0M2QTdDMDExRUY5OEJBNUUyQUM0RjlBRTAyL1UwVFd1emZxRE1P UjBTUWdldG1WX05kN25wVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD6daYdaPbfA9C4JENTddY3HUM84PEEQP/aMc6hN6X3N7Sj2Oikcabn+ XWKu3OVlHNOVqSRkXrpgi33IQq0Qwpo/KtX5968WzUtf7Ysn8hLZ7gLw2vLAsmeB XbmefzxynDUuYFBvNIOdsis+N1k5k7/06oBE4VSkIfnRhuTQVQXpbpNkP/wdbRDH MhFSp5TCrtb/rJOuZQ331Jz8twQVK/fyNmyEpjC/ShyAF9A/1HYdLWuC5AGu3vAn 0y5pE9jwnM+Z/9g/CLX89L+aSSzyUAgyhnd3/vitNIimu32+osAmziS4KwcMZwpd ISZOGVlstmpXQ3va8CRgyYKWfMdyFZw= -----END CERTIFICATE-----Generated at Thu Jun 5 19:16:29 2025 by rpki-client