$ rpki-client -vvf rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.mft File: 6zyPJLutyUE0hx1uX9C3xYtJ08k.mft (raw, json) Hash identifier: Z0ktkHcUuaPhW0GTxk9+lbRBhq+18Br88AbOrnQhJUk= Subject key identifier: 55:0C:D6:87:2B:42:28:B7:FF:1F:49:21:EF:F8:8A:10:26:76:5D:CC Authority key identifier: EB:3C:8F:24:BB:AD:C9:41:34:87:1D:6E:5F:D0:B7:C5:8B:49:D3:C9 Certificate issuer: /CN=A91883D3/serialNumber=EB3C8F24BBADC94134871D6E5FD0B7C58B49D3C9 Certificate serial: A8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.mft Manifest number: 9D Signing time: Sun 01 Jun 2025 06:07:12 +0000 Manifest this update: Sun 01 Jun 2025 06:07:12 +0000 Manifest next update: Sun 08 Jun 2025 06:07:12 +0000 Files and hashes: 1: 6zyPJLutyUE0hx1uX9C3xYtJ08k.crl (hash: IgDGRqIZkzf9uNudKMrS2+M2vViNLrTSZ6gfqkUs174=) 2: 866314EE5FCC11EF8416052EC4F9AE02.roa (hash: msL/KENDVWQUMvYyaW7j5WzxEJ6sxahQk+kZqFtRzK0=) 3: 7ECAB97A5F3711EFA2A15F6DC4F9AE02.roa (hash: 47ro9pNe8tomss9aZ4VtGmmUiA4dH1RHfELIkfLkMBU=) 4: 78C65D926B0B11EFBFE25881C4F9AE02.roa (hash: jdwllMTCFqVjmHB+vWxuk6uDQD76msFkVq9++d9B8Cw=) 5: E4D80D6C3CDB11F0A9A90D61C4F9AE02.roa (hash: oDkreqtgQ3KomYzGHxeIDH9tOeB0o1ZKVDebQJ7rZiY=) 6: 2262C2483B2F11F0B024D052C4F9AE02.roa (hash: iXpdcQ/ISTEupjPO2OSMnFPp5ERjEL9fa5LIfAWm8ZQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.crl rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 06:07:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 168 (0xa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91883D3, serialNumber=EB3C8F24BBADC94134871D6E5FD0B7C58B49D3C9 Validity Not Before: Jun 1 06:07:12 2025 GMT Not After : Jun 8 06:07:12 2025 GMT Subject: CN=683bee10-8bf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cc:1e:5b:40:57:c6:33:9f:39:6b:28:e4:a7: 14:62:e4:7a:8f:a7:69:25:c8:91:a7:19:5f:eb:9b: ee:dc:6a:93:d1:04:17:38:1c:99:a4:f9:70:97:65: ce:f6:c2:cb:12:c7:82:5f:19:29:fa:88:ff:d8:3c: df:94:8a:f7:f0:25:c3:88:cf:de:cc:ed:80:16:9b: 1c:76:b9:51:58:72:6b:41:16:0c:64:74:bc:65:00: 80:71:bc:6b:17:dd:62:3a:79:03:dc:d8:49:56:4d: 74:6e:9e:1d:ba:51:b0:a3:8b:be:ad:d3:c8:9a:01: 31:18:f7:dd:11:26:09:4f:42:b7:38:0e:0b:f4:7f: fd:58:66:e1:36:a7:0f:9c:1b:b9:69:e8:b5:88:17: 69:6c:df:4e:fb:de:56:45:8a:fe:6b:df:fa:a5:4e: 3e:43:e9:1b:2e:88:0e:7a:ef:14:77:f5:68:d1:57: 00:0d:6f:63:6b:d9:62:1d:6f:20:91:c3:7b:26:b6: 86:30:17:8b:4d:85:9e:18:b2:b8:fc:c2:7e:cb:57: 12:c8:dd:2a:5d:d4:ea:84:47:ce:98:69:ca:63:9f: 02:4e:b8:18:94:e5:be:9b:ab:57:67:41:84:af:7e: ff:2d:e8:b3:ab:44:d5:17:b4:55:34:9f:84:e7:5b: 7f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:0C:D6:87:2B:42:28:B7:FF:1F:49:21:EF:F8:8A:10:26:76:5D:CC X509v3 Authority Key Identifier: keyid:EB:3C:8F:24:BB:AD:C9:41:34:87:1D:6E:5F:D0:B7:C5:8B:49:D3:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:b0:95:f6:56:5e:92:72:28:26:e6:11:1d:e4:24:a0:89:4f: 5a:99:3c:12:22:19:25:7b:2f:2d:94:b1:59:fb:0d:93:36:6b: 81:de:ec:8c:d4:a1:27:79:81:77:cd:ab:01:2a:9d:cd:74:c1: 84:33:d5:af:77:53:4a:c7:a4:4c:29:f3:c7:f5:eb:e3:35:6b: 3a:01:fc:24:23:c4:3d:7c:b7:8e:8d:15:d0:30:4e:9b:83:ca: 08:4d:81:c9:03:cf:31:d1:47:8b:db:94:10:36:74:b3:20:f5: bf:49:e6:13:88:9f:2d:cb:64:eb:a6:3a:f3:86:3f:0b:38:04: c7:b7:51:ae:2b:af:a6:b1:1f:d9:84:df:5d:61:8d:dd:3a:40: cc:4d:17:b1:e7:7d:3c:6d:4e:49:ae:12:0b:bd:42:b3:3a:77: e1:b5:4c:54:d3:c7:1f:3e:e9:50:99:9a:a1:80:5e:09:fc:3c: c7:5c:ea:fa:ac:55:ca:9d:1d:31:15:8a:81:8d:d3:18:e5:4f: 69:a6:30:9a:c6:3a:9e:1f:ef:1c:b2:8f:48:b4:9f:72:10:06: e3:ba:1a:36:fa:13:bb:48:4f:5f:02:46:84:52:ca:f1:73:27: df:19:7a:a0:70:bd:6b:db:c4:00:57:e1:79:ac:ac:13:3f:73: 7f:a5:43:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODgzRDMxMTAvBgNVBAUTKEVCM0M4RjI0QkJBREM5NDEzNDg3MUQ2RTVGRDBCN0M1 OEI0OUQzQzkwHhcNMjUwNjAxMDYwNzEyWhcNMjUwNjA4MDYwNzEyWjAYMRYwFAYD VQQDEw02ODNiZWUxMC04YmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwMweW0BXxjOfOWso5KcUYuR6j6dpJciRpxlf65vu3GqT0QQXOByZpPlwl2XO 9sLLEseCXxkp+oj/2DzflIr38CXDiM/ezO2AFpscdrlRWHJrQRYMZHS8ZQCAcbxr F91iOnkD3NhJVk10bp4dulGwo4u+rdPImgExGPfdESYJT0K3OA4L9H/9WGbhNqcP nBu5aei1iBdpbN9O+95WRYr+a9/6pU4+Q+kbLogOeu8Ud/Vo0VcADW9ja9liHW8g kcN7JraGMBeLTYWeGLK4/MJ+y1cSyN0qXdTqhEfOmGnKY58CTrgYlOW+m6tXZ0GE r37/Leizq0TVF7RVNJ+E51t/ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFUM1ocr Qii3/x9JIe/4ihAmdl3MMB8GA1UdIwQYMBaAFOs8jyS7rclBNIcdbl/Qt8WLSdPJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODNEMy84RDAzRUYzNjVF MzYxMUVGQUM5MkQzMTRDNEY5QUUwMi82enlQSkx1dHlVRTBoeDF1WDlDM3hZdEow OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZ6eVBKTHV0eVVFMGh4MXVYOUMzeFl0SjA4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODNEMy84RDAzRUYzNjVFMzYxMUVGQUM5MkQzMTRDNEY5QUUwMi82enlQSkx1dHlV RTBoeDF1WDlDM3hZdEowOGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANsJX2Vl6Scigm5hEd5CSgiU9amTwSIhkley8tlLFZ+w2TNmuB3uyM 1KEneYF3zasBKp3NdMGEM9Wvd1NKx6RMKfPH9evjNWs6AfwkI8Q9fLeOjRXQME6b g8oITYHJA88x0UeL25QQNnSzIPW/SeYTiJ8ty2Trpjrzhj8LOATHt1GuK6+msR/Z hN9dYY3dOkDMTRex5308bU5JrhILvUKzOnfhtUxU08cfPulQmZqhgF4J/DzHXOr6 rFXKnR0xFYqBjdMY5U9ppjCaxjqeH+8cso9ItJ9yEAbjuho2+hO7SE9fAkaEUsrx cyffGXqgcL1r28QAV+F5rKwTP3N/pUM1 -----END CERTIFICATE-----Generated at Mon Jun 2 22:37:20 2025 by rpki-client