$ rpki-client -vvf rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft File: 6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft (raw, json) Hash identifier: miTVFqd4zzYFkNl4rJW+eI8zPiGciMibNIYHTb/am+s= Subject key identifier: 67:D1:22:0F:40:EE:EF:54:97:18:85:F0:90:4C:A8:6F:15:B5:C7:4E Authority key identifier: E9:36:74:B1:F3:B6:91:6B:2B:63:63:B8:61:D6:B7:7B:39:05:DD:D8 Certificate issuer: /CN=A91889B6/serialNumber=E93674B1F3B6916B2B6363B861D6B77B3905DDD8 Certificate serial: 3490 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft Manifest number: 348C Signing time: Mon 02 Jun 2025 14:51:46 +0000 Manifest this update: Mon 02 Jun 2025 14:51:45 +0000 Manifest next update: Mon 09 Jun 2025 14:51:45 +0000 Files and hashes: 1: 6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl (hash: ubWo3PqVsUT9xWjdD4P3KB6oazBdlF37nBNhYKesvH8=) 2: 8D57E1664D0911EEA9837D4AC4F9AE02.roa (hash: ANRth1hLqzWtOuNRps1oUpwLuw2TshWbOFj4QYFgW9U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 05:53:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13456 (0x3490) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91889B6, serialNumber=E93674B1F3B6916B2B6363B861D6B77B3905DDD8 Validity Not Before: Jun 2 14:51:45 2025 GMT Not After : Jun 9 14:51:45 2025 GMT Subject: CN=683dba81-cd89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ab:71:c7:fa:d9:8d:1f:ea:5f:27:18:9c:71: 6d:87:2d:0b:d8:9f:a1:17:48:61:8a:fb:29:01:a3: 89:01:2d:f4:3c:00:65:84:e2:42:ee:95:28:9c:77: 99:9d:56:a8:0c:5f:a2:2c:bf:03:f5:be:f6:06:61: f0:bc:a1:67:ca:c1:ed:81:e2:1c:1f:ab:56:a1:22: 05:7c:34:2f:3f:3d:a3:8b:24:fd:92:41:a3:05:df: f9:3e:bf:ca:f6:d9:5d:9f:30:2e:ce:41:14:89:4b: b5:e5:dd:72:73:ee:ab:e0:e7:9c:8f:7f:f0:55:e9: 15:91:b6:da:1c:40:5f:c6:2a:59:96:1f:44:a5:6c: ad:0f:6b:e5:47:2b:66:f4:5d:56:9e:26:44:87:ee: 13:ac:01:3e:4f:30:27:0a:6b:9f:ee:1b:f2:69:ed: 5a:c4:eb:9e:2e:2f:dd:32:3a:e2:c6:b3:84:4f:c2: f2:7b:3b:75:0a:36:2d:70:4e:a7:89:bf:ed:17:55: 68:b9:8e:3b:71:38:2d:c4:43:a0:cb:18:b2:c8:f3: ba:82:1e:f4:df:fa:e5:4a:ba:b3:86:e7:36:49:e5: ea:f0:43:47:ec:ab:cd:28:a0:13:f0:13:a0:3a:d7: 97:6c:34:04:52:7d:b5:c4:22:1b:f9:ff:5f:55:4d: ec:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:D1:22:0F:40:EE:EF:54:97:18:85:F0:90:4C:A8:6F:15:B5:C7:4E X509v3 Authority Key Identifier: keyid:E9:36:74:B1:F3:B6:91:6B:2B:63:63:B8:61:D6:B7:7B:39:05:DD:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:66:4d:74:d5:2e:10:31:6c:61:26:04:9c:fd:2a:f5:fe:ce: bd:b5:14:ca:07:7a:b7:3a:9e:59:b5:25:a1:a1:ed:1c:d7:cc: 93:c6:97:4f:08:9e:16:4c:f3:65:b8:05:d9:9d:60:0b:0a:7b: e0:b0:eb:99:59:83:dd:d4:ef:32:0c:f7:46:ed:f8:9e:99:d1: 99:1f:4b:d8:15:06:67:81:20:b7:35:9a:04:40:37:51:94:bb: 56:ec:91:14:71:9d:52:90:ff:25:0e:60:9d:af:a6:9e:f6:73: b7:98:1a:04:38:52:06:7a:a6:bf:0f:ef:78:67:d1:7e:1c:5a: db:86:5c:78:0d:2c:b6:6e:9b:18:55:22:4f:b5:38:75:fe:13: 03:ee:1f:6d:46:b9:8d:5a:ea:3c:7c:0f:3b:27:22:6d:58:b5: 62:40:4b:0c:c8:60:ec:8d:9b:b3:50:ed:05:d1:c9:ec:fd:83: 8d:f9:64:72:93:d0:f3:b3:b0:dc:b8:89:d2:7c:dd:65:26:97: bf:ba:4d:cf:3a:a1:7c:15:6b:4c:e3:3e:2d:99:70:14:fe:d8: 05:6a:1f:18:bd:2c:6d:70:cb:ab:61:c7:2c:36:8f:28:24:15: da:69:70:33:48:f7:d9:2c:b5:1d:62:6c:fb:b0:15:8c:eb:9a: 89:a5:2d:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5QjYxMTAvBgNVBAUTKEU5MzY3NEIxRjNCNjkxNkIyQjYzNjNCODYxRDZCNzdC MzkwNURERDgwHhcNMjUwNjAyMTQ1MTQ1WhcNMjUwNjA5MTQ1MTQ1WjAYMRYwFAYD VQQDEw02ODNkYmE4MS1jZDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxKtxx/rZjR/qXycYnHFthy0L2J+hF0hhivspAaOJAS30PABlhOJC7pUonHeZ nVaoDF+iLL8D9b72BmHwvKFnysHtgeIcH6tWoSIFfDQvPz2jiyT9kkGjBd/5Pr/K 9tldnzAuzkEUiUu15d1yc+6r4Oecj3/wVekVkbbaHEBfxipZlh9EpWytD2vlRytm 9F1WniZEh+4TrAE+TzAnCmuf7hvyae1axOueLi/dMjrixrOET8Lyezt1CjYtcE6n ib/tF1VouY47cTgtxEOgyxiyyPO6gh703/rlSrqzhuc2SeXq8ENH7KvNKKAT8BOg OteXbDQEUn21xCIb+f9fVU3suwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGfRIg9A 7u9UlxiF8JBMqG8VtcdOMB8GA1UdIwQYMBaAFOk2dLHztpFrK2NjuGHWt3s5Bd3Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODlCNi8yQzRFRjk3NjFE OTYxMUUyQTY1NDhFN0UwOEIwMkNEMi82VFowc2ZPMmtXc3JZMk80WWRhM2V6a0Yz ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZUWjBzZk8ya1dzclkyTzRZZGEzZXprRjNkZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODlCNi8yQzRFRjk3NjFEOTYxMUUyQTY1NDhFN0UwOEIwMkNEMi82VFowc2ZPMmtX c3JZMk80WWRhM2V6a0YzZGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCZk101S4QMWxhJgSc/Sr1/s69tRTKB3q3Op5ZtSWhoe0c18yTxpdP CJ4WTPNluAXZnWALCnvgsOuZWYPd1O8yDPdG7fiemdGZH0vYFQZngSC3NZoEQDdR lLtW7JEUcZ1SkP8lDmCdr6ae9nO3mBoEOFIGeqa/D+94Z9F+HFrbhlx4DSy2bpsY VSJPtTh1/hMD7h9tRrmNWuo8fA87JyJtWLViQEsMyGDsjZuzUO0F0cns/YON+WRy k9Dzs7DcuInSfN1lJpe/uk3POqF8FWtM4z4tmXAU/tgFah8YvSxtcMurYccsNo8o JBXaaXAzSPfZLLUdYmz7sBWM65qJpS3V -----END CERTIFICATE-----Generated at Mon Jun 2 21:46:08 2025 by rpki-client