$ rpki-client -vvf rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.mft File: 6ysMa5yLfwlHcYJnRq99Rg7cR6o.mft (raw, json) Hash identifier: BPCzOPMhhx/oLZ1mQUkJxqyGvhc+zT97f3OsjhWoYgI= Subject key identifier: 31:A2:05:62:26:F1:69:A0:0D:74:9A:EC:39:B1:17:D9:46:6B:ED:DB Authority key identifier: EB:2B:0C:6B:9C:8B:7F:09:47:71:82:67:46:AF:7D:46:0E:DC:47:AA Certificate issuer: /CN=A91A13C2/serialNumber=EB2B0C6B9C8B7F094771826746AF7D460EDC47AA Certificate serial: 04BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ysMa5yLfwlHcYJnRq99Rg7cR6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.mft Manifest number: 04BA Signing time: Fri 06 Jun 2025 23:54:53 +0000 Manifest this update: Fri 06 Jun 2025 23:54:53 +0000 Manifest next update: Fri 13 Jun 2025 23:54:53 +0000 Files and hashes: 1: 6ysMa5yLfwlHcYJnRq99Rg7cR6o.crl (hash: JHPmyr28cOw17ahtcGB4Ogg6chqvI2CMICFzbF2J+rQ=) 2: A231B9362CEA11EC8F99F486C4F9AE02.roa (hash: 8LKcnydJB5oW4TBJzLAGx/1DAq+7TANc8tWAErbpeDg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.crl rsync://rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ysMa5yLfwlHcYJnRq99Rg7cR6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 23:54:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1215 (0x4bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A13C2, serialNumber=EB2B0C6B9C8B7F094771826746AF7D460EDC47AA Validity Not Before: Jun 6 23:54:53 2025 GMT Not After : Jun 13 23:54:53 2025 GMT Subject: CN=68437fcd-120f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b4:0a:39:14:83:59:4c:7a:36:fd:c3:8b:c3: 88:1c:c4:a9:bf:2e:04:12:34:6b:5d:6d:0f:ec:00: 0f:12:bb:d9:76:bc:66:3f:30:70:16:32:b0:98:3b: cf:c0:59:f6:61:e6:12:92:4d:3d:6c:3d:13:1b:bc: be:1f:76:c7:ae:f4:98:64:d9:fc:2c:75:39:d5:5c: f1:28:d1:d4:e1:18:33:43:c7:bb:4d:03:30:0a:26: 98:b2:02:38:29:ac:a8:38:21:93:57:cf:4f:71:f9: 1e:f7:6c:2b:10:39:fd:be:4c:8c:3d:48:3f:7c:39: 47:83:51:67:4b:12:71:2e:1d:3c:2d:c6:08:98:cf: 6c:25:b8:61:f1:86:98:12:07:11:75:c2:8e:2c:d4: db:c2:d5:89:a5:6b:fa:a7:9c:85:35:be:9e:6c:3f: f1:25:b2:c3:54:2c:9d:ab:2a:23:cf:bb:bf:a5:17: 03:fe:dc:49:c7:b6:ab:b7:66:42:d7:d0:e2:b7:ea: f9:a5:8d:0b:86:be:e2:0b:2c:ef:84:06:8b:39:50: f8:6e:a7:68:70:07:93:f8:68:9e:13:d5:20:c6:f1: e0:f5:49:fd:c7:58:1d:5b:71:ae:9e:f1:eb:2d:89: a5:82:99:3c:73:51:e2:ee:c9:c4:ca:38:8d:0d:b3: 4b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:A2:05:62:26:F1:69:A0:0D:74:9A:EC:39:B1:17:D9:46:6B:ED:DB X509v3 Authority Key Identifier: keyid:EB:2B:0C:6B:9C:8B:7F:09:47:71:82:67:46:AF:7D:46:0E:DC:47:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ysMa5yLfwlHcYJnRq99Rg7cR6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:e5:62:d1:f8:53:7f:f6:6e:a4:95:26:ae:c6:48:99:a5:52: 1a:97:8f:bf:6f:20:b0:51:88:3b:87:52:4d:03:fc:88:85:c3: 62:bb:f2:7d:b3:b8:1e:59:28:cc:2e:12:40:ca:30:12:d5:f7: 46:1f:ba:25:98:39:29:e8:b9:9e:22:f5:30:67:c2:12:77:67: 8e:77:d9:8d:e5:c0:4f:ac:d5:84:a1:f2:92:09:ab:ac:96:a4: fc:3f:89:41:6f:7c:55:6f:90:ec:85:a2:42:74:7d:d3:a6:1c: 87:3d:c4:22:18:d0:e0:82:4d:0c:15:66:af:46:57:d1:06:7a: 7b:1a:ef:9d:06:12:20:d1:91:0f:37:40:cc:11:0f:f1:94:ae: 31:fd:9b:11:91:b4:40:67:16:ef:0e:88:8a:79:16:d0:a8:ca: a6:df:9d:c7:61:8d:26:ee:ca:d9:bb:60:1b:c7:d0:c3:9b:b3: b9:33:a5:90:91:23:cc:18:06:a6:36:0c:d0:65:c7:b2:e6:bc: a6:69:5f:f4:0e:e3:4f:55:de:62:cc:ae:1a:f5:f1:0e:41:39: ea:60:9e:aa:8e:e4:04:a7:5c:41:e9:8b:f6:2b:e9:92:8a:97: eb:29:11:4b:a6:a8:c9:b2:cc:a5:89:c7:67:4a:ad:df:28:01: 87:d3:c1:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTEzQzIxMTAvBgNVBAUTKEVCMkIwQzZCOUM4QjdGMDk0NzcxODI2NzQ2QUY3RDQ2 MEVEQzQ3QUEwHhcNMjUwNjA2MjM1NDUzWhcNMjUwNjEzMjM1NDUzWjAYMRYwFAYD VQQDEw02ODQzN2ZjZC0xMjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2LQKORSDWUx6Nv3Di8OIHMSpvy4EEjRrXW0P7AAPErvZdrxmPzBwFjKwmDvP wFn2YeYSkk09bD0TG7y+H3bHrvSYZNn8LHU51VzxKNHU4RgzQ8e7TQMwCiaYsgI4 KayoOCGTV89Pcfke92wrEDn9vkyMPUg/fDlHg1FnSxJxLh08LcYImM9sJbhh8YaY EgcRdcKOLNTbwtWJpWv6p5yFNb6ebD/xJbLDVCydqyojz7u/pRcD/txJx7art2ZC 19Dit+r5pY0Lhr7iCyzvhAaLOVD4bqdocAeT+GieE9UgxvHg9Un9x1gdW3GunvHr LYmlgpk8c1Hi7snEyjiNDbNLYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDGiBWIm 8WmgDXSa7DmxF9lGa+3bMB8GA1UdIwQYMBaAFOsrDGuci38JR3GCZ0avfUYO3Eeq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTNDMi81QUY3RkQ3NjJD RTcxMUVDODcxQTA2NjBDNEY5QUUwMi82eXNNYTV5TGZ3bEhjWUpuUnE5OVJnN2NS Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ5c01hNXlMZndsSGNZSm5ScTk5Umc3Y1I2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTNDMi81QUY3RkQ3NjJDRTcxMUVDODcxQTA2NjBDNEY5QUUwMi82eXNNYTV5TGZ3 bEhjWUpuUnE5OVJnN2NSNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB25WLR+FN/9m6klSauxkiZpVIal4+/byCwUYg7h1JNA/yIhcNiu/J9 s7geWSjMLhJAyjAS1fdGH7olmDkp6LmeIvUwZ8ISd2eOd9mN5cBPrNWEofKSCaus lqT8P4lBb3xVb5DshaJCdH3TphyHPcQiGNDggk0MFWavRlfRBnp7Gu+dBhIg0ZEP N0DMEQ/xlK4x/ZsRkbRAZxbvDoiKeRbQqMqm353HYY0m7srZu2Abx9DDm7O5M6WQ kSPMGAamNgzQZcey5rymaV/0DuNPVd5izK4a9fEOQTnqYJ6qjuQEp1xB6Yv2K+mS ipfrKRFLpqjJssylicdnSq3fKAGH08HV -----END CERTIFICATE-----Generated at Sun Jun 8 14:50:18 2025 by rpki-client