$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/6DpZuIHOHlc10a3c2LrgXlO4U9A.mft File: 6DpZuIHOHlc10a3c2LrgXlO4U9A.mft (raw, json) Hash identifier: St+jTINgjDKo6oQFShWNSvjMIxLlw0Tx1WATiLJ5V30= Subject key identifier: 30:8A:8F:17:6F:75:62:13:BA:94:9D:DD:FD:3E:06:C5:74:88:7A:6A Authority key identifier: E8:3A:59:B8:81:CE:1E:57:35:D1:AD:DC:D8:BA:E0:5E:53:B8:53:D0 Certificate issuer: /CN=A91A3BB1/serialNumber=E83A59B881CE1E5735D1ADDCD8BAE05E53B853D0 Certificate serial: 34C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6DpZuIHOHlc10a3c2LrgXlO4U9A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/6DpZuIHOHlc10a3c2LrgXlO4U9A.mft Manifest number: 34A2 Signing time: Sat 31 May 2025 14:49:46 +0000 Manifest this update: Sat 31 May 2025 14:49:46 +0000 Manifest next update: Sat 07 Jun 2025 14:49:46 +0000 Files and hashes: 1: 6DpZuIHOHlc10a3c2LrgXlO4U9A.crl (hash: ZZtM1xZGB9jw+CSOwA8Oe+X0XtGON3lP7ch2v4MuxmE=) 2: 0B3FC58CB0DA11E5A8C8BF13C4F9AE02.roa (hash: IB+Pst0/hjjnT/aD3F4nsmgPYgJjXgVIAOW0RdKrpkY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/6DpZuIHOHlc10a3c2LrgXlO4U9A.crl rsync://rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/6DpZuIHOHlc10a3c2LrgXlO4U9A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6DpZuIHOHlc10a3c2LrgXlO4U9A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 14:49:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13512 (0x34c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3BB1, serialNumber=E83A59B881CE1E5735D1ADDCD8BAE05E53B853D0 Validity Not Before: May 31 14:49:46 2025 GMT Not After : Jun 7 14:49:46 2025 GMT Subject: CN=683b170a-0ce0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ae:13:71:19:3a:c9:fb:67:5d:9b:79:9d:00: b4:7a:a6:87:ae:2b:54:5b:5a:f7:5e:b3:51:3e:af: 57:97:a1:9c:eb:6a:eb:19:62:31:4b:94:54:06:63: d9:fa:ec:66:75:fd:74:2f:dd:07:35:22:74:72:15: 08:06:24:50:9c:af:74:82:25:aa:dc:1e:f9:f6:8e: d4:1a:db:0c:55:90:3b:04:52:5f:2d:67:54:86:07: ff:61:7c:bd:ae:87:94:de:06:97:f9:c3:c6:26:ac: 89:2f:f1:97:d6:6b:35:1e:ef:14:33:f6:a5:08:3d: f6:87:ed:e2:47:96:91:b5:8b:5b:0e:a8:1c:c1:aa: 70:cd:77:52:37:df:ea:f4:a0:8e:2c:c7:ca:12:7b: 85:4b:61:8d:fc:e9:08:af:01:31:8c:d6:d2:7c:eb: 22:b6:9e:1d:7b:c7:32:ef:ba:07:8c:47:18:99:17: 6c:77:48:8a:42:d5:11:1f:40:87:9c:95:ab:31:3e: 10:09:a8:6c:44:34:d5:33:ab:c2:23:cd:02:91:c0: a8:c1:7b:cc:ac:bd:7b:57:40:cc:77:8c:32:74:ed: 47:fd:59:3f:88:ca:ea:5b:0e:a4:a0:48:4c:ad:7d: 57:61:92:cd:61:bc:b1:18:ae:2e:7b:59:4e:3e:13: d3:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:8A:8F:17:6F:75:62:13:BA:94:9D:DD:FD:3E:06:C5:74:88:7A:6A X509v3 Authority Key Identifier: keyid:E8:3A:59:B8:81:CE:1E:57:35:D1:AD:DC:D8:BA:E0:5E:53:B8:53:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/6DpZuIHOHlc10a3c2LrgXlO4U9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6DpZuIHOHlc10a3c2LrgXlO4U9A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/6DpZuIHOHlc10a3c2LrgXlO4U9A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:a0:f7:83:63:77:af:69:53:37:ac:d7:91:cb:5f:a0:b7:79: aa:99:ae:5a:3f:35:42:c8:d7:da:2b:f1:86:4e:c2:56:ce:98: d3:32:81:d6:19:3f:6e:d5:b0:aa:73:10:11:96:c0:05:fd:8b: 35:27:16:7c:5c:e5:31:93:67:40:ef:89:17:92:ce:7e:e2:88: cd:10:a3:1c:17:6e:e7:fd:e7:14:fd:41:b4:03:59:1c:a8:69: d3:24:aa:7e:6d:26:b9:20:c9:6c:10:49:90:37:c7:34:57:e7: fc:ce:fa:49:5a:93:dc:16:40:b0:43:16:30:c4:25:97:e8:70: 12:28:20:09:be:63:44:ea:f4:37:c9:a4:64:da:1c:aa:86:3b: ee:ed:1d:ef:25:d2:6e:ef:53:87:6c:55:57:c2:b2:48:14:15: 4e:48:db:97:39:0e:2a:70:5d:bc:dc:dd:83:31:cc:46:e0:c8: 34:f4:c2:46:7e:a5:d7:01:b2:9e:a6:42:ca:07:fb:e3:d9:45: 61:32:6f:f0:30:b6:e7:f1:61:fd:bf:74:aa:db:4a:e6:a4:8f: 3d:87:0f:5a:f1:97:ba:74:ce:2f:2a:49:0b:c9:53:77:a2:b3: 1c:b6:05:2c:3c:66:02:29:9f:b9:d3:ed:d7:9b:93:05:7c:6e: 62:d4:b8:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNCQjExMTAvBgNVBAUTKEU4M0E1OUI4ODFDRTFFNTczNUQxQUREQ0Q4QkFFMDVF NTNCODUzRDAwHhcNMjUwNTMxMTQ0OTQ2WhcNMjUwNjA3MTQ0OTQ2WjAYMRYwFAYD VQQDEw02ODNiMTcwYS0wY2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3q4TcRk6yftnXZt5nQC0eqaHritUW1r3XrNRPq9Xl6Gc62rrGWIxS5RUBmPZ +uxmdf10L90HNSJ0chUIBiRQnK90giWq3B759o7UGtsMVZA7BFJfLWdUhgf/YXy9 roeU3gaX+cPGJqyJL/GX1ms1Hu8UM/alCD32h+3iR5aRtYtbDqgcwapwzXdSN9/q 9KCOLMfKEnuFS2GN/OkIrwExjNbSfOsitp4de8cy77oHjEcYmRdsd0iKQtURH0CH nJWrMT4QCahsRDTVM6vCI80CkcCowXvMrL17V0DMd4wydO1H/Vk/iMrqWw6koEhM rX1XYZLNYbyxGK4ue1lOPhPThQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDCKjxdv dWITupSd3f0+BsV0iHpqMB8GA1UdIwQYMBaAFOg6WbiBzh5XNdGt3Ni64F5TuFPQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0JCMS9FQTFCMjJFMDFE OTYxMUUyOTgwNkM1N0YwOEIwMkNEMi82RHBadUlIT0hsYzEwYTNjMkxyZ1hsTzRV OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZEcFp1SUhPSGxjMTBhM2MyTHJnWGxPNFU5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0JCMS9FQTFCMjJFMDFEOTYxMUUyOTgwNkM1N0YwOEIwMkNEMi82RHBadUlIT0hs YzEwYTNjMkxyZ1hsTzRVOUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWoPeDY3evaVM3rNeRy1+gt3mqma5aPzVCyNfaK/GGTsJWzpjTMoHW GT9u1bCqcxARlsAF/Ys1JxZ8XOUxk2dA74kXks5+4ojNEKMcF27n/ecU/UG0A1kc qGnTJKp+bSa5IMlsEEmQN8c0V+f8zvpJWpPcFkCwQxYwxCWX6HASKCAJvmNE6vQ3 yaRk2hyqhjvu7R3vJdJu71OHbFVXwrJIFBVOSNuXOQ4qcF283N2DMcxG4Mg09MJG fqXXAbKepkLKB/vj2UVhMm/wMLbn8WH9v3Sq20rmpI89hw9a8Ze6dM4vKkkLyVN3 orMctgUsPGYCKZ+50+3Xm5MFfG5i1Lga -----END CERTIFICATE-----Generated at Sat May 31 17:46:23 2025 by rpki-client