$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/A6PIek8tglWUdvcc-u5ST_URNXk.mft File: A6PIek8tglWUdvcc-u5ST_URNXk.mft (raw, json) Hash identifier: 7bVEtMTcwO0PhHM9O+7GCsEghMolwDJwQ5o0tl+RuPY= Subject key identifier: 52:80:30:3F:FE:57:E3:B4:5C:38:61:A1:CE:E3:F0:21:DF:0A:C6:C4 Authority key identifier: 03:A3:C8:7A:4F:2D:82:55:94:76:F7:1C:FA:EE:52:4F:F5:11:35:79 Certificate issuer: /CN=A91A4CAD/serialNumber=03A3C87A4F2D82559476F71CFAEE524FF5113579 Certificate serial: 0B01 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6PIek8tglWUdvcc-u5ST_URNXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/A6PIek8tglWUdvcc-u5ST_URNXk.mft Manifest number: 0AF9 Signing time: Fri 06 Jun 2025 19:24:33 +0000 Manifest this update: Fri 06 Jun 2025 19:24:33 +0000 Manifest next update: Fri 13 Jun 2025 19:24:33 +0000 Files and hashes: 1: A6PIek8tglWUdvcc-u5ST_URNXk.crl (hash: /2FqS34xaPifbXO8eSc7dfO2qTvseAR3plNBeGYG8+E=) 2: 6553D6106C2B11EA87ED1160C4F9AE02.roa (hash: BZiEWDD0IL9/iTmQj4cpibFzXusaM/aZuvYBDfGJDK8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/A6PIek8tglWUdvcc-u5ST_URNXk.crl rsync://rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/A6PIek8tglWUdvcc-u5ST_URNXk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6PIek8tglWUdvcc-u5ST_URNXk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 19:24:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2817 (0xb01) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4CAD, serialNumber=03A3C87A4F2D82559476F71CFAEE524FF5113579 Validity Not Before: Jun 6 19:24:33 2025 GMT Not After : Jun 13 19:24:33 2025 GMT Subject: CN=68434071-811b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0a:ce:77:19:dc:15:19:f4:b5:b6:c7:34:b2: 4e:11:02:d0:5c:30:dc:c1:f4:03:a7:fb:ad:15:b4: ff:0b:b4:2e:d6:18:a3:10:67:2f:69:92:d6:4c:e6: d6:ba:96:57:af:67:8d:89:0c:59:2c:98:85:b9:83: 66:83:e3:58:f2:d6:f5:bc:36:e2:ca:bd:b7:2a:40: 54:9d:d9:e0:f5:7a:18:53:dd:ce:94:63:c3:4f:87: b7:b9:25:eb:a7:3a:23:0a:e5:b3:14:2d:99:66:a7: 57:32:51:04:8e:8f:9b:23:37:33:19:9c:83:c7:f4: 91:cb:e9:a2:ec:3d:10:f0:53:5b:1b:8a:c6:6a:24: 9c:ac:97:e0:c5:69:f3:2a:16:89:f4:88:98:72:80: 88:d8:f1:1f:31:48:a9:8d:27:a2:4e:d7:f4:58:ca: 38:23:eb:f7:76:00:9c:69:20:03:56:bc:d0:f5:08: 32:f0:8a:bf:44:2d:3b:6e:de:93:fd:d6:06:c2:f2: b2:79:f7:8e:42:08:d2:d4:6a:aa:85:c2:3f:24:96: 9c:35:60:da:94:01:58:4e:6e:7b:d3:74:0a:ad:83: 54:56:24:be:67:25:77:13:c1:94:58:6d:37:fb:e3: 34:83:48:38:b8:f5:e9:66:01:c2:3f:17:1b:af:ee: eb:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:80:30:3F:FE:57:E3:B4:5C:38:61:A1:CE:E3:F0:21:DF:0A:C6:C4 X509v3 Authority Key Identifier: keyid:03:A3:C8:7A:4F:2D:82:55:94:76:F7:1C:FA:EE:52:4F:F5:11:35:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/A6PIek8tglWUdvcc-u5ST_URNXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6PIek8tglWUdvcc-u5ST_URNXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/A6PIek8tglWUdvcc-u5ST_URNXk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:16:2f:da:bc:54:87:63:d8:e2:9c:1b:50:24:ad:9d:58:a6: e4:e0:9a:54:40:c4:57:91:14:00:b7:51:77:40:14:79:7e:09: 53:be:51:fb:6a:d7:79:60:3b:5a:40:63:0a:47:94:87:cb:17: eb:ba:15:27:7f:1f:d8:5e:b6:62:39:b5:23:7f:a0:89:08:91: c2:79:7b:e4:d3:78:30:7e:95:84:18:7b:5c:37:3f:22:ef:4c: 26:8c:90:bd:82:28:9c:cd:1a:20:ac:3a:40:6d:77:54:ba:cd: ff:9d:20:f8:d6:18:1a:47:09:30:29:d4:76:55:57:d7:4f:ca: c3:3e:27:47:04:c4:df:aa:ca:8c:35:45:3c:18:ac:17:6d:f8: 70:4b:7b:9c:1d:5f:a4:f0:f2:b2:eb:7f:04:6c:36:d9:fb:5d: 05:cd:aa:e2:f2:18:83:77:af:21:0d:a1:05:a1:8b:2b:14:85: 3a:f9:3e:1a:3b:7a:45:1a:41:09:00:f9:4f:d4:71:24:5f:83: 93:aa:20:1b:93:f6:7f:99:7d:05:4e:1a:19:e1:5d:92:4b:12: 8e:a6:37:05:49:78:d8:0e:bd:6a:ab:9d:7b:db:87:b9:8c:75: ac:74:77:a3:0e:50:78:3b:b6:06:74:aa:f2:c0:e7:42:b3:69: 6e:df:be:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRDQUQxMTAvBgNVBAUTKDAzQTNDODdBNEYyRDgyNTU5NDc2RjcxQ0ZBRUU1MjRG RjUxMTM1NzkwHhcNMjUwNjA2MTkyNDMzWhcNMjUwNjEzMTkyNDMzWjAYMRYwFAYD VQQDEw02ODQzNDA3MS04MTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvwrOdxncFRn0tbbHNLJOEQLQXDDcwfQDp/utFbT/C7Qu1hijEGcvaZLWTObW upZXr2eNiQxZLJiFuYNmg+NY8tb1vDbiyr23KkBUndng9XoYU93OlGPDT4e3uSXr pzojCuWzFC2ZZqdXMlEEjo+bIzczGZyDx/SRy+mi7D0Q8FNbG4rGaiScrJfgxWnz KhaJ9IiYcoCI2PEfMUipjSeiTtf0WMo4I+v3dgCcaSADVrzQ9Qgy8Iq/RC07bt6T /dYGwvKyefeOQgjS1GqqhcI/JJacNWDalAFYTm5703QKrYNUViS+ZyV3E8GUWG03 ++M0g0g4uPXpZgHCPxcbr+7rHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFKAMD/+ V+O0XDhhoc7j8CHfCsbEMB8GA1UdIwQYMBaAFAOjyHpPLYJVlHb3HPruUk/1ETV5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNENBRC85RkQ5N0EwODQ1 QzMxMUVBQkVGNUQ0MzlDNEY5QUUwMi9BNlBJZWs4dGdsV1VkdmNjLXU1U1RfVVJO WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E2UEllazh0Z2xXVWR2Y2MtdTVTVF9VUk5Yay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NENBRC85RkQ5N0EwODQ1QzMxMUVBQkVGNUQ0MzlDNEY5QUUwMi9BNlBJZWs4dGds V1VkdmNjLXU1U1RfVVJOWGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIFi/avFSHY9jinBtQJK2dWKbk4JpUQMRXkRQAt1F3QBR5fglTvlH7 atd5YDtaQGMKR5SHyxfruhUnfx/YXrZiObUjf6CJCJHCeXvk03gwfpWEGHtcNz8i 70wmjJC9giiczRogrDpAbXdUus3/nSD41hgaRwkwKdR2VVfXT8rDPidHBMTfqsqM NUU8GKwXbfhwS3ucHV+k8PKy638EbDbZ+10Fzari8hiDd68hDaEFoYsrFIU6+T4a O3pFGkEJAPlP1HEkX4OTqiAbk/Z/mX0FThoZ4V2SSxKOpjcFSXjYDr1qq51724e5 jHWsdHejDlB4O7YGdKrywOdCs2lu375m -----END CERTIFICATE-----Generated at Sat Jun 7 19:49:57 2025 by rpki-client