$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft File: 1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft (raw, json) Hash identifier: 0//dFKmrWkGCvqgMqB0tlhqPmWZWaWaL/J7QoAPQYvo= Subject key identifier: E0:C6:EB:99:FB:18:45:FE:AE:AB:53:E6:38:DD:3D:6C:54:1A:1B:17 Authority key identifier: D4:59:D2:67:52:52:34:A0:53:5E:C3:8D:8C:CC:89:90:19:4D:E1:89 Certificate issuer: /CN=A91A8B67/serialNumber=D459D267525234A0535EC38D8CCC8990194DE189 Certificate serial: 6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft Manifest number: 62 Signing time: Fri 13 Jun 2025 06:05:07 +0000 Manifest this update: Fri 13 Jun 2025 06:05:06 +0000 Manifest next update: Fri 20 Jun 2025 06:05:06 +0000 Files and hashes: 1: 1FnSZ1JSNKBTXsONjMyJkBlN4Yk.crl (hash: vVKGbPkZixsbslp0mMX9oAvYsjPlJoQbn1IOJmpgVUg=) 2: 1363F5E60E8E11F082304B42C4F9AE02.roa (hash: hu1JiBFiyTnMySrt80yNdScgCjSfSkHINTEYjzYfdUg=) 3: E90F04F4114711F0B6E44E12C4F9AE02.roa (hash: PlQx8+H4QWwRWOJyC7w29KW+ohdqt59u/vmKToMRgGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.crl rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:05:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 107 (0x6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8B67, serialNumber=D459D267525234A0535EC38D8CCC8990194DE189 Validity Not Before: Jun 13 06:05:06 2025 GMT Not After : Jun 20 06:05:06 2025 GMT Subject: CN=684bbf93-5338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ea:18:cb:cc:cc:9d:be:1d:ef:cd:74:4e:6f: 94:c7:0e:df:54:02:e3:da:b7:6d:12:67:af:7e:96: 87:c1:a9:5e:ac:f5:9e:e7:6b:77:52:d8:7e:d6:92: 57:a2:55:c5:bc:7c:1e:ad:2a:18:e3:94:ec:17:81: e4:ba:59:99:30:db:e7:86:18:4b:f4:d8:3c:01:c3: ae:46:a4:1d:4c:b8:fa:da:0a:10:2e:15:eb:bd:8b: 8b:b1:24:89:83:37:15:7a:1d:2c:da:00:aa:f1:4d: a3:9b:38:91:3b:29:29:71:a4:23:49:48:ae:61:3e: ac:60:ec:03:3a:35:aa:a9:2f:4d:af:57:43:fe:5e: da:8f:c0:46:3c:cc:59:c2:76:a7:ea:f3:4e:f8:cc: 0b:27:09:2e:82:cb:52:e0:2d:07:76:e5:4d:fe:7e: 12:51:aa:17:b1:03:e1:fa:33:d0:40:34:90:b6:ff: 75:12:2b:99:a1:63:ac:be:d1:e8:b5:c3:e4:27:3e: 07:20:0f:27:64:a5:cd:74:53:a4:f3:03:d9:6e:54: 1d:4a:7a:b5:13:34:c3:bf:c2:39:23:c3:d3:37:59: f3:19:3b:ca:76:e8:ae:7a:8c:3e:88:d8:d1:e9:52: cf:0d:21:7c:b4:36:08:3c:e9:93:4b:55:14:1e:40: 19:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:C6:EB:99:FB:18:45:FE:AE:AB:53:E6:38:DD:3D:6C:54:1A:1B:17 X509v3 Authority Key Identifier: keyid:D4:59:D2:67:52:52:34:A0:53:5E:C3:8D:8C:CC:89:90:19:4D:E1:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:72:7c:b9:6f:aa:16:2f:1b:75:bb:17:c7:22:c8:10:47:62: 7a:1a:68:4e:8f:cb:57:9b:0d:c9:52:a4:72:3c:26:ea:e8:9e: cf:cf:8e:5f:d8:7e:c0:58:85:c9:44:2b:db:6d:0d:36:ff:56: 4a:b8:71:69:a3:e9:63:f1:a5:9d:d3:ac:01:6d:5f:22:a3:43: 48:cc:8f:a3:29:b7:d8:dc:c9:c9:f8:8c:62:54:db:33:aa:46: 7a:76:3d:06:c4:e1:e4:00:d0:11:02:77:97:49:95:f1:2a:00: dd:a7:19:59:5d:fd:52:76:65:5f:ae:ec:df:2d:ee:12:53:00: 8c:56:ce:f9:c6:f9:50:46:22:30:bd:ed:de:87:44:01:f1:a0: af:7e:7a:05:cf:cd:13:fa:6a:ba:01:a1:3c:9a:65:18:ae:c5: ac:48:2a:2d:21:96:e8:51:0f:c3:05:b8:e7:e6:8e:b7:00:c7: 6e:c1:9e:f8:2d:62:ff:7f:2e:eb:67:d1:3e:14:ba:89:83:7c: f4:30:7e:a6:bf:5f:b6:59:72:36:c7:cc:86:9b:4e:67:21:ed: b3:0e:6e:c8:04:c1:2e:3b:cd:43:c1:3a:1c:1a:8c:04:c7:5d: 06:2d:d0:1f:4f:9d:c9:87:bb:1b:c4:b8:f1:8b:91:26:1c:73: 3f:91:9e:eb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OEI2NzExMC8GA1UEBRMoRDQ1OUQyNjc1MjUyMzRBMDUzNUVDMzhEOENDQzg5OTAx OTRERTE4OTAeFw0yNTA2MTMwNjA1MDZaFw0yNTA2MjAwNjA1MDZaMBgxFjAUBgNV BAMTDTY4NGJiZjkzLTUzMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDH6hjLzMydvh3vzXROb5THDt9UAuPat20SZ69+lofBqV6s9Z7na3dS2H7Wklei VcW8fB6tKhjjlOwXgeS6WZkw2+eGGEv02DwBw65GpB1MuPraChAuFeu9i4uxJImD NxV6HSzaAKrxTaObOJE7KSlxpCNJSK5hPqxg7AM6NaqpL02vV0P+XtqPwEY8zFnC dqfq8074zAsnCS6Cy1LgLQd25U3+fhJRqhexA+H6M9BANJC2/3USK5mhY6y+0ei1 w+QnPgcgDydkpc10U6TzA9luVB1KerUTNMO/wjkjw9M3WfMZO8p26K56jD6I2NHp Us8NIXy0Ngg86ZNLVRQeQBkJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4MbrmfsY Rf6uq1PmON09bFQaGxcwHwYDVR0jBBgwFoAU1FnSZ1JSNKBTXsONjMyJkBlN4Ykw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE4QjY3LzJGQTAwRDNFQzZB QTExRUY4NEZCMEQwREM0RjlBRTAyLzFGblNaMUpTTktCVFhzT05qTXlKa0JsTjRZ ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMUZuU1oxSlNOS0JUWHNPTmpNeUprQmxONFlrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE4 QjY3LzJGQTAwRDNFQzZBQTExRUY4NEZCMEQwREM0RjlBRTAyLzFGblNaMUpTTktC VFhzT05qTXlKa0JsTjRZay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKVyfLlvqhYvG3W7F8ciyBBHYnoaaE6Py1ebDclSpHI8Jurons/Pjl/Y fsBYhclEK9ttDTb/Vkq4cWmj6WPxpZ3TrAFtXyKjQ0jMj6Mpt9jcycn4jGJU2zOq Rnp2PQbE4eQA0BECd5dJlfEqAN2nGVld/VJ2ZV+u7N8t7hJTAIxWzvnG+VBGIjC9 7d6HRAHxoK9+egXPzRP6aroBoTyaZRiuxaxIKi0hluhRD8MFuOfmjrcAx27Bnvgt Yv9/Lutn0T4UuomDfPQwfqa/X7ZZcjbHzIabTmch7bMObsgEwS47zUPBOhwajATH XQYt0B9PncmHuxvEuPGLkSYccz+Rnus= -----END CERTIFICATE-----Generated at Sat Jun 14 12:05:38 2025 by rpki-client