$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft File: _Kk1XBq-QE8_PPUZL9NLEloAvxs.mft (raw, json) Hash identifier: Y2w3qKcz0FAvGfh1bvzMRmZxciDHxZsJL5nnb27bNjI= Subject key identifier: 6A:EF:4C:45:D0:31:F5:7A:0F:01:C3:AB:23:90:B9:EC:6D:D5:1E:EA Authority key identifier: FC:A9:35:5C:1A:BE:40:4F:3F:3C:F5:19:2F:D3:4B:12:5A:00:BF:1B Certificate issuer: /CN=A91ADD64/serialNumber=FCA9355C1ABE404F3F3CF5192FD34B125A00BF1B Certificate serial: CA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Kk1XBq-QE8_PPUZL9NLEloAvxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft Manifest number: C6 Signing time: Sun 01 Jun 2025 05:31:05 +0000 Manifest this update: Sun 01 Jun 2025 05:31:04 +0000 Manifest next update: Sun 08 Jun 2025 05:31:04 +0000 Files and hashes: 1: _Kk1XBq-QE8_PPUZL9NLEloAvxs.crl (hash: TXttdTJOXzMLXYlKRlXWAQr0Fm/z3Fl8kul8chWmfwg=) 2: 57FBE074370111F094BF7862C4F9AE02.roa (hash: NzrXfR/7zniLvrCXQlmVGg2isIi5LfwP1ubwC3yxm7E=) 3: 5740BDF8370111F094BF7862C4F9AE02.roa (hash: /GfdIIe6m1dYDx7Tm/mUgCqzxCNCLDFcedZ67s1StUY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.crl rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Kk1XBq-QE8_PPUZL9NLEloAvxs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 05:31:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADD64, serialNumber=FCA9355C1ABE404F3F3CF5192FD34B125A00BF1B Validity Not Before: Jun 1 05:31:04 2025 GMT Not After : Jun 8 05:31:04 2025 GMT Subject: CN=683be598-f48e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0e:e3:ce:e5:db:5b:bf:fa:d7:39:42:33:4f: f9:af:75:cf:57:65:11:3e:3f:27:1d:92:83:a3:cd: 34:04:6f:aa:89:b4:8d:30:77:f1:2a:6d:b8:86:f4: 93:47:ac:46:9b:42:b3:b3:8e:41:e0:d2:cf:a1:e5: a2:5d:b5:95:61:09:fe:ef:cc:6f:b2:00:5d:11:ff: 21:f9:bc:d2:ec:bd:45:4c:82:cd:8b:fe:c0:5d:55: 20:30:93:99:d2:2e:98:ac:5d:02:1c:96:e9:2c:4b: f9:03:11:d2:c2:f1:8a:71:25:b7:d4:f5:9c:64:c8: c3:82:42:3a:53:ff:25:92:e6:b1:0e:4a:8e:38:90: a5:47:32:78:2a:01:dc:c7:a9:23:30:54:77:35:17: 7c:67:8d:c4:b1:aa:d7:2b:54:6b:84:d9:26:76:81: f0:0f:8d:0b:54:da:39:12:04:9c:16:50:10:19:d6: f8:60:b8:ac:69:8c:3c:70:61:71:69:bb:e0:26:f7: b3:c9:cd:e2:79:5b:7b:25:d8:bc:3c:eb:ea:da:d4: 38:e6:a2:31:3f:9b:a6:ba:9f:69:39:99:83:09:5e: a0:80:ec:25:22:e9:ef:3f:63:84:bf:93:6b:fe:89: 3c:e0:88:3d:a2:fb:2f:f0:b0:59:ea:01:68:1e:85: ee:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:EF:4C:45:D0:31:F5:7A:0F:01:C3:AB:23:90:B9:EC:6D:D5:1E:EA X509v3 Authority Key Identifier: keyid:FC:A9:35:5C:1A:BE:40:4F:3F:3C:F5:19:2F:D3:4B:12:5A:00:BF:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Kk1XBq-QE8_PPUZL9NLEloAvxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:b3:a7:97:57:13:6f:8f:52:29:0e:14:7d:a8:c4:09:04:e0: 29:93:2a:04:26:ea:70:d8:76:82:81:5a:d5:14:bb:05:90:24: 7c:16:2b:d5:dd:13:f4:77:35:fa:4d:01:ef:9d:6f:de:20:57: 2d:ab:e6:64:77:67:e4:e8:85:6c:2f:78:e2:3f:e9:4a:3a:4b: c4:ae:ba:78:db:44:2d:13:34:e7:58:71:68:37:da:79:10:02: 67:f9:31:f9:2f:eb:24:b7:42:12:a9:cf:dd:f0:4c:80:4a:e5: 82:9b:6a:06:56:29:7b:de:9d:e2:81:4e:a1:f1:e8:09:8a:dd: 26:a2:8b:ba:51:dd:df:1d:17:cb:13:c6:b2:e0:2d:e1:35:20: 16:ee:a4:71:82:f9:da:08:38:fd:ed:19:cc:4d:db:80:2f:a6: f5:b8:c4:28:90:65:6b:54:ae:64:4f:a9:7e:e8:e8:61:24:b1: 6b:53:7e:8c:04:c7:cb:8b:cb:87:73:b2:09:35:43:35:00:ff: 50:ec:95:26:d8:96:b5:0b:db:34:be:89:62:ab:9c:4b:92:c5: ab:db:7f:8d:9e:78:cd:f1:91:20:c9:3e:37:f1:62:e3:98:60: 33:05:5b:6b:da:6c:4a:91:0e:3c:53:6f:b1:c5:86:c4:7c:b5: 4c:bd:de:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURENjQxMTAvBgNVBAUTKEZDQTkzNTVDMUFCRTQwNEYzRjNDRjUxOTJGRDM0QjEy NUEwMEJGMUIwHhcNMjUwNjAxMDUzMTA0WhcNMjUwNjA4MDUzMTA0WjAYMRYwFAYD VQQDEw02ODNiZTU5OC1mNDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvA7jzuXbW7/61zlCM0/5r3XPV2URPj8nHZKDo800BG+qibSNMHfxKm24hvST R6xGm0Kzs45B4NLPoeWiXbWVYQn+78xvsgBdEf8h+bzS7L1FTILNi/7AXVUgMJOZ 0i6YrF0CHJbpLEv5AxHSwvGKcSW31PWcZMjDgkI6U/8lkuaxDkqOOJClRzJ4KgHc x6kjMFR3NRd8Z43EsarXK1RrhNkmdoHwD40LVNo5EgScFlAQGdb4YLisaYw8cGFx abvgJvezyc3ieVt7Jdi8POvq2tQ45qIxP5umup9pOZmDCV6ggOwlIunvP2OEv5Nr /ok84Ig9ovsv8LBZ6gFoHoXuYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGrvTEXQ MfV6DwHDqyOQuext1R7qMB8GA1UdIwQYMBaAFPypNVwavkBPPzz1GS/TSxJaAL8b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREQ2NC80RUIyQjQyODEz NEIxMUVGOTQ0MjREM0RDNEY5QUUwMi9fS2sxWEJxLVFFOF9QUFVaTDlOTEVsb0F2 eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19LazFYQnEtUUU4X1BQVVpMOU5MRWxvQXZ4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REQ2NC80RUIyQjQyODEzNEIxMUVGOTQ0MjREM0RDNEY5QUUwMi9fS2sxWEJxLVFF OF9QUFVaTDlOTEVsb0F2eHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1s6eXVxNvj1IpDhR9qMQJBOApkyoEJupw2HaCgVrVFLsFkCR8FivV 3RP0dzX6TQHvnW/eIFctq+Zkd2fk6IVsL3jiP+lKOkvErrp420QtEzTnWHFoN9p5 EAJn+TH5L+skt0ISqc/d8EyASuWCm2oGVil73p3igU6h8egJit0moou6Ud3fHRfL E8ay4C3hNSAW7qRxgvnaCDj97RnMTduAL6b1uMQokGVrVK5kT6l+6OhhJLFrU36M BMfLi8uHc7IJNUM1AP9Q7JUm2Ja1C9s0voliq5xLksWr23+NnnjN8ZEgyT438WLj mGAzBVtr2mxKkQ48U2+xxYbEfLVMvd7s -----END CERTIFICATE-----Generated at Mon Jun 2 20:56:51 2025 by rpki-client