$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft File: a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft (raw, json) Hash identifier: BEiyI45gSqEtvj8bV2HXeggR/AqoZvALRjopr9hwg98= Subject key identifier: 58:15:90:79:14:15:72:7A:A5:7E:36:A5:4A:5C:C0:1E:6E:CB:4E:5B Authority key identifier: 6B:5E:BF:E9:8A:37:87:64:C1:B1:2D:CB:69:04:E4:61:0B:50:AC:57 Certificate issuer: /CN=A91B5418/serialNumber=6B5EBFE98A378764C1B12DCB6904E4610B50AC57 Certificate serial: 0CD8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft Manifest number: 0CA7 Signing time: Fri 30 May 2025 18:25:56 +0000 Manifest this update: Fri 30 May 2025 18:25:55 +0000 Manifest next update: Fri 06 Jun 2025 18:25:55 +0000 Files and hashes: 1: a16_6Yo3h2TBsS3LaQTkYQtQrFc.crl (hash: cHWNdAfXYRCvfxENg+L1btN5N8KaFsie3xDj8h8+fmA=) 2: D3EC028C2AF511EE90800A65C4F9AE02.roa (hash: +hALYP3fmXiUu1g2+UCKikl1Y9WM+rKXEqvZUSDNE8I=) 3: 990D779897A211EF8F258761C4F9AE02.roa (hash: 7rnRdj6F+HEg+i7aB4aUe+GD+60bEZJEJnTlO3LVi6E=) 4: 0D036EB680BC11EBAF2A1C0EC4F9AE02.roa (hash: 1TLr5oM7v/qdbXCuWglO9MT2WfClZILhcDQljm7O2lk=) 5: 919D74562AF511EEA2663F52C4F9AE02.roa (hash: h0QhuXjDa5LUS0ETeRi4LQZ7+udZrItG82FhW+NYc/0=) 6: FD2A54D8DD6311EA9EFD035CC4F9AE02.roa (hash: 9m0UQLhCfmSnooX3c/o+r8ndL1ume0rI54qO9D+eF4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.crl rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:25:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3288 (0xcd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5418, serialNumber=6B5EBFE98A378764C1B12DCB6904E4610B50AC57 Validity Not Before: May 30 18:25:55 2025 GMT Not After : Jun 6 18:25:55 2025 GMT Subject: CN=6839f833-1da6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:bc:bf:81:c0:c9:38:17:9a:77:ee:c6:2f:e4: 0b:1b:f5:34:4e:d8:b7:c5:3b:5f:50:61:8a:80:f2: db:e3:53:2b:68:5f:4c:d6:de:ba:8d:b1:40:52:0f: 70:64:e8:ef:2a:ec:e7:24:d4:74:4e:34:e1:03:27: 55:25:d7:e9:78:02:3d:b4:fe:af:c0:77:8a:b0:0b: a6:f5:fa:13:c2:b3:32:8a:7b:03:a1:f3:21:04:02: 92:0f:f1:56:1a:d1:6a:5f:e8:f6:ec:a4:a0:1c:cc: 7d:0c:73:d4:7d:02:b5:d5:6c:78:52:bd:b8:41:bd: a5:7c:2c:dc:4c:79:e6:cb:32:99:7c:59:2b:bd:fd: c3:dd:bf:35:3c:ec:55:fe:a7:08:13:3b:5c:c3:28: 3d:c8:44:93:30:61:d0:d0:60:4c:6f:cd:79:c8:a5: 00:ac:22:af:88:6d:8c:67:68:de:56:0b:cc:0f:49: be:01:cc:46:ea:89:51:32:f1:79:d6:41:9d:d4:36: 38:20:57:e1:80:b5:ac:8d:ff:70:78:d5:2b:b6:f1: f5:96:48:55:79:0c:69:68:05:05:6d:b3:59:20:d1: 64:33:58:77:b2:77:a8:ce:05:d8:a7:b3:70:8b:78: a9:dd:7a:3f:31:5b:09:06:38:d3:48:f8:97:5f:c5: e6:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:15:90:79:14:15:72:7A:A5:7E:36:A5:4A:5C:C0:1E:6E:CB:4E:5B X509v3 Authority Key Identifier: keyid:6B:5E:BF:E9:8A:37:87:64:C1:B1:2D:CB:69:04:E4:61:0B:50:AC:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:fd:15:8a:c2:64:9c:d1:df:4c:b8:4c:4e:e9:07:22:15:af: c4:cc:4a:ca:71:4f:98:07:8d:93:19:be:91:b2:b8:3d:24:3a: 24:ad:eb:34:c4:fd:6a:f4:ff:28:41:51:0e:c2:73:4e:4a:ba: e1:ea:dc:73:57:b7:3c:af:54:40:36:bc:72:03:9f:8e:b8:71: 3c:3e:5c:93:0f:f9:2e:6b:a8:02:ad:35:1f:9b:e9:8f:9b:ec: 16:c8:f5:2b:c3:4e:c4:57:1b:08:8c:ac:ed:c0:1c:68:a7:ea: de:d4:5e:2d:cc:c6:5d:ee:bb:84:1e:d7:26:32:7a:be:94:7c: 8a:b0:7c:bc:c4:07:20:40:46:69:dc:5b:70:07:ce:64:51:2c: d5:2a:45:80:36:7a:06:c4:43:79:b0:01:c8:01:2a:a2:a5:0e: 09:f0:0a:3b:bd:c8:12:ed:c3:15:69:0b:01:8b:fb:50:52:74: d9:bd:56:7b:10:97:5d:3b:88:95:5d:15:45:d5:ae:50:a7:e9: c6:a1:70:03:bf:7b:e7:a0:4d:c3:1a:03:2a:c8:0b:a3:4c:f4: b5:18:68:fc:15:57:cb:46:86:25:32:36:90:25:99:02:77:6a: 0e:33:03:40:aa:80:73:e7:ea:22:53:e6:e7:cb:37:ee:b0:64: d1:84:0d:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDNgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU0MTgxMTAvBgNVBAUTKDZCNUVCRkU5OEEzNzg3NjRDMUIxMkRDQjY5MDRFNDYx MEI1MEFDNTcwHhcNMjUwNTMwMTgyNTU1WhcNMjUwNjA2MTgyNTU1WjAYMRYwFAYD VQQDEw02ODM5ZjgzMy0xZGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzry/gcDJOBead+7GL+QLG/U0Tti3xTtfUGGKgPLb41MraF9M1t66jbFAUg9w ZOjvKuznJNR0TjThAydVJdfpeAI9tP6vwHeKsAum9foTwrMyinsDofMhBAKSD/FW GtFqX+j27KSgHMx9DHPUfQK11Wx4Ur24Qb2lfCzcTHnmyzKZfFkrvf3D3b81POxV /qcIEztcwyg9yESTMGHQ0GBMb815yKUArCKviG2MZ2jeVgvMD0m+AcxG6olRMvF5 1kGd1DY4IFfhgLWsjf9weNUrtvH1lkhVeQxpaAUFbbNZINFkM1h3sneozgXYp7Nw i3ip3Xo/MVsJBjjTSPiXX8Xm7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFgVkHkU FXJ6pX42pUpcwB5uy05bMB8GA1UdIwQYMBaAFGtev+mKN4dkwbEty2kE5GELUKxX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTQxOC8wQzBCODAwRUY2 ODIxMUU5QTg5OTYxNDZDNEY5QUUwMi9hMTZfNllvM2gyVEJzUzNMYVFUa1lRdFFy RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ExNl82WW8zaDJUQnNTM0xhUVRrWVF0UXJGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTQxOC8wQzBCODAwRUY2ODIxMUU5QTg5OTYxNDZDNEY5QUUwMi9hMTZfNllvM2gy VEJzUzNMYVFUa1lRdFFyRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCe/RWKwmSc0d9MuExO6QciFa/EzErKcU+YB42TGb6Rsrg9JDokres0 xP1q9P8oQVEOwnNOSrrh6txzV7c8r1RANrxyA5+OuHE8PlyTD/kua6gCrTUfm+mP m+wWyPUrw07EVxsIjKztwBxop+re1F4tzMZd7ruEHtcmMnq+lHyKsHy8xAcgQEZp 3FtwB85kUSzVKkWANnoGxEN5sAHIASqipQ4J8Ao7vcgS7cMVaQsBi/tQUnTZvVZ7 EJddO4iVXRVF1a5Qp+nGoXADv3vnoE3DGgMqyAujTPS1GGj8FVfLRoYlMjaQJZkC d2oOMwNAqoBz5+oiU+bnyzfusGTRhA1r -----END CERTIFICATE-----Generated at Sat May 31 16:32:13 2025 by rpki-client