$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.mft File: -6JuPNfggZmzoY8WNmp1fwTN8FQ.mft (raw, json) Hash identifier: eFw5fH6m2VFcKxeAssyP16g7/4yyA95oj+HvJcnoATs= Subject key identifier: 31:09:91:2E:77:A2:CE:F2:92:3D:6D:73:CC:50:67:12:52:10:02:56 Authority key identifier: FB:A2:6E:3C:D7:E0:81:99:B3:A1:8F:16:36:6A:75:7F:04:CD:F0:54 Certificate issuer: /CN=A91B7709/serialNumber=FBA26E3CD7E08199B3A18F16366A757F04CDF054 Certificate serial: 76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6JuPNfggZmzoY8WNmp1fwTN8FQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.mft Manifest number: 75 Signing time: Sat 31 May 2025 06:21:31 +0000 Manifest this update: Sat 31 May 2025 06:21:30 +0000 Manifest next update: Sat 07 Jun 2025 06:21:30 +0000 Files and hashes: 1: -6JuPNfggZmzoY8WNmp1fwTN8FQ.crl (hash: UnSPI/Q9W5NUSrRDy6s5KrbLq/sr++VsFIn0+/bHJfg=) 2: 25FFA3768BB711EF9C572630C4F9AE02.roa (hash: PO3QH99TaEGXLczk5CFqhAB0Ach8mXnS87Xb+Nz/Uzg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.crl rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6JuPNfggZmzoY8WNmp1fwTN8FQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:21:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 118 (0x76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7709, serialNumber=FBA26E3CD7E08199B3A18F16366A757F04CDF054 Validity Not Before: May 31 06:21:30 2025 GMT Not After : Jun 7 06:21:30 2025 GMT Subject: CN=683a9fea-8f8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:6e:33:b0:70:85:e7:56:70:67:74:5c:54:46: de:64:c7:17:0a:f7:89:d9:25:0c:fd:a5:c4:52:38: 9b:07:6a:ee:26:2f:83:41:31:ff:0e:ca:1d:c3:9f: 74:31:e4:e6:ed:3f:bf:72:39:9d:eb:aa:4c:aa:76: 7f:5e:f8:fd:34:72:64:bb:86:9e:03:46:47:d9:f7: 1a:93:29:15:db:4d:02:58:4a:4c:7d:7b:30:b6:b8: 1d:37:88:74:b9:31:bc:cd:56:1e:ef:f0:22:9c:dc: 9b:89:08:a0:1d:56:cd:44:d8:b1:07:e8:6a:bc:70: 75:6b:e5:c8:e3:25:5c:d8:48:45:7c:c0:77:f3:00: 2e:03:bc:a4:75:70:1b:03:78:d9:eb:61:0b:2e:03: 86:59:f1:00:e9:9c:47:9f:bb:9c:bf:c5:c3:8c:bf: 5a:5a:48:14:47:db:c0:22:f4:20:a0:b9:13:a3:f0: 66:4c:ed:1b:fd:de:ea:1e:78:01:16:80:f4:2f:8d: 96:58:c0:b5:7b:77:81:d6:43:af:4c:c8:39:d5:dc: b6:93:c6:59:98:d6:b4:d6:4f:65:81:4c:b9:f7:c0: 59:96:d1:5c:99:8a:1d:fa:d0:3c:27:40:fb:8e:09: ed:9f:a8:de:8c:92:5d:26:dd:b4:a2:74:44:64:30: 0e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:09:91:2E:77:A2:CE:F2:92:3D:6D:73:CC:50:67:12:52:10:02:56 X509v3 Authority Key Identifier: keyid:FB:A2:6E:3C:D7:E0:81:99:B3:A1:8F:16:36:6A:75:7F:04:CD:F0:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6JuPNfggZmzoY8WNmp1fwTN8FQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:06:37:31:ab:3b:d6:4d:66:45:75:09:ed:27:35:dd:74:fe: a2:04:d3:55:6e:c0:ce:de:cb:22:9e:4d:82:7d:2d:e8:f8:18: ee:8f:f9:9e:e8:f1:0f:2a:fb:ca:22:ce:a2:8b:14:f9:19:3f: 43:51:93:62:47:89:d9:3a:f1:8f:de:b1:5e:ff:1f:7c:db:6e: 43:63:e0:eb:d0:a3:19:bd:f0:c3:0c:fd:c4:d3:a9:62:67:fd: e7:97:5a:c2:42:fb:7b:95:98:13:16:bb:b7:94:de:63:07:b9: ee:09:4f:a9:c5:73:b2:26:fb:a8:d6:dd:66:4b:80:87:42:18: 1e:ea:40:4f:06:57:2b:ea:c3:a2:0d:77:79:c2:8a:e4:c8:fd: 83:f4:13:73:ec:db:f4:1b:1d:ac:6a:e2:7a:cd:72:93:5c:79: a3:37:e0:1b:a6:d6:7d:2b:e8:be:e2:bd:3e:3d:e1:7e:67:b2: 63:4b:c7:fd:33:7b:54:ef:7c:8b:87:86:d5:75:19:c0:6a:90: ff:b6:5a:56:83:67:56:e4:33:94:85:71:c9:ad:b0:79:b7:b5: 18:90:cf:85:88:e0:32:85:ea:20:08:48:c3:cc:ee:d5:a4:20: 14:68:25:ec:92:f4:e0:e7:e4:c7:05:ca:e5:ff:9b:76:fe:40: 74:45:12:91 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NzcwOTExMC8GA1UEBRMoRkJBMjZFM0NEN0UwODE5OUIzQTE4RjE2MzY2QTc1N0Yw NENERjA1NDAeFw0yNTA1MzEwNjIxMzBaFw0yNTA2MDcwNjIxMzBaMBgxFjAUBgNV BAMTDTY4M2E5ZmVhLThmOGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDcbjOwcIXnVnBndFxURt5kxxcK94nZJQz9pcRSOJsHau4mL4NBMf8Oyh3Dn3Qx 5ObtP79yOZ3rqkyqdn9e+P00cmS7hp4DRkfZ9xqTKRXbTQJYSkx9ezC2uB03iHS5 MbzNVh7v8CKc3JuJCKAdVs1E2LEH6Gq8cHVr5cjjJVzYSEV8wHfzAC4DvKR1cBsD eNnrYQsuA4ZZ8QDpnEefu5y/xcOMv1paSBRH28Ai9CCguROj8GZM7Rv93uoeeAEW gPQvjZZYwLV7d4HWQ69MyDnV3LaTxlmY1rTWT2WBTLn3wFmW0VyZih360DwnQPuO Ce2fqN6Mkl0m3bSidERkMA7jAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMQmRLnei zvKSPW1zzFBnElIQAlYwHwYDVR0jBBgwFoAU+6JuPNfggZmzoY8WNmp1fwTN8FQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3NzA5LzgxNjIzQTRBOEJC NjExRUY5OThCQUM3MkM0RjlBRTAyLy02SnVQTmZnZ1ptem9ZOFdObXAxZndUTjhG US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLTZKdVBOZmdnWm16b1k4V05tcDFmd1ROOEZRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3 NzA5LzgxNjIzQTRBOEJCNjExRUY5OThCQUM3MkM0RjlBRTAyLy02SnVQTmZnZ1pt em9ZOFdObXAxZndUTjhGUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHkGNzGrO9ZNZkV1Ce0nNd10/qIE01VuwM7eyyKeTYJ9Lej4GO6P+Z7o 8Q8q+8oizqKLFPkZP0NRk2JHidk68Y/esV7/H3zbbkNj4OvQoxm98MMM/cTTqWJn /eeXWsJC+3uVmBMWu7eU3mMHue4JT6nFc7Im+6jW3WZLgIdCGB7qQE8GVyvqw6IN d3nCiuTI/YP0E3Ps2/QbHaxq4nrNcpNceaM34Bum1n0r6L7ivT494X5nsmNLx/0z e1TvfIuHhtV1GcBqkP+2WlaDZ1bkM5SFccmtsHm3tRiQz4WI4DKF6iAISMPM7tWk IBRoJeyS9ODn5McFyuX/m3b+QHRFEpE= -----END CERTIFICATE-----Generated at Sat May 31 17:18:52 2025 by rpki-client