$ rpki-client -vvf rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.mft File: O6JVjKXxoDfZaW9WeugTZ8buNeY.mft (raw, json) Hash identifier: dtLRLdLDXyFbOQRC+ZTxecP+31XYKEuY2VQdAk5kBf0= Subject key identifier: 6F:35:61:3C:24:C3:D1:18:9B:8A:F6:8E:07:07:8F:68:00:2F:EC:A8 Authority key identifier: 3B:A2:55:8C:A5:F1:A0:37:D9:69:6F:56:7A:E8:13:67:C6:EE:35:E6 Certificate issuer: /CN=A91C022C/serialNumber=3BA2558CA5F1A037D9696F567AE81367C6EE35E6 Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6JVjKXxoDfZaW9WeugTZ8buNeY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.mft Manifest number: 47 Signing time: Tue 03 Jun 2025 07:15:13 +0000 Manifest this update: Tue 03 Jun 2025 07:15:13 +0000 Manifest next update: Tue 10 Jun 2025 07:15:13 +0000 Files and hashes: 1: O6JVjKXxoDfZaW9WeugTZ8buNeY.crl (hash: enZu06haqvn9lmWYcdOEuzfRztEqWJ5yUkXsaFwB4us=) 2: 372B21F6D4BA11EFA5BAA345C4F9AE02.roa (hash: 0VQHEL6AI7GrKoKG052X6QJW7qwnCtlNzYdHLuxNwGs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.crl rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6JVjKXxoDfZaW9WeugTZ8buNeY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 07:15:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C022C, serialNumber=3BA2558CA5F1A037D9696F567AE81367C6EE35E6 Validity Not Before: Jun 3 07:15:13 2025 GMT Not After : Jun 10 07:15:13 2025 GMT Subject: CN=683ea101-9022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c5:6c:d1:1d:3c:fb:54:a4:a7:f9:7c:5a:f6: a5:06:bc:bf:35:6f:27:05:b9:56:2b:fe:85:80:e0: ec:8d:a0:fd:ce:bf:4d:d1:af:57:35:5e:15:54:de: 9f:9d:48:bd:09:7f:04:95:5a:8d:10:7e:0b:c1:c3: 27:81:7f:2e:6b:e4:6e:92:06:a8:b0:6c:4a:ee:25: 26:2f:b3:03:3b:a9:63:06:5b:8a:c7:9a:b3:68:d0: bc:59:78:6d:57:16:56:8c:eb:e4:10:50:3b:fb:26: 28:a1:19:fc:98:47:2f:43:fe:04:be:ac:0e:90:07: b0:29:f1:35:da:c0:ff:35:a8:eb:6a:4b:15:2c:8e: 35:9f:6a:25:0f:64:60:c1:80:10:b5:7e:ef:62:7b: 7e:c0:23:79:8f:c4:45:13:95:3c:bc:db:e9:3c:53: e9:16:cb:39:98:7d:6d:4e:6a:77:24:66:09:94:21: 0e:ae:79:cc:da:90:74:83:d4:14:81:5c:69:c9:08: 89:fa:ed:1a:6e:69:62:28:30:1f:dd:b0:99:2e:72: 08:d0:b4:ae:01:8e:c7:0b:82:5e:b3:cd:9e:37:a2: e9:3d:1a:f2:51:23:fd:c5:20:d1:f5:7e:4a:9a:ce: 51:23:48:16:36:ec:08:34:b8:ed:54:e8:1f:49:7c: a8:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:35:61:3C:24:C3:D1:18:9B:8A:F6:8E:07:07:8F:68:00:2F:EC:A8 X509v3 Authority Key Identifier: keyid:3B:A2:55:8C:A5:F1:A0:37:D9:69:6F:56:7A:E8:13:67:C6:EE:35:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6JVjKXxoDfZaW9WeugTZ8buNeY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:c8:bc:cf:b2:e9:90:69:49:c6:e5:5d:ac:ac:1e:72:26:e7: 5e:65:9c:b8:78:f9:d4:a7:4d:24:fb:d8:58:43:3b:c6:94:c5: 9a:a8:93:5a:f8:70:a7:0a:d1:af:6b:6f:99:91:29:fb:da:e6: 46:f8:cf:e6:89:c6:c9:82:81:98:35:47:fe:30:9d:e8:18:6c: 07:2a:dd:2a:33:80:7d:d6:3c:37:86:ce:23:40:24:17:28:05: b5:7a:b4:18:0c:0e:26:7e:fe:c2:b5:95:8d:34:d8:37:b3:30: 86:04:cb:08:52:71:64:8e:79:15:7d:fc:ac:b3:2d:64:25:f4: 6f:ae:90:1e:15:fb:11:ea:1b:a6:ed:f0:65:fa:4f:8a:a1:75: 7a:b0:24:bd:03:40:35:80:6b:21:58:a2:16:c2:1e:f4:53:8d: 69:86:9c:23:c5:cc:69:43:b6:87:b3:80:fe:79:00:6a:36:94: 0d:3e:f3:49:93:4d:f6:15:81:ce:d4:67:33:2e:fc:10:43:50: d6:7e:6a:19:b6:4a:9b:0e:31:c1:54:45:5a:40:e1:dd:bf:a8: 56:b4:be:2d:cf:7c:61:2e:a4:e3:4e:78:06:63:0d:c9:33:e5: ce:40:e7:52:24:0b:cc:b2:08:03:94:0a:06:49:da:12:3b:c6: 11:88:30:b0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MDIyQzExMC8GA1UEBRMoM0JBMjU1OENBNUYxQTAzN0Q5Njk2RjU2N0FFODEzNjdD NkVFMzVFNjAeFw0yNTA2MDMwNzE1MTNaFw0yNTA2MTAwNzE1MTNaMBgxFjAUBgNV BAMTDTY4M2VhMTAxLTkwMjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCoxWzRHTz7VKSn+Xxa9qUGvL81bycFuVYr/oWA4OyNoP3Ov03Rr1c1XhVU3p+d SL0JfwSVWo0QfgvBwyeBfy5r5G6SBqiwbEruJSYvswM7qWMGW4rHmrNo0LxZeG1X FlaM6+QQUDv7JiihGfyYRy9D/gS+rA6QB7Ap8TXawP81qOtqSxUsjjWfaiUPZGDB gBC1fu9ie37AI3mPxEUTlTy82+k8U+kWyzmYfW1OanckZgmUIQ6ueczakHSD1BSB XGnJCIn67RpuaWIoMB/dsJkucgjQtK4BjscLgl6zzZ43ouk9GvJRI/3FINH1fkqa zlEjSBY27Ag0uO1U6B9JfKj7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbzVhPCTD 0RibivaOBwePaAAv7KgwHwYDVR0jBBgwFoAUO6JVjKXxoDfZaW9WeugTZ8buNeYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMwMjJDL0IxQzE4MjMwRDRC OTExRUY5RkE4RTI0RkM0RjlBRTAyL082SlZqS1h4b0RmWmFXOVdldWdUWjhidU5l WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTzZKVmpLWHhvRGZaYVc5V2V1Z1RaOGJ1TmVZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMw MjJDL0IxQzE4MjMwRDRCOTExRUY5RkE4RTI0RkM0RjlBRTAyL082SlZqS1h4b0Rm WmFXOVdldWdUWjhidU5lWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABnIvM+y6ZBpScblXaysHnIm515lnLh4+dSnTST72FhDO8aUxZqok1r4 cKcK0a9rb5mRKfva5kb4z+aJxsmCgZg1R/4wnegYbAcq3SozgH3WPDeGziNAJBco BbV6tBgMDiZ+/sK1lY002DezMIYEywhScWSOeRV9/KyzLWQl9G+ukB4V+xHqG6bt 8GX6T4qhdXqwJL0DQDWAayFYohbCHvRTjWmGnCPFzGlDtoezgP55AGo2lA0+80mT TfYVgc7UZzMu/BBDUNZ+ahm2SpsOMcFURVpA4d2/qFa0vi3PfGEupONOeAZjDckz 5c5A51IkC8yyCAOUCgZJ2hI7xhGIMLA= -----END CERTIFICATE-----Generated at Wed Jun 4 00:16:17 2025 by rpki-client