$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.mft File: 6f7YwwxxXQSs4XWunL1wDBl3BgI.mft (raw, json) Hash identifier: pm9hoa6Gv0tkG6wIwEDRWJ1VPUds2hHY8Oo2XdMT+bw= Subject key identifier: C5:F7:B7:E2:90:E2:C9:EF:5E:DE:4D:49:7D:26:67:34:EC:F7:7C:56 Authority key identifier: E9:FE:D8:C3:0C:71:5D:04:AC:E1:75:AE:9C:BD:70:0C:19:77:06:02 Certificate issuer: /CN=A91C3EF6/serialNumber=E9FED8C30C715D04ACE175AE9CBD700C19770602 Certificate serial: 14D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f7YwwxxXQSs4XWunL1wDBl3BgI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.mft Manifest number: 14C7 Signing time: Fri 30 May 2025 17:01:56 +0000 Manifest this update: Fri 30 May 2025 17:01:56 +0000 Manifest next update: Fri 06 Jun 2025 17:01:56 +0000 Files and hashes: 1: 6f7YwwxxXQSs4XWunL1wDBl3BgI.crl (hash: K+j/FzkaZpKQ8cL5zmac9MuZzF5eXU3NqVjmeXvgmTw=) 2: D056896E592A11E889035A70C4F9AE02.roa (hash: tFV3sDzQ0MzS9JiFtiotNFf8xUZyC7UxkWA8BrQBeiQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.crl rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f7YwwxxXQSs4XWunL1wDBl3BgI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5329 (0x14d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3EF6, serialNumber=E9FED8C30C715D04ACE175AE9CBD700C19770602 Validity Not Before: May 30 17:01:56 2025 GMT Not After : Jun 6 17:01:56 2025 GMT Subject: CN=6839e484-2474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:74:97:18:16:75:6c:38:29:15:41:67:08:e6: 41:d9:f3:b8:a7:cc:19:0c:93:5b:21:1e:85:0e:fb: c8:de:ca:c6:40:28:a7:09:13:e9:e5:69:3e:65:ef: 8a:67:9b:68:a4:78:30:0b:87:fa:28:31:57:2f:dc: 9f:ea:49:a8:da:05:03:43:83:44:25:4b:f0:9c:8b: 87:45:f0:78:e2:2c:68:10:44:51:f7:20:5b:53:db: 22:39:6f:cd:e3:a5:f0:8c:f8:96:75:31:25:23:d6: 65:6e:e6:26:4b:eb:e4:2e:3e:97:12:c4:1c:6f:94: 0a:00:d8:77:e9:0c:cc:d6:34:eb:1c:fc:b2:6c:51: b1:36:f0:78:a1:11:f6:f2:d5:72:3e:b0:3b:1f:8f: 84:9f:5a:c4:ec:95:87:09:27:ab:bb:63:eb:f4:ae: 85:8b:f3:e6:b9:a2:0b:6f:cc:8a:05:0f:9f:9d:15: 18:1c:63:36:b0:7c:b8:a8:07:f7:82:13:16:e9:68: d8:6e:9a:eb:f6:21:29:40:03:1d:06:90:bc:8c:88: b5:86:30:3c:e9:2a:11:fb:31:2f:8e:a7:18:03:ae: 62:1b:90:99:58:3a:3c:97:83:5b:1e:9e:34:0f:00: ff:00:fb:83:57:bf:98:61:0b:ff:50:08:cc:4b:67: df:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:F7:B7:E2:90:E2:C9:EF:5E:DE:4D:49:7D:26:67:34:EC:F7:7C:56 X509v3 Authority Key Identifier: keyid:E9:FE:D8:C3:0C:71:5D:04:AC:E1:75:AE:9C:BD:70:0C:19:77:06:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f7YwwxxXQSs4XWunL1wDBl3BgI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:f7:bc:c2:c3:bf:28:ac:da:7c:0a:01:d7:60:a3:c8:c7:f1: 75:47:12:9e:97:91:84:93:4e:ea:87:07:66:b2:f2:35:ed:77: 9a:34:54:35:ba:2a:ad:c7:2b:f6:7a:0b:48:26:d9:07:79:a1: 81:79:3c:28:aa:76:10:7b:c1:b0:cd:48:89:ae:3e:72:1e:be: 21:84:6e:e7:0c:08:df:6e:2e:a7:1e:5f:44:94:4c:27:7b:64: 03:ee:45:43:4e:03:37:42:e9:1b:8a:bb:f6:03:b9:b9:3d:3d: 27:6b:7a:7c:f7:05:54:e0:ff:df:cd:66:23:a5:21:00:77:08: e4:6a:e1:54:d7:ca:49:67:e5:b0:3e:18:7a:a8:25:58:77:65: 73:38:fa:75:72:98:f1:b4:6c:e5:ab:42:91:f4:64:e0:7a:0d: 6d:cc:1a:0b:a7:f9:8d:d7:1e:bf:7f:d8:25:25:1f:25:f8:94: 23:52:15:7b:cc:92:a6:a6:1e:81:8b:12:61:61:d9:79:c2:b4: 5c:4e:66:a0:87:4c:5e:6d:f2:84:76:d4:9f:a7:c9:f1:40:64: 6c:59:5e:d8:64:0d:01:46:e0:74:f4:21:da:75:44:87:25:d1: 96:61:a7:b3:68:85:ba:cf:f3:f2:ef:ae:b5:56:bc:64:ee:d7: 94:09:2b:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFNEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNFRjYxMTAvBgNVBAUTKEU5RkVEOEMzMEM3MTVEMDRBQ0UxNzVBRTlDQkQ3MDBD MTk3NzA2MDIwHhcNMjUwNTMwMTcwMTU2WhcNMjUwNjA2MTcwMTU2WjAYMRYwFAYD VQQDEw02ODM5ZTQ4NC0yNDc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtnSXGBZ1bDgpFUFnCOZB2fO4p8wZDJNbIR6FDvvI3srGQCinCRPp5Wk+Ze+K Z5topHgwC4f6KDFXL9yf6kmo2gUDQ4NEJUvwnIuHRfB44ixoEERR9yBbU9siOW/N 46XwjPiWdTElI9ZlbuYmS+vkLj6XEsQcb5QKANh36QzM1jTrHPyybFGxNvB4oRH2 8tVyPrA7H4+En1rE7JWHCSeru2Pr9K6Fi/PmuaILb8yKBQ+fnRUYHGM2sHy4qAf3 ghMW6WjYbprr9iEpQAMdBpC8jIi1hjA86SoR+zEvjqcYA65iG5CZWDo8l4NbHp40 DwD/APuDV7+YYQv/UAjMS2ffkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMX3t+KQ 4snvXt5NSX0mZzTs93xWMB8GA1UdIwQYMBaAFOn+2MMMcV0ErOF1rpy9cAwZdwYC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0VGNi9BQzREQUJDNjU5 MjgxMUU4OEU1QjQ0NkJDNEY5QUUwMi82ZjdZd3d4eFhRU3M0WFd1bkwxd0RCbDNC Z0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZmN1l3d3h4WFFTczRYV3VuTDF3REJsM0JnSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0VGNi9BQzREQUJDNjU5MjgxMUU4OEU1QjQ0NkJDNEY5QUUwMi82ZjdZd3d4eFhR U3M0WFd1bkwxd0RCbDNCZ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBR97zCw78orNp8CgHXYKPIx/F1RxKel5GEk07qhwdmsvI17XeaNFQ1 uiqtxyv2egtIJtkHeaGBeTwoqnYQe8GwzUiJrj5yHr4hhG7nDAjfbi6nHl9ElEwn e2QD7kVDTgM3Qukbirv2A7m5PT0na3p89wVU4P/fzWYjpSEAdwjkauFU18pJZ+Ww Phh6qCVYd2VzOPp1cpjxtGzlq0KR9GTgeg1tzBoLp/mN1x6/f9glJR8l+JQjUhV7 zJKmph6BixJhYdl5wrRcTmagh0xebfKEdtSfp8nxQGRsWV7YZA0BRuB09CHadUSH JdGWYaezaIW6z/Py7661Vrxk7teUCSt2 -----END CERTIFICATE-----Generated at Sat May 31 16:52:17 2025 by rpki-client