$ rpki-client -vvf rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft File: 6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft (raw, json) Hash identifier: c0ef4nMpASssL+72CVN4cXYF+3KHbyly5/8ZGeFxFPY= Subject key identifier: EF:7C:48:80:65:B3:5E:93:07:B7:B7:FF:F3:1E:E2:29:0F:2A:21:BD Authority key identifier: E9:F2:CE:48:3F:1B:06:D2:9D:5E:A2:AB:E3:75:BD:1D:22:A9:E1:C4 Certificate issuer: /CN=A91C68AD/serialNumber=E9F2CE483F1B06D29D5EA2ABE375BD1D22A9E1C4 Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft Manifest number: 7A Signing time: Sun 01 Jun 2025 06:25:50 +0000 Manifest this update: Sun 01 Jun 2025 06:25:50 +0000 Manifest next update: Sun 08 Jun 2025 06:25:50 +0000 Files and hashes: 1: 6fLOSD8bBtKdXqKr43W9HSKp4cQ.crl (hash: qzXx0VNdtVgrMRGo+rzGfzcnpEsrmy61P01Q1KbYfM0=) 2: FC3E29FC85E111EFB365E459C4F9AE02.roa (hash: 0DxgUjIqfTQVxs1j3QKSFbDtA+jK21POEd6C/CDA/hA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.crl rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 06:25:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C68AD, serialNumber=E9F2CE483F1B06D29D5EA2ABE375BD1D22A9E1C4 Validity Not Before: Jun 1 06:25:50 2025 GMT Not After : Jun 8 06:25:50 2025 GMT Subject: CN=683bf26e-4456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d2:9e:9f:73:5a:f5:07:0b:61:ad:1f:a9:fa: 08:34:99:ec:cc:85:7d:4c:a4:05:65:f2:0e:3b:a8: fc:04:0a:be:60:ff:d4:67:c6:a2:67:ad:68:0f:e5: d1:ec:c1:9b:bf:8f:e4:84:e8:e0:51:fa:c1:a6:80: 27:36:a0:04:a7:3c:6e:af:19:45:c0:ca:95:80:3e: 62:3b:24:a6:16:86:a0:74:29:7e:3f:ae:05:7e:b8: 1e:60:e2:78:0a:ed:72:6d:2f:23:2f:50:44:dc:f1: ee:84:bd:43:21:f3:97:bf:25:1d:4b:ca:9d:37:71: f4:c9:bf:27:34:c0:7b:69:06:c4:9d:06:cc:3d:7f: c4:22:d6:3f:39:5c:7a:2c:50:5b:ee:fe:e9:1c:bf: 6d:b8:2e:29:d5:c3:96:11:96:cb:7d:1d:da:92:43: c9:27:79:b8:d8:f9:1f:a6:df:d8:6a:5a:0e:84:41: cc:57:ad:cb:ac:e8:14:18:7f:f2:b5:05:d3:c2:2f: af:db:85:f0:dd:27:47:db:f3:0a:a6:55:f4:a1:6e: 32:a5:89:b3:dc:cd:2a:ce:de:4a:ff:a1:71:17:9b: 86:9b:66:9b:2a:83:3b:bc:11:ae:af:b8:65:4c:10: 6b:03:24:78:5c:34:49:f9:2b:41:56:2f:bc:2c:74: 91:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:7C:48:80:65:B3:5E:93:07:B7:B7:FF:F3:1E:E2:29:0F:2A:21:BD X509v3 Authority Key Identifier: keyid:E9:F2:CE:48:3F:1B:06:D2:9D:5E:A2:AB:E3:75:BD:1D:22:A9:E1:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:96:ae:d9:e6:d9:22:5a:a9:a4:da:9f:33:bb:7d:e7:d5:4d: 60:d4:e8:c6:b4:f7:4b:b5:ba:76:57:fe:f8:e3:a6:b4:8d:d9: 83:4d:6d:64:ca:fa:3c:d4:71:1c:9b:6d:ea:d8:58:2d:a1:3f: 13:46:2a:64:ad:8e:cd:dd:c2:3f:23:83:d0:86:26:8e:13:f6: 04:d0:35:fc:99:84:59:dc:b7:67:c3:2d:e6:30:ff:52:9c:89: 10:57:91:3b:75:88:ec:85:bd:18:23:a6:a6:39:fb:d8:bd:bb: eb:e2:90:e5:b8:12:3e:5f:68:07:fa:02:34:5e:bd:88:fd:ea: b2:74:ae:2d:9d:87:c9:7e:39:74:26:15:48:a1:0d:83:20:91: 18:1b:df:19:e1:30:3d:d1:a6:a0:58:a4:cd:0e:7e:82:97:1d: 0f:05:7c:b4:b3:2d:0b:0c:a3:d6:1a:30:83:ae:83:98:75:42: c4:04:4b:3d:e7:d2:78:cd:34:43:3c:f0:f6:8f:19:a8:d0:46: b4:bd:ba:87:c0:df:6f:5b:75:ba:76:45:99:25:e1:a4:14:0c: 75:b2:c4:8c:02:11:1b:07:f9:b3:22:0a:13:38:a3:ae:4f:78: f1:a7:0f:22:71:6f:24:f4:b2:16:e7:b1:eb:a7:7e:92:e6:ad: 95:8e:b8:85 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NjhBRDExMC8GA1UEBRMoRTlGMkNFNDgzRjFCMDZEMjlENUVBMkFCRTM3NUJEMUQy MkE5RTFDNDAeFw0yNTA2MDEwNjI1NTBaFw0yNTA2MDgwNjI1NTBaMBgxFjAUBgNV BAMTDTY4M2JmMjZlLTQ0NTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCt0p6fc1r1BwthrR+p+gg0mezMhX1MpAVl8g47qPwECr5g/9RnxqJnrWgP5dHs wZu/j+SE6OBR+sGmgCc2oASnPG6vGUXAypWAPmI7JKYWhqB0KX4/rgV+uB5g4ngK 7XJtLyMvUETc8e6EvUMh85e/JR1Lyp03cfTJvyc0wHtpBsSdBsw9f8Qi1j85XHos UFvu/ukcv224LinVw5YRlst9HdqSQ8knebjY+R+m39hqWg6EQcxXrcus6BQYf/K1 BdPCL6/bhfDdJ0fb8wqmVfShbjKlibPczSrO3kr/oXEXm4abZpsqgzu8Ea6vuGVM EGsDJHhcNEn5K0FWL7wsdJHxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU73xIgGWz XpMHt7f/8x7iKQ8qIb0wHwYDVR0jBBgwFoAU6fLOSD8bBtKdXqKr43W9HSKp4cQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2OEFELzQ5REVFRTY0ODVF MDExRUZBNzU4NzY1NUM0RjlBRTAyLzZmTE9TRDhiQnRLZFhxS3I0M1c5SFNLcDRj US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNmZMT1NEOGJCdEtkWHFLcjQzVzlIU0twNGNRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2 OEFELzQ5REVFRTY0ODVFMDExRUZBNzU4NzY1NUM0RjlBRTAyLzZmTE9TRDhiQnRL ZFhxS3I0M1c5SFNLcDRjUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABeWrtnm2SJaqaTanzO7fefVTWDU6Ma090u1unZX/vjjprSN2YNNbWTK +jzUcRybberYWC2hPxNGKmStjs3dwj8jg9CGJo4T9gTQNfyZhFnct2fDLeYw/1Kc iRBXkTt1iOyFvRgjpqY5+9i9u+vikOW4Ej5faAf6AjRevYj96rJ0ri2dh8l+OXQm FUihDYMgkRgb3xnhMD3RpqBYpM0OfoKXHQ8FfLSzLQsMo9YaMIOug5h1QsQESz3n 0njNNEM88PaPGajQRrS9uofA329bdbp2RZkl4aQUDHWyxIwCERsH+bMiChM4o65P ePGnDyJxbyT0shbnseunfpLmrZWOuIU= -----END CERTIFICATE-----Generated at Mon Jun 2 20:34:43 2025 by rpki-client