$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft File: 6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft (raw, json) Hash identifier: Nm7i82ZKRsui2tpNJDvJHsAGD26/7cCe9jr18fIgx3Y= Subject key identifier: 9B:5F:7A:DE:31:EB:C5:DF:B1:12:D3:7C:01:CC:DD:C4:BC:D7:93:03 Authority key identifier: E8:68:21:E9:F2:3D:42:F3:62:E4:2A:E2:AF:B5:BD:98:E0:B1:11:93 Certificate issuer: /CN=A91C6FD6/serialNumber=E86821E9F23D42F362E42AE2AFB5BD98E0B11193 Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ggh6fI9QvNi5Crir7W9mOCxEZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft Manifest number: AB Signing time: Sat 31 May 2025 05:40:50 +0000 Manifest this update: Sat 31 May 2025 05:40:50 +0000 Manifest next update: Sat 07 Jun 2025 05:40:50 +0000 Files and hashes: 1: 6Ggh6fI9QvNi5Crir7W9mOCxEZM.crl (hash: cBADxZQxV9dxliqnuzSVVIz/F8ZzxrBI10+vkd0V6xE=) 2: 70F3668238F711EFB4132D26C4F9AE02.roa (hash: 6q2HJGghYczmtOW7uCV2DY5B1dnxfLxnRSXR0JIpe1c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.crl rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ggh6fI9QvNi5Crir7W9mOCxEZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:40:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6FD6, serialNumber=E86821E9F23D42F362E42AE2AFB5BD98E0B11193 Validity Not Before: May 31 05:40:50 2025 GMT Not After : Jun 7 05:40:50 2025 GMT Subject: CN=683a9662-b332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0a:ef:ff:5f:75:57:cb:e3:42:98:47:14:dc: 06:6e:ce:d6:87:3a:96:0a:60:0d:8e:67:86:25:fb: b3:91:8e:fa:bd:fd:94:0b:4b:cf:c5:23:18:88:b9: 7e:fb:9d:81:2c:03:d7:49:03:99:09:43:2a:ca:b9: 59:9d:d2:67:6b:51:76:b5:45:f0:ee:3e:a6:fb:5b: 0b:be:fd:2f:fc:31:07:f9:bb:a2:4d:1c:15:5c:94: da:8c:c8:71:dd:31:0f:cd:26:49:ce:f9:dc:1a:5c: 72:20:73:1a:a9:60:b9:c1:e5:fd:b2:b6:b2:6c:3b: 31:ad:18:fe:52:a2:04:05:d2:cf:21:7c:08:82:78: a2:7b:b1:43:83:dc:cd:ae:91:fb:be:87:ab:e0:f4: d9:8b:da:92:f7:93:f0:56:87:52:72:51:63:00:b8: 63:80:8b:46:8d:15:a5:b0:8a:6d:02:82:d0:3b:f8: 23:01:5c:ca:bf:30:df:11:1b:a5:c6:16:38:41:19: 3c:ab:e4:bb:b9:2e:a0:8b:5f:31:23:b5:6f:8f:b2: 63:d2:08:dd:96:35:49:d5:f6:f6:4e:8f:7f:8d:06: 0e:bf:4f:d6:8d:69:19:de:0e:52:dd:54:d3:6a:b4: 4f:84:de:e9:fa:7e:3c:e8:c7:8a:01:03:54:b7:6f: df:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:5F:7A:DE:31:EB:C5:DF:B1:12:D3:7C:01:CC:DD:C4:BC:D7:93:03 X509v3 Authority Key Identifier: keyid:E8:68:21:E9:F2:3D:42:F3:62:E4:2A:E2:AF:B5:BD:98:E0:B1:11:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ggh6fI9QvNi5Crir7W9mOCxEZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:65:2a:a9:42:18:be:9d:fd:2d:d3:dd:c4:b7:97:02:4a:28: cd:2a:6c:72:3a:f9:ca:48:5e:87:9b:70:c4:b4:ca:bf:e8:6b: 0e:07:bf:a0:f2:3b:b7:25:c5:46:c5:56:bc:c9:25:41:75:39: 5c:54:67:4c:f7:c1:ff:b6:87:2e:52:9f:69:b0:5c:45:99:5e: a3:26:b4:9c:9f:f1:6b:12:c6:85:ad:6d:c1:b1:2e:65:16:e4: db:0c:34:b4:18:a1:24:52:c7:c6:da:59:35:02:55:0e:96:0b: b1:c6:46:4c:1a:4a:b0:22:56:6f:30:51:ad:98:16:fa:7c:8e: 74:74:3f:5d:90:d4:1b:30:a9:b9:b5:16:33:b4:9f:cb:22:7d: 5a:a3:7f:53:fd:5c:32:42:aa:fb:90:ff:d7:bb:00:a2:ac:ac: 5e:48:50:03:e7:b3:de:56:04:04:36:e2:c1:59:4f:96:46:f6: e6:28:3c:02:ca:a3:aa:28:ca:42:8f:0b:e4:dc:fb:46:9e:3a: f7:c1:b9:e7:01:e6:5c:5a:c6:fa:b2:53:ab:0b:48:7d:f7:10: cf:5e:60:17:75:ea:fe:05:a5:62:9e:da:d4:2c:38:46:fa:ac: 1f:9b:36:52:b8:fd:08:88:58:d5:af:2b:79:54:48:ad:27:b5: 9d:d6:17:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZGRDYxMTAvBgNVBAUTKEU4NjgyMUU5RjIzRDQyRjM2MkU0MkFFMkFGQjVCRDk4 RTBCMTExOTMwHhcNMjUwNTMxMDU0MDUwWhcNMjUwNjA3MDU0MDUwWjAYMRYwFAYD VQQDEw02ODNhOTY2Mi1iMzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAugrv/191V8vjQphHFNwGbs7WhzqWCmANjmeGJfuzkY76vf2UC0vPxSMYiLl+ +52BLAPXSQOZCUMqyrlZndJna1F2tUXw7j6m+1sLvv0v/DEH+buiTRwVXJTajMhx 3TEPzSZJzvncGlxyIHMaqWC5weX9sraybDsxrRj+UqIEBdLPIXwIgniie7FDg9zN rpH7voer4PTZi9qS95PwVodSclFjALhjgItGjRWlsIptAoLQO/gjAVzKvzDfERul xhY4QRk8q+S7uS6gi18xI7Vvj7Jj0gjdljVJ1fb2To9/jQYOv0/WjWkZ3g5S3VTT arRPhN7p+n486MeKAQNUt2/flwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJtfet4x 68XfsRLTfAHM3cS815MDMB8GA1UdIwQYMBaAFOhoIenyPULzYuQq4q+1vZjgsRGT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkZENi82OERBNEI2QTM4 RjYxMUVGQjEzMTg0MjNDNEY5QUUwMi82R2doNmZJOVF2Tmk1Q3JpcjdXOW1PQ3hF Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZHZ2g2Zkk5UXZOaTVDcmlyN1c5bU9DeEVaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkZENi82OERBNEI2QTM4RjYxMUVGQjEzMTg0MjNDNEY5QUUwMi82R2doNmZJOVF2 Tmk1Q3JpcjdXOW1PQ3hFWk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzZSqpQhi+nf0t093Et5cCSijNKmxyOvnKSF6Hm3DEtMq/6GsOB7+g 8ju3JcVGxVa8ySVBdTlcVGdM98H/tocuUp9psFxFmV6jJrScn/FrEsaFrW3BsS5l FuTbDDS0GKEkUsfG2lk1AlUOlguxxkZMGkqwIlZvMFGtmBb6fI50dD9dkNQbMKm5 tRYztJ/LIn1ao39T/VwyQqr7kP/XuwCirKxeSFAD57PeVgQENuLBWU+WRvbmKDwC yqOqKMpCjwvk3PtGnjr3wbnnAeZcWsb6slOrC0h99xDPXmAXder+BaVintrULDhG +qwfmzZSuP0IiFjVryt5VEitJ7Wd1heI -----END CERTIFICATE-----Generated at Sat May 31 17:17:27 2025 by rpki-client