$ rpki-client -vvf rpki.apnic.net/member_repository/A91C705E/34DD4EE6F62411EC97234814C4F9AE02/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.mft File: g6y1D5b2RD9Lg9OR-Fe-fLV-NME.mft (raw, json) Hash identifier: EahIRwuIHaBtluWkW6f15yy2ve5jzGhuAYF7U/rfKTU= Subject key identifier: 03:5F:0D:A3:80:68:9F:3F:EF:D6:D7:4E:58:87:47:3A:D0:9C:19:2F Authority key identifier: 83:AC:B5:0F:96:F6:44:3F:4B:83:D3:91:F8:57:BE:7C:B5:7E:34:C1 Certificate issuer: /CN=A91C705E/serialNumber=83ACB50F96F6443F4B83D391F857BE7CB57E34C1 Certificate serial: 02BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C705E/34DD4EE6F62411EC97234814C4F9AE02/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.mft Manifest number: 02B6 Signing time: Sun 01 Jun 2025 01:40:47 +0000 Manifest this update: Sun 01 Jun 2025 01:40:46 +0000 Manifest next update: Sun 08 Jun 2025 01:40:46 +0000 Files and hashes: 1: g6y1D5b2RD9Lg9OR-Fe-fLV-NME.crl (hash: dOJDFAVY6mseKgePV0ClpEGAkvcfgsss9/Le+gMMv44=) 2: CB5ED75AF62811EC9205771CC4F9AE02.roa (hash: NW6HBZRtebEmp/7i48MrWPcyNaPh4Ushzt7ufQ/dX6A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C705E/34DD4EE6F62411EC97234814C4F9AE02/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.crl rsync://rpki.apnic.net/member_repository/A91C705E/34DD4EE6F62411EC97234814C4F9AE02/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 01:40:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 700 (0x2bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C705E, serialNumber=83ACB50F96F6443F4B83D391F857BE7CB57E34C1 Validity Not Before: Jun 1 01:40:46 2025 GMT Not After : Jun 8 01:40:46 2025 GMT Subject: CN=683baf9e-ae40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:50:2d:b4:07:c3:cc:99:a1:99:0d:b5:f7:d4: 9c:a4:98:07:bd:e3:8c:8a:9b:fa:4c:5a:50:3a:b0: d4:cd:03:90:4b:7e:e3:06:2a:70:f0:a8:4c:d0:cb: 79:d5:20:72:ba:2f:9c:e1:90:37:2f:d4:88:22:3f: e3:44:0c:ae:96:ff:74:c9:08:b4:57:7f:61:ed:55: d0:d5:68:d0:67:d8:f7:ec:15:5e:9d:84:75:2c:3e: 5d:91:fc:72:44:0b:4e:ea:6b:2e:e6:36:d4:3e:3c: 7e:72:69:37:46:01:51:61:55:00:3c:e9:86:6a:44: ca:34:aa:d2:f5:24:f7:1b:0a:a9:1d:a4:8e:12:7e: 2d:10:93:4c:d9:6b:00:f8:2c:84:0c:11:8f:0f:5d: 4e:83:90:5e:a8:b6:d7:36:e2:69:e3:90:c1:75:13: 05:4a:da:14:41:05:f6:97:34:62:85:aa:3d:32:a4: a1:01:7c:d6:0b:ac:2d:6c:2a:26:00:11:3b:bb:08: 60:6d:26:6c:d6:61:fe:5b:e2:24:89:f9:8d:10:ff: 47:f7:f2:6b:0b:6b:78:a5:2a:08:ca:38:d2:f1:ab: 63:69:01:73:97:e3:bc:ee:bf:cf:05:93:1b:85:ec: cf:53:6d:9d:1d:c9:38:ab:d6:f9:3a:35:cb:5d:78: a5:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:5F:0D:A3:80:68:9F:3F:EF:D6:D7:4E:58:87:47:3A:D0:9C:19:2F X509v3 Authority Key Identifier: keyid:83:AC:B5:0F:96:F6:44:3F:4B:83:D3:91:F8:57:BE:7C:B5:7E:34:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C705E/34DD4EE6F62411EC97234814C4F9AE02/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C705E/34DD4EE6F62411EC97234814C4F9AE02/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:bc:42:29:69:b8:e3:7b:0c:fd:82:4b:eb:21:38:e4:9b:8f: 7d:4c:a1:54:e7:c8:0d:8a:86:5b:fb:b8:2a:93:5b:c9:40:bf: eb:a7:de:0a:ed:65:1d:e7:2b:4c:c1:d0:eb:58:7f:5a:ea:db: 07:76:bc:d4:11:58:04:5f:c9:d6:87:1b:18:be:df:07:2c:f4: 61:99:76:02:60:e7:6e:35:2c:bf:dc:78:a6:3f:a8:c3:60:0a: 34:f8:bd:e0:27:06:7f:7a:02:28:a5:cf:7d:41:8a:a0:6b:7d: 63:c5:15:3e:15:9e:2f:7b:58:f3:49:61:3b:00:55:e1:d0:a3: d9:69:00:b8:cf:74:0c:0c:d4:ee:d0:64:56:bc:b6:69:b8:ad: ce:ce:51:57:97:60:8d:4e:17:ef:56:12:6d:a8:ae:43:3e:45: b5:38:08:25:f6:61:d4:48:d5:bf:ea:9b:48:3e:a0:38:fa:ef: a9:05:5e:f9:b8:9d:28:e3:8e:0a:02:4a:24:37:05:43:c7:6e: 8a:e1:5c:8f:4e:75:0c:6c:f6:c5:13:e9:48:9f:a6:b0:da:74: 9d:45:dc:2c:26:fc:49:03:03:53:d0:cd:ec:85:56:8c:bf:6b: 45:ad:a2:ab:db:32:22:6e:1b:82:57:84:e3:5f:ca:b6:c5:f9: 48:4c:ca:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcwNUUxMTAvBgNVBAUTKDgzQUNCNTBGOTZGNjQ0M0Y0QjgzRDM5MUY4NTdCRTdD QjU3RTM0QzEwHhcNMjUwNjAxMDE0MDQ2WhcNMjUwNjA4MDE0MDQ2WjAYMRYwFAYD VQQDEw02ODNiYWY5ZS1hZTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvlAttAfDzJmhmQ2199ScpJgHveOMipv6TFpQOrDUzQOQS37jBipw8KhM0Mt5 1SByui+c4ZA3L9SIIj/jRAyulv90yQi0V39h7VXQ1WjQZ9j37BVenYR1LD5dkfxy RAtO6msu5jbUPjx+cmk3RgFRYVUAPOmGakTKNKrS9ST3GwqpHaSOEn4tEJNM2WsA +CyEDBGPD11Og5BeqLbXNuJp45DBdRMFStoUQQX2lzRihao9MqShAXzWC6wtbCom ABE7uwhgbSZs1mH+W+IkifmNEP9H9/JrC2t4pSoIyjjS8atjaQFzl+O87r/PBZMb hezPU22dHck4q9b5OjXLXXil/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFANfDaOA aJ8/79bXTliHRzrQnBkvMB8GA1UdIwQYMBaAFIOstQ+W9kQ/S4PTkfhXvny1fjTB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzA1RS8zNERENEVFNkY2 MjQxMUVDOTcyMzQ4MTRDNEY5QUUwMi9nNnkxRDViMlJEOUxnOU9SLUZlLWZMVi1O TUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c2eTFENWIyUkQ5TGc5T1ItRmUtZkxWLU5NRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzA1RS8zNERENEVFNkY2MjQxMUVDOTcyMzQ4MTRDNEY5QUUwMi9nNnkxRDViMlJE OUxnOU9SLUZlLWZMVi1OTUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtvEIpabjjewz9gkvrITjkm499TKFU58gNioZb+7gqk1vJQL/rp94K 7WUd5ytMwdDrWH9a6tsHdrzUEVgEX8nWhxsYvt8HLPRhmXYCYOduNSy/3HimP6jD YAo0+L3gJwZ/egIopc99QYqga31jxRU+FZ4ve1jzSWE7AFXh0KPZaQC4z3QMDNTu 0GRWvLZpuK3OzlFXl2CNThfvVhJtqK5DPkW1OAgl9mHUSNW/6ptIPqA4+u+pBV75 uJ0o444KAkokNwVDx26K4VyPTnUMbPbFE+lIn6aw2nSdRdwsJvxJAwNT0M3shVaM v2tFraKr2zIibhuCV4TjX8q2xflITMoh -----END CERTIFICATE-----Generated at Mon Jun 2 05:18:44 2025 by rpki-client