$ rpki-client -vvf rpki.apnic.net/member_repository/A91D65E6/A84BC3B8F0A911EEAE72F02EC4F9AE02/6_d1-2stKz-APD8za4MAqL5r6YU.mft File: 6_d1-2stKz-APD8za4MAqL5r6YU.mft (raw, json) Hash identifier: PgET45d1zps4YvfLVSM6IJmF4vd45gfRBqmwtnqYcHw= Subject key identifier: 78:D1:95:CC:BE:61:F2:D6:08:EB:2A:FA:BC:25:79:6A:9D:73:F6:69 Authority key identifier: EB:F7:75:FB:6B:2D:2B:3F:80:3C:3F:33:6B:83:00:A8:BE:6B:E9:85 Certificate issuer: /CN=A91D65E6/serialNumber=EBF775FB6B2D2B3F803C3F336B8300A8BE6BE985 Certificate serial: DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6_d1-2stKz-APD8za4MAqL5r6YU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D65E6/A84BC3B8F0A911EEAE72F02EC4F9AE02/6_d1-2stKz-APD8za4MAqL5r6YU.mft Manifest number: D8 Signing time: Sat 31 May 2025 05:09:47 +0000 Manifest this update: Sat 31 May 2025 05:09:46 +0000 Manifest next update: Sat 07 Jun 2025 05:09:46 +0000 Files and hashes: 1: 6_d1-2stKz-APD8za4MAqL5r6YU.crl (hash: BoFFcP/3zeJh7vSfUo2KknIRiXVZUkgL32+n72vm6uE=) 2: 45BE9530F0AA11EE8FBA4E4DC4F9AE02.roa (hash: CcUp55XuDgPxaWMypNloisBK2Ub48xmWh//qSjTOE5A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D65E6/A84BC3B8F0A911EEAE72F02EC4F9AE02/6_d1-2stKz-APD8za4MAqL5r6YU.crl rsync://rpki.apnic.net/member_repository/A91D65E6/A84BC3B8F0A911EEAE72F02EC4F9AE02/6_d1-2stKz-APD8za4MAqL5r6YU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6_d1-2stKz-APD8za4MAqL5r6YU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:09:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 218 (0xda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D65E6, serialNumber=EBF775FB6B2D2B3F803C3F336B8300A8BE6BE985 Validity Not Before: May 31 05:09:46 2025 GMT Not After : Jun 7 05:09:46 2025 GMT Subject: CN=683a8f1a-f733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:1b:24:0f:07:c1:70:b7:8e:aa:bf:f7:cc:37: 8a:b3:3e:5d:ce:6d:6d:6b:80:4b:e0:dc:d7:d4:a7: dc:db:1d:54:5e:de:78:55:d6:44:a2:59:09:0a:e7: 34:b5:ef:2a:81:8d:f3:c6:48:2c:b8:0f:9a:00:98: 60:f9:24:32:d3:35:ba:22:15:8c:de:d5:9e:82:25: 73:3b:c2:96:39:87:bb:e6:ad:72:a4:e6:f0:08:c6: 89:c5:b3:1e:17:19:87:0f:d9:31:5f:da:ee:99:49: b2:52:e6:0e:b2:a0:c8:03:a8:f1:b3:db:be:67:9b: e4:05:10:4d:b5:da:f8:5a:6b:12:47:86:31:06:2b: 5b:8a:ce:30:10:5b:5a:d4:b2:74:6b:5c:e6:66:91: 09:64:6c:c7:5b:77:c9:17:fb:23:d5:3c:fa:cd:92: 35:2a:53:f4:4c:7c:13:b2:fb:95:76:e1:8d:a1:db: 4e:b7:c1:86:de:ff:16:9c:6f:1d:82:0e:39:60:ed: ed:b9:0c:71:42:50:c2:b9:9d:c3:57:ec:6e:d8:b0: d0:45:55:7e:4d:21:fc:62:1f:46:b7:ec:a5:a2:1c: f8:1e:41:d5:31:b1:a8:66:5b:54:e3:3f:4e:5a:cf: 8f:a0:90:7e:1b:51:79:4c:3d:77:bc:35:c8:f5:39: 11:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:D1:95:CC:BE:61:F2:D6:08:EB:2A:FA:BC:25:79:6A:9D:73:F6:69 X509v3 Authority Key Identifier: keyid:EB:F7:75:FB:6B:2D:2B:3F:80:3C:3F:33:6B:83:00:A8:BE:6B:E9:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D65E6/A84BC3B8F0A911EEAE72F02EC4F9AE02/6_d1-2stKz-APD8za4MAqL5r6YU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6_d1-2stKz-APD8za4MAqL5r6YU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D65E6/A84BC3B8F0A911EEAE72F02EC4F9AE02/6_d1-2stKz-APD8za4MAqL5r6YU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:9c:7e:7e:9e:77:75:77:c8:61:fd:73:ec:2f:4c:10:8c:d2: 08:3c:1f:c3:69:65:a3:63:2e:6c:b2:ff:57:57:5e:5d:86:b3: df:5b:9b:c1:74:21:f6:97:29:a2:5d:80:8f:16:70:b3:e4:d7: 3e:bc:85:1f:17:08:7a:38:8f:7f:5c:f6:12:d1:d1:bb:be:b0: d5:c7:88:fe:e9:d6:d2:5e:2a:95:c0:ba:37:9b:03:70:da:87: ad:3f:9b:f4:1d:e3:14:ec:f9:4b:d1:0c:f4:fc:b4:ea:d5:95: a7:42:36:0b:ec:64:aa:5d:c2:84:2d:2e:bc:12:0a:55:a8:33: ec:08:d0:92:1e:78:7b:7d:51:bf:2a:b4:3f:7d:cf:74:e8:7e: ae:52:45:94:66:80:16:17:aa:87:2b:91:8e:a5:d0:86:69:bf: 5d:87:51:45:56:42:0d:06:ea:c9:40:ab:c0:dc:10:ba:06:91: 6a:8c:94:ab:0f:f8:86:24:7e:2c:79:68:68:58:c5:3b:24:9e: de:35:f0:89:b7:e2:86:58:14:bc:8b:56:c3:62:3b:a6:8b:15: 16:6e:53:b7:db:cf:77:91:60:0d:fe:50:d1:eb:8e:92:2a:1c: fb:fe:36:e9:cc:f6:1a:87:9f:48:e0:85:08:54:09:34:f9:81: 8d:6a:d9:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY1RTYxMTAvBgNVBAUTKEVCRjc3NUZCNkIyRDJCM0Y4MDNDM0YzMzZCODMwMEE4 QkU2QkU5ODUwHhcNMjUwNTMxMDUwOTQ2WhcNMjUwNjA3MDUwOTQ2WjAYMRYwFAYD VQQDEw02ODNhOGYxYS1mNzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9RskDwfBcLeOqr/3zDeKsz5dzm1ta4BL4NzX1Kfc2x1UXt54VdZEolkJCuc0 te8qgY3zxkgsuA+aAJhg+SQy0zW6IhWM3tWegiVzO8KWOYe75q1ypObwCMaJxbMe FxmHD9kxX9rumUmyUuYOsqDIA6jxs9u+Z5vkBRBNtdr4WmsSR4YxBitbis4wEFta 1LJ0a1zmZpEJZGzHW3fJF/sj1Tz6zZI1KlP0THwTsvuVduGNodtOt8GG3v8WnG8d gg45YO3tuQxxQlDCuZ3DV+xu2LDQRVV+TSH8Yh9Gt+ylohz4HkHVMbGoZltU4z9O Ws+PoJB+G1F5TD13vDXI9TkRZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHjRlcy+ YfLWCOsq+rwleWqdc/ZpMB8GA1UdIwQYMBaAFOv3dftrLSs/gDw/M2uDAKi+a+mF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjVFNi9BODRCQzNCOEYw QTkxMUVFQUU3MkYwMkVDNEY5QUUwMi82X2QxLTJzdEt6LUFQRDh6YTRNQXFMNXI2 WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZfZDEtMnN0S3otQVBEOHphNE1BcUw1cjZZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjVFNi9BODRCQzNCOEYwQTkxMUVFQUU3MkYwMkVDNEY5QUUwMi82X2QxLTJzdEt6 LUFQRDh6YTRNQXFMNXI2WVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVnH5+nnd1d8hh/XPsL0wQjNIIPB/DaWWjYy5ssv9XV15dhrPfW5vB dCH2lymiXYCPFnCz5Nc+vIUfFwh6OI9/XPYS0dG7vrDVx4j+6dbSXiqVwLo3mwNw 2oetP5v0HeMU7PlL0Qz0/LTq1ZWnQjYL7GSqXcKELS68EgpVqDPsCNCSHnh7fVG/ KrQ/fc906H6uUkWUZoAWF6qHK5GOpdCGab9dh1FFVkINBurJQKvA3BC6BpFqjJSr D/iGJH4seWhoWMU7JJ7eNfCJt+KGWBS8i1bDYjumixUWblO32893kWAN/lDR646S Khz7/jbpzPYah59I4IUIVAk0+YGNatmx -----END CERTIFICATE-----Generated at Sat May 31 16:29:40 2025 by rpki-client