$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.mft File: 6LCK3PScYMutkdHtbTe9hEOtvUw.mft (raw, json) Hash identifier: Wdrw2lAZtcOc7//8btVqMHWiB+rh9sIWUqFGWmnAdXE= Subject key identifier: 96:60:40:70:2A:B8:60:0D:8C:46:30:63:AB:89:F5:81:1E:01:64:19 Authority key identifier: E8:B0:8A:DC:F4:9C:60:CB:AD:91:D1:ED:6D:37:BD:84:43:AD:BD:4C Certificate issuer: /CN=A91D6C2E/serialNumber=E8B08ADCF49C60CBAD91D1ED6D37BD8443ADBD4C Certificate serial: 011D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6LCK3PScYMutkdHtbTe9hEOtvUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.mft Manifest number: 0119 Signing time: Sat 31 May 2025 04:29:35 +0000 Manifest this update: Sat 31 May 2025 04:29:35 +0000 Manifest next update: Sat 07 Jun 2025 04:29:35 +0000 Files and hashes: 1: 6LCK3PScYMutkdHtbTe9hEOtvUw.crl (hash: tdovskcC/rJ2CMnb+WgmCOLU5bOAS1sNXuxZIPJcWnw=) 2: 5FB99B82934511EE87C1BE7EC4F9AE02.roa (hash: 8pKe3+4xRyiS1MHB1KBCyB6GyZL8OjDx7TX9aT1ieFo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.crl rsync://rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6LCK3PScYMutkdHtbTe9hEOtvUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:29:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 285 (0x11d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6C2E, serialNumber=E8B08ADCF49C60CBAD91D1ED6D37BD8443ADBD4C Validity Not Before: May 31 04:29:35 2025 GMT Not After : Jun 7 04:29:35 2025 GMT Subject: CN=683a85af-ec08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:20:2b:74:a7:3e:f9:50:bd:98:2f:9c:93:c5: 2c:02:48:30:cc:c0:65:22:5f:49:85:4b:0b:04:7b: 9a:76:ff:06:dc:49:fc:a5:48:51:5e:25:6b:9f:c4: ce:17:78:69:63:95:1b:3e:1f:d2:99:34:ee:64:ad: 00:d7:0e:48:a6:fe:85:6f:71:3d:64:1e:81:79:1b: fd:34:94:e5:d1:de:0d:82:62:21:54:0c:71:56:c6: 29:75:58:04:ea:36:af:b9:24:b9:b2:48:2f:45:a6: ae:d2:04:50:1d:42:62:7d:11:ad:7a:df:ca:3d:ac: f5:bb:c0:94:2d:a5:20:02:ad:2c:88:c8:ef:74:8e: 7b:dc:73:49:c5:0d:09:73:b4:ed:7d:40:ed:e6:cb: 48:ae:03:47:db:b5:bc:b0:7d:13:9a:fa:99:3c:34: 90:30:4a:3f:16:f0:85:27:bc:25:22:f2:d4:4d:12: 76:18:c6:8e:2d:cf:07:06:5f:75:f7:3d:91:56:77: 3b:6a:8a:7e:64:8f:41:34:c0:39:19:8a:8c:2e:d1: 3b:81:1f:34:30:7c:cb:a5:c7:cd:ac:a5:eb:45:7a: ce:6f:a0:76:0e:c3:63:6a:e6:7d:51:0f:8b:a2:77: 18:2b:82:83:56:1d:aa:84:31:78:7d:8a:e7:60:39: 88:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:60:40:70:2A:B8:60:0D:8C:46:30:63:AB:89:F5:81:1E:01:64:19 X509v3 Authority Key Identifier: keyid:E8:B0:8A:DC:F4:9C:60:CB:AD:91:D1:ED:6D:37:BD:84:43:AD:BD:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6LCK3PScYMutkdHtbTe9hEOtvUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:d3:ae:d8:b1:c9:1b:97:18:45:65:21:a5:53:d5:7d:0a:18: 5b:31:38:d8:e7:d9:85:de:32:fc:b7:19:dc:62:07:36:2a:ac: c0:a1:b8:01:f8:b0:9d:5d:e0:22:d0:60:03:c3:51:aa:3f:f7: a1:fe:9d:7b:be:68:37:b4:02:d2:60:d6:7a:c9:fc:22:5d:5d: e9:8b:d7:d5:17:1b:9a:68:80:43:a0:cc:3a:17:6f:29:4e:46: 0e:9a:c6:d0:65:95:9e:90:3e:4c:9b:ef:7a:b6:f6:1c:2c:21: 66:e4:dd:8f:9c:0e:ab:aa:c4:7f:17:df:e4:db:f5:6c:47:9c: c5:94:38:bb:78:48:89:99:30:ae:65:f5:42:6e:b2:50:69:5f: 8a:ed:fa:66:10:4d:35:23:90:0d:41:c5:dc:90:45:a8:3b:ec: 66:fb:e1:65:fc:39:22:fc:f3:54:98:e7:a1:e9:f6:89:ae:b7: b9:38:d7:ce:2b:76:5c:d6:90:5a:63:64:38:48:a1:c8:a1:5f: 08:16:51:e2:cc:51:68:aa:46:e2:cd:47:82:71:a0:92:04:f0: 7f:9e:b0:e5:ff:1a:17:be:9a:8a:93:4d:00:97:0c:72:41:24: d2:09:d2:9a:19:89:63:8d:88:4b:62:b9:a1:6a:7b:48:d4:b2: 09:dd:1f:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZDMkUxMTAvBgNVBAUTKEU4QjA4QURDRjQ5QzYwQ0JBRDkxRDFFRDZEMzdCRDg0 NDNBREJENEMwHhcNMjUwNTMxMDQyOTM1WhcNMjUwNjA3MDQyOTM1WjAYMRYwFAYD VQQDEw02ODNhODVhZi1lYzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsiArdKc++VC9mC+ck8UsAkgwzMBlIl9JhUsLBHuadv8G3En8pUhRXiVrn8TO F3hpY5UbPh/SmTTuZK0A1w5Ipv6Fb3E9ZB6BeRv9NJTl0d4NgmIhVAxxVsYpdVgE 6javuSS5skgvRaau0gRQHUJifRGtet/KPaz1u8CULaUgAq0siMjvdI573HNJxQ0J c7TtfUDt5stIrgNH27W8sH0TmvqZPDSQMEo/FvCFJ7wlIvLUTRJ2GMaOLc8HBl91 9z2RVnc7aop+ZI9BNMA5GYqMLtE7gR80MHzLpcfNrKXrRXrOb6B2DsNjauZ9UQ+L oncYK4KDVh2qhDF4fYrnYDmI9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJZgQHAq uGANjEYwY6uJ9YEeAWQZMB8GA1UdIwQYMBaAFOiwitz0nGDLrZHR7W03vYRDrb1M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkMyRS84MThGREE0Njkz NDAxMUVFODQzRjgzNzRDNEY5QUUwMi82TENLM1BTY1lNdXRrZEh0YlRlOWhFT3R2 VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZMQ0szUFNjWU11dGtkSHRiVGU5aEVPdHZVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkMyRS84MThGREE0NjkzNDAxMUVFODQzRjgzNzRDNEY5QUUwMi82TENLM1BTY1lN dXRrZEh0YlRlOWhFT3R2VXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAA067YsckblxhFZSGlU9V9ChhbMTjY59mF3jL8txncYgc2KqzAobgB +LCdXeAi0GADw1GqP/eh/p17vmg3tALSYNZ6yfwiXV3pi9fVFxuaaIBDoMw6F28p TkYOmsbQZZWekD5Mm+96tvYcLCFm5N2PnA6rqsR/F9/k2/VsR5zFlDi7eEiJmTCu ZfVCbrJQaV+K7fpmEE01I5ANQcXckEWoO+xm++Fl/Dki/PNUmOeh6faJrre5ONfO K3Zc1pBaY2Q4SKHIoV8IFlHizFFoqkbizUeCcaCSBPB/nrDl/xoXvpqKk00Alwxy QSTSCdKaGYljjYhLYrmhantI1LIJ3R97 -----END CERTIFICATE-----Generated at Sat May 31 16:40:49 2025 by rpki-client