$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.mft File: 62gLfeTEobRDq9eZuvUkndSw6pA.mft (raw, json) Hash identifier: vskEti1kfDC+BAmKCTGVzOAgJ+4ixA8K1bRVI34SBXs= Subject key identifier: 55:22:1F:91:69:B2:4A:FE:7B:B0:CD:4E:AE:6D:40:D9:92:8A:F7:22 Authority key identifier: EB:68:0B:7D:E4:C4:A1:B4:43:AB:D7:99:BA:F5:24:9D:D4:B0:EA:90 Certificate issuer: /CN=A91DC866/serialNumber=EB680B7DE4C4A1B443ABD799BAF5249DD4B0EA90 Certificate serial: 34AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62gLfeTEobRDq9eZuvUkndSw6pA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.mft Manifest number: 349D Signing time: Fri 06 Jun 2025 14:53:20 +0000 Manifest this update: Fri 06 Jun 2025 14:53:19 +0000 Manifest next update: Fri 13 Jun 2025 14:53:19 +0000 Files and hashes: 1: 62gLfeTEobRDq9eZuvUkndSw6pA.crl (hash: BpamFcZrms99qyqFMSYMWZ05r71C7OKNC4fhwG6AgL0=) 2: D55D2990561F11E7B9B5FB2CC4F9AE02.roa (hash: 6l+okkOVayeN3r7Oa8ISbsZRxypv5sX/p1C5qPHUzI4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.crl rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62gLfeTEobRDq9eZuvUkndSw6pA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 14:53:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13487 (0x34af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC866, serialNumber=EB680B7DE4C4A1B443ABD799BAF5249DD4B0EA90 Validity Not Before: Jun 6 14:53:19 2025 GMT Not After : Jun 13 14:53:19 2025 GMT Subject: CN=684300df-cb74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ed:dd:d9:54:5e:74:1f:b6:7d:db:27:10:89: 8d:80:3d:40:52:29:32:c6:db:b7:a1:a6:27:52:93: 69:62:dc:d9:bf:15:f8:62:92:d6:b9:12:4b:00:e8: 3b:0b:1b:8c:0a:e9:72:4b:f4:d8:97:4b:87:06:02: cc:71:ab:bd:51:76:15:05:7a:ed:88:02:68:d4:e3: ca:53:fa:c1:a2:18:36:57:0f:a8:51:78:a4:b7:c2: ec:85:2c:25:7c:8a:a3:09:54:19:59:16:a7:ea:db: 66:8c:ce:d8:41:ee:ee:a2:88:11:d8:d5:9f:18:50: 8d:e7:e9:a8:30:fe:54:50:64:c3:e8:dc:73:69:c1: b7:7d:33:bd:0a:3b:a6:83:4f:a3:b9:90:e1:17:3a: f6:0e:2e:39:c8:d8:9c:fb:ec:af:5d:18:66:49:12: 1d:e2:af:de:9e:cd:55:74:f4:f1:a4:67:7b:31:32: 38:7a:03:bc:33:41:05:43:99:f5:d3:31:b7:7f:8f: dd:e9:f3:3e:09:43:c7:be:6d:4f:1c:cd:c0:67:9a: 48:97:57:a6:dd:1a:71:68:19:47:8a:2e:9b:2c:ed: a5:48:24:29:7d:86:14:68:6d:85:ce:32:00:e2:01: a6:51:c7:fc:a3:e6:d1:3d:a7:32:e7:3e:43:71:01: 76:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:22:1F:91:69:B2:4A:FE:7B:B0:CD:4E:AE:6D:40:D9:92:8A:F7:22 X509v3 Authority Key Identifier: keyid:EB:68:0B:7D:E4:C4:A1:B4:43:AB:D7:99:BA:F5:24:9D:D4:B0:EA:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62gLfeTEobRDq9eZuvUkndSw6pA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:2b:0e:29:48:04:a6:09:9a:08:64:00:8e:72:c5:e2:8a:9d: f3:42:d6:67:4f:d9:cc:35:b5:e6:6a:8b:94:95:b0:a2:45:3e: 4f:a8:05:44:df:ae:45:e4:a9:06:44:4d:7f:45:5d:5f:11:26: d6:c9:cd:aa:b1:d2:ab:d9:00:2c:02:06:5e:11:ec:d0:ff:2f: 1f:bc:0d:53:d6:15:96:47:8c:52:a3:7a:18:33:2b:eb:3b:10: fb:e9:1f:e8:78:33:58:97:f3:a0:e9:16:03:3f:ed:68:a1:7b: 20:ce:19:06:f5:15:92:b8:db:c2:b1:66:6b:da:3f:2e:d4:85: e2:02:a3:f8:30:53:3c:3f:0c:18:63:8c:02:88:21:93:3a:c1: ea:98:06:93:fd:ca:62:cf:a2:2f:cf:f2:d6:2a:ac:4e:ea:b9: 98:58:05:cc:6e:71:41:76:be:c8:3e:82:1b:49:b0:08:ef:0c: 44:90:c7:d1:2a:3f:06:50:08:7c:d8:32:ee:73:ec:1a:03:98: 04:2c:b7:7d:66:e4:30:f6:e3:65:3b:f7:29:ce:6e:9a:55:87: eb:a7:14:52:25:13:11:96:e4:63:d0:4c:20:32:7d:d6:e1:c4: ec:06:76:c3:6b:d1:a8:b8:b9:2d:1e:13:2d:c2:b2:5a:8f:2c: 79:96:a1:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM4NjYxMTAvBgNVBAUTKEVCNjgwQjdERTRDNEExQjQ0M0FCRDc5OUJBRjUyNDlE RDRCMEVBOTAwHhcNMjUwNjA2MTQ1MzE5WhcNMjUwNjEzMTQ1MzE5WjAYMRYwFAYD VQQDEw02ODQzMDBkZi1jYjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnu3d2VRedB+2fdsnEImNgD1AUikyxtu3oaYnUpNpYtzZvxX4YpLWuRJLAOg7 CxuMCulyS/TYl0uHBgLMcau9UXYVBXrtiAJo1OPKU/rBohg2Vw+oUXikt8LshSwl fIqjCVQZWRan6ttmjM7YQe7uoogR2NWfGFCN5+moMP5UUGTD6NxzacG3fTO9Cjum g0+juZDhFzr2Di45yNic++yvXRhmSRId4q/ens1VdPTxpGd7MTI4egO8M0EFQ5n1 0zG3f4/d6fM+CUPHvm1PHM3AZ5pIl1em3RpxaBlHii6bLO2lSCQpfYYUaG2FzjIA 4gGmUcf8o+bRPacy5z5DcQF2PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFUiH5Fp skr+e7DNTq5tQNmSivciMB8GA1UdIwQYMBaAFOtoC33kxKG0Q6vXmbr1JJ3UsOqQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzg2Ni82QTBERjlCQTFE OTYxMUUyQjdCNTA1N0YwOEIwMkNEMi82MmdMZmVURW9iUkRxOWVadXZVa25kU3c2 cEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzYyZ0xmZVRFb2JSRHE5ZVp1dlVrbmRTdzZwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Qzg2Ni82QTBERjlCQTFEOTYxMUUyQjdCNTA1N0YwOEIwMkNEMi82MmdMZmVURW9i UkRxOWVadXZVa25kU3c2cEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRKw4pSASmCZoIZACOcsXiip3zQtZnT9nMNbXmaouUlbCiRT5PqAVE 365F5KkGRE1/RV1fESbWyc2qsdKr2QAsAgZeEezQ/y8fvA1T1hWWR4xSo3oYMyvr OxD76R/oeDNYl/Og6RYDP+1ooXsgzhkG9RWSuNvCsWZr2j8u1IXiAqP4MFM8PwwY Y4wCiCGTOsHqmAaT/cpiz6Ivz/LWKqxO6rmYWAXMbnFBdr7IPoIbSbAI7wxEkMfR Kj8GUAh82DLuc+waA5gELLd9ZuQw9uNlO/cpzm6aVYfrpxRSJRMRluRj0EwgMn3W 4cTsBnbDa9GouLktHhMtwrJajyx5lqG7 -----END CERTIFICATE-----Generated at Sun Jun 8 03:14:36 2025 by rpki-client