$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft File: B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft (raw, json) Hash identifier: yrm6Vcpz7noAydaCl93/Dm1fM2PJg58M5kIQps4eDKU= Subject key identifier: 8E:04:94:67:D1:75:D1:A8:FE:D2:C3:F1:F0:9C:96:49:70:1A:45:F1 Authority key identifier: 07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60 Certificate issuer: /CN=A91DF93A/serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260 Certificate serial: 08AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft Manifest number: 084E Signing time: Fri 30 May 2025 21:11:37 +0000 Manifest this update: Fri 30 May 2025 21:11:36 +0000 Manifest next update: Fri 06 Jun 2025 21:11:36 +0000 Files and hashes: 1: B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl (hash: vr1jZ6JOvyiXe53cE9mkrE0C4D1pl7sQgOM0fwa6TG4=) 2: F8C02F3CDA4E11EC9C09A446C4F9AE02.roa (hash: ek3DgpwlstOVnuguW/pHkiP1RxK/zlxH+dHxarNuX94=) 3: BA1752AE176B11EF9ADED980C4F9AE02.roa (hash: gNhMiv6IOJKkeLTLwPi9wU4oN+h+wv5IF758wi0C6FI=) 4: E518ECC6D52A11ED99D55E2EC4F9AE02.roa (hash: /8xSOlLPXmPawwC5JqVN/51Xoq+s+zm8+cCCkXo4uBE=) 5: FEEC2C90643811EB9D7F624EC4F9AE02.roa (hash: J1xLa8yTtXAlg7OlLT4nxVjtOt9A7iYZpXvZJDERl8o=) 6: 007CF9924F1111EFA7D2F345C4F9AE02.roa (hash: USwhKOtUAYw8MFn1BXt5pSc1VM2o2X7NQRCh9KM+x7o=) 7: 5B5CBC68751B11EB9065A822C4F9AE02.roa (hash: 5HlGKag658JvYwBq45MtXDAz/r3WmbZjF3WX8Bnxu6I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:11:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2223 (0x8af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF93A, serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260 Validity Not Before: May 30 21:11:36 2025 GMT Not After : Jun 6 21:11:36 2025 GMT Subject: CN=683a1f09-769e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:96:29:9a:93:7e:57:94:63:93:35:92:c8:09: 5d:ec:42:96:ca:00:89:d7:27:94:89:13:d5:c4:1b: 13:4c:22:91:c7:79:40:fd:0d:67:27:bf:eb:93:24: eb:6d:3b:e1:56:60:fd:a7:7e:10:8a:82:4a:0a:a0: 46:ac:dc:c1:b4:d7:a8:e7:31:36:af:12:5c:f2:1e: bd:24:5a:42:7a:cb:1e:ba:3c:62:05:f1:05:17:0a: 05:d4:8e:f9:0e:f0:86:6f:04:d1:f0:a5:2f:5e:3b: c6:06:90:26:e9:e6:c0:a0:17:3d:39:3f:01:e5:03: ca:29:fd:a4:e9:c5:25:ee:65:66:b6:be:7f:25:b8: 5c:0a:23:3a:32:37:73:60:c9:38:bb:fc:3b:41:90: d6:86:a1:8e:8a:d1:96:be:dd:12:5e:e0:36:91:00: c8:8d:8b:af:ee:f6:36:b8:37:12:ef:75:ec:b6:90: 4b:46:ef:47:4b:9e:bf:1b:7a:c7:c0:5b:f4:6c:c7: a9:76:ea:66:ae:22:64:07:3b:3a:29:c3:3a:40:09: 96:2e:47:09:66:54:34:fb:bf:38:d2:f3:82:dd:37: 93:d4:0d:a5:a5:ac:2a:8a:08:08:88:9c:eb:56:30: 3b:f3:4c:4a:fd:df:22:eb:4f:75:dd:09:13:94:05: f3:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:04:94:67:D1:75:D1:A8:FE:D2:C3:F1:F0:9C:96:49:70:1A:45:F1 X509v3 Authority Key Identifier: keyid:07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:8a:d7:a0:51:ad:7e:bc:7e:11:35:be:3d:06:44:3f:1a:cb: 71:8b:fa:78:c1:b0:c9:1a:49:5c:5f:8c:a9:74:0b:13:46:be: 69:51:82:47:8c:4a:0f:30:f7:dc:98:0a:ac:3c:ae:10:68:be: 87:2c:c5:b7:97:18:4a:d0:59:92:72:f5:5d:9a:f2:48:91:bb: 28:80:6a:dd:17:c3:e7:14:8b:e7:33:c9:0e:c0:e2:bf:71:33: 81:20:c7:b8:a1:68:cd:4b:84:9d:47:94:f1:97:3c:6f:05:e6: c6:45:a9:86:59:06:f3:10:a7:65:1b:62:ec:10:d4:3c:79:c7: 0b:8d:d9:cc:a3:08:0d:6f:d5:7b:de:b4:7b:c6:2d:b7:c9:19: d2:27:09:0f:7b:d0:5c:a1:ff:c7:28:35:ee:ea:1e:b8:6e:fe: ef:07:73:7b:13:d0:6c:8b:bf:e1:7c:27:5e:09:37:a7:ba:c4: 9a:57:0a:59:b1:52:72:08:b7:38:92:88:f0:e0:fb:67:ce:38: 0e:f6:52:44:6f:91:de:0f:56:22:41:32:a7:e2:1d:45:8b:f5: 20:d0:94:9c:69:e0:5c:15:b7:26:53:f2:dd:e5:98:85:ee:12: 10:70:bb:6e:25:13:f2:ad:04:14:55:27:b3:3a:e8:34:24:a6: 5c:53:07:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY5M0ExMTAvBgNVBAUTKDA3QTFDMDg1NDVDQUNDNjVFMDg4MkQ0OUU5RjJGOENG RDJCRTgyNjAwHhcNMjUwNTMwMjExMTM2WhcNMjUwNjA2MjExMTM2WjAYMRYwFAYD VQQDEw02ODNhMWYwOS03NjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqZYpmpN+V5RjkzWSyAld7EKWygCJ1yeUiRPVxBsTTCKRx3lA/Q1nJ7/rkyTr bTvhVmD9p34QioJKCqBGrNzBtNeo5zE2rxJc8h69JFpCesseujxiBfEFFwoF1I75 DvCGbwTR8KUvXjvGBpAm6ebAoBc9OT8B5QPKKf2k6cUl7mVmtr5/JbhcCiM6Mjdz YMk4u/w7QZDWhqGOitGWvt0SXuA2kQDIjYuv7vY2uDcS73XstpBLRu9HS56/G3rH wFv0bMepdupmriJkBzs6KcM6QAmWLkcJZlQ0+7840vOC3TeT1A2lpawqiggIiJzr VjA780xK/d8i60913QkTlAXzqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI4ElGfR ddGo/tLD8fCclklwGkXxMB8GA1UdIwQYMBaAFAehwIVFysxl4IgtSeny+M/SvoJg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjkzQS9GRjUxRTU5RUU1 RjMxMUVBQjNBOTE1NjFDNEY5QUUwMi9CNkhBaFVYS3pHWGdpQzFKNmZMNHo5Sy1n bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I2SEFoVVhLekdYZ2lDMUo2Zkw0ejlLLWdtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjkzQS9GRjUxRTU5RUU1RjMxMUVBQjNBOTE1NjFDNEY5QUUwMi9CNkhBaFVYS3pH WGdpQzFKNmZMNHo5Sy1nbUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLitegUa1+vH4RNb49BkQ/Gstxi/p4wbDJGklcX4ypdAsTRr5pUYJH jEoPMPfcmAqsPK4QaL6HLMW3lxhK0FmScvVdmvJIkbsogGrdF8PnFIvnM8kOwOK/ cTOBIMe4oWjNS4SdR5TxlzxvBebGRamGWQbzEKdlG2LsENQ8eccLjdnMowgNb9V7 3rR7xi23yRnSJwkPe9Bcof/HKDXu6h64bv7vB3N7E9Bsi7/hfCdeCTenusSaVwpZ sVJyCLc4kojw4PtnzjgO9lJEb5HeD1YiQTKn4h1Fi/Ug0JScaeBcFbcmU/Ld5ZiF 7hIQcLtuJRPyrQQUVSezOug0JKZcUwda -----END CERTIFICATE-----Generated at Sat May 31 16:35:48 2025 by rpki-client