$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.mft File: l6zd4pEaCfOTXxhg2wV9TP9GssU.mft (raw, json) Hash identifier: 653xgtu/abVU2OZKcr9C5D+DCU40eMv+2MQFm4UFrjM= Subject key identifier: 08:84:B1:68:F0:A1:44:0D:E7:74:BF:07:33:BA:FE:44:45:50:B6:5F Authority key identifier: 97:AC:DD:E2:91:1A:09:F3:93:5F:18:60:DB:05:7D:4C:FF:46:B2:C5 Certificate issuer: /CN=A91E7A75/serialNumber=97ACDDE2911A09F3935F1860DB057D4CFF46B2C5 Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6zd4pEaCfOTXxhg2wV9TP9GssU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.mft Manifest number: 12 Signing time: Sat 31 May 2025 07:37:26 +0000 Manifest this update: Sat 31 May 2025 07:37:25 +0000 Manifest next update: Sat 07 Jun 2025 07:37:25 +0000 Files and hashes: 1: l6zd4pEaCfOTXxhg2wV9TP9GssU.crl (hash: QvTKCcEIj9AgHScqAM7Wn9AIW8jvPz067uRraEc7Y5w=) 2: 9E314E3A275211F09DB11A29C4F9AE02.roa (hash: xeAIE2lZn+YXNt0L7vlDN0DVHrs7CNulexHVxcXbegs=) 3: 7538A8FC275211F0A14FD328C4F9AE02.roa (hash: 1L8lUrtPjTnoEjcERsj866aTFLWQJPYnWRL13TGRub4=) 4: 9ECB0CF0275211F09DB11A29C4F9AE02.roa (hash: Pfe2htQw7FQ69zCdUGOvP9JJR+bvYFVzLzCF/2HMviU=) 5: 74B37F24275211F0A14FD328C4F9AE02.roa (hash: 5FSb2Jsk8vMB09hl36LtVE9KBpWP+PzKRBhhPkFdcWI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.crl rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6zd4pEaCfOTXxhg2wV9TP9GssU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:37:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7A75, serialNumber=97ACDDE2911A09F3935F1860DB057D4CFF46B2C5 Validity Not Before: May 31 07:37:25 2025 GMT Not After : Jun 7 07:37:25 2025 GMT Subject: CN=683ab1b6-205a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:44:f9:8a:6b:dd:04:75:df:0b:3f:46:64:23: a1:a6:73:3c:0c:08:b2:c8:6c:7b:6e:2d:d6:f6:61: 91:67:18:3c:f8:0a:f3:47:cd:c0:6e:d5:fa:de:ed: 28:78:ac:49:3b:b6:cd:dc:8f:33:a5:51:4a:74:50: a3:56:bf:91:51:5d:a3:4b:0e:a5:7a:1f:b0:08:29: 04:a8:0f:65:bc:a4:ee:98:fb:be:6e:a1:27:1a:f8: 60:a0:d9:81:05:08:10:a3:f3:f7:1e:88:33:aa:14: 04:d1:9f:1b:3f:da:ad:59:a5:48:8e:36:df:fb:95: b6:8a:8a:d4:db:3c:e1:68:d4:50:ed:c6:8a:e9:d4: 66:7e:23:f9:b7:b1:a9:70:77:38:01:b5:df:24:2e: b0:fb:8f:ac:15:37:0d:97:9f:92:d7:ce:15:78:7e: 36:71:2e:fa:ce:86:c9:b3:65:9f:61:23:3b:4a:4d: 39:60:b2:e4:8d:aa:06:90:0e:2a:ff:78:3f:dd:36: 84:74:04:4b:ca:62:5e:81:65:b4:d9:89:8e:06:c5: b2:ee:bb:65:c0:44:c1:c3:6e:78:cd:21:15:00:da: ca:45:f9:2a:d4:24:9a:0a:cb:da:41:a3:bd:b7:de: 2d:e4:06:6b:f9:84:ff:a8:86:8d:93:f2:34:96:f7: 36:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:84:B1:68:F0:A1:44:0D:E7:74:BF:07:33:BA:FE:44:45:50:B6:5F X509v3 Authority Key Identifier: keyid:97:AC:DD:E2:91:1A:09:F3:93:5F:18:60:DB:05:7D:4C:FF:46:B2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6zd4pEaCfOTXxhg2wV9TP9GssU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:e6:25:73:eb:29:25:38:50:72:25:40:69:b5:bb:45:a2:04: 2e:41:d8:a8:32:01:c8:e9:0f:bc:1d:ea:f8:ca:e5:39:26:30: 27:58:8d:24:45:c2:81:e7:eb:77:e4:38:ba:d6:d5:5d:7c:eb: c5:11:ac:70:08:83:b2:80:38:e0:2f:b0:00:00:f7:8e:e8:7f: 43:40:5a:e2:fc:29:e4:49:14:8a:72:69:04:93:6a:b2:6d:88: 7d:3c:8b:f9:91:71:96:0c:18:1a:98:4a:7d:d8:cb:80:ce:20: 56:fe:c9:f6:87:55:15:98:42:cc:3d:43:92:15:37:ae:3e:ef: 0d:b3:53:63:30:9a:14:ed:c0:38:03:fc:7b:3b:f4:49:90:21: 14:30:ab:5b:59:26:10:c3:bd:fa:0e:13:62:e4:87:49:99:33: b5:4c:89:09:98:43:81:89:4a:14:5b:81:51:2e:8f:7c:46:88: fb:01:58:62:1d:74:ba:cc:ee:76:ed:ac:eb:90:63:bc:12:d2: 5b:05:bd:f7:d6:46:21:b4:b0:d3:a2:23:b3:62:c0:6a:eb:19: b2:f8:ed:b3:10:5e:4f:1b:2f:19:2e:b4:38:9d:46:54:bc:50: 4f:d8:37:97:9b:ba:d6:b8:23:21:db:4a:b7:02:8c:ca:dd:10: dd:18:fb:bd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF N0E3NTExMC8GA1UEBRMoOTdBQ0RERTI5MTFBMDlGMzkzNUYxODYwREIwNTdENENG RjQ2QjJDNTAeFw0yNTA1MzEwNzM3MjVaFw0yNTA2MDcwNzM3MjVaMBgxFjAUBgNV BAMTDTY4M2FiMWI2LTIwNWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBRPmKa90Edd8LP0ZkI6GmczwMCLLIbHtuLdb2YZFnGDz4CvNHzcBu1fre7Sh4 rEk7ts3cjzOlUUp0UKNWv5FRXaNLDqV6H7AIKQSoD2W8pO6Y+75uoSca+GCg2YEF CBCj8/ceiDOqFATRnxs/2q1ZpUiONt/7lbaKitTbPOFo1FDtxorp1GZ+I/m3salw dzgBtd8kLrD7j6wVNw2Xn5LXzhV4fjZxLvrOhsmzZZ9hIztKTTlgsuSNqgaQDir/ eD/dNoR0BEvKYl6BZbTZiY4GxbLuu2XARMHDbnjNIRUA2spF+SrUJJoKy9pBo723 3i3kBmv5hP+oho2T8jSW9zZxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCISxaPCh RA3ndL8HM7r+REVQtl8wHwYDVR0jBBgwFoAUl6zd4pEaCfOTXxhg2wV9TP9GssUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU3QTc1L0U2RjRCNkRBMjc1 MTExRjBBQ0YwQUYyNEM0RjlBRTAyL2w2emQ0cEVhQ2ZPVFh4aGcyd1Y5VFA5R3Nz VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbDZ6ZDRwRWFDZk9UWHhoZzJ3VjlUUDlHc3NVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU3 QTc1L0U2RjRCNkRBMjc1MTExRjBBQ0YwQUYyNEM0RjlBRTAyL2w2emQ0cEVhQ2ZP VFh4aGcyd1Y5VFA5R3NzVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFnmJXPrKSU4UHIlQGm1u0WiBC5B2KgyAcjpD7wd6vjK5TkmMCdYjSRF woHn63fkOLrW1V1868URrHAIg7KAOOAvsAAA947of0NAWuL8KeRJFIpyaQSTarJt iH08i/mRcZYMGBqYSn3Yy4DOIFb+yfaHVRWYQsw9Q5IVN64+7w2zU2MwmhTtwDgD /Hs79EmQIRQwq1tZJhDDvfoOE2Lkh0mZM7VMiQmYQ4GJShRbgVEuj3xGiPsBWGId dLrM7nbtrOuQY7wS0lsFvffWRiG0sNOiI7NiwGrrGbL47bMQXk8bLxkutDidRlS8 UE/YN5ebuta4IyHbSrcCjMrdEN0Y+70= -----END CERTIFICATE-----Generated at Sat May 31 16:34:05 2025 by rpki-client