$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.mft File: 6Is7I-CWdbQ3qDKJY8XNPOPpX-4.mft (raw, json) Hash identifier: gGxn8TC5fJHf+M3T0SuF8JoqEEEmpafjqeT9qx8d8So= Subject key identifier: 47:1C:5B:83:B6:69:E2:97:73:21:20:66:AC:F1:B1:11:D5:26:A3:F7 Authority key identifier: E8:8B:3B:23:E0:96:75:B4:37:A8:32:89:63:C5:CD:3C:E3:E9:5F:EE Certificate issuer: /CN=A91EBDB8/serialNumber=E88B3B23E09675B437A8328963C5CD3CE3E95FEE Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.mft Manifest number: 0B Signing time: Sat 31 May 2025 07:39:58 +0000 Manifest this update: Sat 31 May 2025 07:39:57 +0000 Manifest next update: Sat 07 Jun 2025 07:39:57 +0000 Files and hashes: 1: 6Is7I-CWdbQ3qDKJY8XNPOPpX-4.crl (hash: nvQ6FaNBr8C/5AN635zM86tkNy06X+rpUqpenixP1gc=) 2: B0B587222FC911F0938FE136C4F9AE02.roa (hash: AJ6f5YKXMBqxmiNf5w59genHsLltTfcxiqmemHdhYMs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.crl rsync://rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:39:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBDB8, serialNumber=E88B3B23E09675B437A8328963C5CD3CE3E95FEE Validity Not Before: May 31 07:39:57 2025 GMT Not After : Jun 7 07:39:57 2025 GMT Subject: CN=683ab24d-f764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:c5:a1:6e:ff:a4:46:38:bc:0f:c0:03:2c:82: 8c:a1:54:5f:89:e4:5f:c1:5c:cb:78:d2:25:d1:23: db:87:e8:73:98:55:cf:2e:82:c7:35:02:d9:5f:52: 1c:84:89:b8:a3:1d:8d:4e:98:57:7e:28:10:19:aa: 43:6c:8e:37:da:54:09:8d:e8:b1:36:82:ca:9f:cf: ad:b4:bd:65:f9:f2:01:4a:4a:f6:1d:d4:0a:64:d6: 14:bb:a4:4c:c7:03:95:91:28:b5:6f:53:c1:0c:65: d4:e2:d0:74:02:a0:32:89:e6:7c:7b:82:5b:b0:83: ec:7c:19:75:7b:89:43:7d:de:6c:87:f6:3e:0b:b8: fe:1a:20:c4:ed:3e:a2:60:31:c8:f7:2c:fe:eb:ba: 83:0c:be:2c:eb:15:ca:21:82:89:33:e0:ab:04:dd: 2a:0d:6d:d1:f9:a2:79:2a:74:4a:90:c9:dd:f1:fa: b5:75:78:f3:49:12:19:f6:27:27:31:b2:3f:48:e9: 45:b4:1a:e0:59:13:dc:03:73:08:a2:b2:08:13:d7: 8c:6a:40:30:c9:3c:4a:12:a6:0b:c7:0f:ce:39:11: 6a:07:49:53:7a:e5:26:c6:9c:e5:d5:be:6a:92:4e: 37:c8:d4:ba:a2:93:5b:5d:e2:83:43:9b:54:42:c4: 74:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:1C:5B:83:B6:69:E2:97:73:21:20:66:AC:F1:B1:11:D5:26:A3:F7 X509v3 Authority Key Identifier: keyid:E8:8B:3B:23:E0:96:75:B4:37:A8:32:89:63:C5:CD:3C:E3:E9:5F:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:ae:68:06:78:fa:8a:49:26:55:a0:3e:f9:67:61:96:0c:0f: 48:1e:45:69:a6:9a:d3:51:68:ca:24:b3:8e:d5:28:57:fe:e4: b6:4c:0b:0e:d9:f0:2c:4c:d3:03:46:12:12:88:b7:8b:5e:d9: 32:8b:c7:fb:c7:b0:eb:2a:42:92:66:73:e9:51:06:9a:a6:36: 73:04:4d:1b:7d:8c:df:71:aa:39:e5:5a:5e:2e:4d:c9:6b:f5: 0e:b5:73:35:65:c5:e1:cb:db:4b:12:77:a7:c3:e7:ce:4b:50: 27:a5:ad:24:da:25:8e:54:bc:b1:b9:38:36:2c:1a:54:36:c1: 35:be:13:e1:e1:ed:82:f8:34:59:12:fe:a4:1e:88:92:4e:14: e5:fa:08:f6:64:2c:ba:a4:49:39:2d:e8:7a:d8:db:04:7b:27: 7e:d2:2d:43:27:aa:2f:c5:55:8e:8d:1b:99:15:00:d2:1a:e8: 09:e2:d5:71:0d:b8:7a:e5:f4:aa:fa:26:d6:46:70:16:0a:42: be:ee:da:46:4a:c9:ad:a3:d9:24:a9:1b:f1:73:0c:91:5f:88: 46:21:66:2c:3e:40:91:4d:98:ca:96:73:a0:05:9e:7c:2f:fe: 9a:ab:6a:ce:55:2a:23:5f:40:4f:85:b6:b8:aa:83:4f:d6:e2: 76:f4:64:4e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QkRCODExMC8GA1UEBRMoRTg4QjNCMjNFMDk2NzVCNDM3QTgzMjg5NjNDNUNEM0NF M0U5NUZFRTAeFw0yNTA1MzEwNzM5NTdaFw0yNTA2MDcwNzM5NTdaMBgxFjAUBgNV BAMTDTY4M2FiMjRkLWY3NjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDkxaFu/6RGOLwPwAMsgoyhVF+J5F/BXMt40iXRI9uH6HOYVc8ugsc1AtlfUhyE ibijHY1OmFd+KBAZqkNsjjfaVAmN6LE2gsqfz620vWX58gFKSvYd1Apk1hS7pEzH A5WRKLVvU8EMZdTi0HQCoDKJ5nx7gluwg+x8GXV7iUN93myH9j4LuP4aIMTtPqJg Mcj3LP7ruoMMvizrFcohgokz4KsE3SoNbdH5onkqdEqQyd3x+rV1ePNJEhn2Jycx sj9I6UW0GuBZE9wDcwiisggT14xqQDDJPEoSpgvHD845EWoHSVN65SbGnOXVvmqS TjfI1Lqik1td4oNDm1RCxHQbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURxxbg7Zp 4pdzISBmrPGxEdUmo/cwHwYDVR0jBBgwFoAU6Is7I+CWdbQ3qDKJY8XNPOPpX+4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCREI4Lzk4MjMwQjJDMkVG QjExRjA5MEUzNjM4NUM0RjlBRTAyLzZJczdJLUNXZGJRM3FES0pZOFhOUE9QcFgt NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNklzN0ktQ1dkYlEzcURLSlk4WE5QT1BwWC00LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC REI4Lzk4MjMwQjJDMkVGQjExRjA5MEUzNjM4NUM0RjlBRTAyLzZJczdJLUNXZGJR M3FES0pZOFhOUE9QcFgtNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJuuaAZ4+opJJlWgPvlnYZYMD0geRWmmmtNRaMoks47VKFf+5LZMCw7Z 8CxM0wNGEhKIt4te2TKLx/vHsOsqQpJmc+lRBpqmNnMETRt9jN9xqjnlWl4uTclr 9Q61czVlxeHL20sSd6fD585LUCelrSTaJY5UvLG5ODYsGlQ2wTW+E+Hh7YL4NFkS /qQeiJJOFOX6CPZkLLqkSTkt6HrY2wR7J37SLUMnqi/FVY6NG5kVANIa6Ani1XEN uHrl9Kr6JtZGcBYKQr7u2kZKya2j2SSpG/FzDJFfiEYhZiw+QJFNmMqWc6AFnnwv /pqras5VKiNfQE+Ftriqg0/W4nb0ZE4= -----END CERTIFICATE-----Generated at Sat May 31 17:06:23 2025 by rpki-client