$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft File: 6NbUISgrkBkAAJd2GiVjIjyngV4.mft (raw, json) Hash identifier: SmtwX5PzUUX4lqB6PWyCp2T4FqBtdZ8S5JhrdVyL2TE= Subject key identifier: 71:0D:DC:3A:1D:BF:AA:1B:1C:41:CB:66:99:FA:AA:A6:BE:13:36:51 Authority key identifier: E8:D6:D4:21:28:2B:90:19:00:00:97:76:1A:25:63:22:3C:A7:81:5E Certificate issuer: /CN=A91EFCFF/serialNumber=E8D6D421282B9019000097761A2563223CA7815E Certificate serial: 7E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6NbUISgrkBkAAJd2GiVjIjyngV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft Manifest number: 7D Signing time: Sun 01 Jun 2025 06:23:55 +0000 Manifest this update: Sun 01 Jun 2025 06:23:54 +0000 Manifest next update: Sun 08 Jun 2025 06:23:54 +0000 Files and hashes: 1: 6NbUISgrkBkAAJd2GiVjIjyngV4.crl (hash: 7ZuO9D1D8NFsEcKwzp9hERKIzV+VJ4aXASCnFgnVegE=) 2: CCEAF60C911311EFA9C63854C4F9AE02.roa (hash: lpawVFjrLTQaiIY8ph0aOBiFjAIuxDOp5nWen5zsXsU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.crl rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6NbUISgrkBkAAJd2GiVjIjyngV4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 06:23:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFCFF, serialNumber=E8D6D421282B9019000097761A2563223CA7815E Validity Not Before: Jun 1 06:23:54 2025 GMT Not After : Jun 8 06:23:54 2025 GMT Subject: CN=683bf1fb-66bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:38:09:0a:5e:b7:8d:73:cc:bc:97:af:3f:41: 6f:5e:3b:ea:b6:b4:63:14:95:c1:7a:45:e0:1f:a3: 94:ab:8c:bd:ea:92:6e:d0:1f:12:29:98:43:a3:ee: fb:cb:cf:4a:af:88:35:75:8f:4a:e2:c9:4b:17:47: c4:f1:fc:65:bb:09:2d:6b:a8:8f:4a:59:67:84:cb: 69:21:70:b4:c4:99:dc:87:f6:d8:2b:b6:6d:14:e6: 72:4d:55:03:7c:3e:b8:3b:3d:f6:da:34:5f:5c:c1: 27:e7:06:dd:b7:62:9c:ae:4e:d9:ad:0e:07:39:36: 68:c9:61:e0:f4:22:34:6d:4d:97:46:55:65:67:0d: 61:26:86:29:7c:78:50:0d:7f:09:8b:1f:ae:0d:9b: cb:15:0a:e1:2a:b7:6a:1c:d6:93:82:31:a3:1b:df: 8e:d7:57:8f:ec:cc:1b:3f:e1:ae:2c:7d:51:1f:5f: 1f:3b:46:aa:c5:8a:f9:bb:32:f5:4a:73:ff:e6:de: 96:e8:41:0a:09:df:d1:63:9b:62:55:dd:22:7e:f3: f8:76:1a:69:8c:d6:4c:31:c8:87:f6:9c:9e:cb:b3: 00:e0:31:2c:4a:c4:37:8f:ce:47:6f:c2:30:59:e3: 6d:ec:d2:f7:60:04:5d:47:6a:22:0a:06:94:5a:45: 0d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:0D:DC:3A:1D:BF:AA:1B:1C:41:CB:66:99:FA:AA:A6:BE:13:36:51 X509v3 Authority Key Identifier: keyid:E8:D6:D4:21:28:2B:90:19:00:00:97:76:1A:25:63:22:3C:A7:81:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6NbUISgrkBkAAJd2GiVjIjyngV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:dc:57:24:5e:f0:7a:34:f4:70:bc:6b:9d:4b:cc:e1:81:30: 2c:70:c8:64:0d:9a:d2:48:4b:1f:c1:b0:ad:dc:07:e8:47:68: 1b:f4:56:21:a8:0b:8c:8f:dd:f9:9b:b0:a7:49:d1:83:9e:27: d0:cf:c4:e4:ce:82:90:dc:03:cd:13:d8:90:c9:b9:c7:b3:53: 2f:8b:52:ce:00:74:62:63:f2:1f:7a:25:9a:37:36:81:cf:50: 66:bc:73:29:66:43:f1:60:7e:7b:6c:be:9f:7c:dd:e7:3d:72: 31:d9:e8:20:3b:ae:c0:d5:cb:1f:77:df:46:7a:7e:9d:0f:41: ad:dd:56:59:a7:0e:00:d1:02:bb:f9:56:af:7b:3e:82:68:c4: 95:50:c9:60:c6:e0:b0:a7:2d:ad:52:96:e3:b7:64:37:ee:6f: f8:7f:db:15:ba:e5:67:d4:bd:10:0c:d5:c5:80:fe:08:10:72: 9f:b4:f1:c7:14:ff:1e:af:a7:74:f8:4b:2e:15:bc:91:ce:0b: 0f:5b:55:66:73:82:53:78:1e:93:43:1a:1a:7d:db:01:0a:da: c5:6e:45:2d:a8:a0:e7:86:5e:a5:25:f3:ae:36:19:80:69:e4: 7c:84:f2:96:4e:1d:17:a6:a4:3e:f0:a3:fd:ea:d9:9c:e0:8c: 3a:cf:8c:48 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RkNGRjExMC8GA1UEBRMoRThENkQ0MjEyODJCOTAxOTAwMDA5Nzc2MUEyNTYzMjIz Q0E3ODE1RTAeFw0yNTA2MDEwNjIzNTRaFw0yNTA2MDgwNjIzNTRaMBgxFjAUBgNV BAMTDTY4M2JmMWZiLTY2YmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZOAkKXreNc8y8l68/QW9eO+q2tGMUlcF6ReAfo5SrjL3qkm7QHxIpmEOj7vvL z0qviDV1j0riyUsXR8Tx/GW7CS1rqI9KWWeEy2khcLTEmdyH9tgrtm0U5nJNVQN8 Prg7PfbaNF9cwSfnBt23YpyuTtmtDgc5NmjJYeD0IjRtTZdGVWVnDWEmhil8eFAN fwmLH64Nm8sVCuEqt2oc1pOCMaMb347XV4/szBs/4a4sfVEfXx87RqrFivm7MvVK c//m3pboQQoJ39Fjm2JV3SJ+8/h2GmmM1kwxyIf2nJ7LswDgMSxKxDePzkdvwjBZ 423s0vdgBF1HaiIKBpRaRQ3lAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcQ3cOh2/ qhscQctmmfqqpr4TNlEwHwYDVR0jBBgwFoAU6NbUISgrkBkAAJd2GiVjIjyngV4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVGQ0ZGLzBGQTg1Rjg4ODIx RjExRUZBMURCNEM3NUM0RjlBRTAyLzZOYlVJU2dya0JrQUFKZDJHaVZqSWp5bmdW NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNk5iVUlTZ3JrQmtBQUpkMkdpVmpJanluZ1Y0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVG Q0ZGLzBGQTg1Rjg4ODIxRjExRUZBMURCNEM3NUM0RjlBRTAyLzZOYlVJU2dya0Jr QUFKZDJHaVZqSWp5bmdWNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACfcVyRe8Ho09HC8a51LzOGBMCxwyGQNmtJISx/BsK3cB+hHaBv0ViGo C4yP3fmbsKdJ0YOeJ9DPxOTOgpDcA80T2JDJucezUy+LUs4AdGJj8h96JZo3NoHP UGa8cylmQ/Fgfntsvp983ec9cjHZ6CA7rsDVyx9330Z6fp0PQa3dVlmnDgDRArv5 Vq97PoJoxJVQyWDG4LCnLa1SluO3ZDfub/h/2xW65WfUvRAM1cWA/ggQcp+08ccU /x6vp3T4Sy4VvJHOCw9bVWZzglN4HpNDGhp92wEK2sVuRS2ooOeGXqUl8642GYBp 5HyE8pZOHRempD7wo/3q2ZzgjDrPjEg= -----END CERTIFICATE-----Generated at Mon Jun 2 20:59:54 2025 by rpki-client