$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/s6HqYHo_df54qoQuuJCSWZEQ_cY.mft File: s6HqYHo_df54qoQuuJCSWZEQ_cY.mft (raw, json) Hash identifier: JJ3xyYsHDDxrx7WqGKt0qDZbMhUBtwsc1uuzxzlhDug= Subject key identifier: C8:C0:9F:A0:67:72:08:DE:3E:F6:39:B3:E1:40:95:C4:DF:AB:F9:34 Authority key identifier: B3:A1:EA:60:7A:3F:75:FE:78:AA:84:2E:B8:90:92:59:91:10:FD:C6 Certificate issuer: /CN=A91F5BCC/serialNumber=B3A1EA607A3F75FE78AA842EB89092599110FDC6 Certificate serial: 50 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s6HqYHo_df54qoQuuJCSWZEQ_cY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/s6HqYHo_df54qoQuuJCSWZEQ_cY.mft Manifest number: 4E Signing time: Tue 03 Jun 2025 07:10:41 +0000 Manifest this update: Tue 03 Jun 2025 07:10:41 +0000 Manifest next update: Tue 10 Jun 2025 07:10:41 +0000 Files and hashes: 1: s6HqYHo_df54qoQuuJCSWZEQ_cY.crl (hash: 309+ir/EgKXlkfwae0qdGnLKsbfJWCtVxqYu3uPBngg=) 2: 5FEB0DA8E90611EFA74B611DC4F9AE02.roa (hash: hwuul9zOvXSQLDdgabC6PgRyfpY9SzpmngkkmJxvu+k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/s6HqYHo_df54qoQuuJCSWZEQ_cY.crl rsync://rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/s6HqYHo_df54qoQuuJCSWZEQ_cY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s6HqYHo_df54qoQuuJCSWZEQ_cY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 07:10:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 80 (0x50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5BCC, serialNumber=B3A1EA607A3F75FE78AA842EB89092599110FDC6 Validity Not Before: Jun 3 07:10:41 2025 GMT Not After : Jun 10 07:10:41 2025 GMT Subject: CN=683e9ff1-f107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0e:d5:78:e9:df:14:de:f8:5e:30:d3:dc:3b: dd:21:2d:9b:94:b1:f9:5c:ff:7c:cb:4f:60:fd:d5: f1:33:48:f9:23:0a:2f:ff:91:56:6f:e3:53:e1:d5: 2b:68:87:8b:8e:f4:f3:ab:67:6d:ba:ec:ee:b4:49: 9b:c2:f1:55:01:c6:ff:11:ab:35:c3:f0:65:b7:e5: c2:a5:2c:21:56:7b:b6:78:15:9e:e9:f7:15:99:cc: 7c:3d:02:00:d7:cc:13:15:91:08:96:15:68:45:99: 35:29:22:4f:b8:22:1a:8b:42:5f:2f:5b:0e:66:92: d5:66:5a:33:4c:aa:49:7e:fa:ea:9a:f1:e7:a4:cb: 8a:9b:a1:ec:d1:47:de:de:fd:e3:3e:74:72:11:83: bb:de:d0:94:6d:80:c6:82:b8:ac:3f:71:2a:5d:b9: 0d:18:bd:6c:5c:76:8f:1d:a2:7f:58:8a:65:df:cc: d8:b4:e4:8c:84:b5:fd:f0:df:1e:64:d0:8c:58:8c: a3:11:94:06:2b:9b:c0:a4:48:0e:42:05:0e:0a:7b: aa:2b:ba:37:ad:84:66:59:b8:32:09:49:03:28:28: 29:66:a4:b4:fb:3c:29:5c:7a:7c:0c:2f:c8:b3:0f: 5c:b1:5e:3b:18:bd:29:0c:e5:ba:64:bb:3a:41:58: 3d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:C0:9F:A0:67:72:08:DE:3E:F6:39:B3:E1:40:95:C4:DF:AB:F9:34 X509v3 Authority Key Identifier: keyid:B3:A1:EA:60:7A:3F:75:FE:78:AA:84:2E:B8:90:92:59:91:10:FD:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/s6HqYHo_df54qoQuuJCSWZEQ_cY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s6HqYHo_df54qoQuuJCSWZEQ_cY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/s6HqYHo_df54qoQuuJCSWZEQ_cY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:45:89:94:e7:4f:75:9e:82:c7:2b:8f:eb:b8:86:f3:a0:5c: 2a:b3:b0:09:a8:4c:9c:67:5b:79:63:a3:00:fe:3d:00:25:4c: 5d:be:28:b8:f7:fb:13:16:6c:f8:99:a0:29:c4:a5:55:90:7c: f7:8a:4c:7b:c0:e0:9b:cb:ee:ef:00:03:3e:ef:a8:e5:bf:07: 47:51:de:24:b6:bc:51:df:c6:05:74:b2:a5:9d:55:c1:cd:84: 57:4d:fb:7e:f0:d3:a2:c8:b2:17:35:0b:c3:9d:5f:d8:4f:33: e9:5d:ad:11:b4:77:f6:3c:40:a4:2f:4b:01:08:b9:96:8d:81: 4e:8d:1a:32:28:10:da:58:5f:64:c2:6a:21:a8:8b:8d:f9:ba: 9c:6a:01:13:3b:c4:ab:51:05:93:b4:74:99:a8:8c:60:fb:e5: dd:f6:e9:4c:fd:30:d5:b7:e3:ed:15:af:cc:e0:16:3d:67:c4: 62:dd:2d:a3:75:4c:da:57:e8:17:69:1c:e5:35:2d:30:0b:96: 88:42:f1:4d:58:16:c9:fd:1e:ff:9f:22:86:35:df:04:20:3c: cf:8c:6b:b7:5a:fa:7f:f5:9e:10:73:af:76:27:be:9f:82:d0: 1b:28:d2:bc:02:02:15:14:16:8a:63:d3:d9:5b:f1:79:7e:48: e5:a8:c4:6c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NUJDQzExMC8GA1UEBRMoQjNBMUVBNjA3QTNGNzVGRTc4QUE4NDJFQjg5MDkyNTk5 MTEwRkRDNjAeFw0yNTA2MDMwNzEwNDFaFw0yNTA2MTAwNzEwNDFaMBgxFjAUBgNV BAMTDTY4M2U5ZmYxLWYxMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4DtV46d8U3vheMNPcO90hLZuUsflc/3zLT2D91fEzSPkjCi//kVZv41Ph1Sto h4uO9POrZ2267O60SZvC8VUBxv8RqzXD8GW35cKlLCFWe7Z4FZ7p9xWZzHw9AgDX zBMVkQiWFWhFmTUpIk+4IhqLQl8vWw5mktVmWjNMqkl++uqa8eeky4qboezRR97e /eM+dHIRg7ve0JRtgMaCuKw/cSpduQ0YvWxcdo8don9YimXfzNi05IyEtf3w3x5k 0IxYjKMRlAYrm8CkSA5CBQ4Ke6orujethGZZuDIJSQMoKClmpLT7PClcenwML8iz D1yxXjsYvSkM5bpkuzpBWD13AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyMCfoGdy CN4+9jmz4UCVxN+r+TQwHwYDVR0jBBgwFoAUs6HqYHo/df54qoQuuJCSWZEQ/cYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1QkNDL0IxMTgxQjEwQ0U3 ODExRUY4MEVGNEQ0NEM0RjlBRTAyL3M2SHFZSG9fZGY1NHFvUXV1SkNTV1pFUV9j WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvczZIcVlIb19kZjU0cW9RdXVKQ1NXWkVRX2NZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1 QkNDL0IxMTgxQjEwQ0U3ODExRUY4MEVGNEQ0NEM0RjlBRTAyL3M2SHFZSG9fZGY1 NHFvUXV1SkNTV1pFUV9jWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADtFiZTnT3Wegscrj+u4hvOgXCqzsAmoTJxnW3ljowD+PQAlTF2+KLj3 +xMWbPiZoCnEpVWQfPeKTHvA4JvL7u8AAz7vqOW/B0dR3iS2vFHfxgV0sqWdVcHN hFdN+37w06LIshc1C8OdX9hPM+ldrRG0d/Y8QKQvSwEIuZaNgU6NGjIoENpYX2TC aiGoi435upxqARM7xKtRBZO0dJmojGD75d326Uz9MNW34+0Vr8zgFj1nxGLdLaN1 TNpX6BdpHOU1LTALlohC8U1YFsn9Hv+fIoY13wQgPM+Ma7da+n/1nhBzr3Ynvp+C 0Bso0rwCAhUUFopj09lb8Xl+SOWoxGw= -----END CERTIFICATE-----Generated at Tue Jun 3 23:51:46 2025 by rpki-client