$ rpki-client -vvf rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.mft File: K6Guk7v1am9sllCE8EiBe7epjw8.mft (raw, json) Hash identifier: vkCofiYtAxe4hAfz+kqMzyQBQYDU1W/SMbHSm0j3XnI= Subject key identifier: 86:FD:B9:44:F3:71:FF:F1:6C:A6:42:A2:8E:EA:E8:62:3F:02:FA:BC Authority key identifier: 2B:A1:AE:93:BB:F5:6A:6F:6C:96:50:84:F0:48:81:7B:B7:A9:8F:0F Certificate issuer: /CN=A91F65C7/serialNumber=2BA1AE93BBF56A6F6C965084F048817BB7A98F0F Certificate serial: F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/K6Guk7v1am9sllCE8EiBe7epjw8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.mft Manifest number: F7 Signing time: Sun 01 Jun 2025 04:53:12 +0000 Manifest this update: Sun 01 Jun 2025 04:53:11 +0000 Manifest next update: Sun 08 Jun 2025 04:53:11 +0000 Files and hashes: 1: K6Guk7v1am9sllCE8EiBe7epjw8.crl (hash: 9EDSFe2RWnb9bf6II/hwq2yD06AhjTAMSlBpYaME7sM=) 2: 44673792C3E511EEA9660E85C4F9AE02.roa (hash: 9frZlnTUA25wzcLVRZfcMG1N4NRYNcJ6CAVrVhpGid0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.crl rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/K6Guk7v1am9sllCE8EiBe7epjw8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 04:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 249 (0xf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F65C7, serialNumber=2BA1AE93BBF56A6F6C965084F048817BB7A98F0F Validity Not Before: Jun 1 04:53:11 2025 GMT Not After : Jun 8 04:53:11 2025 GMT Subject: CN=683bdcb7-03fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f4:c2:f2:da:a7:71:4f:b8:7d:c7:24:92:de: 9e:2d:0e:93:d9:82:59:d4:e2:80:90:a2:ed:97:58: ad:1d:20:e7:4b:11:99:b7:f2:e9:67:00:fb:ed:f6: bf:78:c6:1d:fc:aa:12:ee:59:b0:f3:c6:72:6e:5e: bb:05:5d:a8:7d:02:90:b3:20:98:8a:f0:68:bd:1c: da:f1:58:46:f8:a1:91:46:16:e5:1c:15:dd:d4:98: 50:f1:8f:04:63:f7:1e:0f:71:93:3f:33:58:82:67: 7d:5c:89:0b:eb:a5:5b:4c:cf:7e:89:05:30:5a:da: 7d:e3:a4:85:84:99:67:d8:da:03:ab:3d:15:f7:8b: 28:f0:51:3b:c6:ba:5e:ce:0e:92:b6:3b:5b:b8:31: de:b4:e7:71:db:32:ee:c1:e1:cc:62:1d:17:39:6f: d7:54:fc:85:6b:09:df:1b:ad:aa:ff:e8:ca:bf:6c: df:07:c6:53:a5:bb:db:b5:a0:50:54:cd:3f:33:e4: 1c:5b:0e:40:a5:30:c5:67:ca:eb:fb:ae:03:b8:32: cf:7c:d4:88:6c:51:08:01:3c:e1:bd:6a:de:0d:ce: 95:cc:a1:d0:ba:33:db:95:e2:ab:8f:5a:9e:ed:9f: 08:53:19:9c:0c:a1:f5:d0:d5:4d:ca:7c:e4:3d:ad: d0:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:FD:B9:44:F3:71:FF:F1:6C:A6:42:A2:8E:EA:E8:62:3F:02:FA:BC X509v3 Authority Key Identifier: keyid:2B:A1:AE:93:BB:F5:6A:6F:6C:96:50:84:F0:48:81:7B:B7:A9:8F:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/K6Guk7v1am9sllCE8EiBe7epjw8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:fa:54:2d:cb:00:9a:a5:5c:25:fc:3d:24:64:9b:ec:0a:09: 69:e0:dd:f2:92:47:8e:e8:7d:97:9b:84:f5:65:e7:f5:30:90: d2:8a:73:c9:cf:2d:5f:92:05:ff:38:71:3a:6f:da:e7:6b:71: 48:13:d8:8c:e9:18:35:10:37:7c:d2:70:10:fd:62:fc:51:e8: ca:41:74:71:7f:0b:d9:5c:95:0d:a7:34:93:28:cc:f8:6e:c5: b5:8b:5d:f9:38:93:00:3a:69:e6:bf:0f:c0:f6:65:f3:66:13: 21:9b:01:04:7a:c6:ba:a3:e3:ef:e9:ff:b2:50:e6:01:52:98: 43:37:65:14:22:6c:8e:bb:ad:53:ea:4d:ef:4a:fe:86:38:df: 2d:80:21:a5:20:35:6f:e8:cd:cd:d8:aa:93:d6:f3:84:98:24: 84:08:00:9b:02:8c:8e:cf:3c:70:89:2a:13:ea:43:bf:eb:75: 88:35:48:a0:e1:53:8a:bf:89:da:47:de:02:bc:17:f6:30:50: 18:aa:67:f5:7a:ef:04:41:97:00:b8:41:6e:34:83:e0:c6:61: 4d:dd:10:20:11:4e:93:f6:f7:c1:ff:4b:2e:a2:e0:e4:e8:ef: 4c:16:f5:6f:aa:78:16:ed:9d:2b:27:e2:2d:8c:42:54:ab:7a: 18:df:bc:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY1QzcxMTAvBgNVBAUTKDJCQTFBRTkzQkJGNTZBNkY2Qzk2NTA4NEYwNDg4MTdC QjdBOThGMEYwHhcNMjUwNjAxMDQ1MzExWhcNMjUwNjA4MDQ1MzExWjAYMRYwFAYD VQQDEw02ODNiZGNiNy0wM2ZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1PTC8tqncU+4fcckkt6eLQ6T2YJZ1OKAkKLtl1itHSDnSxGZt/LpZwD77fa/ eMYd/KoS7lmw88Zybl67BV2ofQKQsyCYivBovRza8VhG+KGRRhblHBXd1JhQ8Y8E Y/ceD3GTPzNYgmd9XIkL66VbTM9+iQUwWtp946SFhJln2NoDqz0V94so8FE7xrpe zg6StjtbuDHetOdx2zLuweHMYh0XOW/XVPyFawnfG62q/+jKv2zfB8ZTpbvbtaBQ VM0/M+QcWw5ApTDFZ8rr+64DuDLPfNSIbFEIATzhvWreDc6VzKHQujPbleKrj1qe 7Z8IUxmcDKH10NVNynzkPa3QHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIb9uUTz cf/xbKZCoo7q6GI/Avq8MB8GA1UdIwQYMBaAFCuhrpO79WpvbJZQhPBIgXu3qY8P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjVDNy9FM0JFQTQ3QUMz RTQxMUVFOTYxM0Y1ODNDNEY5QUUwMi9LNkd1azd2MWFtOXNsbENFOEVpQmU3ZXBq dzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0s2R3VrN3YxYW05c2xsQ0U4RWlCZTdlcGp3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjVDNy9FM0JFQTQ3QUMzRTQxMUVFOTYxM0Y1ODNDNEY5QUUwMi9LNkd1azd2MWFt OXNsbENFOEVpQmU3ZXBqdzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAo+lQtywCapVwl/D0kZJvsCglp4N3ykkeO6H2Xm4T1Zef1MJDSinPJ zy1fkgX/OHE6b9rna3FIE9iM6Rg1EDd80nAQ/WL8UejKQXRxfwvZXJUNpzSTKMz4 bsW1i135OJMAOmnmvw/A9mXzZhMhmwEEesa6o+Pv6f+yUOYBUphDN2UUImyOu61T 6k3vSv6GON8tgCGlIDVv6M3N2KqT1vOEmCSECACbAoyOzzxwiSoT6kO/63WINUig 4VOKv4naR94CvBf2MFAYqmf1eu8EQZcAuEFuNIPgxmFN3RAgEU6T9vfB/0suouDk 6O9MFvVvqngW7Z0rJ+ItjEJUq3oY37yF -----END CERTIFICATE-----Generated at Mon Jun 2 21:24:51 2025 by rpki-client