$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.mft File: 6ibTI4Mc2ho4TpHg_jiR2wzrLsg.mft (raw, json) Hash identifier: nFjrXC9POpkKyQ9aLpT12hAS2I6mXmWSyH9WTKKsjMg= Subject key identifier: D7:F5:9D:5A:C4:B9:D7:FC:89:EF:E7:E8:73:58:DD:86:0F:FC:73:8A Authority key identifier: EA:26:D3:23:83:1C:DA:1A:38:4E:91:E0:FE:38:91:DB:0C:EB:2E:C8 Certificate issuer: /CN=A91F6C39/serialNumber=EA26D323831CDA1A384E91E0FE3891DB0CEB2EC8 Certificate serial: 05AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.mft Manifest number: 05A5 Signing time: Wed 04 Jun 2025 23:02:47 +0000 Manifest this update: Wed 04 Jun 2025 23:02:46 +0000 Manifest next update: Wed 11 Jun 2025 23:02:46 +0000 Files and hashes: 1: 6ibTI4Mc2ho4TpHg_jiR2wzrLsg.crl (hash: 8Eq5hHRcOm4bYuCj3TAXRtV1Gj36tR3x7Xx8YEzMmPo=) 2: 7EFC59BA5D0511EEB1F12C3BC4F9AE02.roa (hash: bXdx05k7wR9Kl1sY4+4gVobBYaiLUct0N7gXR8t0JQM=) 3: 6F9ACE76CE7211EBAF46B61AC4F9AE02.roa (hash: JPBTJ6fwr8mmKYI0rysv3RFDJmUHvWjg1nwosGPeiPE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.crl rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 23:02:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1453 (0x5ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6C39, serialNumber=EA26D323831CDA1A384E91E0FE3891DB0CEB2EC8 Validity Not Before: Jun 4 23:02:46 2025 GMT Not After : Jun 11 23:02:46 2025 GMT Subject: CN=6840d097-a4aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7c:b5:4a:a4:7a:64:e0:fa:4d:08:5d:15:6b: ac:26:a3:a5:0a:29:02:7c:93:a3:ab:00:79:e8:d3: b5:37:40:f1:7e:c0:5c:93:ec:61:0e:40:e3:5b:2a: 8e:b7:75:0f:7f:2b:03:d3:17:d4:de:fc:2d:88:da: 13:cf:1f:10:4d:3e:f7:0c:c4:fe:02:f9:24:83:44: 5e:00:74:9b:a2:9a:04:5d:d4:cd:c6:82:a6:d6:96: 28:30:d8:19:97:2a:59:3c:80:90:e0:6b:38:06:0c: b0:88:0d:a6:23:bd:e1:7d:dc:c9:30:85:d0:f8:bf: 6f:58:cb:d1:09:7c:ab:27:c7:3a:07:92:62:f9:b2: 40:dd:70:51:17:43:36:a7:10:38:f8:d6:ce:1f:97: a4:52:d0:50:93:a8:a4:13:31:8a:99:95:7d:f6:29: c4:91:b1:19:93:c5:0f:0f:a3:41:97:16:76:de:c1: c9:3f:12:03:ed:4c:66:91:2c:1a:c8:52:f3:db:04: e5:6b:d4:91:44:15:61:0e:14:4d:5b:16:19:d9:20: 4e:fd:51:07:1e:e1:41:86:49:30:34:4a:d2:2c:4d: 9e:81:d8:f4:18:c7:d7:d8:8a:16:95:42:59:0c:fe: f8:73:96:88:c4:85:21:89:59:e0:ec:46:5c:e8:bb: 62:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:F5:9D:5A:C4:B9:D7:FC:89:EF:E7:E8:73:58:DD:86:0F:FC:73:8A X509v3 Authority Key Identifier: keyid:EA:26:D3:23:83:1C:DA:1A:38:4E:91:E0:FE:38:91:DB:0C:EB:2E:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:39:b9:f2:81:84:57:da:dd:3e:19:15:d3:68:17:af:00:32: 3e:04:dd:64:bd:a9:c7:fb:32:14:33:e9:99:c0:c5:f6:29:83: 22:93:b4:18:44:ed:60:42:71:55:ae:b6:ae:2d:28:61:b8:37: 40:55:21:de:c1:a9:8c:f9:eb:65:c4:a0:77:b8:08:55:11:b9: 5d:b4:0f:fb:14:c1:61:f0:f0:1d:6a:1b:f5:a3:03:a3:de:2b: cc:c9:bd:f4:da:ce:5f:3e:7d:02:ac:fa:45:07:8a:55:c8:68: 85:80:e8:a8:c2:fa:a2:19:60:8f:03:8e:57:f9:6c:cf:ba:c7: 54:40:2b:f7:d1:9d:07:8d:b7:c8:55:67:37:ae:e1:52:9e:c8: 59:a1:86:fb:39:00:b9:fc:91:08:ae:93:fa:00:c4:46:d9:03: 81:f4:d0:93:1f:0a:3e:41:12:55:3a:22:18:7c:7a:30:24:91: 5b:aa:3e:71:cc:69:80:c0:b6:a5:73:97:7c:66:60:ce:45:99: 13:6a:02:17:1b:cc:02:4e:4f:bd:c3:db:1f:46:f8:bd:ad:81: 46:f0:29:f6:5d:ce:f0:bc:31:01:28:e0:cc:e3:57:b2:27:be: d8:cc:d4:27:2a:b5:5f:a3:d8:6f:f4:32:5c:f4:66:57:a9:94: 27:9f:ab:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZDMzkxMTAvBgNVBAUTKEVBMjZEMzIzODMxQ0RBMUEzODRFOTFFMEZFMzg5MURC MENFQjJFQzgwHhcNMjUwNjA0MjMwMjQ2WhcNMjUwNjExMjMwMjQ2WjAYMRYwFAYD VQQDEw02ODQwZDA5Ny1hNGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtXy1SqR6ZOD6TQhdFWusJqOlCikCfJOjqwB56NO1N0DxfsBck+xhDkDjWyqO t3UPfysD0xfU3vwtiNoTzx8QTT73DMT+Avkkg0ReAHSbopoEXdTNxoKm1pYoMNgZ lypZPICQ4Gs4BgywiA2mI73hfdzJMIXQ+L9vWMvRCXyrJ8c6B5Ji+bJA3XBRF0M2 pxA4+NbOH5ekUtBQk6ikEzGKmZV99inEkbEZk8UPD6NBlxZ23sHJPxID7UxmkSwa yFLz2wTla9SRRBVhDhRNWxYZ2SBO/VEHHuFBhkkwNErSLE2egdj0GMfX2IoWlUJZ DP74c5aIxIUhiVng7EZc6LtihQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNf1nVrE udf8ie/n6HNY3YYP/HOKMB8GA1UdIwQYMBaAFOom0yODHNoaOE6R4P44kdsM6y7I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkMzOS83QkYwRjI3NENF NzAxMUVCQTdFMDlCMUFDNEY5QUUwMi82aWJUSTRNYzJobzRUcEhnX2ppUjJ3enJM c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZpYlRJNE1jMmhvNFRwSGdfamlSMnd6ckxzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkMzOS83QkYwRjI3NENFNzAxMUVCQTdFMDlCMUFDNEY5QUUwMi82aWJUSTRNYzJo bzRUcEhnX2ppUjJ3enJMc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPObnygYRX2t0+GRXTaBevADI+BN1kvanH+zIUM+mZwMX2KYMik7QY RO1gQnFVrrauLShhuDdAVSHewamM+etlxKB3uAhVEbldtA/7FMFh8PAdahv1owOj 3ivMyb302s5fPn0CrPpFB4pVyGiFgOiowvqiGWCPA45X+WzPusdUQCv30Z0HjbfI VWc3ruFSnshZoYb7OQC5/JEIrpP6AMRG2QOB9NCTHwo+QRJVOiIYfHowJJFbqj5x zGmAwLalc5d8ZmDORZkTagIXG8wCTk+9w9sfRvi9rYFG8Cn2Xc7wvDEBKODM41ey J77YzNQnKrVfo9hv9DJc9GZXqZQnn6v/ -----END CERTIFICATE-----Generated at Thu Jun 5 20:02:36 2025 by rpki-client