$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.mft File: 6o2GS70rsdeM2IkKFQThETZ_ehM.mft (raw, json) Hash identifier: 66+9tbtL6QpFOyyBQ/1VAQAmqChLcENlIgx3IIXJeZ8= Subject key identifier: 0E:03:1D:5E:1C:B0:90:90:7D:63:FB:8D:73:0F:71:2B:DC:4E:66:3B Authority key identifier: EA:8D:86:4B:BD:2B:B1:D7:8C:D8:89:0A:15:04:E1:11:36:7F:7A:13 Certificate issuer: /CN=A91F6E65/serialNumber=EA8D864BBD2BB1D78CD8890A1504E111367F7A13 Certificate serial: 1240 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6o2GS70rsdeM2IkKFQThETZ_ehM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.mft Manifest number: 1239 Signing time: Fri 30 May 2025 17:18:40 +0000 Manifest this update: Fri 30 May 2025 17:18:39 +0000 Manifest next update: Fri 06 Jun 2025 17:18:39 +0000 Files and hashes: 1: 6o2GS70rsdeM2IkKFQThETZ_ehM.crl (hash: FhM25zOkw2VGxOU4lPdoSWk/4Obes+TPaHAVyR+k+A8=) 2: F87DE4E2518011E98D519C48C4F9AE02.roa (hash: lNg/c5OqFouAW+fJH2dEOVDXDmJq4ytAeqadsiAMyGA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.crl rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6o2GS70rsdeM2IkKFQThETZ_ehM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:18:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4672 (0x1240) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6E65, serialNumber=EA8D864BBD2BB1D78CD8890A1504E111367F7A13 Validity Not Before: May 30 17:18:39 2025 GMT Not After : Jun 6 17:18:39 2025 GMT Subject: CN=6839e86f-f0b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:13:58:bd:41:b5:53:25:05:d1:1f:29:5b:64: 0b:29:85:5d:18:31:ec:b6:96:29:2b:d1:c8:d8:64: 88:93:fe:e5:88:59:f4:b9:36:c7:55:d5:14:c4:e5: 37:5d:a6:0a:b0:ed:09:f5:1e:91:cf:74:f5:5e:c4: f2:e0:58:53:e3:05:bb:73:f9:e8:99:89:df:b5:aa: 6b:5f:10:a9:e5:19:7a:30:f9:d0:76:3d:80:30:01: 49:7c:43:5c:17:ee:82:bc:93:29:43:5b:0f:c4:d7: 20:1b:cd:73:28:87:2d:5a:ae:1b:70:e8:d6:e6:91: 1d:64:f6:6f:74:18:b0:29:e8:24:37:d5:0e:66:27: a2:a4:bf:5e:93:cc:ed:1e:87:44:cd:d9:bf:d0:f3: 2c:0b:6b:f4:52:02:c9:e8:50:cc:02:1f:8c:a9:c5: c9:24:d8:1d:73:12:15:a4:fa:23:18:fb:a0:4b:df: fe:c7:fb:3f:b9:d3:b8:08:bc:5d:82:83:a0:ae:c4: 8f:79:47:78:00:90:2f:d2:f5:74:4b:e0:f2:a8:46: f0:7c:62:4a:e9:da:00:f5:50:fa:87:f1:43:d0:78: 22:47:ca:75:0d:35:2f:44:68:5d:96:da:14:8e:1a: 8d:f9:20:8d:64:b7:1e:8c:ab:bd:b5:6d:45:ef:42: 46:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:03:1D:5E:1C:B0:90:90:7D:63:FB:8D:73:0F:71:2B:DC:4E:66:3B X509v3 Authority Key Identifier: keyid:EA:8D:86:4B:BD:2B:B1:D7:8C:D8:89:0A:15:04:E1:11:36:7F:7A:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6o2GS70rsdeM2IkKFQThETZ_ehM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:6a:59:a0:5e:2a:fa:7f:76:c6:c7:34:dc:ff:8a:e1:5c:23: 8f:98:b0:86:e9:77:84:4f:35:55:4b:09:a1:2c:25:51:83:f0: 08:c9:e1:17:69:94:ca:d9:61:d9:61:d6:cb:fb:9e:11:a1:45: 66:8d:99:db:15:c2:a3:49:03:ef:b0:fd:83:5e:95:69:6e:80: 50:85:dd:bf:1c:66:b3:ca:4c:0f:b4:65:db:39:7e:7c:e5:7e: 1f:35:90:2d:14:f7:d1:7f:b4:25:bf:fc:09:7f:36:31:06:ec: 69:04:6f:9c:0f:54:cd:3a:b2:03:b6:b8:f7:6c:d4:08:65:0e: 6d:70:ac:19:92:94:13:6b:e7:6c:e0:19:70:fb:06:c8:c5:69: 6b:c8:d2:ce:da:4e:57:17:a4:9a:0a:73:a8:6c:7a:54:5a:82: 86:2b:d1:71:63:18:6c:dd:56:01:85:06:0a:e8:94:88:ac:bc: e4:b6:42:0c:81:bb:02:96:fb:a7:9e:35:ed:0c:f8:ad:0d:64: d9:7e:c2:0d:a8:2a:bc:16:c7:df:63:cf:3b:a8:92:c0:0a:52: da:fb:ed:ef:8c:7b:a9:03:f7:e4:8e:76:b8:f1:a4:ef:93:e9: c5:8b:96:21:b3:db:99:6a:28:88:21:4f:fb:06:df:2e:a2:ed: 8a:1c:06:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZFNjUxMTAvBgNVBAUTKEVBOEQ4NjRCQkQyQkIxRDc4Q0Q4ODkwQTE1MDRFMTEx MzY3RjdBMTMwHhcNMjUwNTMwMTcxODM5WhcNMjUwNjA2MTcxODM5WjAYMRYwFAYD VQQDEw02ODM5ZTg2Zi1mMGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxxNYvUG1UyUF0R8pW2QLKYVdGDHstpYpK9HI2GSIk/7liFn0uTbHVdUUxOU3 XaYKsO0J9R6Rz3T1XsTy4FhT4wW7c/nomYnftaprXxCp5Rl6MPnQdj2AMAFJfENc F+6CvJMpQ1sPxNcgG81zKIctWq4bcOjW5pEdZPZvdBiwKegkN9UOZieipL9ek8zt HodEzdm/0PMsC2v0UgLJ6FDMAh+MqcXJJNgdcxIVpPojGPugS9/+x/s/udO4CLxd goOgrsSPeUd4AJAv0vV0S+DyqEbwfGJK6doA9VD6h/FD0HgiR8p1DTUvRGhdltoU jhqN+SCNZLcejKu9tW1F70JGBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA4DHV4c sJCQfWP7jXMPcSvcTmY7MB8GA1UdIwQYMBaAFOqNhku9K7HXjNiJChUE4RE2f3oT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkU2NS9GRUQ5M0E3Q0Q4 OEExMUU4QTNFQ0ZGNERDNEY5QUUwMi82bzJHUzcwcnNkZU0ySWtLRlFUaEVUWl9l aE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZvMkdTNzByc2RlTTJJa0tGUVRoRVRaX2VoTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkU2NS9GRUQ5M0E3Q0Q4OEExMUU4QTNFQ0ZGNERDNEY5QUUwMi82bzJHUzcwcnNk ZU0ySWtLRlFUaEVUWl9laE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIalmgXir6f3bGxzTc/4rhXCOPmLCG6XeETzVVSwmhLCVRg/AIyeEX aZTK2WHZYdbL+54RoUVmjZnbFcKjSQPvsP2DXpVpboBQhd2/HGazykwPtGXbOX58 5X4fNZAtFPfRf7Qlv/wJfzYxBuxpBG+cD1TNOrIDtrj3bNQIZQ5tcKwZkpQTa+ds 4Blw+wbIxWlryNLO2k5XF6SaCnOobHpUWoKGK9FxYxhs3VYBhQYK6JSIrLzktkIM gbsClvunnjXtDPitDWTZfsINqCq8FsffY887qJLAClLa++3vjHupA/fkjna48aTv k+nFi5Yhs9uZaiiIIU/7Bt8uou2KHAYS -----END CERTIFICATE-----Generated at Sat May 31 16:31:26 2025 by rpki-client