$ rpki-client -vvf rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft File: 6O2nHIlk0p8GwkorbRt3FTyo84k.mft (raw, json) Hash identifier: V/vG2E5ww7ZpZ5xgTbiEmWzK3RTBTUF2lSZMLFJvon0= Subject key identifier: 41:7D:00:24:3C:45:90:2A:7A:F9:B9:3B:F5:D2:78:10:66:FC:9F:BA Authority key identifier: E8:ED:A7:1C:89:64:D2:9F:06:C2:4A:2B:6D:1B:77:15:3C:A8:F3:89 Certificate issuer: /CN=A91F724B/serialNumber=E8EDA71C8964D29F06C24A2B6D1B77153CA8F389 Certificate serial: 2081 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft Manifest number: 205C Signing time: Fri 30 May 2025 16:09:33 +0000 Manifest this update: Fri 30 May 2025 16:09:33 +0000 Manifest next update: Fri 06 Jun 2025 16:09:33 +0000 Files and hashes: 1: 6O2nHIlk0p8GwkorbRt3FTyo84k.crl (hash: Dhoa8AqiijESoChzoZYgBDzPQ9filjRfH6w8FpcL3M8=) 2: D6702FB2C51411E7A0AC1A77C4F9AE02.roa (hash: dRYh9WAvcIumZjCZ5S62u32XoLkiqwXXygrg2DE1FBI=) 3: 36AB4096C51611E7AECA8B79C4F9AE02.roa (hash: 0oF1Qfg6/q63oXyqNiJvhv+IBvlt379syGArKmuw6+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.crl rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:09:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8321 (0x2081) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F724B, serialNumber=E8EDA71C8964D29F06C24A2B6D1B77153CA8F389 Validity Not Before: May 30 16:09:33 2025 GMT Not After : Jun 6 16:09:33 2025 GMT Subject: CN=6839d83d-38ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:65:f1:e3:57:4a:81:8c:8b:a8:e2:2c:01:ce: 20:04:e5:35:9f:92:5a:bb:ff:0e:17:3a:c8:cc:20: 88:a6:1a:5f:e6:12:45:18:8f:76:c3:21:63:4a:98: e0:c1:f3:21:f3:98:0b:36:dd:bb:00:5c:ec:bf:b0: 4a:f7:7d:d0:dd:4c:97:ba:9b:b7:9a:f2:a6:6c:74: 36:f4:49:43:b5:31:e0:a4:36:e4:2f:88:74:1b:5c: 8e:0e:d0:d0:d9:26:d5:26:18:63:10:90:f0:61:eb: 21:4d:98:19:ab:1e:3e:14:f8:e4:f6:fe:2f:70:31: 63:1b:0f:ae:7d:a6:74:19:a5:a6:bf:51:30:f8:61: 4f:40:d8:e6:dc:57:cd:27:32:f8:b3:ce:10:22:68: c7:fe:35:7a:a5:77:9f:06:e5:a0:3e:46:f2:c9:6b: 1e:65:47:da:40:46:90:73:bf:3e:ac:46:f4:09:2f: 59:ad:0b:e7:97:00:57:1c:2c:1d:59:77:f3:2f:4f: b7:c2:65:fd:84:1b:8d:f3:08:45:e7:8b:33:da:5f: 8a:87:23:95:92:f8:bc:f6:8f:1c:e9:0b:3a:54:d0: bd:54:e2:06:90:35:cf:2c:34:bf:a9:a2:76:5e:ea: b3:2e:06:f4:9b:8d:93:79:53:e9:14:4c:f5:b0:4e: d4:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:7D:00:24:3C:45:90:2A:7A:F9:B9:3B:F5:D2:78:10:66:FC:9F:BA X509v3 Authority Key Identifier: keyid:E8:ED:A7:1C:89:64:D2:9F:06:C2:4A:2B:6D:1B:77:15:3C:A8:F3:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:af:21:9c:bd:2d:91:70:c4:d5:19:02:11:61:13:80:3e:47: c9:19:e6:b3:8f:08:44:68:20:d6:74:43:ff:01:a7:4e:34:30: 61:91:ad:4a:76:59:59:fd:38:e1:8e:4b:d0:ed:7b:2f:53:70: e9:fd:1e:b0:64:87:14:20:d0:85:33:4e:55:72:bc:58:c6:ac: a5:9b:64:81:49:65:54:73:1a:bf:78:40:f9:8f:4d:1b:90:55: b0:a0:cb:ee:ea:97:2a:7f:9e:32:a6:a0:2e:68:52:82:0c:3f: 0a:a6:88:14:0c:24:59:7d:52:fe:81:a6:40:05:d8:b4:2e:a4: 9e:97:82:ee:6b:4f:87:7e:9c:90:a5:4f:79:c6:fe:b8:60:46: 4b:5e:41:e8:2f:ac:d3:28:ea:6b:e0:e4:1d:35:c6:75:7f:be: eb:a1:50:be:1f:eb:7d:c8:96:1c:97:af:65:3d:10:63:dd:1c: b1:2e:b4:c8:9d:a4:54:69:42:45:ef:20:b4:c7:d8:e0:04:52: ef:63:3c:07:74:48:ae:0f:74:45:fd:47:1e:1c:6c:84:56:f1: ad:6c:81:e5:27:d9:66:6d:98:6e:d7:46:ac:eb:de:2b:56:7e: 56:b8:d2:ae:55:39:37:65:e1:61:4b:2b:09:f8:93:cf:83:69: 6d:8a:bb:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjcyNEIxMTAvBgNVBAUTKEU4RURBNzFDODk2NEQyOUYwNkMyNEEyQjZEMUI3NzE1 M0NBOEYzODkwHhcNMjUwNTMwMTYwOTMzWhcNMjUwNjA2MTYwOTMzWjAYMRYwFAYD VQQDEw02ODM5ZDgzZC0zOGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn2Xx41dKgYyLqOIsAc4gBOU1n5Jau/8OFzrIzCCIphpf5hJFGI92wyFjSpjg wfMh85gLNt27AFzsv7BK933Q3UyXupu3mvKmbHQ29ElDtTHgpDbkL4h0G1yODtDQ 2SbVJhhjEJDwYeshTZgZqx4+FPjk9v4vcDFjGw+ufaZ0GaWmv1Ew+GFPQNjm3FfN JzL4s84QImjH/jV6pXefBuWgPkbyyWseZUfaQEaQc78+rEb0CS9ZrQvnlwBXHCwd WXfzL0+3wmX9hBuN8whF54sz2l+KhyOVkvi89o8c6Qs6VNC9VOIGkDXPLDS/qaJ2 XuqzLgb0m42TeVPpFEz1sE7UswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEF9ACQ8 RZAqevm5O/XSeBBm/J+6MB8GA1UdIwQYMBaAFOjtpxyJZNKfBsJKK20bdxU8qPOJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzI0Qi8xQkM3MUE2MjE2 ODkxMUU2OEVFRkQ5N0JDNEY5QUUwMi82TzJuSElsazBwOEd3a29yYlJ0M0ZUeW84 NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZPMm5ISWxrMHA4R3drb3JiUnQzRlR5bzg0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzI0Qi8xQkM3MUE2MjE2ODkxMUU2OEVFRkQ5N0JDNEY5QUUwMi82TzJuSElsazBw OEd3a29yYlJ0M0ZUeW84NGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwryGcvS2RcMTVGQIRYROAPkfJGeazjwhEaCDWdEP/AadONDBhka1K dllZ/TjhjkvQ7XsvU3Dp/R6wZIcUINCFM05VcrxYxqylm2SBSWVUcxq/eED5j00b kFWwoMvu6pcqf54ypqAuaFKCDD8KpogUDCRZfVL+gaZABdi0LqSel4Lua0+HfpyQ pU95xv64YEZLXkHoL6zTKOpr4OQdNcZ1f77roVC+H+t9yJYcl69lPRBj3RyxLrTI naRUaUJF7yC0x9jgBFLvYzwHdEiuD3RF/UceHGyEVvGtbIHlJ9lmbZhu10as694r Vn5WuNKuVTk3ZeFhSysJ+JPPg2ltiruV -----END CERTIFICATE-----Generated at Sat May 31 17:16:19 2025 by rpki-client