$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft File: 6XepImIg6MeKHRs74E1gzcyKIYg.mft (raw, json) Hash identifier: /DubGSN1G6Phi2FG684W86SQBJ3V1QPsO1FqqL6+FUo= Subject key identifier: 9C:6D:7A:86:F0:67:30:96:18:DA:20:1B:7B:E7:01:EB:9D:61:8A:EE Authority key identifier: E9:77:A9:22:62:20:E8:C7:8A:1D:1B:3B:E0:4D:60:CD:CC:8A:21:88 Certificate issuer: /CN=A91FC5BD/serialNumber=E977A9226220E8C78A1D1B3BE04D60CDCC8A2188 Certificate serial: C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XepImIg6MeKHRs74E1gzcyKIYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft Manifest number: C2 Signing time: Sat 07 Jun 2025 05:19:49 +0000 Manifest this update: Sat 07 Jun 2025 05:19:49 +0000 Manifest next update: Sat 14 Jun 2025 05:19:49 +0000 Files and hashes: 1: 6XepImIg6MeKHRs74E1gzcyKIYg.crl (hash: DAdQJtTbEu20PKr3bhhPQTIg7Af8WmIW6ErL+cRki+o=) 2: 1101B5C01CEC11EFA7CDC085C4F9AE02.roa (hash: BZA1P97SNGTrhAAl2/Ui2Ojz/Jo4Dfx0oXuCfnfQd+I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.crl rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XepImIg6MeKHRs74E1gzcyKIYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Jun 2025 04:09:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 196 (0xc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC5BD, serialNumber=E977A9226220E8C78A1D1B3BE04D60CDCC8A2188 Validity Not Before: Jun 7 05:19:49 2025 GMT Not After : Jun 14 05:19:49 2025 GMT Subject: CN=6843cbf5-3b78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:44:f6:49:67:d3:23:3c:8b:b6:0b:76:3a:f4: ec:8d:34:92:99:9f:7f:ec:4f:26:e1:ab:30:cc:43: 00:55:c5:44:de:9e:c7:b0:68:29:3c:c5:56:6e:27: f9:d9:d2:d8:a1:3c:92:aa:00:a7:ab:64:c3:a9:d7: 0f:15:88:a4:81:f4:ae:b6:80:db:46:16:05:31:67: f6:51:88:4f:f7:07:98:4d:a2:02:dc:5c:36:46:5b: 1a:b0:3b:d8:13:44:21:a3:4e:96:82:b3:11:2b:44: 89:c3:28:cb:58:d8:13:67:f0:b4:d8:68:cc:45:33: cc:a7:5f:2e:90:43:af:10:0e:75:66:16:21:41:53: 3e:36:36:b2:c5:8c:3c:ae:4c:59:18:25:44:9a:a8: 31:02:a5:de:20:a2:4b:10:22:f5:31:e4:6a:ef:1a: 6f:8d:cd:4c:c3:bd:aa:11:c1:9d:f4:6b:88:e1:1b: 16:d6:b6:f0:9b:da:19:53:fa:1d:fc:dc:84:60:f5: bd:70:f5:e8:fd:8f:f1:f4:ef:a7:07:94:5f:05:2d: 55:57:1d:a8:3d:69:aa:68:4d:ad:f3:39:b6:12:b6: f4:08:5d:9f:97:bc:33:fd:9e:1a:b0:f9:a9:5e:14: 67:2a:1a:d4:72:da:ef:ce:60:dc:47:d1:6d:2a:db: ac:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:6D:7A:86:F0:67:30:96:18:DA:20:1B:7B:E7:01:EB:9D:61:8A:EE X509v3 Authority Key Identifier: keyid:E9:77:A9:22:62:20:E8:C7:8A:1D:1B:3B:E0:4D:60:CD:CC:8A:21:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XepImIg6MeKHRs74E1gzcyKIYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:fd:cd:4b:4a:f5:bd:c5:7a:35:a2:f5:46:b6:a4:da:ee:84: a3:52:aa:ea:ac:c4:b8:a6:af:75:e2:09:a1:cd:9f:f0:69:17: a5:70:1a:9a:8b:03:c4:08:ec:61:d2:5d:86:d0:4f:3b:f4:e2: 62:84:26:09:eb:d7:a2:24:21:10:f4:b6:eb:2f:99:71:51:8b: cb:52:cb:98:02:39:33:75:ec:93:ff:bb:18:e1:94:04:f9:d8: 55:15:49:17:6d:e7:c4:cb:5f:40:8c:22:d5:9c:cf:86:2c:ae: 58:d0:60:91:39:ff:98:e4:38:77:fd:74:fd:72:bf:33:60:8d: 9c:54:d0:5b:d0:c5:da:b4:a3:04:e1:ce:09:da:f0:62:2b:d3: cc:15:ca:3b:3d:0c:d4:7a:5c:16:6f:63:a5:70:71:50:c9:c2: 55:0c:fd:e1:85:85:22:3e:dc:3b:62:da:cf:4c:ae:06:7e:76: 64:22:35:95:80:e3:3b:d2:f9:4f:83:a9:91:d8:bd:e5:d2:0b: dc:4a:bd:01:96:a7:87:10:08:62:dc:ca:59:25:5c:42:34:c0: 0c:c9:88:86:00:ae:f9:f0:4a:ee:b9:5b:e5:e6:8d:6c:3e:3c: 0f:96:73:d4:2f:75:ff:6d:44:00:ab:0c:37:ff:76:d5:7f:6c: 7e:38:31:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM1QkQxMTAvBgNVBAUTKEU5NzdBOTIyNjIyMEU4Qzc4QTFEMUIzQkUwNEQ2MENE Q0M4QTIxODgwHhcNMjUwNjA3MDUxOTQ5WhcNMjUwNjE0MDUxOTQ5WjAYMRYwFAYD VQQDEw02ODQzY2JmNS0zYjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvkT2SWfTIzyLtgt2OvTsjTSSmZ9/7E8m4aswzEMAVcVE3p7HsGgpPMVWbif5 2dLYoTySqgCnq2TDqdcPFYikgfSutoDbRhYFMWf2UYhP9weYTaIC3Fw2RlsasDvY E0Qho06WgrMRK0SJwyjLWNgTZ/C02GjMRTPMp18ukEOvEA51ZhYhQVM+NjayxYw8 rkxZGCVEmqgxAqXeIKJLECL1MeRq7xpvjc1Mw72qEcGd9GuI4RsW1rbwm9oZU/od /NyEYPW9cPXo/Y/x9O+nB5RfBS1VVx2oPWmqaE2t8zm2Erb0CF2fl7wz/Z4asPmp XhRnKhrUctrvzmDcR9FtKtusYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJxteobw ZzCWGNogG3vnAeudYYruMB8GA1UdIwQYMBaAFOl3qSJiIOjHih0bO+BNYM3MiiGI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzVCRC83NkMyQzcyRTFD RUIxMUVGODVERkQ3NzZDNEY5QUUwMi82WGVwSW1JZzZNZUtIUnM3NEUxZ3pjeUtJ WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZYZXBJbUlnNk1lS0hSczc0RTFnemN5S0lZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzVCRC83NkMyQzcyRTFDRUIxMUVGODVERkQ3NzZDNEY5QUUwMi82WGVwSW1JZzZN ZUtIUnM3NEUxZ3pjeUtJWWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAn/c1LSvW9xXo1ovVGtqTa7oSjUqrqrMS4pq914gmhzZ/waRelcBqa iwPECOxh0l2G0E879OJihCYJ69eiJCEQ9LbrL5lxUYvLUsuYAjkzdeyT/7sY4ZQE +dhVFUkXbefEy19AjCLVnM+GLK5Y0GCROf+Y5Dh3/XT9cr8zYI2cVNBb0MXatKME 4c4J2vBiK9PMFco7PQzUelwWb2OlcHFQycJVDP3hhYUiPtw7YtrPTK4GfnZkIjWV gOM70vlPg6mR2L3l0gvcSr0BlqeHEAhi3MpZJVxCNMAMyYiGAK758EruuVvl5o1s PjwPlnPUL3X/bUQAqww3/3bVf2x+ODHC -----END CERTIFICATE-----Generated at Sat Jun 7 10:08:23 2025 by rpki-client