$ rpki-client -vvf rpki.apnic.net/member_repository/A91583E2/4D3CC08A3B9911F0A0CC5978C4F9AE02/R6YZCsBcMIB-0V9AkhuyMttVJIQ.mft File: R6YZCsBcMIB-0V9AkhuyMttVJIQ.mft (raw, json) Hash identifier: Snb1VKGSBeA0rb4U55tGLnRuVSy0XOSjbIoTnLBtfGU= Subject key identifier: 9C:31:EC:36:5B:F1:0B:4E:F8:0D:50:93:BD:16:E4:61:70:D8:9A:97 Authority key identifier: 47:A6:19:0A:C0:5C:30:80:7E:D1:5F:40:92:1B:B2:32:DB:55:24:84 Certificate issuer: /CN=A91583E2/serialNumber=47A6190AC05C30807ED15F40921BB232DB552484 Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6YZCsBcMIB-0V9AkhuyMttVJIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91583E2/4D3CC08A3B9911F0A0CC5978C4F9AE02/R6YZCsBcMIB-0V9AkhuyMttVJIQ.mft Manifest number: 13 Signing time: Tue 01 Jul 2025 08:49:55 +0000 Manifest this update: Tue 01 Jul 2025 08:49:55 +0000 Manifest next update: Tue 08 Jul 2025 08:49:55 +0000 Files and hashes: 1: R6YZCsBcMIB-0V9AkhuyMttVJIQ.crl (hash: 3OlZQbrst4mKukQ2UzQ7iZQNl3uFgRpfOMIuNy+iLbE=) 2: B0E8BC383B9911F09DE90D79C4F9AE02.roa (hash: DBehkehjj1Vjada20+g+EkMiIesYAdzyY1KoJXBbQUk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91583E2/4D3CC08A3B9911F0A0CC5978C4F9AE02/R6YZCsBcMIB-0V9AkhuyMttVJIQ.crl rsync://rpki.apnic.net/member_repository/A91583E2/4D3CC08A3B9911F0A0CC5978C4F9AE02/R6YZCsBcMIB-0V9AkhuyMttVJIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6YZCsBcMIB-0V9AkhuyMttVJIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91583E2, serialNumber=47A6190AC05C30807ED15F40921BB232DB552484 Validity Not Before: Jul 1 08:49:55 2025 GMT Not After : Jul 8 08:49:55 2025 GMT Subject: CN=6863a133-19b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2f:f7:c8:2f:42:ff:33:cb:6e:20:71:cd:51: 2b:19:ab:c3:d0:65:19:9e:bf:1d:5f:36:84:1a:39: e8:91:00:b6:0b:ff:09:ba:54:96:13:8d:c7:37:db: f8:40:49:b9:52:bc:bb:3b:4d:6d:82:63:52:c1:98: 87:2d:c2:e2:1f:49:aa:6e:ae:48:c4:0a:90:14:ab: 9a:ff:22:f4:6d:6e:6a:6c:e9:63:17:4f:0f:95:5b: c3:fe:b1:6f:32:45:31:83:b5:d6:22:f6:54:15:e5: 54:8d:b2:48:e1:85:51:ca:5d:af:05:50:7f:ae:90: 42:91:b7:f2:6a:e2:71:36:06:76:4e:07:25:2e:11: 41:5e:25:82:2e:e7:cb:5c:6f:fe:a1:51:39:e5:d7: a7:7f:b7:d6:a2:2b:1e:c4:0d:68:0b:98:fc:b7:50: ec:ca:13:a1:0a:c1:ca:d1:f9:dc:20:09:30:e4:ef: 67:e4:86:65:19:42:68:42:5b:d9:c5:b9:32:f8:1a: e2:14:af:f6:ac:cd:9f:5a:b0:f5:0b:eb:cf:60:26: eb:dc:7d:a8:86:ea:82:71:ab:f2:e0:75:04:a5:26: 63:8a:50:af:c9:bd:81:08:23:d6:c5:05:12:cc:f1: 34:a8:4f:33:8b:f2:c8:50:35:e7:d7:e9:31:1a:fa: 1e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:31:EC:36:5B:F1:0B:4E:F8:0D:50:93:BD:16:E4:61:70:D8:9A:97 X509v3 Authority Key Identifier: keyid:47:A6:19:0A:C0:5C:30:80:7E:D1:5F:40:92:1B:B2:32:DB:55:24:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91583E2/4D3CC08A3B9911F0A0CC5978C4F9AE02/R6YZCsBcMIB-0V9AkhuyMttVJIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6YZCsBcMIB-0V9AkhuyMttVJIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91583E2/4D3CC08A3B9911F0A0CC5978C4F9AE02/R6YZCsBcMIB-0V9AkhuyMttVJIQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:f3:f8:d9:56:41:6d:53:58:e0:ad:9b:8b:f4:82:9d:d3:58: a9:97:c5:b8:2c:b1:67:f5:bf:0c:05:0d:39:4c:6c:4b:88:44: c7:d3:b1:b3:23:9c:5e:f1:69:e3:63:db:1e:56:21:d2:2c:8b: db:46:28:bc:2f:c8:2d:9b:f5:19:9e:34:5d:51:20:ea:76:88: bf:71:c7:dc:7b:5e:2a:82:f9:3d:0d:ab:ae:1d:48:4f:83:f7: 3b:db:7f:f1:1b:69:77:d5:75:43:67:20:87:b6:84:18:fc:5b: af:63:2f:5e:71:5a:40:ca:99:fd:33:34:f9:f7:46:10:dc:0d: 93:27:0d:b4:b0:c4:8f:7d:08:81:00:79:cf:73:e2:bf:b8:97: 68:fb:43:b7:28:60:99:c3:53:80:04:9b:de:39:3e:3c:7f:f5: 6f:cc:85:bd:d6:30:87:4d:60:42:7e:71:3a:e9:dd:2c:ad:f3: 82:65:21:4b:e1:bc:4c:c7:8f:4b:18:9a:90:31:d3:a1:32:1d: 22:b4:4c:6b:70:9e:0b:2b:21:33:72:1d:37:31:61:67:f0:b1: 51:8c:04:2b:15:da:94:21:63:c2:89:81:80:dc:bf:f6:ed:a1: 61:32:16:db:30:c4:d2:d8:29:56:ad:21:c1:5b:6e:10:cf:88: 61:12:01:a9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 ODNFMjExMC8GA1UEBRMoNDdBNjE5MEFDMDVDMzA4MDdFRDE1RjQwOTIxQkIyMzJE QjU1MjQ4NDAeFw0yNTA3MDEwODQ5NTVaFw0yNTA3MDgwODQ5NTVaMBgxFjAUBgNV BAMTDTY4NjNhMTMzLTE5YjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpL/fIL0L/M8tuIHHNUSsZq8PQZRmevx1fNoQaOeiRALYL/wm6VJYTjcc32/hA SblSvLs7TW2CY1LBmIctwuIfSapurkjECpAUq5r/IvRtbmps6WMXTw+VW8P+sW8y RTGDtdYi9lQV5VSNskjhhVHKXa8FUH+ukEKRt/Jq4nE2BnZOByUuEUFeJYIu58tc b/6hUTnl16d/t9aiKx7EDWgLmPy3UOzKE6EKwcrR+dwgCTDk72fkhmUZQmhCW9nF uTL4GuIUr/aszZ9asPUL689gJuvcfaiG6oJxq/LgdQSlJmOKUK/JvYEII9bFBRLM 8TSoTzOL8shQNefX6TEa+h6nAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnDHsNlvx C074DVCTvRbkYXDYmpcwHwYDVR0jBBgwFoAUR6YZCsBcMIB+0V9AkhuyMttVJIQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4M0UyLzREM0NDMDhBM0I5 OTExRjBBMENDNTk3OEM0RjlBRTAyL1I2WVpDc0JjTUlCLTBWOUFraHV5TXR0VkpJ US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUjZZWkNzQmNNSUItMFY5QWtodXlNdHRWSklRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4 M0UyLzREM0NDMDhBM0I5OTExRjBBMENDNTk3OEM0RjlBRTAyL1I2WVpDc0JjTUlC LTBWOUFraHV5TXR0VkpJUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB/z+NlWQW1TWOCtm4v0gp3TWKmXxbgssWf1vwwFDTlMbEuIRMfTsbMj nF7xaeNj2x5WIdIsi9tGKLwvyC2b9RmeNF1RIOp2iL9xx9x7XiqC+T0Nq64dSE+D 9zvbf/EbaXfVdUNnIIe2hBj8W69jL15xWkDKmf0zNPn3RhDcDZMnDbSwxI99CIEA ec9z4r+4l2j7Q7coYJnDU4AEm945Pjx/9W/Mhb3WMIdNYEJ+cTrp3Syt84JlIUvh vEzHj0sYmpAx06EyHSK0TGtwngsrITNyHTcxYWfwsVGMBCsV2pQhY8KJgYDcv/bt oWEyFtswxNLYKVatIcFbbhDPiGESAak= -----END CERTIFICATE-----Generated at Tue Jul 1 15:29:50 2025 by rpki-client