$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.mft File: _j6YxMGnkStakW0WM0d4xKt6ZTA.mft (raw, json) Hash identifier: grGdogeNibDwet4hp2EoVAdJIsAE82Q8HQBxxVgQKCQ= Subject key identifier: A3:97:8A:4B:43:B9:27:B9:38:6F:21:6D:7D:81:3A:34:23:0F:DF:D7 Authority key identifier: FE:3E:98:C4:C1:A7:91:2B:5A:91:6D:16:33:47:78:C4:AB:7A:65:30 Certificate issuer: /CN=A91A0D9C/serialNumber=FE3E98C4C1A7912B5A916D16334778C4AB7A6530 Certificate serial: 14FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j6YxMGnkStakW0WM0d4xKt6ZTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.mft Manifest number: 14EA Signing time: Mon 30 Jun 2025 17:01:42 +0000 Manifest this update: Mon 30 Jun 2025 17:01:41 +0000 Manifest next update: Mon 07 Jul 2025 17:01:41 +0000 Files and hashes: 1: _j6YxMGnkStakW0WM0d4xKt6ZTA.crl (hash: qaklD+kAhssMuPT+ZjftJp66afJ1nmsr1r3Azxy6uUQ=) 2: 95DDE9D6909A11EF94AF3B26C4F9AE02.roa (hash: CwtP2gwbfApArQJr3Z1hu1rrmy4N399m/4TAvngzADE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.crl rsync://rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j6YxMGnkStakW0WM0d4xKt6ZTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 17:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5370 (0x14fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0D9C, serialNumber=FE3E98C4C1A7912B5A916D16334778C4AB7A6530 Validity Not Before: Jun 30 17:01:41 2025 GMT Not After : Jul 7 17:01:41 2025 GMT Subject: CN=6862c2f5-043a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ef:6d:0f:97:4a:3f:d5:97:1a:bf:84:9e:00: 8e:6d:df:9d:8c:03:9f:d4:e2:88:1a:8d:4c:35:40: 67:29:da:01:9b:16:ba:b9:63:45:9f:8d:0c:69:0e: b4:f1:ab:33:37:a0:fd:ab:7e:a6:2a:77:fe:12:24: ca:37:b2:e7:fa:1d:c7:18:37:a8:92:bc:9c:cc:e8: f5:f6:9a:60:22:ed:4f:33:d4:26:fb:ee:c1:41:99: a3:36:4f:75:9b:05:56:8e:79:e0:d6:3b:3c:e6:55: 69:72:88:9f:a7:f8:75:6a:d5:c5:5a:89:aa:a1:c5: 70:f4:b2:58:d4:75:df:c8:af:53:0e:e0:cb:43:8a: 50:ae:a0:0d:cb:f2:22:49:ca:95:e3:fb:d6:23:c3: d5:72:9a:01:91:c0:4e:10:22:a9:2d:7a:52:64:08: a6:0f:a4:62:48:7c:3f:70:35:4c:49:0c:94:72:e2: 3a:9b:bf:d8:bd:a8:13:bb:9d:81:63:82:66:0a:56: 7e:3d:ab:05:b9:7b:49:a5:33:e8:88:3c:dd:40:18: 1d:a2:03:dc:c8:74:b3:80:b1:31:05:2f:d7:8d:84: 89:0f:e9:58:0c:9c:2b:81:c9:06:2f:39:bd:a5:af: 1e:7f:08:47:4a:24:f0:f9:a2:10:77:bf:f8:f7:48: 9c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:97:8A:4B:43:B9:27:B9:38:6F:21:6D:7D:81:3A:34:23:0F:DF:D7 X509v3 Authority Key Identifier: keyid:FE:3E:98:C4:C1:A7:91:2B:5A:91:6D:16:33:47:78:C4:AB:7A:65:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j6YxMGnkStakW0WM0d4xKt6ZTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:fe:eb:8d:40:e3:1c:14:e3:dd:c3:a2:80:72:de:7f:bf:71: 03:1f:a1:b0:d2:be:2e:ce:fa:b2:a5:ca:b7:bf:dc:00:26:a6: b8:df:bf:46:48:77:77:f6:d3:e3:f5:2b:ef:96:79:e7:e0:19: 19:db:74:a8:9c:b1:1c:82:9b:4b:61:53:6c:5f:38:9a:21:06: b9:3a:70:d7:e7:11:d3:86:d4:24:42:49:5e:3d:0c:fb:c8:75: 52:73:2d:d8:7b:cb:a9:84:bd:b1:20:f8:f3:af:3c:19:e7:dd: 4c:6e:92:49:34:73:c5:d6:e0:b5:5c:b5:1f:37:9f:1e:2a:38: 66:47:dd:92:60:c1:f1:12:78:3a:35:07:b4:3f:0b:fc:5c:ec: c6:ff:06:22:ce:4c:9b:f4:c8:df:f2:50:db:a4:fb:07:a0:4f: 8d:f0:dc:01:02:55:ff:53:63:0f:0f:9d:bd:03:18:5d:8c:5c: 8b:23:da:0d:96:12:a0:05:17:90:e1:1d:d0:62:14:60:76:0c: 5e:fa:e2:f3:6f:2f:04:97:be:58:ba:ed:55:6c:1f:82:1d:77: f2:7e:6f:be:25:c2:c8:fc:54:e0:da:c2:b3:eb:2b:a3:88:6f: c7:07:fa:e7:d8:c2:cf:a2:69:fa:9b:e2:89:9a:ff:7d:1c:3a: 20:6a:47:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBEOUMxMTAvBgNVBAUTKEZFM0U5OEM0QzFBNzkxMkI1QTkxNkQxNjMzNDc3OEM0 QUI3QTY1MzAwHhcNMjUwNjMwMTcwMTQxWhcNMjUwNzA3MTcwMTQxWjAYMRYwFAYD VQQDEw02ODYyYzJmNS0wNDNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx+9tD5dKP9WXGr+EngCObd+djAOf1OKIGo1MNUBnKdoBmxa6uWNFn40MaQ60 8aszN6D9q36mKnf+EiTKN7Ln+h3HGDeokryczOj19ppgIu1PM9Qm++7BQZmjNk91 mwVWjnng1js85lVpcoifp/h1atXFWomqocVw9LJY1HXfyK9TDuDLQ4pQrqANy/Ii ScqV4/vWI8PVcpoBkcBOECKpLXpSZAimD6RiSHw/cDVMSQyUcuI6m7/YvagTu52B Y4JmClZ+PasFuXtJpTPoiDzdQBgdogPcyHSzgLExBS/XjYSJD+lYDJwrgckGLzm9 pa8efwhHSiTw+aIQd7/490ic0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKOXiktD uSe5OG8hbX2BOjQjD9/XMB8GA1UdIwQYMBaAFP4+mMTBp5ErWpFtFjNHeMSremUw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEQ5Qy85RTI4MzAwNjU3 QTgxMUU4QjRBQzA4NzdDNEY5QUUwMi9fajZZeE1HbmtTdGFrVzBXTTBkNHhLdDZa VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19qNll4TUdua1N0YWtXMFdNMGQ0eEt0NlpUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEQ5Qy85RTI4MzAwNjU3QTgxMUU4QjRBQzA4NzdDNEY5QUUwMi9fajZZeE1HbmtT dGFrVzBXTTBkNHhLdDZaVEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCR/uuNQOMcFOPdw6KAct5/v3EDH6Gw0r4uzvqypcq3v9wAJqa4379G SHd39tPj9Svvlnnn4BkZ23SonLEcgptLYVNsXziaIQa5OnDX5xHThtQkQklePQz7 yHVScy3Ye8uphL2xIPjzrzwZ591MbpJJNHPF1uC1XLUfN58eKjhmR92SYMHxEng6 NQe0Pwv8XOzG/wYizkyb9Mjf8lDbpPsHoE+N8NwBAlX/U2MPD529AxhdjFyLI9oN lhKgBReQ4R3QYhRgdgxe+uLzby8El75Yuu1VbB+CHXfyfm++JcLI/FTg2sKz6yuj iG/HB/rn2MLPomn6m+KJmv99HDogakfZ -----END CERTIFICATE-----Generated at Tue Jul 1 17:27:11 2025 by rpki-client