$ rpki-client -vvf rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.mft File: 6ysMa5yLfwlHcYJnRq99Rg7cR6o.mft (raw, json) Hash identifier: S79ysldIcFQkzSAAZdK2WbGR0tLh65IPTgd0oYiSws4= Subject key identifier: 15:3C:1F:73:5A:61:14:AC:20:6C:53:A7:31:DE:68:56:DE:12:47:EF Authority key identifier: EB:2B:0C:6B:9C:8B:7F:09:47:71:82:67:46:AF:7D:46:0E:DC:47:AA Certificate issuer: /CN=A91A13C2/serialNumber=EB2B0C6B9C8B7F094771826746AF7D460EDC47AA Certificate serial: 04CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ysMa5yLfwlHcYJnRq99Rg7cR6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.mft Manifest number: 04C6 Signing time: Tue 01 Jul 2025 00:20:53 +0000 Manifest this update: Tue 01 Jul 2025 00:20:53 +0000 Manifest next update: Tue 08 Jul 2025 00:20:53 +0000 Files and hashes: 1: 6ysMa5yLfwlHcYJnRq99Rg7cR6o.crl (hash: 3c4uABPjeBG0LbQOjq+L9P5tCETbTVXiffoOTdzwBYI=) 2: A231B9362CEA11EC8F99F486C4F9AE02.roa (hash: 8LKcnydJB5oW4TBJzLAGx/1DAq+7TANc8tWAErbpeDg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.crl rsync://rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ysMa5yLfwlHcYJnRq99Rg7cR6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 00:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1227 (0x4cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A13C2, serialNumber=EB2B0C6B9C8B7F094771826746AF7D460EDC47AA Validity Not Before: Jul 1 00:20:53 2025 GMT Not After : Jul 8 00:20:53 2025 GMT Subject: CN=686329e5-dea5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b1:ab:87:c7:30:65:af:08:a1:6e:b5:c2:10: 13:e2:2f:7c:a1:0b:d9:30:36:45:32:b4:bb:ef:f3: 85:73:38:ea:9a:d9:cd:32:9d:fa:35:91:44:03:52: f8:4c:90:7d:82:47:62:3b:b1:e8:8f:04:4a:32:7b: ad:d8:10:ab:47:07:85:e7:70:a2:bb:84:ed:34:a9: fb:f7:9a:c6:ae:57:ad:85:c6:b4:13:af:e3:be:ee: 42:44:0a:a7:3a:89:a4:87:93:c9:a1:5c:6e:cb:92: 98:91:66:c8:64:f8:18:a0:56:e9:0a:0c:08:00:58: e3:dd:ed:84:fb:7c:a4:6e:78:4c:77:5a:38:b8:89: e7:d8:64:f8:62:48:f1:ea:e6:0f:ec:61:61:16:fd: 56:28:c4:fd:8d:87:1f:03:23:ff:9a:c5:13:ce:d4: 0d:86:30:3c:c3:c5:b8:c9:62:c4:76:60:d2:12:d6: 03:a1:2a:9b:85:b2:d1:37:78:7c:61:0d:49:42:81: cf:86:20:fd:b1:69:f6:ad:06:de:21:15:a4:8d:78: 93:da:6b:12:38:a3:81:0b:f9:16:2a:b0:de:5c:e6: dc:3f:6e:ff:6c:58:55:11:7d:91:b4:05:a6:3f:63: 44:13:42:ec:18:e6:64:8a:6b:f5:3e:4d:f0:e3:73: 16:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:3C:1F:73:5A:61:14:AC:20:6C:53:A7:31:DE:68:56:DE:12:47:EF X509v3 Authority Key Identifier: keyid:EB:2B:0C:6B:9C:8B:7F:09:47:71:82:67:46:AF:7D:46:0E:DC:47:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ysMa5yLfwlHcYJnRq99Rg7cR6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:a6:9c:fa:32:9a:17:3a:24:43:73:41:f7:a2:60:92:04:2f: fe:93:4d:75:87:35:2e:bc:5d:18:df:19:b4:a9:52:20:db:34: a0:40:0d:9b:5d:51:13:f5:f2:e3:e5:f2:19:6a:00:2c:69:bb: 48:6e:f1:65:57:63:97:2f:85:ae:92:07:f0:35:27:88:c6:b5: b6:00:49:00:29:84:6d:e3:85:30:ac:cc:6b:da:5e:58:8c:9d: 2f:98:55:a3:6c:67:bf:3c:b1:42:f5:39:f8:66:c0:0f:3d:ae: 21:91:40:29:d2:44:e7:60:33:12:48:07:8a:a1:60:d6:05:0a: 13:9a:90:ca:d2:40:ba:2a:1a:81:14:ff:72:1d:1d:06:25:20: 3c:bf:83:f9:ea:ac:ed:db:9d:73:da:22:a9:61:63:ab:97:98: 4f:19:80:ce:d7:c9:e7:55:a8:22:64:ef:e5:c2:10:af:68:44: 2e:7f:9a:78:45:fb:00:ea:f7:d6:9c:3d:34:96:b5:08:21:b2: 07:19:34:a6:66:a8:3a:b8:cb:0a:a6:2d:be:c4:79:cf:99:3e: 4c:4e:6d:a3:47:55:e3:a7:5a:1a:12:16:74:cf:d3:ae:3b:1c: 51:de:f1:bb:53:b3:09:15:3c:02:5d:af:67:14:c5:83:eb:a9: 7d:91:38:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTEzQzIxMTAvBgNVBAUTKEVCMkIwQzZCOUM4QjdGMDk0NzcxODI2NzQ2QUY3RDQ2 MEVEQzQ3QUEwHhcNMjUwNzAxMDAyMDUzWhcNMjUwNzA4MDAyMDUzWjAYMRYwFAYD VQQDEw02ODYzMjllNS1kZWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtbGrh8cwZa8IoW61whAT4i98oQvZMDZFMrS77/OFczjqmtnNMp36NZFEA1L4 TJB9gkdiO7HojwRKMnut2BCrRweF53Ciu4TtNKn795rGrlethca0E6/jvu5CRAqn Oomkh5PJoVxuy5KYkWbIZPgYoFbpCgwIAFjj3e2E+3ykbnhMd1o4uInn2GT4Ykjx 6uYP7GFhFv1WKMT9jYcfAyP/msUTztQNhjA8w8W4yWLEdmDSEtYDoSqbhbLRN3h8 YQ1JQoHPhiD9sWn2rQbeIRWkjXiT2msSOKOBC/kWKrDeXObcP27/bFhVEX2RtAWm P2NEE0LsGOZkimv1Pk3w43MWpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBU8H3Na YRSsIGxTpzHeaFbeEkfvMB8GA1UdIwQYMBaAFOsrDGuci38JR3GCZ0avfUYO3Eeq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTNDMi81QUY3RkQ3NjJD RTcxMUVDODcxQTA2NjBDNEY5QUUwMi82eXNNYTV5TGZ3bEhjWUpuUnE5OVJnN2NS Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ5c01hNXlMZndsSGNZSm5ScTk5Umc3Y1I2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTNDMi81QUY3RkQ3NjJDRTcxMUVDODcxQTA2NjBDNEY5QUUwMi82eXNNYTV5TGZ3 bEhjWUpuUnE5OVJnN2NSNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUppz6MpoXOiRDc0H3omCSBC/+k011hzUuvF0Y3xm0qVIg2zSgQA2b XVET9fLj5fIZagAsabtIbvFlV2OXL4WukgfwNSeIxrW2AEkAKYRt44UwrMxr2l5Y jJ0vmFWjbGe/PLFC9Tn4ZsAPPa4hkUAp0kTnYDMSSAeKoWDWBQoTmpDK0kC6KhqB FP9yHR0GJSA8v4P56qzt251z2iKpYWOrl5hPGYDO18nnVagiZO/lwhCvaEQuf5p4 RfsA6vfWnD00lrUIIbIHGTSmZqg6uMsKpi2+xHnPmT5MTm2jR1Xjp1oaEhZ0z9Ou OxxR3vG7U7MJFTwCXa9nFMWD66l9kThr -----END CERTIFICATE-----Generated at Wed Jul 2 14:46:27 2025 by rpki-client