$ rpki-client -vvf rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.mft File: C6NOZDCxDmp_LSmWRCXR9xSvhlw.mft (raw, json) Hash identifier: Wmm1Mau7RBv4KGfI9g5HmfXGRsckTqFIiCuD8zvsjLA= Subject key identifier: 70:94:04:16:4A:D8:D1:29:D0:BA:A9:FF:B8:80:10:8E:B9:11:72:A9 Authority key identifier: 0B:A3:4E:64:30:B1:0E:6A:7F:2D:29:96:44:25:D1:F7:14:AF:86:5C Certificate issuer: /CN=A91A279C/serialNumber=0BA34E6430B10E6A7F2D29964425D1F714AF865C Certificate serial: 1AC6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6NOZDCxDmp_LSmWRCXR9xSvhlw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.mft Manifest number: 1AAD Signing time: Sat 28 Jun 2025 16:12:35 +0000 Manifest this update: Sat 28 Jun 2025 16:12:34 +0000 Manifest next update: Sat 05 Jul 2025 16:12:34 +0000 Files and hashes: 1: C6NOZDCxDmp_LSmWRCXR9xSvhlw.crl (hash: MlJ+FNyuXcLk91bfZAebNBVtdUss3aYf+EIVUhMqrV4=) 2: 9D2302A4F1D011E88D564045C4F9AE02.roa (hash: VxTzxn1U/OXB+CWBddl3uRVosJ2/DdLLOs7eSbWCVE4=) 3: 06D9E242335211E79AC36F87C4F9AE02.roa (hash: cOF8JZVjOiBr4JiE8EO1rOQQwXV4Z3nniDklK+R3JE4=) 4: 9DD35B9AF1D011E88D564045C4F9AE02.roa (hash: BfNK79rwC7mJWHyNf4je/JUK8nGDNnAVVEA5gBoGvSE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.crl rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6NOZDCxDmp_LSmWRCXR9xSvhlw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 16:12:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6854 (0x1ac6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A279C, serialNumber=0BA34E6430B10E6A7F2D29964425D1F714AF865C Validity Not Before: Jun 28 16:12:34 2025 GMT Not After : Jul 5 16:12:34 2025 GMT Subject: CN=68601472-4432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4b:8a:94:e1:7d:50:34:b4:ef:b4:d8:61:6a: 3a:2d:e5:8b:56:3d:c8:41:61:b4:61:74:00:7b:63: 56:23:5e:4e:08:ef:03:6a:3d:d4:1f:7b:63:85:25: 77:94:43:66:11:14:62:19:70:1b:be:2f:a3:3a:d7: 29:d0:f4:54:dc:31:d8:89:e2:63:d3:7b:05:cf:9c: 04:01:74:8f:8f:09:85:b5:52:e3:81:79:98:e9:ce: 66:f3:5e:cf:47:c6:62:01:17:64:9a:8e:fd:ee:7f: 00:21:70:b7:5a:cc:75:34:ef:ed:62:e5:13:41:33: 0d:cb:12:fa:3f:d9:e5:70:fd:05:b9:82:6d:f9:e8: 34:af:76:3a:e5:39:7a:9e:7c:46:3b:2e:c9:05:66: 1a:68:62:62:ee:af:51:c7:42:89:ab:a4:5b:11:18: 42:c3:15:00:0a:ad:b6:9e:a4:56:1a:55:d0:e3:77: a3:b5:41:7f:fa:51:3e:02:48:3d:d4:56:75:ed:8b: 15:61:24:ec:d2:5f:35:e0:39:aa:71:b8:7f:8e:10: 56:22:fb:86:23:8b:59:61:45:13:0c:4e:12:a3:6c: 0c:32:45:53:41:20:d0:b3:c2:c0:f0:9c:4c:4b:c5: 91:85:03:48:79:c0:e8:b3:bb:79:0f:8c:3d:0d:0d: c1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:94:04:16:4A:D8:D1:29:D0:BA:A9:FF:B8:80:10:8E:B9:11:72:A9 X509v3 Authority Key Identifier: keyid:0B:A3:4E:64:30:B1:0E:6A:7F:2D:29:96:44:25:D1:F7:14:AF:86:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6NOZDCxDmp_LSmWRCXR9xSvhlw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dc:43:d7:b5:8d:b7:34:d0:59:0c:59:4f:e7:86:8e:c0:30:c2: 54:79:64:6a:59:55:bb:a7:7d:10:d9:78:6f:fb:f0:bd:21:eb: 5f:8a:e5:d0:2d:7d:4b:4a:27:12:46:f2:ae:27:1f:9e:e0:ff: fc:54:76:86:f7:f1:5b:ff:b5:97:d1:71:5f:fb:3f:0b:09:e5: 99:34:8c:9c:5a:3f:ef:1b:98:34:ad:fb:e4:20:4b:ac:aa:8b: 41:c9:49:d3:b3:4e:e2:64:4b:41:6b:79:51:2b:26:89:60:0f: 3f:72:67:74:8d:9a:96:94:65:5d:6c:5c:8e:f1:b1:c2:3d:ac: 17:2e:ec:53:f0:22:fe:6a:21:bb:36:09:a6:30:5b:ba:32:45: 2c:8a:b6:92:19:3d:a7:8f:5b:25:c9:49:c5:eb:c3:11:8e:38: 88:78:ee:85:7f:da:72:5f:c7:84:bc:9c:cf:f3:39:52:51:1c: 69:d3:4d:44:f0:b8:fe:5b:e4:cf:48:d8:ec:c5:8a:bf:24:23: 21:f9:3b:6c:e8:6b:e5:12:2c:5c:11:31:af:65:39:64:c8:6f: 55:c0:b7:1d:b5:12:7a:83:45:3a:4d:65:09:1a:86:7a:ba:90: 03:6a:fe:53:af:e1:b2:82:13:42:76:f5:7e:d7:01:30:6f:1f: 38:bb:4d:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGsYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTI3OUMxMTAvBgNVBAUTKDBCQTM0RTY0MzBCMTBFNkE3RjJEMjk5NjQ0MjVEMUY3 MTRBRjg2NUMwHhcNMjUwNjI4MTYxMjM0WhcNMjUwNzA1MTYxMjM0WjAYMRYwFAYD VQQDEw02ODYwMTQ3Mi00NDMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvkuKlOF9UDS077TYYWo6LeWLVj3IQWG0YXQAe2NWI15OCO8Daj3UH3tjhSV3 lENmERRiGXAbvi+jOtcp0PRU3DHYieJj03sFz5wEAXSPjwmFtVLjgXmY6c5m817P R8ZiARdkmo797n8AIXC3Wsx1NO/tYuUTQTMNyxL6P9nlcP0FuYJt+eg0r3Y65Tl6 nnxGOy7JBWYaaGJi7q9Rx0KJq6RbERhCwxUACq22nqRWGlXQ43ejtUF/+lE+Akg9 1FZ17YsVYSTs0l814Dmqcbh/jhBWIvuGI4tZYUUTDE4So2wMMkVTQSDQs8LA8JxM S8WRhQNIecDos7t5D4w9DQ3BGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHCUBBZK 2NEp0Lqp/7iAEI65EXKpMB8GA1UdIwQYMBaAFAujTmQwsQ5qfy0plkQl0fcUr4Zc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjc5Qy8xQ0VCNzcxODMz NTExMUU3QkY0Qjk1ODZDNEY5QUUwMi9DNk5PWkRDeERtcF9MU21XUkNYUjl4U3Zo bHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M2Tk9aREN4RG1wX0xTbVdSQ1hSOXhTdmhsdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Mjc5Qy8xQ0VCNzcxODMzNTExMUU3QkY0Qjk1ODZDNEY5QUUwMi9DNk5PWkRDeERt cF9MU21XUkNYUjl4U3ZobHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDcQ9e1jbc00FkMWU/nho7AMMJUeWRqWVW7p30Q2Xhv+/C9IetfiuXQ LX1LSicSRvKuJx+e4P/8VHaG9/Fb/7WX0XFf+z8LCeWZNIycWj/vG5g0rfvkIEus qotByUnTs07iZEtBa3lRKyaJYA8/cmd0jZqWlGVdbFyO8bHCPawXLuxT8CL+aiG7 NgmmMFu6MkUsiraSGT2nj1slyUnF68MRjjiIeO6Ff9pyX8eEvJzP8zlSURxp001E 8Lj+W+TPSNjsxYq/JCMh+Tts6GvlEixcETGvZTlkyG9VwLcdtRJ6g0U6TWUJGoZ6 upADav5Tr+GyghNCdvV+1wEwbx84u00/ -----END CERTIFICATE-----Generated at Sun Jun 29 20:17:23 2025 by rpki-client