$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft File: 6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft (raw, json) Hash identifier: F+jQnHMx+kYYyc4isaqyr0eiUAkMB5SFRFwXl3NsxLU= Subject key identifier: 6A:A4:D8:B5:04:D1:0B:94:A5:0B:1D:B2:24:F3:81:20:49:57:36:4F Authority key identifier: E8:CF:22:A0:8E:43:91:CA:D1:50:FA:31:B4:4D:C9:3C:8A:B8:25:EA Certificate issuer: /CN=A91A9083/serialNumber=E8CF22A08E4391CAD150FA31B44DC93C8AB825EA Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft Manifest number: 63 Signing time: Thu 03 Jul 2025 07:24:42 +0000 Manifest this update: Thu 03 Jul 2025 07:24:41 +0000 Manifest next update: Thu 10 Jul 2025 07:24:41 +0000 Files and hashes: 1: 6M8ioI5DkcrRUPoxtE3JPIq4Jeo.crl (hash: ThxvNpF0sG6LEXXVr1MCgv0DAOec9+YdsWGQv/x/0kI=) 2: 0C2077B6D1B511EF944F205DC4F9AE02.roa (hash: vja+a7NVCjcQj64L0y6ot3hr8lpW0YLqwI3TCyIsiEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.crl rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9083, serialNumber=E8CF22A08E4391CAD150FA31B44DC93C8AB825EA Validity Not Before: Jul 3 07:24:41 2025 GMT Not After : Jul 10 07:24:41 2025 GMT Subject: CN=6866303a-27dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:75:6f:a7:7c:a2:d8:f7:94:08:6f:b5:1a:9c: 89:c5:92:e6:96:2f:cb:48:c1:3a:1b:a9:01:ee:d2: a6:61:95:c5:83:62:43:a4:ba:c4:38:3d:a4:a0:47: be:a0:8e:65:da:dd:8d:d4:49:96:2e:09:aa:43:77: 85:b8:de:26:36:03:11:8c:f3:51:39:28:0e:ca:13: cc:0c:79:d0:bb:75:6f:fc:57:b3:3c:a8:73:fe:04: 0d:1a:5a:d7:46:b9:1e:5a:92:bf:25:26:bd:6c:4a: 6d:17:b2:b3:1a:47:87:fb:61:00:18:b8:01:73:3d: aa:f6:58:65:39:96:af:b9:09:ed:0e:1f:a0:af:b7: b4:18:7e:21:73:04:2e:6c:dd:cc:57:4c:27:be:5d: fd:9f:8e:4a:18:13:63:94:76:b6:d2:a8:3f:c9:f9: cf:4f:ef:4d:e7:2a:87:fb:4c:d9:34:83:31:05:11: 73:2d:6e:fb:1b:83:da:45:5a:5d:26:f6:ff:1b:be: 8c:d8:8b:aa:ba:0e:8f:af:33:d1:27:fc:cf:08:fa: a4:60:fe:24:63:88:80:31:47:52:ca:f5:ab:88:f5: 54:ec:86:ba:b7:aa:29:86:52:32:e5:af:c6:4d:95: 6b:19:05:75:54:4e:67:30:10:8f:bf:dc:ce:4a:8f: 2b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:A4:D8:B5:04:D1:0B:94:A5:0B:1D:B2:24:F3:81:20:49:57:36:4F X509v3 Authority Key Identifier: keyid:E8:CF:22:A0:8E:43:91:CA:D1:50:FA:31:B4:4D:C9:3C:8A:B8:25:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:14:f6:b0:2b:97:5e:a1:b7:27:df:92:85:21:b4:75:05:4a: 26:eb:ab:50:dc:12:29:b5:09:65:c4:0f:75:10:0c:da:e1:d3: f1:43:8e:87:f5:48:97:43:e7:5f:a3:64:da:72:53:6c:7d:3d: 61:93:24:c1:88:dd:59:49:0e:11:34:2c:39:f2:34:0c:1c:a6: 8f:0f:a4:af:a0:74:b7:51:f9:6e:ce:32:55:8b:fe:0f:22:67: 0e:4e:44:e3:9c:99:a6:c4:9d:5d:85:cc:95:31:7f:2a:07:96: f5:6f:89:09:c8:fd:b1:4e:b4:4c:16:24:78:6c:a5:ec:ff:99: 35:ae:9e:c1:70:33:91:36:6f:5e:e1:e2:6a:d2:ec:0c:68:8a: 9c:35:94:93:94:f1:6d:ff:fa:a6:8c:cb:17:ac:12:9a:01:e8: bb:dd:20:6e:5f:5b:1b:d4:ba:c6:ef:a7:77:07:35:13:ea:28: c6:db:42:80:0c:4c:c6:1c:0a:5f:c4:02:1b:3b:5e:2f:48:9c: 6e:a7:1b:7a:38:1e:65:41:1c:7f:ac:c7:ee:59:4a:0c:eb:8a: 5e:cb:19:ea:e2:50:72:41:7c:67:3c:8b:e6:64:36:63:a7:a2: 9a:c7:83:c9:05:ba:0d:e8:eb:70:ae:39:a9:85:63:f5:c4:8b: cb:ad:80:7e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OTA4MzExMC8GA1UEBRMoRThDRjIyQTA4RTQzOTFDQUQxNTBGQTMxQjQ0REM5M0M4 QUI4MjVFQTAeFw0yNTA3MDMwNzI0NDFaFw0yNTA3MTAwNzI0NDFaMBgxFjAUBgNV BAMTDTY4NjYzMDNhLTI3ZGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8dW+nfKLY95QIb7UanInFkuaWL8tIwTobqQHu0qZhlcWDYkOkusQ4PaSgR76g jmXa3Y3USZYuCapDd4W43iY2AxGM81E5KA7KE8wMedC7dW/8V7M8qHP+BA0aWtdG uR5akr8lJr1sSm0XsrMaR4f7YQAYuAFzPar2WGU5lq+5Ce0OH6Cvt7QYfiFzBC5s 3cxXTCe+Xf2fjkoYE2OUdrbSqD/J+c9P703nKof7TNk0gzEFEXMtbvsbg9pFWl0m 9v8bvozYi6q6Do+vM9En/M8I+qRg/iRjiIAxR1LK9auI9VTshrq3qimGUjLlr8ZN lWsZBXVUTmcwEI+/3M5KjyuTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaqTYtQTR C5SlCx2yJPOBIElXNk8wHwYDVR0jBBgwFoAU6M8ioI5DkcrRUPoxtE3JPIq4Jeow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5MDgzL0MwNkYyRTQyRDFC MDExRUY4ODMzQzkzM0M0RjlBRTAyLzZNOGlvSTVEa2NyUlVQb3h0RTNKUElxNEpl by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNk04aW9JNURrY3JSVVBveHRFM0pQSXE0SmVvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 MDgzL0MwNkYyRTQyRDFCMDExRUY4ODMzQzkzM0M0RjlBRTAyLzZNOGlvSTVEa2Ny UlVQb3h0RTNKUElxNEplby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK8U9rArl16htyffkoUhtHUFSibrq1DcEim1CWXED3UQDNrh0/FDjof1 SJdD51+jZNpyU2x9PWGTJMGI3VlJDhE0LDnyNAwcpo8PpK+gdLdR+W7OMlWL/g8i Zw5OROOcmabEnV2FzJUxfyoHlvVviQnI/bFOtEwWJHhspez/mTWunsFwM5E2b17h 4mrS7Axoipw1lJOU8W3/+qaMyxesEpoB6LvdIG5fWxvUusbvp3cHNRPqKMbbQoAM TMYcCl/EAhs7Xi9InG6nG3o4HmVBHH+sx+5ZSgzril7LGeriUHJBfGc8i+ZkNmOn oprHg8kFug3o63CuOamFY/XEi8utgH4= -----END CERTIFICATE-----Generated at Thu Jul 3 23:16:34 2025 by rpki-client