$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB3E4/F69881DE69BA11EAA65DF764C4F9AE02/6qeS-WiGPD_7nr0WcaBsFFobIWQ.mft File: 6qeS-WiGPD_7nr0WcaBsFFobIWQ.mft (raw, json) Hash identifier: OLqnEtGgd5lmQjoPj99QDyiBsDvIBA94pqic63WKVas= Subject key identifier: 31:34:94:A6:CE:BD:D8:88:3B:65:60:F8:1E:DF:C6:A0:11:4F:1A:CA Authority key identifier: EA:A7:92:F9:68:86:3C:3F:FB:9E:BD:16:71:A0:6C:14:5A:1B:21:64 Certificate issuer: /CN=A91AB3E4/serialNumber=EAA792F968863C3FFB9EBD1671A06C145A1B2164 Certificate serial: 0A57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qeS-WiGPD_7nr0WcaBsFFobIWQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB3E4/F69881DE69BA11EAA65DF764C4F9AE02/6qeS-WiGPD_7nr0WcaBsFFobIWQ.mft Manifest number: 0A50 Signing time: Wed 02 Jul 2025 19:55:46 +0000 Manifest this update: Wed 02 Jul 2025 19:55:46 +0000 Manifest next update: Wed 09 Jul 2025 19:55:45 +0000 Files and hashes: 1: 6qeS-WiGPD_7nr0WcaBsFFobIWQ.crl (hash: OdAEoiZmN5HEN7mERre1yPN7iGnMciecqwLhwKZHhkg=) 2: 685E441A69BC11EA97D4FE67C4F9AE02.roa (hash: J+JZoSjojOqJ1AwA5T/9H8nf3jJIVy6YAPw444KE/KA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB3E4/F69881DE69BA11EAA65DF764C4F9AE02/6qeS-WiGPD_7nr0WcaBsFFobIWQ.crl rsync://rpki.apnic.net/member_repository/A91AB3E4/F69881DE69BA11EAA65DF764C4F9AE02/6qeS-WiGPD_7nr0WcaBsFFobIWQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qeS-WiGPD_7nr0WcaBsFFobIWQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:55:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2647 (0xa57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB3E4, serialNumber=EAA792F968863C3FFB9EBD1671A06C145A1B2164 Validity Not Before: Jul 2 19:55:46 2025 GMT Not After : Jul 9 19:55:45 2025 GMT Subject: CN=68658ec2-1604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d1:32:8e:da:31:b8:15:56:72:01:4d:59:93: 6f:d6:69:ee:7f:57:6b:88:e7:30:55:ed:db:29:e2: ca:c1:30:c3:05:56:8e:e4:17:d5:2f:42:bd:4e:29: fb:0f:46:76:b4:d5:ed:b1:39:17:8e:b8:d9:16:5b: 6c:bd:31:dd:0c:fe:f4:9a:3a:33:25:d5:03:c8:c1: e6:6b:cb:c8:ad:b6:95:85:e2:fc:e0:11:cd:fa:7c: cd:db:51:fa:b4:1a:55:d1:6a:84:b6:ee:c9:05:3c: 07:d7:8e:91:db:23:14:97:aa:3c:2c:00:71:9a:21: 0f:a6:9d:5e:72:21:77:74:2c:1b:23:b4:3e:d2:d7: c2:48:07:ea:f1:17:3e:ec:cb:f6:ee:e2:a2:a3:71: 81:5b:2f:2c:a4:53:3a:b8:1c:82:f8:12:9d:0a:6b: ca:ba:d7:75:57:00:b8:dc:6c:38:56:5a:59:51:ee: 7d:8d:0f:c5:ce:ab:99:25:72:99:6f:94:1d:cf:5e: 0e:76:07:51:b3:0d:3c:15:a1:2e:8b:37:63:ea:38: 44:08:09:7d:29:a1:8d:50:0b:7d:59:01:5a:7c:3b: be:15:b8:c4:2e:73:18:cd:d7:dc:f2:49:11:d6:df: f9:20:69:ba:9f:ae:8c:51:60:57:4d:a5:84:4f:97: 85:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:34:94:A6:CE:BD:D8:88:3B:65:60:F8:1E:DF:C6:A0:11:4F:1A:CA X509v3 Authority Key Identifier: keyid:EA:A7:92:F9:68:86:3C:3F:FB:9E:BD:16:71:A0:6C:14:5A:1B:21:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB3E4/F69881DE69BA11EAA65DF764C4F9AE02/6qeS-WiGPD_7nr0WcaBsFFobIWQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qeS-WiGPD_7nr0WcaBsFFobIWQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB3E4/F69881DE69BA11EAA65DF764C4F9AE02/6qeS-WiGPD_7nr0WcaBsFFobIWQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:2e:14:a7:32:e7:fe:81:28:8f:d2:2d:a2:ca:49:9e:a3:7f: 3e:3d:3a:eb:5c:25:6b:4d:aa:f5:40:11:d1:73:0c:1b:4e:79: 6f:dc:24:be:47:ac:94:7b:64:44:29:06:f5:36:63:02:8d:84: 4f:c7:c8:9d:5a:a0:b8:73:93:da:3c:a1:5b:58:5a:67:00:31: d1:7a:6c:30:a6:78:64:ff:34:9b:ba:60:e5:2d:57:ca:ee:e9: 47:c0:06:c8:3d:b8:55:a1:97:4a:ca:59:82:7e:92:de:67:55: 89:d5:87:0f:2b:c6:5e:7e:7c:59:88:8c:fd:7d:27:aa:6a:e1: 89:94:fc:ad:16:1f:8d:1b:45:2b:6c:d3:41:3d:2c:12:6b:0e: 55:ec:6e:6f:19:69:a3:61:36:e4:36:3f:48:59:7c:41:2a:a7: ba:1d:43:1e:e5:57:d0:f4:bc:87:a0:dd:42:d6:d9:84:81:6a: 26:eb:19:c0:44:e7:cc:fb:fe:06:dd:1c:b1:f3:0a:74:37:38: 14:ec:c0:ba:07:ce:14:39:56:f3:df:71:4d:59:ea:db:6e:8f: 9e:d1:a7:3b:6a:f0:a2:4e:40:28:5c:93:8b:ee:00:67:2d:1d: 07:03:b8:bc:1a:2e:c8:92:d9:b1:fa:2d:c9:66:69:cd:c0:82: e1:3d:66:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIzRTQxMTAvBgNVBAUTKEVBQTc5MkY5Njg4NjNDM0ZGQjlFQkQxNjcxQTA2QzE0 NUExQjIxNjQwHhcNMjUwNzAyMTk1NTQ2WhcNMjUwNzA5MTk1NTQ1WjAYMRYwFAYD VQQDEw02ODY1OGVjMi0xNjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvtEyjtoxuBVWcgFNWZNv1mnuf1driOcwVe3bKeLKwTDDBVaO5BfVL0K9Tin7 D0Z2tNXtsTkXjrjZFltsvTHdDP70mjozJdUDyMHma8vIrbaVheL84BHN+nzN21H6 tBpV0WqEtu7JBTwH146R2yMUl6o8LABxmiEPpp1eciF3dCwbI7Q+0tfCSAfq8Rc+ 7Mv27uKio3GBWy8spFM6uByC+BKdCmvKutd1VwC43Gw4VlpZUe59jQ/FzquZJXKZ b5Qdz14OdgdRsw08FaEuizdj6jhECAl9KaGNUAt9WQFafDu+FbjELnMYzdfc8kkR 1t/5IGm6n66MUWBXTaWET5eF+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDE0lKbO vdiIO2Vg+B7fxqARTxrKMB8GA1UdIwQYMBaAFOqnkvlohjw/+569FnGgbBRaGyFk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjNFNC9GNjk4ODFERTY5 QkExMUVBQTY1REY3NjRDNEY5QUUwMi82cWVTLVdpR1BEXzducjBXY2FCc0ZGb2JJ V1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZxZVMtV2lHUERfN25yMFdjYUJzRkZvYklXUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjNFNC9GNjk4ODFERTY5QkExMUVBQTY1REY3NjRDNEY5QUUwMi82cWVTLVdpR1BE XzducjBXY2FCc0ZGb2JJV1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaLhSnMuf+gSiP0i2iykmeo38+PTrrXCVrTar1QBHRcwwbTnlv3CS+ R6yUe2REKQb1NmMCjYRPx8idWqC4c5PaPKFbWFpnADHRemwwpnhk/zSbumDlLVfK 7ulHwAbIPbhVoZdKylmCfpLeZ1WJ1YcPK8ZefnxZiIz9fSeqauGJlPytFh+NG0Ur bNNBPSwSaw5V7G5vGWmjYTbkNj9IWXxBKqe6HUMe5VfQ9LyHoN1C1tmEgWom6xnA ROfM+/4G3Ryx8wp0NzgU7MC6B84UOVbz33FNWerbbo+e0ac7avCiTkAoXJOL7gBn LR0HA7i8Gi7Iktmx+i3JZmnNwILhPWaA -----END CERTIFICATE-----Generated at Thu Jul 3 07:06:14 2025 by rpki-client