$ rpki-client -vvf rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft File: 6N-NXkyE2ofXKac8HE6GETgassE.mft (raw, json) Hash identifier: BJPdNA+pSjRhQbz85x70fDIvoVbo6M4XU8J+wuqCpQ0= Subject key identifier: 49:57:C1:FD:C8:0C:E4:6A:CC:85:48:86:2D:B8:92:26:36:C7:9F:29 Authority key identifier: E8:DF:8D:5E:4C:84:DA:87:D7:29:A7:3C:1C:4E:86:11:38:1A:B2:C1 Certificate issuer: /CN=A91B01C7/serialNumber=E8DF8D5E4C84DA87D729A73C1C4E8611381AB2C1 Certificate serial: 2A44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft Manifest number: 2A21 Signing time: Wed 02 Jul 2025 15:52:46 +0000 Manifest this update: Wed 02 Jul 2025 15:52:45 +0000 Manifest next update: Wed 09 Jul 2025 15:52:45 +0000 Files and hashes: 1: 6N-NXkyE2ofXKac8HE6GETgassE.crl (hash: u5YbBs+dx+oHHmsndniJfPOyhd5skyNcuJZWeolXBbo=) 2: 3785190EF0FE11EEA034D07EC4F9AE02.roa (hash: AfzhqDwLeStHXJxpgyc+yEacR03mjMokZpSrDW27t/A=) 3: 445DB498796011EFA7E9391DC4F9AE02.roa (hash: y2HnmFKLeU4s/eNm7GPocJExjA2nL97alljgrOteoRQ=) 4: E86E188A795F11EFBF3B491CC4F9AE02.roa (hash: 3uSmKvJAQmWq5xc18G4fpgYNjVJ7fApH5/+N2ORrUb0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.crl rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:52:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10820 (0x2a44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B01C7, serialNumber=E8DF8D5E4C84DA87D729A73C1C4E8611381AB2C1 Validity Not Before: Jul 2 15:52:45 2025 GMT Not After : Jul 9 15:52:45 2025 GMT Subject: CN=686555ce-34cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:33:5c:69:61:5b:39:63:34:17:a6:ae:53:91: fe:d5:7e:10:f9:35:3a:14:1a:21:72:8c:58:4e:97: 8b:0a:32:b2:d3:e4:14:36:ac:5c:47:6b:e2:fe:28: 78:72:26:23:c5:7e:7e:72:74:3a:a1:1c:46:75:b7: e4:49:9d:28:51:83:14:05:fb:91:9e:a1:ec:67:0a: 17:eb:f9:9f:9b:81:70:5f:17:a3:65:77:7d:d5:01: 9e:c9:cf:5a:18:f3:cc:68:fc:fe:da:46:ef:57:14: 99:44:35:e3:93:70:07:09:86:16:ef:2e:66:92:e8: cf:6b:38:e9:66:49:70:6d:a9:7a:24:33:d1:d7:67: 3f:55:8c:48:5d:bd:01:40:00:6e:94:c5:2a:38:40: d6:1a:ea:a5:69:96:3a:84:90:c8:3b:50:0a:99:79: 4f:7f:41:60:f1:7c:b5:d9:38:05:d2:b4:a2:69:36: ce:fd:31:eb:ed:cb:e5:02:79:f6:b9:3d:76:70:e3: 1c:21:d7:40:df:2b:93:87:64:97:61:3c:f8:25:f3: 13:37:1e:56:76:14:bb:02:0d:63:3c:20:6a:35:69: 24:89:69:99:10:25:49:3f:be:c3:15:a9:86:d5:b8: 17:43:05:b1:7a:02:1e:9a:9a:d2:97:e4:90:45:12: 79:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:57:C1:FD:C8:0C:E4:6A:CC:85:48:86:2D:B8:92:26:36:C7:9F:29 X509v3 Authority Key Identifier: keyid:E8:DF:8D:5E:4C:84:DA:87:D7:29:A7:3C:1C:4E:86:11:38:1A:B2:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:28:3d:66:84:20:1e:a7:f7:04:00:61:bb:e4:52:aa:76:f0: 75:47:84:fc:09:e2:cd:88:c8:c0:01:ed:8d:22:fb:29:fe:21: 70:43:cd:a9:75:4f:9a:b2:67:79:4c:b9:a2:c3:4c:53:ee:b5: a9:59:2d:96:18:24:b2:f3:fe:be:58:f7:fa:a7:f7:99:69:90: ad:7b:19:37:0e:d4:0a:8e:28:39:ea:48:82:d9:93:a9:0e:ec: 4c:96:10:45:72:60:a9:24:ae:3d:19:b7:9e:78:3e:11:cc:c8: 8b:e2:0e:77:41:4c:71:55:6f:e1:33:19:7f:9b:43:73:81:8a: 9f:db:cf:ad:55:bb:63:b3:5c:24:96:a7:32:75:6f:7c:04:51: cc:9b:e5:00:3d:d5:cb:3b:ed:b6:f3:19:e6:01:93:86:c5:ff: f8:b3:0a:b2:73:bd:c3:3c:80:14:34:4d:5d:13:db:5a:2d:d1: 3f:19:6d:b4:d7:c3:81:f0:36:25:fb:43:23:59:e4:08:fa:14: 11:cb:75:33:49:99:71:4c:2e:c0:23:ec:2f:8d:25:0c:a1:8f: f0:09:8a:92:b7:98:e9:20:03:a8:7e:78:55:96:21:b2:b9:04: d0:25:14:0e:92:b4:33:a3:cd:96:cb:4d:26:5d:d1:49:f2:8c: ff:cc:39:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAxQzcxMTAvBgNVBAUTKEU4REY4RDVFNEM4NERBODdENzI5QTczQzFDNEU4NjEx MzgxQUIyQzEwHhcNMjUwNzAyMTU1MjQ1WhcNMjUwNzA5MTU1MjQ1WjAYMRYwFAYD VQQDEw02ODY1NTVjZS0zNGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzDNcaWFbOWM0F6auU5H+1X4Q+TU6FBohcoxYTpeLCjKy0+QUNqxcR2vi/ih4 ciYjxX5+cnQ6oRxGdbfkSZ0oUYMUBfuRnqHsZwoX6/mfm4FwXxejZXd91QGeyc9a GPPMaPz+2kbvVxSZRDXjk3AHCYYW7y5mkujPazjpZklwbal6JDPR12c/VYxIXb0B QABulMUqOEDWGuqlaZY6hJDIO1AKmXlPf0Fg8Xy12TgF0rSiaTbO/THr7cvlAnn2 uT12cOMcIddA3yuTh2SXYTz4JfMTNx5WdhS7Ag1jPCBqNWkkiWmZECVJP77DFamG 1bgXQwWxegIemprSl+SQRRJ5EQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFElXwf3I DORqzIVIhi24kiY2x58pMB8GA1UdIwQYMBaAFOjfjV5MhNqH1ymnPBxOhhE4GrLB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDFDNy85N0NGMjBGQTMz MjMxMUU0QTZFNzQ5MTFDNEY5QUUwMi82Ti1OWGt5RTJvZlhLYWM4SEU2R0VUZ2Fz c0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZOLU5Ya3lFMm9mWEthYzhIRTZHRVRnYXNzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDFDNy85N0NGMjBGQTMzMjMxMUU0QTZFNzQ5MTFDNEY5QUUwMi82Ti1OWGt5RTJv ZlhLYWM4SEU2R0VUZ2Fzc0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYKD1mhCAep/cEAGG75FKqdvB1R4T8CeLNiMjAAe2NIvsp/iFwQ82p dU+asmd5TLmiw0xT7rWpWS2WGCSy8/6+WPf6p/eZaZCtexk3DtQKjig56kiC2ZOp DuxMlhBFcmCpJK49GbeeeD4RzMiL4g53QUxxVW/hMxl/m0NzgYqf28+tVbtjs1wk lqcydW98BFHMm+UAPdXLO+228xnmAZOGxf/4swqyc73DPIAUNE1dE9taLdE/GW20 18OB8DYl+0MjWeQI+hQRy3UzSZlxTC7AI+wvjSUMoY/wCYqSt5jpIAOofnhVliGy uQTQJRQOkrQzo82Wy00mXdFJ8oz/zDkH -----END CERTIFICATE-----Generated at Thu Jul 3 07:06:13 2025 by rpki-client