$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft File: MB6kG5ONf0s895PQEveN06U5cCQ.mft (raw, json) Hash identifier: 6tRAbnJFM2eGrYH955x6MAH5vdUF6LEZVs685O3V+VI= Subject key identifier: BC:46:7B:9A:62:1E:8F:5B:1A:7D:0F:C1:7A:31:ED:5B:46:6F:86:40 Authority key identifier: 30:1E:A4:1B:93:8D:7F:4B:3C:F7:93:D0:12:F7:8D:D3:A5:39:70:24 Certificate issuer: /CN=A91B1F4F/serialNumber=301EA41B938D7F4B3CF793D012F78DD3A5397024 Certificate serial: 1456 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft Manifest number: 144C Signing time: Wed 02 Jul 2025 17:04:42 +0000 Manifest this update: Wed 02 Jul 2025 17:04:41 +0000 Manifest next update: Wed 09 Jul 2025 17:04:41 +0000 Files and hashes: 1: MB6kG5ONf0s895PQEveN06U5cCQ.crl (hash: bStjc6CJ4gcxEeyzaJ82wT+95EogxLUyKfMB8+LytGU=) 2: 61574192E37A11EB8AF29A5BC4F9AE02.roa (hash: W5cx07cNyMaDMA4R0/MWrV4hAi09Yk83hfS7ozdwiBc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.crl rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:04:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5206 (0x1456) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1F4F, serialNumber=301EA41B938D7F4B3CF793D012F78DD3A5397024 Validity Not Before: Jul 2 17:04:41 2025 GMT Not After : Jul 9 17:04:41 2025 GMT Subject: CN=686566aa-8055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:73:bc:b8:46:af:1f:08:2e:17:1c:3b:96:65: 30:87:17:47:c7:a1:a8:b5:72:de:a6:74:15:50:8a: 67:d6:aa:1d:b8:52:e4:3d:4d:f9:1c:31:b8:b2:16: d2:8b:87:2a:a2:9a:ed:78:28:fc:bd:ae:0e:11:36: 73:97:8f:0a:00:67:86:09:ae:74:78:cd:db:c2:1f: a4:78:25:92:74:0f:1d:80:44:ab:74:07:d6:5b:a9: c0:23:60:26:89:99:11:83:0d:cb:22:43:c4:81:45: 81:4e:16:50:fa:52:80:81:27:b1:f5:c8:24:0a:eb: 6b:71:71:6a:3b:79:e4:cc:d4:80:4c:41:b3:48:81: 9e:e6:23:38:a6:02:97:76:50:1d:1f:7a:2f:a2:7a: b0:a2:f6:39:c6:50:68:92:67:7d:ca:86:cc:1f:f0: dc:24:0d:c3:5d:c1:4e:18:8b:a7:5a:9b:02:94:3a: da:ee:ff:fa:57:bf:53:97:f6:4d:b1:c9:0a:ee:b0: a5:38:65:36:36:01:f7:3f:e5:dd:54:70:ed:5e:7b: e9:bd:7a:b7:58:18:e9:04:3a:d4:60:be:16:b9:1c: 55:0a:39:a4:05:01:c4:93:2e:f4:73:64:e3:54:1d: b3:39:db:4d:45:f9:1a:c5:a4:dc:47:dd:75:7a:f8: 80:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:46:7B:9A:62:1E:8F:5B:1A:7D:0F:C1:7A:31:ED:5B:46:6F:86:40 X509v3 Authority Key Identifier: keyid:30:1E:A4:1B:93:8D:7F:4B:3C:F7:93:D0:12:F7:8D:D3:A5:39:70:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:69:e0:c3:a8:2c:0f:ff:2c:f3:f6:9d:67:e9:6c:a0:55:bf: 8b:5c:e9:58:92:7f:f0:37:95:6d:75:8c:12:ad:76:63:f7:de: a2:37:0a:18:96:5e:43:28:06:1f:85:56:76:d3:6f:bd:04:7b: f3:d6:e9:8c:13:17:d7:27:02:00:c6:3d:c6:ff:d9:42:3a:3e: d5:32:8e:f9:52:10:34:45:52:ac:e4:2e:eb:e3:5b:90:30:8b: d1:18:aa:fd:40:78:ce:77:b3:99:47:40:83:59:bd:21:ce:15: 84:da:21:d6:4f:a2:e5:38:60:76:ec:c5:26:a6:64:76:50:bd: 65:51:29:c7:66:42:f1:f8:77:14:c4:ca:fd:49:35:68:b8:69: 47:29:e5:2a:74:d4:8e:2a:1b:1c:77:1a:9d:c8:06:e9:23:0d: 35:15:d5:a3:c4:f5:66:c6:aa:d8:d1:79:e5:6c:2b:b3:4e:14: 1b:88:76:63:e2:8f:c8:95:74:fb:67:7d:d0:b4:04:9d:39:80: ce:c1:cd:5c:66:2b:36:72:66:c0:0d:26:7a:31:ac:9c:73:67: 14:e5:e3:c6:cc:f2:cb:7d:de:58:60:97:59:21:36:58:4b:0f: 8d:be:09:90:b4:4a:e7:bc:c5:b5:4d:ec:3a:e1:c4:02:a4:7c: 5f:9f:43:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFFYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFGNEYxMTAvBgNVBAUTKDMwMUVBNDFCOTM4RDdGNEIzQ0Y3OTNEMDEyRjc4REQz QTUzOTcwMjQwHhcNMjUwNzAyMTcwNDQxWhcNMjUwNzA5MTcwNDQxWjAYMRYwFAYD VQQDEw02ODY1NjZhYS04MDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsnO8uEavHwguFxw7lmUwhxdHx6GotXLepnQVUIpn1qoduFLkPU35HDG4shbS i4cqoprteCj8va4OETZzl48KAGeGCa50eM3bwh+keCWSdA8dgESrdAfWW6nAI2Am iZkRgw3LIkPEgUWBThZQ+lKAgSex9cgkCutrcXFqO3nkzNSATEGzSIGe5iM4pgKX dlAdH3ovonqwovY5xlBokmd9yobMH/DcJA3DXcFOGIunWpsClDra7v/6V79Tl/ZN sckK7rClOGU2NgH3P+XdVHDtXnvpvXq3WBjpBDrUYL4WuRxVCjmkBQHEky70c2Tj VB2zOdtNRfkaxaTcR911eviAqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLxGe5pi Ho9bGn0PwXox7VtGb4ZAMB8GA1UdIwQYMBaAFDAepBuTjX9LPPeT0BL3jdOlOXAk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUY0Ri8wRkRCOTc0Qzc0 RDcxMUU4QkM4MkQ0MkNDNEY5QUUwMi9NQjZrRzVPTmYwczg5NVBRRXZlTjA2VTVj Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01CNmtHNU9OZjBzODk1UFFFdmVOMDZVNWNDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUY0Ri8wRkRCOTc0Qzc0RDcxMUU4QkM4MkQ0MkNDNEY5QUUwMi9NQjZrRzVPTmYw czg5NVBRRXZlTjA2VTVjQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGaeDDqCwP/yzz9p1n6WygVb+LXOlYkn/wN5VtdYwSrXZj996iNwoY ll5DKAYfhVZ202+9BHvz1umMExfXJwIAxj3G/9lCOj7VMo75UhA0RVKs5C7r41uQ MIvRGKr9QHjOd7OZR0CDWb0hzhWE2iHWT6LlOGB27MUmpmR2UL1lUSnHZkLx+HcU xMr9STVouGlHKeUqdNSOKhscdxqdyAbpIw01FdWjxPVmxqrY0XnlbCuzThQbiHZj 4o/IlXT7Z33QtASdOYDOwc1cZis2cmbADSZ6Maycc2cU5ePGzPLLfd5YYJdZITZY Sw+NvgmQtErnvMW1Tew64cQCpHxfn0PZ -----END CERTIFICATE-----Generated at Thu Jul 3 07:55:21 2025 by rpki-client