$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.mft File: -6JuPNfggZmzoY8WNmp1fwTN8FQ.mft (raw, json) Hash identifier: yfr0ca4y1iUPe+sX8vctH6loU7X8CvB7P0idG7TAzjQ= Subject key identifier: F2:F2:7B:A6:12:17:96:76:43:C8:85:CC:4B:46:75:33:84:EC:2A:BC Authority key identifier: FB:A2:6E:3C:D7:E0:81:99:B3:A1:8F:16:36:6A:75:7F:04:CD:F0:54 Certificate issuer: /CN=A91B7709/serialNumber=FBA26E3CD7E08199B3A18F16366A757F04CDF054 Certificate serial: 87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6JuPNfggZmzoY8WNmp1fwTN8FQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.mft Manifest number: 86 Signing time: Thu 03 Jul 2025 06:46:47 +0000 Manifest this update: Thu 03 Jul 2025 06:46:47 +0000 Manifest next update: Thu 10 Jul 2025 06:46:47 +0000 Files and hashes: 1: -6JuPNfggZmzoY8WNmp1fwTN8FQ.crl (hash: yTkK+437qoHuI9YtNg74cPu2f3EPDOoUG77Oqnx8Jf4=) 2: 25FFA3768BB711EF9C572630C4F9AE02.roa (hash: PO3QH99TaEGXLczk5CFqhAB0Ach8mXnS87Xb+Nz/Uzg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.crl rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6JuPNfggZmzoY8WNmp1fwTN8FQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7709, serialNumber=FBA26E3CD7E08199B3A18F16366A757F04CDF054 Validity Not Before: Jul 3 06:46:47 2025 GMT Not After : Jul 10 06:46:47 2025 GMT Subject: CN=68662757-25a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f6:9b:75:53:f3:f1:a0:0f:8b:d6:6d:8e:dd: 64:cd:c3:f1:3d:0d:42:f3:56:2d:bc:c4:0f:03:fd: 1b:3c:e3:00:35:6d:f8:ac:61:34:e0:07:47:b9:5e: e0:67:ea:6f:2e:1b:92:28:f8:b8:c2:73:5c:27:76: f7:ff:d0:84:1a:7b:84:98:30:91:8b:a8:c7:95:e8: 99:60:2e:3f:15:e2:57:93:b4:35:f3:dc:df:e9:d2: 87:3c:59:21:ff:94:15:3e:4c:29:7f:1c:a5:83:bb: 3a:07:1b:ed:36:2b:5c:c4:f1:2c:c4:bf:76:aa:dc: 14:45:6e:86:ca:83:4a:88:b2:9f:15:1f:ea:b2:cc: b7:b8:63:14:62:d7:65:74:0b:20:51:f4:ec:b5:fd: b1:4c:d0:4f:19:f6:26:2a:c6:68:af:91:2d:af:5d: d9:8d:74:76:77:d5:9c:73:e7:ae:de:92:d2:32:f4: 89:b2:44:e7:9d:7e:ee:f1:69:48:c7:fe:9d:69:2c: b2:c2:28:69:8c:7c:f8:5c:de:1a:aa:68:1a:2f:73: 3d:38:f2:0f:97:f7:5b:79:34:28:26:ea:06:c6:3d: 3c:c3:f8:f1:04:55:df:e3:9f:bf:5b:79:0e:36:2a: 53:cf:64:87:77:f3:dc:d9:53:44:b6:84:2c:1a:d8: fe:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:F2:7B:A6:12:17:96:76:43:C8:85:CC:4B:46:75:33:84:EC:2A:BC X509v3 Authority Key Identifier: keyid:FB:A2:6E:3C:D7:E0:81:99:B3:A1:8F:16:36:6A:75:7F:04:CD:F0:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6JuPNfggZmzoY8WNmp1fwTN8FQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:63:23:43:6b:91:be:b9:87:e3:72:1e:40:e6:d6:12:05:04: ea:9a:68:24:a2:4a:4d:b9:ba:9c:d7:81:8e:f3:9c:14:20:4c: 6c:d5:bc:24:e4:f0:71:9a:99:0f:c0:8e:0e:5d:78:ad:9d:b8: 48:6b:23:59:b7:b0:f4:68:3e:8d:25:90:77:1d:81:ee:fe:a2: 93:48:3f:5e:5a:a6:b8:61:01:f6:63:4e:f3:4c:22:01:b6:ec: 40:b2:5f:38:fe:41:16:ca:18:14:e1:8a:8d:c1:c9:f3:48:be: 1a:ce:a9:1c:c7:8c:d8:4e:8d:d2:f1:ce:1e:45:0f:9f:86:bf: 68:c9:7f:69:45:70:6c:d6:01:c7:af:98:02:ae:69:d5:d2:fd: 54:c1:a2:26:f6:8e:b4:87:b0:e1:cc:5e:1e:a0:f1:df:cf:30: a7:0a:37:80:34:f5:2d:9e:e3:71:80:c7:79:b6:4c:d7:de:93: 12:59:16:0f:cc:8f:28:f1:c3:f7:8c:13:ed:50:6a:99:30:80: 4a:a7:3d:cb:44:43:be:8f:3c:8f:4f:7d:04:52:14:f9:1e:82: de:a6:8d:94:b4:d3:74:2e:fc:b4:1c:4e:f0:fb:fb:28:4f:a2: 73:b4:d5:cc:c1:83:2b:99:ca:cd:ce:5e:32:3f:16:e6:a8:43: 92:b9:07:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc3MDkxMTAvBgNVBAUTKEZCQTI2RTNDRDdFMDgxOTlCM0ExOEYxNjM2NkE3NTdG MDRDREYwNTQwHhcNMjUwNzAzMDY0NjQ3WhcNMjUwNzEwMDY0NjQ3WjAYMRYwFAYD VQQDEw02ODY2Mjc1Ny0yNWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtfabdVPz8aAPi9Ztjt1kzcPxPQ1C81YtvMQPA/0bPOMANW34rGE04AdHuV7g Z+pvLhuSKPi4wnNcJ3b3/9CEGnuEmDCRi6jHleiZYC4/FeJXk7Q189zf6dKHPFkh /5QVPkwpfxylg7s6BxvtNitcxPEsxL92qtwURW6GyoNKiLKfFR/qssy3uGMUYtdl dAsgUfTstf2xTNBPGfYmKsZor5Etr13ZjXR2d9Wcc+eu3pLSMvSJskTnnX7u8WlI x/6daSyywihpjHz4XN4aqmgaL3M9OPIPl/dbeTQoJuoGxj08w/jxBFXf45+/W3kO NipTz2SHd/Pc2VNEtoQsGtj+xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPLye6YS F5Z2Q8iFzEtGdTOE7Cq8MB8GA1UdIwQYMBaAFPuibjzX4IGZs6GPFjZqdX8EzfBU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzcwOS84MTYyM0E0QThC QjYxMUVGOTk4QkFDNzJDNEY5QUUwMi8tNkp1UE5mZ2dabXpvWThXTm1wMWZ3VE44 RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy02SnVQTmZnZ1ptem9ZOFdObXAxZndUTjhGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzcwOS84MTYyM0E0QThCQjYxMUVGOTk4QkFDNzJDNEY5QUUwMi8tNkp1UE5mZ2da bXpvWThXTm1wMWZ3VE44RlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASYyNDa5G+uYfjch5A5tYSBQTqmmgkokpNubqc14GO85wUIExs1bwk 5PBxmpkPwI4OXXitnbhIayNZt7D0aD6NJZB3HYHu/qKTSD9eWqa4YQH2Y07zTCIB tuxAsl84/kEWyhgU4YqNwcnzSL4azqkcx4zYTo3S8c4eRQ+fhr9oyX9pRXBs1gHH r5gCrmnV0v1UwaIm9o60h7DhzF4eoPHfzzCnCjeANPUtnuNxgMd5tkzX3pMSWRYP zI8o8cP3jBPtUGqZMIBKpz3LREO+jzyPT30EUhT5HoLepo2UtNN0Lvy0HE7w+/so T6JztNXMwYMrmcrNzl4yPxbmqEOSuQcW -----END CERTIFICATE-----Generated at Fri Jul 4 14:20:25 2025 by rpki-client