$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.mft File: 2x93mMABF7IMbzvDKZSALPIJSDc.mft (raw, json) Hash identifier: Cu8DpfxXncrmpP0QoIbUYH/VjN2DRyfdF+B8kY54gqI= Subject key identifier: FF:4C:63:E3:8B:2D:CF:5C:EB:30:C0:07:7E:67:53:A6:62:67:8C:C1 Authority key identifier: DB:1F:77:98:C0:01:17:B2:0C:6F:3B:C3:29:94:80:2C:F2:09:48:37 Certificate issuer: /CN=A91BA594/serialNumber=DB1F7798C00117B20C6F3BC32994802CF2094837 Certificate serial: 070F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2x93mMABF7IMbzvDKZSALPIJSDc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.mft Manifest number: 06FE Signing time: Sat 28 Jun 2025 21:36:31 +0000 Manifest this update: Sat 28 Jun 2025 21:36:30 +0000 Manifest next update: Sat 05 Jul 2025 21:36:30 +0000 Files and hashes: 1: 2x93mMABF7IMbzvDKZSALPIJSDc.crl (hash: 5xvEOXnZTxmrNkGC0nwsQDkyzOIi+IlEqf+vnOEs4Uc=) 2: 1B713E1C554F11EB99946233C4F9AE02.roa (hash: px8vPMMaIW71viSZHvwgIDzN828jdKyVwys/IvDu8b8=) 3: D0EAEA3EB85811EF96935B81C4F9AE02.roa (hash: Nbyc9rPbEVQJKGo8N91eHTaOUJwwDIylew69dKgtqpM=) 4: 1AC0CFAA554F11EB99946233C4F9AE02.roa (hash: M4wskVyxngrHuY03UIwusYbtRWJWk73Kf7frzvsTsis=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.crl rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2x93mMABF7IMbzvDKZSALPIJSDc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 21:36:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1807 (0x70f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA594, serialNumber=DB1F7798C00117B20C6F3BC32994802CF2094837 Validity Not Before: Jun 28 21:36:30 2025 GMT Not After : Jul 5 21:36:30 2025 GMT Subject: CN=6860605e-679f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:82:30:a9:1b:65:80:a3:9f:e1:3d:1f:57:47: 93:3e:ae:5e:c7:f9:36:12:31:40:ea:c6:28:2d:b6: 58:bf:66:b4:3a:49:94:85:96:03:bd:a5:65:97:49: 28:a9:93:13:c1:8d:d1:a0:00:ac:d1:a8:c1:c3:95: 77:62:ec:dc:66:4e:62:b0:cb:0b:4c:b8:e0:b2:40: 31:27:c7:5f:65:09:09:00:2f:71:eb:97:2a:e2:4b: b3:f0:2c:f2:19:b9:b2:9e:71:af:4e:47:d2:56:5b: ec:49:a4:ed:4a:ec:74:c0:79:07:62:d1:7f:26:f1: c2:6b:65:6c:d5:d9:f4:7b:be:45:11:c8:54:d4:b3: 2a:14:27:07:45:be:54:89:1b:09:a4:1f:60:f8:91: c6:06:c3:9b:05:db:da:fd:e3:09:bb:de:51:ce:f2: a2:d1:b7:cd:19:f4:fb:2f:7b:f6:6b:3d:b6:3f:aa: 3f:0b:7c:f8:2e:da:aa:57:ff:f8:42:de:fd:04:14: 19:5d:6c:08:8e:5e:aa:4c:3a:29:4f:f1:98:7e:c4: 9d:76:4a:0f:54:b1:27:ec:35:6b:65:17:24:df:ae: 71:63:7f:d7:06:2f:f8:8d:c9:74:e0:89:1f:5c:80: a6:2f:3c:24:0c:2e:d0:df:50:59:57:b9:8e:36:3b: 9d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:4C:63:E3:8B:2D:CF:5C:EB:30:C0:07:7E:67:53:A6:62:67:8C:C1 X509v3 Authority Key Identifier: keyid:DB:1F:77:98:C0:01:17:B2:0C:6F:3B:C3:29:94:80:2C:F2:09:48:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2x93mMABF7IMbzvDKZSALPIJSDc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:69:b0:1f:35:0c:f9:36:28:ac:7a:ca:6f:b2:80:81:61:59: e8:43:6f:d0:23:8f:53:9e:81:0c:d6:b2:ac:7f:41:5d:67:e3: a5:b6:c0:a9:ab:00:09:19:cb:f6:36:78:d0:cc:d3:2c:ce:f9: d2:2a:ea:dd:5b:76:3b:22:61:0c:5a:04:c1:91:1e:52:aa:33: a8:1f:4d:34:b6:be:3c:9e:ff:fa:e4:ed:50:ef:ee:41:f9:14: 57:56:be:ce:62:26:52:b6:bf:a9:37:55:1f:91:5e:ac:29:39: 0b:ea:34:14:53:6f:ac:b4:d5:2b:46:f5:cd:5a:ef:c3:dd:56: db:c8:12:84:2a:8c:6e:60:6b:8f:29:5a:3f:b6:41:a0:73:71: 62:3c:e0:02:cd:a0:63:84:aa:c6:f9:54:13:60:72:fd:07:30: 0b:a9:c5:07:0f:36:5e:3f:fb:39:ae:26:3d:99:ea:53:54:6c: eb:97:89:28:fd:0f:8f:be:f7:b4:5f:1f:f3:9d:03:aa:03:73: 90:e7:d0:40:1b:05:93:9a:ff:f5:31:1c:54:60:e5:5d:bf:19: 9e:03:ae:2c:23:e5:3f:de:f9:33:fe:d5:26:f8:7b:bf:a4:7d: 2c:64:f4:83:da:6c:8b:dc:94:5b:51:cf:d3:26:9d:25:ff:8c: 07:71:92:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBw8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE1OTQxMTAvBgNVBAUTKERCMUY3Nzk4QzAwMTE3QjIwQzZGM0JDMzI5OTQ4MDJD RjIwOTQ4MzcwHhcNMjUwNjI4MjEzNjMwWhcNMjUwNzA1MjEzNjMwWjAYMRYwFAYD VQQDEw02ODYwNjA1ZS02NzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzYIwqRtlgKOf4T0fV0eTPq5ex/k2EjFA6sYoLbZYv2a0OkmUhZYDvaVll0ko qZMTwY3RoACs0ajBw5V3YuzcZk5isMsLTLjgskAxJ8dfZQkJAC9x65cq4kuz8Czy GbmynnGvTkfSVlvsSaTtSux0wHkHYtF/JvHCa2Vs1dn0e75FEchU1LMqFCcHRb5U iRsJpB9g+JHGBsObBdva/eMJu95RzvKi0bfNGfT7L3v2az22P6o/C3z4LtqqV//4 Qt79BBQZXWwIjl6qTDopT/GYfsSddkoPVLEn7DVrZRck365xY3/XBi/4jcl04Ikf XICmLzwkDC7Q31BZV7mONjudaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP9MY+OL Lc9c6zDAB35nU6ZiZ4zBMB8GA1UdIwQYMBaAFNsfd5jAAReyDG87wymUgCzyCUg3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTU5NC81MjJCNkQ2RTU1 M0MxMUVCOEYwODVDNzFDNEY5QUUwMi8yeDkzbU1BQkY3SU1ienZES1pTQUxQSUpT RGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ4OTNtTUFCRjdJTWJ6dkRLWlNBTFBJSlNEYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTU5NC81MjJCNkQ2RTU1M0MxMUVCOEYwODVDNzFDNEY5QUUwMi8yeDkzbU1BQkY3 SU1ienZES1pTQUxQSUpTRGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxabAfNQz5NiisespvsoCBYVnoQ2/QI49TnoEM1rKsf0FdZ+OltsCp qwAJGcv2NnjQzNMszvnSKurdW3Y7ImEMWgTBkR5SqjOoH000tr48nv/65O1Q7+5B +RRXVr7OYiZStr+pN1UfkV6sKTkL6jQUU2+stNUrRvXNWu/D3VbbyBKEKoxuYGuP KVo/tkGgc3FiPOACzaBjhKrG+VQTYHL9BzALqcUHDzZeP/s5riY9mepTVGzrl4ko /Q+Pvve0Xx/znQOqA3OQ59BAGwWTmv/1MRxUYOVdvxmeA64sI+U/3vkz/tUm+Hu/ pH0sZPSD2myL3JRbUc/TJp0l/4wHcZKC -----END CERTIFICATE-----Generated at Mon Jun 30 00:21:04 2025 by rpki-client