$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.mft File: 6f7YwwxxXQSs4XWunL1wDBl3BgI.mft (raw, json) Hash identifier: rkkoe8es2iVyIn7K52HmdBfEdSgqwMnnMP4EM3bOuDE= Subject key identifier: 2D:EC:AE:66:64:9D:0E:7B:3F:49:5E:C2:28:80:17:77:23:90:43:16 Authority key identifier: E9:FE:D8:C3:0C:71:5D:04:AC:E1:75:AE:9C:BD:70:0C:19:77:06:02 Certificate issuer: /CN=A91C3EF6/serialNumber=E9FED8C30C715D04ACE175AE9CBD700C19770602 Certificate serial: 14E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f7YwwxxXQSs4XWunL1wDBl3BgI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.mft Manifest number: 14D9 Signing time: Mon 30 Jun 2025 17:01:55 +0000 Manifest this update: Mon 30 Jun 2025 17:01:54 +0000 Manifest next update: Mon 07 Jul 2025 17:01:54 +0000 Files and hashes: 1: 6f7YwwxxXQSs4XWunL1wDBl3BgI.crl (hash: GkWGd8O+/RmZeH0eCp/5RFZRGihwhoD03O0qmA8LB5g=) 2: D056896E592A11E889035A70C4F9AE02.roa (hash: aB/CZOa/bktBFkb0MzOXP2VLNM1qXtNibatV1IuSEFo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.crl rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f7YwwxxXQSs4XWunL1wDBl3BgI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 17:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5348 (0x14e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3EF6, serialNumber=E9FED8C30C715D04ACE175AE9CBD700C19770602 Validity Not Before: Jun 30 17:01:54 2025 GMT Not After : Jul 7 17:01:54 2025 GMT Subject: CN=6862c303-88ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6a:03:a4:45:c1:ee:8f:24:5c:44:c9:47:e8: b8:71:9b:ba:ca:fc:b7:67:52:ff:f0:48:7b:c3:6a: 07:9c:22:2d:61:a2:05:55:1d:b0:c1:24:59:5b:69: 1a:01:fa:ac:45:a2:96:64:59:fb:b2:b1:24:28:99: c4:0b:91:b6:85:8f:3a:7d:24:d5:0f:eb:ef:b3:d4: f8:f6:eb:7e:77:0b:e7:99:97:89:dd:c7:d0:4a:66: 5e:3d:80:c6:f2:fb:55:eb:f0:44:14:2b:12:75:f4: 8b:f9:bd:b1:20:92:b3:c4:17:1a:10:9f:8d:57:8e: a1:c6:89:a5:88:e8:f0:89:e0:ac:e3:48:56:bf:ad: 18:2d:1a:13:82:f3:93:2f:02:8f:a6:fb:fc:01:af: b4:e7:9c:1e:c5:c0:1d:3a:59:c0:0f:16:61:55:3c: 3a:ec:89:fc:9a:4b:32:b5:07:b8:42:dc:ee:4e:c4: ef:ee:84:c0:fa:c9:26:12:b3:67:eb:c9:11:56:47: 57:0d:ed:2c:18:5c:8f:fa:7e:6e:94:fa:e1:bf:60: 2f:ba:89:5c:00:1e:6e:40:6d:53:2a:cb:4e:1d:28: 6c:47:0c:73:53:85:c6:32:72:55:d2:9a:1c:6f:31: 04:e7:4c:b9:40:fc:81:92:b4:28:6d:28:34:fb:bf: 73:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:EC:AE:66:64:9D:0E:7B:3F:49:5E:C2:28:80:17:77:23:90:43:16 X509v3 Authority Key Identifier: keyid:E9:FE:D8:C3:0C:71:5D:04:AC:E1:75:AE:9C:BD:70:0C:19:77:06:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f7YwwxxXQSs4XWunL1wDBl3BgI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:70:8b:5e:bc:b9:95:5f:2a:47:e5:00:a3:f3:b7:92:da:8d: a9:e1:42:b9:e9:7c:10:c6:43:f9:87:7a:1f:6c:88:8e:5e:22: 21:0f:ab:59:f9:c7:7d:2e:5a:10:4a:92:0e:4a:a9:16:27:3a: 2b:d2:55:2d:39:02:8c:8e:22:b6:15:d6:91:76:c2:28:73:13: 68:35:9a:19:a9:c4:a1:50:76:f5:80:8c:21:c9:e4:96:d0:85: fd:e8:bd:ac:3a:6b:a1:da:02:2d:71:59:bb:94:a7:4a:57:c7: 31:de:9b:f8:66:ef:5e:d6:a9:3d:58:e3:6d:b2:f2:b2:ec:21: 7a:e5:89:68:b0:e8:bd:55:34:a5:ad:72:96:5c:7e:c8:4a:4e: 7c:cd:91:51:ca:33:17:cd:df:27:07:95:cf:8e:3f:23:69:fc: 55:4f:4a:a9:32:50:0a:9a:3d:5f:d8:b1:a5:f3:92:d1:51:a2: 8f:c7:be:8e:a8:10:81:8b:a9:35:e2:6c:18:e6:12:7a:b8:66: 8d:0d:f2:7f:3a:53:81:86:e2:60:25:79:41:f3:d3:45:2c:c9: cc:9c:92:11:48:57:b4:77:f4:a4:32:fb:ef:f5:66:ee:4a:92: 04:07:21:3f:53:5a:e0:c9:5c:96:4e:a3:14:8f:61:93:82:b7: b8:6a:fc:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNFRjYxMTAvBgNVBAUTKEU5RkVEOEMzMEM3MTVEMDRBQ0UxNzVBRTlDQkQ3MDBD MTk3NzA2MDIwHhcNMjUwNjMwMTcwMTU0WhcNMjUwNzA3MTcwMTU0WjAYMRYwFAYD VQQDEw02ODYyYzMwMy04OGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs2oDpEXB7o8kXETJR+i4cZu6yvy3Z1L/8Eh7w2oHnCItYaIFVR2wwSRZW2ka AfqsRaKWZFn7srEkKJnEC5G2hY86fSTVD+vvs9T49ut+dwvnmZeJ3cfQSmZePYDG 8vtV6/BEFCsSdfSL+b2xIJKzxBcaEJ+NV46hxomliOjwieCs40hWv60YLRoTgvOT LwKPpvv8Aa+055wexcAdOlnADxZhVTw67In8mksytQe4QtzuTsTv7oTA+skmErNn 68kRVkdXDe0sGFyP+n5ulPrhv2AvuolcAB5uQG1TKstOHShsRwxzU4XGMnJV0poc bzEE50y5QPyBkrQobSg0+79ztQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC3srmZk nQ57P0lewiiAF3cjkEMWMB8GA1UdIwQYMBaAFOn+2MMMcV0ErOF1rpy9cAwZdwYC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0VGNi9BQzREQUJDNjU5 MjgxMUU4OEU1QjQ0NkJDNEY5QUUwMi82ZjdZd3d4eFhRU3M0WFd1bkwxd0RCbDNC Z0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZmN1l3d3h4WFFTczRYV3VuTDF3REJsM0JnSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0VGNi9BQzREQUJDNjU5MjgxMUU4OEU1QjQ0NkJDNEY5QUUwMi82ZjdZd3d4eFhR U3M0WFd1bkwxd0RCbDNCZ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDOcItevLmVXypH5QCj87eS2o2p4UK56XwQxkP5h3ofbIiOXiIhD6tZ +cd9LloQSpIOSqkWJzor0lUtOQKMjiK2FdaRdsIocxNoNZoZqcShUHb1gIwhyeSW 0IX96L2sOmuh2gItcVm7lKdKV8cx3pv4Zu9e1qk9WONtsvKy7CF65YlosOi9VTSl rXKWXH7ISk58zZFRyjMXzd8nB5XPjj8jafxVT0qpMlAKmj1f2LGl85LRUaKPx76O qBCBi6k14mwY5hJ6uGaNDfJ/OlOBhuJgJXlB89NFLMnMnJIRSFe0d/SkMvvv9Wbu SpIEByE/U1rgyVyWTqMUj2GTgre4avyU -----END CERTIFICATE-----Generated at Wed Jul 2 13:58:33 2025 by rpki-client