$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.mft File: b7CqV86Epc0prEfZ19CJSOsh8Go.mft (raw, json) Hash identifier: TcARfoS+vBBbqSQvdlmGTN89mGZL2BzDuEhc54PY3ic= Subject key identifier: D3:47:D9:DC:3D:E9:27:26:CD:72:7B:19:83:7C:FE:DE:86:42:35:74 Authority key identifier: 6F:B0:AA:57:CE:84:A5:CD:29:AC:47:D9:D7:D0:89:48:EB:21:F0:6A Certificate issuer: /CN=A91C6861/serialNumber=6FB0AA57CE84A5CD29AC47D9D7D08948EB21F06A Certificate serial: 0BB9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b7CqV86Epc0prEfZ19CJSOsh8Go.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.mft Manifest number: 0BAE Signing time: Sat 28 Jun 2025 18:41:14 +0000 Manifest this update: Sat 28 Jun 2025 18:41:14 +0000 Manifest next update: Sat 05 Jul 2025 18:41:14 +0000 Files and hashes: 1: b7CqV86Epc0prEfZ19CJSOsh8Go.crl (hash: 9zFSELlnKF3obJXthdy2I4UPSHWsL5pNLgGviETf0jo=) 2: 059432729E6A11EEB0983523C4F9AE02.roa (hash: RnlpXPDYIPfGNZjOgLnab/vPRagmWGYMa1TJEw32Q5g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.crl rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b7CqV86Epc0prEfZ19CJSOsh8Go.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 18:41:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3001 (0xbb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6861, serialNumber=6FB0AA57CE84A5CD29AC47D9D7D08948EB21F06A Validity Not Before: Jun 28 18:41:14 2025 GMT Not After : Jul 5 18:41:14 2025 GMT Subject: CN=6860374a-cefa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:7b:ea:29:01:75:a1:0a:74:d7:c0:05:19:73: d9:37:82:79:0c:d2:00:b5:a2:f8:2f:90:e8:a2:27: 93:3f:c1:49:69:e4:29:9d:42:d9:4e:c5:6f:2b:f3: f2:30:1a:50:26:02:44:72:e6:89:26:bc:bc:2f:99: b0:cc:2c:ec:8a:56:19:38:ce:7b:96:ab:59:4a:34: bb:82:7f:21:dd:83:37:73:7a:a2:e2:1f:1e:0b:9d: 4d:db:75:91:e8:19:b3:1f:da:7e:74:05:83:d3:97: 26:26:f8:d4:ea:33:fd:5b:29:12:7a:8f:55:6a:2f: e9:96:4a:c8:d8:d5:96:53:8f:db:19:dd:a0:55:e0: 12:43:bf:10:c8:0a:95:2c:23:2e:6e:d6:27:b9:97: 67:c2:3d:f0:99:47:ad:b0:eb:48:a0:a2:9c:db:04: 05:15:3d:cd:43:bd:a0:9b:cd:af:15:1e:1c:b7:60: 86:41:e8:a7:a2:cc:32:31:3e:84:c1:a5:24:03:3c: 0c:30:f3:95:84:17:1d:66:ce:e0:18:39:39:43:f4: 1c:a9:50:73:72:46:02:f1:d9:78:17:4d:04:b0:b7: bc:8a:fe:b1:ba:2a:63:24:cf:1f:06:01:bb:ab:ff: f4:78:ed:df:4c:e6:c3:ce:84:82:94:fb:ec:5b:d7: b9:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:47:D9:DC:3D:E9:27:26:CD:72:7B:19:83:7C:FE:DE:86:42:35:74 X509v3 Authority Key Identifier: keyid:6F:B0:AA:57:CE:84:A5:CD:29:AC:47:D9:D7:D0:89:48:EB:21:F0:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b7CqV86Epc0prEfZ19CJSOsh8Go.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:c3:6c:ae:66:8b:71:a0:23:88:a8:80:59:b2:03:98:02:8b: 6f:9b:a0:82:fb:48:20:9f:83:bb:32:98:b7:a3:fe:dc:d5:85: 3b:32:ab:8d:79:f3:6a:2b:7b:26:6c:7a:15:49:88:e0:5d:59: 89:64:df:e6:78:77:74:7f:e1:b0:95:21:a8:3b:95:f1:11:2b: 05:30:8d:fd:e9:19:82:f7:be:87:24:e4:8a:ef:0c:f1:89:f4: c9:78:73:54:d7:a1:aa:2f:3c:7e:7e:03:8e:37:81:e3:b5:8a: 12:bf:b0:21:2a:e5:12:ab:e4:76:56:05:7d:2f:0e:aa:d7:6d: e8:15:34:af:3d:01:6e:b6:8f:c1:2c:e2:9d:ae:5d:97:a0:9a: d1:da:b3:51:e8:4b:47:02:4d:69:36:a3:c5:0a:b3:8c:81:03: 7f:eb:ab:da:9d:f7:bc:ae:77:67:6b:b3:6d:41:e1:7f:9a:13: f0:f6:0f:93:3e:c4:48:13:83:8b:a3:b6:11:73:03:5d:22:3b: be:62:d2:4a:c0:d1:57:ba:f7:70:1e:4d:fa:7a:f7:96:e7:75: 6d:1a:7c:7d:fc:9b:b9:53:67:f3:08:c2:dc:3b:86:bb:70:88: 8a:66:dd:b6:61:3d:75:2e:63:a4:02:06:d1:fa:b6:dc:73:90: 8b:78:17:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY4NjExMTAvBgNVBAUTKDZGQjBBQTU3Q0U4NEE1Q0QyOUFDNDdEOUQ3RDA4OTQ4 RUIyMUYwNkEwHhcNMjUwNjI4MTg0MTE0WhcNMjUwNzA1MTg0MTE0WjAYMRYwFAYD VQQDEw02ODYwMzc0YS1jZWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8XvqKQF1oQp018AFGXPZN4J5DNIAtaL4L5DooieTP8FJaeQpnULZTsVvK/Py MBpQJgJEcuaJJry8L5mwzCzsilYZOM57lqtZSjS7gn8h3YM3c3qi4h8eC51N23WR 6BmzH9p+dAWD05cmJvjU6jP9WykSeo9Vai/plkrI2NWWU4/bGd2gVeASQ78QyAqV LCMubtYnuZdnwj3wmUetsOtIoKKc2wQFFT3NQ72gm82vFR4ct2CGQeinoswyMT6E waUkAzwMMPOVhBcdZs7gGDk5Q/QcqVBzckYC8dl4F00EsLe8iv6xuipjJM8fBgG7 q//0eO3fTObDzoSClPvsW9e5owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNNH2dw9 6ScmzXJ7GYN8/t6GQjV0MB8GA1UdIwQYMBaAFG+wqlfOhKXNKaxH2dfQiUjrIfBq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjg2MS81Q0MyMTAwMDI1 NEMxMUVBQjcwMkQ0MUJDNEY5QUUwMi9iN0NxVjg2RXBjMHByRWZaMTlDSlNPc2g4 R28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I3Q3FWODZFcGMwcHJFZloxOUNKU09zaDhHby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Njg2MS81Q0MyMTAwMDI1NEMxMUVBQjcwMkQ0MUJDNEY5QUUwMi9iN0NxVjg2RXBj MHByRWZaMTlDSlNPc2g4R28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARw2yuZotxoCOIqIBZsgOYAotvm6CC+0ggn4O7Mpi3o/7c1YU7MquN efNqK3smbHoVSYjgXVmJZN/meHd0f+GwlSGoO5XxESsFMI396RmC976HJOSK7wzx ifTJeHNU16GqLzx+fgOON4HjtYoSv7AhKuUSq+R2VgV9Lw6q123oFTSvPQFuto/B LOKdrl2XoJrR2rNR6EtHAk1pNqPFCrOMgQN/66vanfe8rndna7NtQeF/mhPw9g+T PsRIE4OLo7YRcwNdIju+YtJKwNFXuvdwHk36eveW53VtGnx9/Ju5U2fzCMLcO4a7 cIiKZt22YT11LmOkAgbR+rbcc5CLeBdj -----END CERTIFICATE-----Generated at Mon Jun 30 18:55:46 2025 by rpki-client