$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft File: 6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft (raw, json) Hash identifier: 1phXKb8fSpI2g3rLzODbRClFcRkq54qItYdMkXKk9sc= Subject key identifier: 20:FE:08:1F:1C:72:9F:06:69:83:A0:F9:EF:EB:00:3E:12:9C:36:1C Authority key identifier: E8:68:21:E9:F2:3D:42:F3:62:E4:2A:E2:AF:B5:BD:98:E0:B1:11:93 Certificate issuer: /CN=A91C6FD6/serialNumber=E86821E9F23D42F362E42AE2AFB5BD98E0B11193 Certificate serial: BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ggh6fI9QvNi5Crir7W9mOCxEZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft Manifest number: BC Signing time: Thu 03 Jul 2025 06:04:38 +0000 Manifest this update: Thu 03 Jul 2025 06:04:37 +0000 Manifest next update: Thu 10 Jul 2025 06:04:37 +0000 Files and hashes: 1: 6Ggh6fI9QvNi5Crir7W9mOCxEZM.crl (hash: YfWNNTqLFUixSnwo2HvqNbWaxBSqD00ypuXx1NEnQr4=) 2: 70F3668238F711EFB4132D26C4F9AE02.roa (hash: 6q2HJGghYczmtOW7uCV2DY5B1dnxfLxnRSXR0JIpe1c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.crl rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ggh6fI9QvNi5Crir7W9mOCxEZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 190 (0xbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6FD6, serialNumber=E86821E9F23D42F362E42AE2AFB5BD98E0B11193 Validity Not Before: Jul 3 06:04:37 2025 GMT Not After : Jul 10 06:04:37 2025 GMT Subject: CN=68661d76-90d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:75:28:4a:f2:07:1e:35:94:99:75:6f:12:f8: 5f:34:d5:5a:00:0b:f8:0a:a1:29:b4:5d:82:6f:a0: b2:4f:18:7b:a7:4a:cc:86:33:d2:80:52:bb:5b:25: be:e5:81:96:40:68:82:90:9f:0b:a3:61:e4:5c:c1: 5d:59:bf:dc:94:b2:67:d9:b9:c5:2b:fb:8f:58:71: 2f:8f:54:78:05:dc:30:6f:36:43:c8:d5:c9:6c:cd: bc:43:26:8f:71:e9:0b:54:cb:95:04:50:9a:7b:ac: 9b:a0:3b:dd:37:ab:43:63:41:fa:2a:f8:77:58:c9: 17:24:73:9a:2c:62:f4:d6:1d:0b:cd:2e:82:0f:1a: b7:8c:39:c7:77:af:1f:98:15:37:0f:b2:f8:21:ee: b5:58:30:15:8b:43:2b:f6:3d:26:9d:ad:f9:35:b9: b5:1e:c3:9b:6b:54:b3:45:36:33:36:24:18:67:84: 16:3d:b2:fa:51:e8:47:38:31:bb:c4:3a:c2:bf:fa: b8:35:52:d1:dc:15:3f:d4:da:37:75:50:2a:79:0c: 18:e2:fb:77:7e:ff:f6:18:11:20:a0:60:f8:3f:d2: 16:85:01:9e:1c:8f:e5:29:b8:b7:59:10:6c:8e:bb: 9f:93:6f:37:2b:71:bb:f8:5f:38:3c:3e:46:3f:07: b1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:FE:08:1F:1C:72:9F:06:69:83:A0:F9:EF:EB:00:3E:12:9C:36:1C X509v3 Authority Key Identifier: keyid:E8:68:21:E9:F2:3D:42:F3:62:E4:2A:E2:AF:B5:BD:98:E0:B1:11:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ggh6fI9QvNi5Crir7W9mOCxEZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:3d:dd:44:6b:3f:53:6f:87:ec:0a:5f:e9:a6:87:b5:1c:0b: 57:e1:cf:c9:67:90:66:9c:41:f1:6b:00:55:fa:0c:ca:b5:d0: 76:76:4b:7c:6e:1d:15:0b:ab:6a:d8:8d:41:3a:f5:fd:33:bc: 2f:6d:06:ef:9a:bc:b7:9e:5f:9e:4f:a8:d8:8c:2d:20:b6:0d: b2:ec:cd:3d:0c:26:92:07:1b:72:99:c3:2d:27:4b:0f:bb:98: 1c:be:da:da:7f:d2:45:22:a2:a2:74:96:a6:51:7e:63:69:1f: 32:b5:ca:f7:c1:b9:87:f6:9f:d5:76:08:4f:c5:ff:e5:8f:f5: f2:9f:b5:1a:3c:7f:e3:d2:ec:e0:a3:30:61:25:1f:9d:a8:31: 16:42:5c:e4:4a:db:77:59:81:6b:9f:bc:5b:94:19:ef:97:12: 0c:bf:3b:b6:cf:63:5d:df:29:a6:70:db:a8:62:60:12:ad:d2: d6:3a:2c:3b:83:de:00:bc:1f:47:86:91:96:f4:f6:ae:31:97: 9f:dc:67:d6:e5:1e:2d:47:86:69:fb:a4:7f:ca:42:ad:c1:d7: 9a:92:65:a7:f4:f3:1a:d9:70:c3:c0:5d:e5:70:cc:76:c9:d7: c8:6f:3a:82:93:8c:07:da:d7:b8:fa:03:ae:fe:fc:37:17:f6: 94:9f:c6:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZGRDYxMTAvBgNVBAUTKEU4NjgyMUU5RjIzRDQyRjM2MkU0MkFFMkFGQjVCRDk4 RTBCMTExOTMwHhcNMjUwNzAzMDYwNDM3WhcNMjUwNzEwMDYwNDM3WjAYMRYwFAYD VQQDEw02ODY2MWQ3Ni05MGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxHUoSvIHHjWUmXVvEvhfNNVaAAv4CqEptF2Cb6CyTxh7p0rMhjPSgFK7WyW+ 5YGWQGiCkJ8Lo2HkXMFdWb/clLJn2bnFK/uPWHEvj1R4BdwwbzZDyNXJbM28QyaP cekLVMuVBFCae6yboDvdN6tDY0H6Kvh3WMkXJHOaLGL01h0LzS6CDxq3jDnHd68f mBU3D7L4Ie61WDAVi0Mr9j0mna35Nbm1HsOba1SzRTYzNiQYZ4QWPbL6UehHODG7 xDrCv/q4NVLR3BU/1No3dVAqeQwY4vt3fv/2GBEgoGD4P9IWhQGeHI/lKbi3WRBs jrufk283K3G7+F84PD5GPwexcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCD+CB8c cp8GaYOg+e/rAD4SnDYcMB8GA1UdIwQYMBaAFOhoIenyPULzYuQq4q+1vZjgsRGT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkZENi82OERBNEI2QTM4 RjYxMUVGQjEzMTg0MjNDNEY5QUUwMi82R2doNmZJOVF2Tmk1Q3JpcjdXOW1PQ3hF Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZHZ2g2Zkk5UXZOaTVDcmlyN1c5bU9DeEVaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkZENi82OERBNEI2QTM4RjYxMUVGQjEzMTg0MjNDNEY5QUUwMi82R2doNmZJOVF2 Tmk1Q3JpcjdXOW1PQ3hFWk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDLPd1Eaz9Tb4fsCl/ppoe1HAtX4c/JZ5BmnEHxawBV+gzKtdB2dkt8 bh0VC6tq2I1BOvX9M7wvbQbvmry3nl+eT6jYjC0gtg2y7M09DCaSBxtymcMtJ0sP u5gcvtraf9JFIqKidJamUX5jaR8ytcr3wbmH9p/VdghPxf/lj/Xyn7UaPH/j0uzg ozBhJR+dqDEWQlzkStt3WYFrn7xblBnvlxIMvzu2z2Nd3ymmcNuoYmASrdLWOiw7 g94AvB9HhpGW9PauMZef3GfW5R4tR4Zp+6R/ykKtwdeakmWn9PMa2XDDwF3lcMx2 ydfIbzqCk4wH2te4+gOu/vw3F/aUn8Zl -----END CERTIFICATE-----Generated at Thu Jul 3 10:47:49 2025 by rpki-client