$ rpki-client -vvf rpki.apnic.net/member_repository/A91C705E/34DD4EE6F62411EC97234814C4F9AE02/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.mft File: g6y1D5b2RD9Lg9OR-Fe-fLV-NME.mft (raw, json) Hash identifier: cdHy7KYcJtGvoC/EoY5sFF2grmFFT4iaoXBRJznjIyY= Subject key identifier: D1:F6:90:24:19:65:7F:BA:E6:E4:5E:40:60:14:22:31:CF:D5:86:31 Authority key identifier: 83:AC:B5:0F:96:F6:44:3F:4B:83:D3:91:F8:57:BE:7C:B5:7E:34:C1 Certificate issuer: /CN=A91C705E/serialNumber=83ACB50F96F6443F4B83D391F857BE7CB57E34C1 Certificate serial: 02CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C705E/34DD4EE6F62411EC97234814C4F9AE02/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.mft Manifest number: 02C5 Signing time: Tue 01 Jul 2025 02:04:00 +0000 Manifest this update: Tue 01 Jul 2025 02:03:59 +0000 Manifest next update: Tue 08 Jul 2025 02:03:59 +0000 Files and hashes: 1: g6y1D5b2RD9Lg9OR-Fe-fLV-NME.crl (hash: PNvNCDV4ZS5rG8KOWT825gbD8u6nnSlH0SKiiIM3XMI=) 2: CB5ED75AF62811EC9205771CC4F9AE02.roa (hash: NW6HBZRtebEmp/7i48MrWPcyNaPh4Ushzt7ufQ/dX6A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C705E/34DD4EE6F62411EC97234814C4F9AE02/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.crl rsync://rpki.apnic.net/member_repository/A91C705E/34DD4EE6F62411EC97234814C4F9AE02/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 02:03:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 715 (0x2cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C705E, serialNumber=83ACB50F96F6443F4B83D391F857BE7CB57E34C1 Validity Not Before: Jul 1 02:03:59 2025 GMT Not After : Jul 8 02:03:59 2025 GMT Subject: CN=68634210-1a65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:46:8d:1d:a8:e1:04:95:49:af:7c:6d:50:49: ed:42:1d:5c:79:46:03:88:dd:77:97:be:9a:c6:65: a6:0d:5f:0b:b8:6c:2d:53:e0:4e:29:67:1c:8f:4c: 50:98:71:41:fc:31:24:3a:88:9f:da:f0:7e:df:55: e7:0b:52:5a:19:a5:34:67:ed:92:0b:5c:73:fe:8d: 6c:eb:7a:74:07:4c:4f:87:03:37:3d:b4:c6:7b:f1: 67:8a:46:ac:83:0e:c6:6b:dd:fb:2d:3d:2c:57:03: 82:81:78:51:d1:7b:2a:c2:7e:d3:5a:bc:ad:a1:00: 2e:7c:45:d2:55:41:d8:e0:bc:50:a6:81:17:00:40: 0d:2c:13:fc:48:35:bb:20:e4:60:ae:9d:08:37:49: c0:40:70:fb:a2:42:83:b1:9d:63:c1:2a:71:1b:59: cc:4a:be:72:fe:59:7c:19:0b:fe:ce:4b:67:bd:3e: 8a:c7:5c:7a:fa:45:44:73:b8:07:97:a4:a5:82:05: 9a:78:9d:b5:aa:c0:5c:df:29:d1:5a:ec:1c:ad:c1: 5e:9d:72:db:7f:c8:f1:d3:ab:80:9a:da:3c:53:57: 40:e7:10:a2:fc:b1:7b:97:d5:05:0a:fd:76:5d:87: c7:40:b8:aa:2d:b0:9c:a8:f3:de:cf:fa:85:8f:43: b8:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:F6:90:24:19:65:7F:BA:E6:E4:5E:40:60:14:22:31:CF:D5:86:31 X509v3 Authority Key Identifier: keyid:83:AC:B5:0F:96:F6:44:3F:4B:83:D3:91:F8:57:BE:7C:B5:7E:34:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C705E/34DD4EE6F62411EC97234814C4F9AE02/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C705E/34DD4EE6F62411EC97234814C4F9AE02/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:53:8b:2f:ae:81:90:b1:c6:d3:f8:55:b1:ef:63:6c:69:4b: f5:70:67:99:a4:17:76:d9:c5:78:08:8d:2f:b1:8b:c0:72:10: 34:4c:34:5d:69:21:28:51:70:88:af:9b:69:a4:30:31:98:85: e7:17:a8:22:04:93:35:fe:d8:27:2a:fb:66:38:05:e8:11:1c: 92:44:d3:d8:c6:d2:da:47:f8:42:fd:bd:3c:c3:3f:d0:e1:f7: dc:06:9c:b5:f6:94:6d:05:5e:43:fe:75:c1:0c:35:30:99:20: ac:a6:8a:d6:84:c6:cd:a7:b8:a4:89:77:d8:7c:23:c7:75:01: 0b:1a:f7:10:96:53:dd:7f:bc:9e:f6:ae:11:40:f4:39:aa:18: c6:7d:19:16:6d:5c:c8:f4:7a:d2:ba:ae:f9:3a:9e:72:4a:26: 3d:bd:3e:8a:bb:ad:58:88:b9:55:7d:e8:05:d7:9f:8a:e6:5d: bd:51:a8:e5:36:0e:3b:18:4e:bb:08:b8:be:78:14:4a:b4:2b: 72:a4:2b:d8:ee:59:25:7a:e9:2c:f4:de:da:f4:24:02:09:4c: 0f:96:42:3d:65:c0:4b:23:45:e8:2c:9d:dd:90:4a:e2:d5:31: c2:eb:a7:32:35:2a:0b:62:28:66:2b:c2:eb:f2:c8:f9:37:17: fc:d4:97:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcwNUUxMTAvBgNVBAUTKDgzQUNCNTBGOTZGNjQ0M0Y0QjgzRDM5MUY4NTdCRTdD QjU3RTM0QzEwHhcNMjUwNzAxMDIwMzU5WhcNMjUwNzA4MDIwMzU5WjAYMRYwFAYD VQQDEw02ODYzNDIxMC0xYTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA20aNHajhBJVJr3xtUEntQh1ceUYDiN13l76axmWmDV8LuGwtU+BOKWccj0xQ mHFB/DEkOoif2vB+31XnC1JaGaU0Z+2SC1xz/o1s63p0B0xPhwM3PbTGe/Fnikas gw7Ga937LT0sVwOCgXhR0Xsqwn7TWrytoQAufEXSVUHY4LxQpoEXAEANLBP8SDW7 IORgrp0IN0nAQHD7okKDsZ1jwSpxG1nMSr5y/ll8GQv+zktnvT6Kx1x6+kVEc7gH l6SlggWaeJ21qsBc3ynRWuwcrcFenXLbf8jx06uAmto8U1dA5xCi/LF7l9UFCv12 XYfHQLiqLbCcqPPez/qFj0O4dwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNH2kCQZ ZX+65uReQGAUIjHP1YYxMB8GA1UdIwQYMBaAFIOstQ+W9kQ/S4PTkfhXvny1fjTB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzA1RS8zNERENEVFNkY2 MjQxMUVDOTcyMzQ4MTRDNEY5QUUwMi9nNnkxRDViMlJEOUxnOU9SLUZlLWZMVi1O TUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c2eTFENWIyUkQ5TGc5T1ItRmUtZkxWLU5NRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzA1RS8zNERENEVFNkY2MjQxMUVDOTcyMzQ4MTRDNEY5QUUwMi9nNnkxRDViMlJE OUxnOU9SLUZlLWZMVi1OTUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvU4svroGQscbT+FWx72NsaUv1cGeZpBd22cV4CI0vsYvAchA0TDRd aSEoUXCIr5tppDAxmIXnF6giBJM1/tgnKvtmOAXoERySRNPYxtLaR/hC/b08wz/Q 4ffcBpy19pRtBV5D/nXBDDUwmSCsporWhMbNp7ikiXfYfCPHdQELGvcQllPdf7ye 9q4RQPQ5qhjGfRkWbVzI9HrSuq75Op5ySiY9vT6Ku61YiLlVfegF15+K5l29Uajl Ng47GE67CLi+eBRKtCtypCvY7lkleuks9N7a9CQCCUwPlkI9ZcBLI0XoLJ3dkEri 1THC66cyNSoLYihmK8Lr8sj5Nxf81Jd8 -----END CERTIFICATE-----Generated at Wed Jul 2 10:18:25 2025 by rpki-client