$ rpki-client -vvf rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.mft File: 0ptk5jRGWrQTIFS7foPJ1fGDSfc.mft (raw, json) Hash identifier: 09ZJq/oQ0Yjti6HJ6OVyW/SOD0/OtQT3lCPu+Xre0JU= Subject key identifier: 66:7F:F0:21:B2:6A:8E:21:B7:41:E3:9E:24:67:F2:18:38:E8:7A:E5 Authority key identifier: D2:9B:64:E6:34:46:5A:B4:13:20:54:BB:7E:83:C9:D5:F1:83:49:F7 Certificate issuer: /CN=A91D26C6/serialNumber=D29B64E634465AB4132054BB7E83C9D5F18349F7 Certificate serial: 06CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ptk5jRGWrQTIFS7foPJ1fGDSfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.mft Manifest number: 06AF Signing time: Mon 30 Jun 2025 22:29:23 +0000 Manifest this update: Mon 30 Jun 2025 22:29:23 +0000 Manifest next update: Mon 07 Jul 2025 22:29:23 +0000 Files and hashes: 1: 0ptk5jRGWrQTIFS7foPJ1fGDSfc.crl (hash: neP6BrXEd3q5e3R0yh+yvzczLTZ3qIh+WTDvQVwnihs=) 2: 3B03239684CE11EF9D90A966C4F9AE02.roa (hash: 0+CvQqBA1GWK9uAje6YI9ltQjscAcIJ8/LtX4JAvJgQ=) 3: 6A8A22841DCE11EF85CAC83EC4F9AE02.roa (hash: BifS2RiKJAeyaao2xahiTEJyhWsX4uSdQw3ik4lZCoM=) 4: DD3C61621DCD11EF88E9EE3DC4F9AE02.roa (hash: qv769QTOuxRY2vZMEitP1PhQNGQQJL1+VWV0CsKcicw=) 5: 178E201EA51911EDB711B90AC4F9AE02.roa (hash: Fk3FD4AcHMukexgYcFy6H4xmHyHDGU1VOrgDQ2JaHQ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.crl rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ptk5jRGWrQTIFS7foPJ1fGDSfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 22:29:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1740 (0x6cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D26C6, serialNumber=D29B64E634465AB4132054BB7E83C9D5F18349F7 Validity Not Before: Jun 30 22:29:23 2025 GMT Not After : Jul 7 22:29:23 2025 GMT Subject: CN=68630fc3-5672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c6:2d:82:90:08:f8:a3:45:98:fb:1c:d0:17: 13:47:1e:cb:33:43:4c:8c:d3:65:db:d5:48:cb:39: f1:e0:68:3f:32:ec:b6:89:6a:0b:59:df:aa:3a:e1: 50:77:6f:4e:3e:db:ab:8a:51:ee:04:fe:47:73:9e: fd:a0:b3:50:e0:01:14:59:63:8d:e9:35:26:86:5a: 6e:c1:86:3e:ad:72:a5:e7:cf:a8:96:4d:f4:37:48: e5:72:5f:c2:40:9b:5f:3a:aa:ca:59:b7:65:77:e8: b0:3e:cf:30:08:4d:00:2b:7b:e2:d2:4c:26:ba:89: 71:12:d2:fc:64:63:18:5f:ca:3d:26:06:77:ba:11: c0:8e:be:17:b3:40:cf:2a:14:9a:9a:8c:af:dd:f1: f1:e9:10:c2:5c:8f:7c:7d:04:98:9d:f2:8f:47:b4: 30:77:75:5e:c5:4e:db:c2:5c:59:61:50:e3:f3:53: 2c:5a:e1:73:e8:67:ed:5e:3f:d1:91:12:ef:12:cb: ff:86:31:f7:58:78:c4:e9:45:3e:0a:fa:c2:83:1f: f6:a3:3a:10:2d:6c:1d:11:b3:dd:03:92:90:6b:91: 0d:51:be:b7:42:a4:a1:77:41:1a:51:e9:8a:3c:23: 35:44:b3:3a:de:13:3f:fb:d1:7b:6e:70:44:ee:e6: 39:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:7F:F0:21:B2:6A:8E:21:B7:41:E3:9E:24:67:F2:18:38:E8:7A:E5 X509v3 Authority Key Identifier: keyid:D2:9B:64:E6:34:46:5A:B4:13:20:54:BB:7E:83:C9:D5:F1:83:49:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ptk5jRGWrQTIFS7foPJ1fGDSfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:95:96:8e:b5:2c:43:36:26:86:51:19:43:c5:15:01:ce:a6: 8a:8d:44:41:7f:52:31:37:cd:db:7c:b6:6b:90:9f:68:ab:74: cc:95:75:3d:8e:0a:4b:3e:29:3f:c8:09:5c:03:b7:9e:51:f1: dc:cc:4b:33:5e:fe:fc:3f:da:63:77:de:e8:88:8e:80:f2:d9: 7e:20:a2:3c:e3:92:73:1a:da:fc:4b:66:ef:f1:93:0e:aa:a9: ce:3e:d2:cf:3d:9b:64:e3:32:fd:93:9a:4f:ea:2c:1b:55:0a: 0d:2f:02:5d:54:74:75:6d:ec:d2:61:5d:48:bb:d6:20:5c:a6: e2:68:a9:f9:51:6a:52:32:bb:b5:be:3f:de:c5:33:89:7c:5a: 6a:ff:15:18:ca:57:63:4d:8d:6c:65:a8:3d:24:12:d4:c2:7f: 59:b8:7a:2d:67:cb:d1:23:cf:4a:fc:d6:51:49:bf:bb:d9:fa: e0:5f:a5:77:b6:a7:46:0f:81:d1:1f:7a:77:a1:cf:1c:f3:2f: 60:94:d8:30:6a:1f:43:d3:7c:9b:6e:1b:af:e4:ee:45:02:1d: ff:bd:6b:8f:67:dc:62:01:d9:6e:fb:db:07:36:93:b8:b6:11: ce:de:a8:7e:50:a8:59:b3:59:db:e6:32:51:72:91:0a:3f:71: f7:32:24:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI2QzYxMTAvBgNVBAUTKEQyOUI2NEU2MzQ0NjVBQjQxMzIwNTRCQjdFODNDOUQ1 RjE4MzQ5RjcwHhcNMjUwNjMwMjIyOTIzWhcNMjUwNzA3MjIyOTIzWjAYMRYwFAYD VQQDEw02ODYzMGZjMy01NjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlcYtgpAI+KNFmPsc0BcTRx7LM0NMjNNl29VIyznx4Gg/Muy2iWoLWd+qOuFQ d29OPturilHuBP5Hc579oLNQ4AEUWWON6TUmhlpuwYY+rXKl58+olk30N0jlcl/C QJtfOqrKWbdld+iwPs8wCE0AK3vi0kwmuolxEtL8ZGMYX8o9JgZ3uhHAjr4Xs0DP KhSamoyv3fHx6RDCXI98fQSYnfKPR7Qwd3VexU7bwlxZYVDj81MsWuFz6GftXj/R kRLvEsv/hjH3WHjE6UU+CvrCgx/2ozoQLWwdEbPdA5KQa5ENUb63QqShd0EaUemK PCM1RLM63hM/+9F7bnBE7uY50QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGZ/8CGy ao4ht0HjniRn8hg46HrlMB8GA1UdIwQYMBaAFNKbZOY0Rlq0EyBUu36DydXxg0n3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjZDNi81OEU5OUU5NDZG NzkxMUVCQTREMjIyODdDNEY5QUUwMi8wcHRrNWpSR1dyUVRJRlM3Zm9QSjFmR0RT ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBwdGs1alJHV3JRVElGUzdmb1BKMWZHRFNmYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjZDNi81OEU5OUU5NDZGNzkxMUVCQTREMjIyODdDNEY5QUUwMi8wcHRrNWpSR1dy UVRJRlM3Zm9QSjFmR0RTZmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmlZaOtSxDNiaGURlDxRUBzqaKjURBf1IxN83bfLZrkJ9oq3TMlXU9 jgpLPik/yAlcA7eeUfHczEszXv78P9pjd97oiI6A8tl+IKI845JzGtr8S2bv8ZMO qqnOPtLPPZtk4zL9k5pP6iwbVQoNLwJdVHR1bezSYV1Iu9YgXKbiaKn5UWpSMru1 vj/exTOJfFpq/xUYyldjTY1sZag9JBLUwn9ZuHotZ8vRI89K/NZRSb+72frgX6V3 tqdGD4HRH3p3oc8c8y9glNgwah9D03ybbhuv5O5FAh3/vWuPZ9xiAdlu+9sHNpO4 thHO3qh+UKhZs1nb5jJRcpEKP3H3MiQR -----END CERTIFICATE-----Generated at Tue Jul 1 22:47:01 2025 by rpki-client