$ rpki-client -vvf rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft File: sK6GHB6-i61uZW1AH391BglAdKA.mft (raw, json) Hash identifier: I6Ft0Rt+o++0s//DRJ5TGk3ZMttMht4SdB0HTtO9u24= Subject key identifier: CF:40:C9:19:8B:F7:8A:82:92:74:CB:8B:0A:AB:D4:00:EF:EC:5E:C3 Authority key identifier: B0:AE:86:1C:1E:BE:8B:AD:6E:65:6D:40:1F:7F:75:06:09:40:74:A0 Certificate issuer: /CN=A91D322A/serialNumber=B0AE861C1EBE8BAD6E656D401F7F7506094074A0 Certificate serial: 0D2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sK6GHB6-i61uZW1AH391BglAdKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft Manifest number: 0D25 Signing time: Mon 30 Jun 2025 18:14:36 +0000 Manifest this update: Mon 30 Jun 2025 18:14:35 +0000 Manifest next update: Mon 07 Jul 2025 18:14:35 +0000 Files and hashes: 1: sK6GHB6-i61uZW1AH391BglAdKA.crl (hash: PlsKb5FtF2nDvanwDo46QD29u4miyenjGnpjBnEVXFM=) 2: 98B4FB32DB9011E996483B2BC4F9AE02.roa (hash: XXgLxgibvmpDaf+Wjs0zicx0P8XILsfLy/xTdFUHtdc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.crl rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sK6GHB6-i61uZW1AH391BglAdKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 18:14:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3372 (0xd2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D322A, serialNumber=B0AE861C1EBE8BAD6E656D401F7F7506094074A0 Validity Not Before: Jun 30 18:14:35 2025 GMT Not After : Jul 7 18:14:35 2025 GMT Subject: CN=6862d40c-5a74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:3b:a2:0d:4f:cc:88:5e:92:df:17:f9:4c:40: 68:89:ca:ae:14:92:47:7c:d6:5a:c1:02:05:07:1f: 81:0e:08:f6:86:7e:02:69:c5:e6:55:dc:fa:58:7a: f3:3c:4b:1b:97:28:ea:4d:bf:ff:95:7f:8e:c7:51: c8:31:df:41:5a:b7:d9:71:ac:be:00:a8:c8:34:8e: 74:2b:39:37:23:d1:3b:3a:20:11:80:c3:d1:7b:c6: ec:01:2c:e6:e8:96:96:05:16:53:11:c5:96:e8:08: 19:52:df:35:da:39:cf:dd:a4:35:1d:ea:e9:fe:12: fd:b4:b6:09:c6:33:19:50:65:14:c1:7c:7c:ba:9e: 3b:3d:e2:0a:18:9a:22:1b:89:f8:c1:d2:fb:68:73: fd:8d:28:fe:1f:b7:d9:11:a7:15:c6:5d:8d:5e:87: f4:d9:ad:f9:c6:a5:5e:ed:df:32:4c:1b:7a:68:0a: f3:4f:99:8e:d5:ec:dd:26:9c:3d:b1:c8:10:b3:fe: b5:6f:b1:a9:92:70:ea:83:0b:54:b7:a2:f7:fd:51: 1f:72:86:e3:95:a4:da:86:15:a6:09:42:c3:dd:df: 9d:a9:ce:ac:59:a8:63:0a:f2:33:23:90:d5:84:c8: 9b:c8:9b:21:5a:e8:4a:c2:40:6e:e0:0d:7a:58:eb: 79:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:40:C9:19:8B:F7:8A:82:92:74:CB:8B:0A:AB:D4:00:EF:EC:5E:C3 X509v3 Authority Key Identifier: keyid:B0:AE:86:1C:1E:BE:8B:AD:6E:65:6D:40:1F:7F:75:06:09:40:74:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sK6GHB6-i61uZW1AH391BglAdKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:b4:35:f0:b0:de:d3:0d:63:5d:5d:d6:d3:bd:90:68:d5:97: ec:8b:bf:ff:db:a6:54:43:a1:c3:2a:a9:db:ce:35:05:13:4e: 7e:8c:12:8c:2e:43:f8:f2:7d:a4:e5:ec:89:59:dc:42:78:e3: 18:ab:ec:2e:68:f3:a1:e1:d2:b9:8e:c6:a0:34:44:5e:0d:20: fd:09:22:fd:2a:14:3d:de:a0:ef:b7:6d:2c:f2:a0:47:88:50: 70:57:14:dc:6a:2a:78:51:cb:85:37:90:fd:89:0b:d6:aa:74: 85:fa:c3:1a:bc:80:21:33:b6:15:85:9f:b0:ad:3e:8f:c1:a4: d4:e8:c8:4c:dd:d2:8f:ac:6d:bd:84:0d:06:dd:fe:6b:eb:c8: eb:d5:ad:f1:c7:9a:8b:ea:fd:06:cc:bf:d7:09:ac:77:ec:57: ba:df:3b:8d:f1:11:15:b7:a9:24:95:9f:92:54:ad:d3:f0:27: 5f:09:15:b8:ab:c3:a4:ae:21:56:76:02:0c:cd:7a:3c:4d:80: 99:17:92:0b:9e:01:c5:49:42:40:6d:d7:84:a1:2f:66:47:15: 92:24:a3:c9:b9:44:47:15:b8:a6:7b:7c:0d:c5:fb:b5:07:89: 87:3e:60:6b:2f:df:12:c4:c3:f9:99:51:63:4d:01:30:b9:ce: ab:d9:87:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDSwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMyMkExMTAvBgNVBAUTKEIwQUU4NjFDMUVCRThCQUQ2RTY1NkQ0MDFGN0Y3NTA2 MDk0MDc0QTAwHhcNMjUwNjMwMTgxNDM1WhcNMjUwNzA3MTgxNDM1WjAYMRYwFAYD VQQDEw02ODYyZDQwYy01YTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8DuiDU/MiF6S3xf5TEBoicquFJJHfNZawQIFBx+BDgj2hn4CacXmVdz6WHrz PEsblyjqTb//lX+Ox1HIMd9BWrfZcay+AKjINI50Kzk3I9E7OiARgMPRe8bsASzm 6JaWBRZTEcWW6AgZUt812jnP3aQ1Herp/hL9tLYJxjMZUGUUwXx8up47PeIKGJoi G4n4wdL7aHP9jSj+H7fZEacVxl2NXof02a35xqVe7d8yTBt6aArzT5mO1ezdJpw9 scgQs/61b7GpknDqgwtUt6L3/VEfcobjlaTahhWmCULD3d+dqc6sWahjCvIzI5DV hMibyJshWuhKwkBu4A16WOt5EQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM9AyRmL 94qCknTLiwqr1ADv7F7DMB8GA1UdIwQYMBaAFLCuhhwevoutbmVtQB9/dQYJQHSg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzIyQS8wREMxREY3Q0RC OTAxMUU5OUMyNUM1MkFDNEY5QUUwMi9zSzZHSEI2LWk2MXVaVzFBSDM5MUJnbEFk S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NLNkdIQjYtaTYxdVpXMUFIMzkxQmdsQWRLQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzIyQS8wREMxREY3Q0RCOTAxMUU5OUMyNUM1MkFDNEY5QUUwMi9zSzZHSEI2LWk2 MXVaVzFBSDM5MUJnbEFkS0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArtDXwsN7TDWNdXdbTvZBo1Zfsi7//26ZUQ6HDKqnbzjUFE05+jBKM LkP48n2k5eyJWdxCeOMYq+wuaPOh4dK5jsagNEReDSD9CSL9KhQ93qDvt20s8qBH iFBwVxTcaip4UcuFN5D9iQvWqnSF+sMavIAhM7YVhZ+wrT6PwaTU6MhM3dKPrG29 hA0G3f5r68jr1a3xx5qL6v0GzL/XCax37Fe63zuN8REVt6kklZ+SVK3T8CdfCRW4 q8OkriFWdgIMzXo8TYCZF5ILngHFSUJAbdeEoS9mRxWSJKPJuURHFbime3wNxfu1 B4mHPmBrL98SxMP5mVFjTQEwuc6r2YcV -----END CERTIFICATE-----Generated at Tue Jul 1 15:43:21 2025 by rpki-client