$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft File: B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft (raw, json) Hash identifier: EMFFHWlt07nuHa+GVqclI6ShOtVFViHc549rueJX9HM= Subject key identifier: 35:88:79:AD:4F:06:02:BB:F4:3E:5B:51:32:F8:78:73:61:8D:CA:11 Authority key identifier: 07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60 Certificate issuer: /CN=A91DF93A/serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260 Certificate serial: 08C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft Manifest number: 0860 Signing time: Mon 30 Jun 2025 21:07:09 +0000 Manifest this update: Mon 30 Jun 2025 21:07:08 +0000 Manifest next update: Mon 07 Jul 2025 21:07:08 +0000 Files and hashes: 1: B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl (hash: tKVBVZiqQmlRrv2ZdoSTte313Dxj9gOdAvAHf3uep1E=) 2: F8C02F3CDA4E11EC9C09A446C4F9AE02.roa (hash: fQqKRj97YwSX01j4RLkIYLyoFuesKb4QSmD9wM54Hnc=) 3: BA1752AE176B11EF9ADED980C4F9AE02.roa (hash: E4ey91ujkF/MRIeBzx9ZLQooU0yVAuuvKVrBh8MDQSg=) 4: E518ECC6D52A11ED99D55E2EC4F9AE02.roa (hash: 8ZNPpyzaCSOR7XArDiXTgpwOZdqi5o9nlzrrurZ8f2Q=) 5: FEEC2C90643811EB9D7F624EC4F9AE02.roa (hash: huVUXhJ3Ojs1r05u1jG7Kov4uI++w1LAbAYi/YZa49g=) 6: 007CF9924F1111EFA7D2F345C4F9AE02.roa (hash: jDHZwFF5yPuG0E/+EVJniBRe11d0Z59ErydSm1FeI2Q=) 7: 5B5CBC68751B11EB9065A822C4F9AE02.roa (hash: PfplpurYpM5Nlhs4wMvQOWeVvjM0XGHzdK7n61JNfpc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 21:07:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2247 (0x8c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF93A, serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260 Validity Not Before: Jun 30 21:07:08 2025 GMT Not After : Jul 7 21:07:08 2025 GMT Subject: CN=6862fc7d-5832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:f1:6d:29:9c:54:fb:39:d8:2e:61:6d:d2:23: 9d:00:1e:6b:78:39:98:9f:3f:5a:ce:27:61:f8:f3: 83:a9:0a:c2:50:6f:22:fa:60:f4:a6:2c:e9:0e:29: 69:e9:e4:13:05:51:4c:2c:58:cf:fc:de:a7:63:80: 85:1f:bc:f3:f8:cc:93:4a:2f:f2:32:7a:69:9d:00: f4:08:e0:00:9b:f9:04:85:e7:8c:5e:7a:30:3b:df: df:db:80:1b:83:01:63:f1:26:fa:b6:4e:d8:d2:b4: af:5a:0e:78:7e:5a:e6:61:95:29:1a:76:36:2e:33: 21:85:93:78:74:b2:35:ef:40:9d:b8:0d:94:5f:87: e9:b6:30:10:5b:68:f8:12:e7:06:2b:3f:3a:4d:25: f3:51:f6:e7:7e:da:15:0e:ae:96:e9:84:4e:e4:a3: 3c:ef:75:3c:ca:d8:79:b3:5c:93:1a:3a:4e:2d:c4: 56:70:0c:97:8f:14:c4:85:86:f3:f1:9c:3d:92:2c: f4:3a:ca:e6:a0:0d:76:d0:34:fa:fe:cd:32:d9:ef: b9:a7:ee:8d:d4:f5:b2:9d:32:28:be:d3:14:82:55: 12:8a:1c:7b:6f:52:93:71:a3:a9:45:e6:a9:6b:fd: 36:54:ed:79:e8:54:4a:ae:13:a7:a1:1e:7d:7c:df: 70:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:88:79:AD:4F:06:02:BB:F4:3E:5B:51:32:F8:78:73:61:8D:CA:11 X509v3 Authority Key Identifier: keyid:07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:f5:0c:9e:1e:56:2f:52:bc:e3:c6:fb:84:6f:9b:ed:4f:6a: 8a:13:d1:dd:31:04:d4:08:ba:67:9a:1b:66:a0:15:f6:28:aa: c4:19:62:20:00:43:3e:89:22:08:17:25:d1:2f:de:3d:04:67: 1b:09:ba:2e:5b:e8:84:0f:13:62:44:9b:65:c0:ef:a4:29:87: 86:42:25:4a:05:5f:24:81:ef:bb:d1:8a:38:09:92:d6:18:e9: 14:07:b4:bb:02:7f:7a:12:e6:74:f9:9f:d8:a1:5b:dd:a7:6a: a6:b2:e1:c1:db:63:2a:0d:2a:a2:61:ec:83:29:18:a6:9c:04: ce:cc:60:db:8a:0d:14:09:a4:b4:ad:8d:70:32:af:d1:bd:4a: ba:5c:67:ea:84:6a:60:1d:29:5d:05:0a:15:d5:88:64:33:7f: 8c:68:5f:f9:49:66:5a:37:8c:58:24:0a:39:ae:3e:3f:29:d1: 14:30:c0:61:b8:61:21:0e:56:c2:7b:02:7a:b9:e8:c4:eb:71: 51:a8:7d:67:e2:b3:bd:db:0f:a7:c3:14:88:77:3a:77:d9:3f: c5:bd:de:94:83:f3:d2:b5:83:67:5b:d2:63:76:ab:30:26:23: 4b:a4:0d:0a:01:c3:0a:a7:a9:ba:d4:ef:2a:b1:f3:7f:e3:c0: e5:86:d1:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY5M0ExMTAvBgNVBAUTKDA3QTFDMDg1NDVDQUNDNjVFMDg4MkQ0OUU5RjJGOENG RDJCRTgyNjAwHhcNMjUwNjMwMjEwNzA4WhcNMjUwNzA3MjEwNzA4WjAYMRYwFAYD VQQDEw02ODYyZmM3ZC01ODMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6fFtKZxU+znYLmFt0iOdAB5reDmYnz9azidh+PODqQrCUG8i+mD0pizpDilp 6eQTBVFMLFjP/N6nY4CFH7zz+MyTSi/yMnppnQD0COAAm/kEheeMXnowO9/f24Ab gwFj8Sb6tk7Y0rSvWg54flrmYZUpGnY2LjMhhZN4dLI170CduA2UX4fptjAQW2j4 EucGKz86TSXzUfbnftoVDq6W6YRO5KM873U8yth5s1yTGjpOLcRWcAyXjxTEhYbz 8Zw9kiz0OsrmoA120DT6/s0y2e+5p+6N1PWynTIovtMUglUSihx7b1KTcaOpReap a/02VO156FRKrhOnoR59fN9wTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDWIea1P BgK79D5bUTL4eHNhjcoRMB8GA1UdIwQYMBaAFAehwIVFysxl4IgtSeny+M/SvoJg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjkzQS9GRjUxRTU5RUU1 RjMxMUVBQjNBOTE1NjFDNEY5QUUwMi9CNkhBaFVYS3pHWGdpQzFKNmZMNHo5Sy1n bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I2SEFoVVhLekdYZ2lDMUo2Zkw0ejlLLWdtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjkzQS9GRjUxRTU5RUU1RjMxMUVBQjNBOTE1NjFDNEY5QUUwMi9CNkhBaFVYS3pH WGdpQzFKNmZMNHo5Sy1nbUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAy9QyeHlYvUrzjxvuEb5vtT2qKE9HdMQTUCLpnmhtmoBX2KKrEGWIg AEM+iSIIFyXRL949BGcbCbouW+iEDxNiRJtlwO+kKYeGQiVKBV8kge+70Yo4CZLW GOkUB7S7An96EuZ0+Z/YoVvdp2qmsuHB22MqDSqiYeyDKRimnATOzGDbig0UCaS0 rY1wMq/RvUq6XGfqhGpgHSldBQoV1YhkM3+MaF/5SWZaN4xYJAo5rj4/KdEUMMBh uGEhDlbCewJ6uejE63FRqH1n4rO92w+nwxSIdzp32T/Fvd6Ug/PStYNnW9Jjdqsw JiNLpA0KAcMKp6m61O8qsfN/48DlhtFC -----END CERTIFICATE-----Generated at Tue Jul 1 06:56:53 2025 by rpki-client