$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.mft File: 906Wyp7pNgdFZCkpYPvB-c80hU0.mft (raw, json) Hash identifier: hgUg7+KNBUrVuInsEAh5N+27ysaCovwvThnNpqJAZl0= Subject key identifier: 03:91:5C:77:99:C4:C6:E2:6E:2F:3C:CF:20:9D:1C:C9:84:7D:5B:9D Authority key identifier: F7:4E:96:CA:9E:E9:36:07:45:64:29:29:60:FB:C1:F9:CF:34:85:4D Certificate issuer: /CN=A91E0329/serialNumber=F74E96CA9EE936074564292960FBC1F9CF34854D Certificate serial: 01B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/906Wyp7pNgdFZCkpYPvB-c80hU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.mft Manifest number: 01A6 Signing time: Tue 01 Jul 2025 03:42:25 +0000 Manifest this update: Tue 01 Jul 2025 03:42:25 +0000 Manifest next update: Tue 08 Jul 2025 03:42:25 +0000 Files and hashes: 1: 906Wyp7pNgdFZCkpYPvB-c80hU0.crl (hash: pRJkPR4YLugwpj2UyDS4ubkRp+aVGwsmHl4kupfHlcI=) 2: F26B14C4EE8B11ED95BCBB13C4F9AE02.roa (hash: gLkgMGp52FpOKp1gigsy7o/szzqT6RmtB38EXx+UWeM=) 3: 1DA961ACEE8911EDBFAE4177C4F9AE02.roa (hash: Osxjf+sQheLzTs1l6e5kACmrRT/9y2CBdjlI5qtBWLI=) 4: 1C99BCBCEE8911EDBFAE4177C4F9AE02.roa (hash: P2QsrILj+XHKTHzfzBj8a8ezg5UMFN7g36qC5yV1Z+k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.crl rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/906Wyp7pNgdFZCkpYPvB-c80hU0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 03:42:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 433 (0x1b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0329, serialNumber=F74E96CA9EE936074564292960FBC1F9CF34854D Validity Not Before: Jul 1 03:42:25 2025 GMT Not After : Jul 8 03:42:25 2025 GMT Subject: CN=68635921-61f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ab:d2:91:50:8e:98:69:6c:3a:70:82:3d:27: 8a:ae:6a:30:9e:9f:b9:30:91:41:58:41:2f:e7:e6: 03:f0:a2:b1:73:91:df:3f:a3:f2:32:11:db:54:07: fd:4b:d1:ef:b2:4a:84:a0:1f:0c:9e:7a:89:13:9c: 2b:56:17:7c:4f:ba:f6:08:5b:c4:ef:03:73:bb:b3: f2:f0:03:c4:20:60:09:cf:6a:28:b3:c2:b8:17:dd: 49:02:6f:8d:59:d3:50:d1:16:d4:b0:c3:ef:46:e4: 3d:dc:98:34:90:f9:18:57:78:88:fe:a3:98:dc:8f: ff:72:4e:a8:84:5e:0b:cb:f4:3b:42:09:7f:0d:34: 9f:7d:e6:62:8d:1b:40:32:e0:00:e4:0b:4f:95:f4: 89:84:98:09:44:56:ff:0c:42:40:11:70:7d:0c:79: fb:54:c0:1e:c3:54:5b:f3:96:df:ce:cd:6b:11:33: f9:91:5d:9a:b5:96:89:61:dd:ea:e4:f9:a6:80:1b: 1a:af:05:57:1d:a0:86:9f:e7:0f:70:db:57:5b:46: e0:1f:63:bc:f9:88:97:c0:65:f6:89:0c:ea:0b:1b: 03:18:94:db:ec:01:01:6b:53:54:60:b5:fc:48:df: 35:46:ec:ef:a8:5e:04:96:dc:47:43:1f:ad:8c:d6: 41:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:91:5C:77:99:C4:C6:E2:6E:2F:3C:CF:20:9D:1C:C9:84:7D:5B:9D X509v3 Authority Key Identifier: keyid:F7:4E:96:CA:9E:E9:36:07:45:64:29:29:60:FB:C1:F9:CF:34:85:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/906Wyp7pNgdFZCkpYPvB-c80hU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:9d:b5:9e:9e:dc:c3:0f:44:d2:55:3f:5f:87:b1:07:cb:0c: a3:33:8d:3a:01:3f:db:bf:59:53:3a:c4:51:d8:86:3a:5a:54: 79:6e:59:5b:7b:04:d8:fd:1a:b4:58:3c:9d:e6:71:33:9b:ab: f4:9d:00:ac:a1:20:73:35:cf:18:dd:42:ac:f6:1e:20:e1:88: d8:21:94:8c:c7:95:12:4b:09:42:65:58:07:eb:0b:1c:4e:86: 86:2c:fa:eb:88:84:aa:79:e8:ad:38:bf:49:26:fb:ac:c9:a2: 96:97:57:e7:f5:34:bd:63:68:f0:aa:f6:9f:65:d1:10:90:d3: 25:94:b2:b3:75:b1:b6:6a:23:8b:34:2b:36:d0:e8:d3:02:8a: dc:2a:af:85:cd:32:b5:2e:ff:51:07:a9:b1:07:f6:4b:03:92: 93:5a:42:f0:04:1d:ea:94:d3:52:65:71:4e:9b:4c:b0:c4:db: 18:da:f5:c6:3e:20:3c:13:76:98:cd:d0:27:68:7e:07:bc:30: f6:33:98:12:3a:2b:2e:70:f9:ed:a4:5e:20:c4:09:3b:b5:bc: 30:39:e6:bf:93:57:6a:3f:d6:62:3a:9a:a7:b5:d4:30:f0:7e: 6b:45:de:1b:9f:79:5e:2b:c1:2b:61:e2:c5:de:ac:b7:5d:49: eb:7d:d0:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAzMjkxMTAvBgNVBAUTKEY3NEU5NkNBOUVFOTM2MDc0NTY0MjkyOTYwRkJDMUY5 Q0YzNDg1NEQwHhcNMjUwNzAxMDM0MjI1WhcNMjUwNzA4MDM0MjI1WjAYMRYwFAYD VQQDEw02ODYzNTkyMS02MWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1qvSkVCOmGlsOnCCPSeKrmownp+5MJFBWEEv5+YD8KKxc5HfP6PyMhHbVAf9 S9HvskqEoB8MnnqJE5wrVhd8T7r2CFvE7wNzu7Py8APEIGAJz2oos8K4F91JAm+N WdNQ0RbUsMPvRuQ93Jg0kPkYV3iI/qOY3I//ck6ohF4Ly/Q7Qgl/DTSffeZijRtA MuAA5AtPlfSJhJgJRFb/DEJAEXB9DHn7VMAew1Rb85bfzs1rETP5kV2atZaJYd3q 5PmmgBsarwVXHaCGn+cPcNtXW0bgH2O8+YiXwGX2iQzqCxsDGJTb7AEBa1NUYLX8 SN81RuzvqF4EltxHQx+tjNZBdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAORXHeZ xMbibi88zyCdHMmEfVudMB8GA1UdIwQYMBaAFPdOlsqe6TYHRWQpKWD7wfnPNIVN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDMyOS80NUQ2RUZGQ0Qz OUQxMUVEQkJDQjI4MEZDNEY5QUUwMi85MDZXeXA3cE5nZEZaQ2twWVB2Qi1jODBo VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzkwNld5cDdwTmdkRlpDa3BZUHZCLWM4MGhVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDMyOS80NUQ2RUZGQ0QzOUQxMUVEQkJDQjI4MEZDNEY5QUUwMi85MDZXeXA3cE5n ZEZaQ2twWVB2Qi1jODBoVTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUnbWentzDD0TSVT9fh7EHywyjM406AT/bv1lTOsRR2IY6WlR5bllb ewTY/Rq0WDyd5nEzm6v0nQCsoSBzNc8Y3UKs9h4g4YjYIZSMx5USSwlCZVgH6wsc ToaGLPrriISqeeitOL9JJvusyaKWl1fn9TS9Y2jwqvafZdEQkNMllLKzdbG2aiOL NCs20OjTAorcKq+FzTK1Lv9RB6mxB/ZLA5KTWkLwBB3qlNNSZXFOm0ywxNsY2vXG PiA8E3aYzdAnaH4HvDD2M5gSOisucPntpF4gxAk7tbwwOea/k1dqP9ZiOpqntdQw 8H5rRd4bn3leK8ErYeLF3qy3XUnrfdAd -----END CERTIFICATE-----Generated at Tue Jul 1 10:02:54 2025 by rpki-client