$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft File: 6HFyjDosJtDmCABLp9Hlo1gwlWw.mft (raw, json) Hash identifier: fuOoeaRVAHqVelEzQTIeWXFARf3CbOvInQ2B+bxn2jA= Subject key identifier: 7D:5B:5B:50:1F:FF:9B:D8:D9:1A:40:E6:3F:E2:46:E4:62:8C:DD:09 Authority key identifier: E8:71:72:8C:3A:2C:26:D0:E6:08:00:4B:A7:D1:E5:A3:58:30:95:6C Certificate issuer: /CN=A91E6EFE/serialNumber=E871728C3A2C26D0E608004BA7D1E5A35830956C Certificate serial: 01F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HFyjDosJtDmCABLp9Hlo1gwlWw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft Manifest number: 01EC Signing time: Sat 05 Jul 2025 02:52:24 +0000 Manifest this update: Sat 05 Jul 2025 02:52:23 +0000 Manifest next update: Sat 12 Jul 2025 02:52:23 +0000 Files and hashes: 1: 6HFyjDosJtDmCABLp9Hlo1gwlWw.crl (hash: T4By8gsCe4jpLVZZeTZHlMYuxfr016uNdnQ6MsdluQI=) 2: 8367C13A6CA411ED9DD6425CC4F9AE02.roa (hash: qStgTKoKUIh+qGv4WydL84alI8T6N4vvNinWDR/WOZo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.crl rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HFyjDosJtDmCABLp9Hlo1gwlWw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 497 (0x1f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6EFE, serialNumber=E871728C3A2C26D0E608004BA7D1E5A35830956C Validity Not Before: Jul 5 02:52:23 2025 GMT Not After : Jul 12 02:52:23 2025 GMT Subject: CN=68689368-e4c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f4:e0:bc:0a:21:b8:0f:80:7e:85:a6:77:95: 32:94:6e:f8:c1:cd:d5:4a:6c:2e:66:55:ac:fd:27: 47:d3:1d:e5:7f:7e:24:d0:f1:9d:d8:e5:4f:c9:a3: a5:2a:3b:8a:d8:4b:5e:1e:44:a0:c5:87:32:17:73: 61:9c:77:b5:f2:d3:38:5b:8f:22:b3:58:0e:ad:de: 78:af:1d:28:46:ed:96:2b:4f:8e:c8:a4:80:ec:63: 56:ed:76:a7:15:c2:8b:0e:d2:36:45:4b:d6:69:de: b0:94:10:60:f7:a3:99:3b:78:f6:9c:54:98:dd:74: eb:0e:44:f7:d5:20:c8:11:43:53:a8:b0:af:2c:00: bf:89:37:29:3d:95:2e:ee:9b:95:cb:07:0b:39:fb: 84:39:08:2e:5c:84:d0:89:f5:f1:e8:eb:08:11:0f: eb:64:c5:e0:7d:67:39:02:b2:9f:0c:7c:1d:d5:56: bc:5f:dc:39:47:8a:7d:a7:10:e4:af:b3:30:fb:5a: fd:05:ca:2e:95:7a:68:a4:1c:7a:c0:be:0b:4a:b7: be:be:f8:82:2c:67:19:ee:46:4b:3f:78:f4:8e:9e: eb:4e:79:41:5c:85:59:20:6c:ee:e3:94:50:a7:d1: e9:39:20:e9:1a:8e:f6:96:3c:2a:56:38:70:4b:6b: 50:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:5B:5B:50:1F:FF:9B:D8:D9:1A:40:E6:3F:E2:46:E4:62:8C:DD:09 X509v3 Authority Key Identifier: keyid:E8:71:72:8C:3A:2C:26:D0:E6:08:00:4B:A7:D1:E5:A3:58:30:95:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HFyjDosJtDmCABLp9Hlo1gwlWw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:a2:fb:e0:da:d4:82:18:dd:23:6b:54:3d:10:c0:35:3e:1c: c2:e7:70:48:1f:cc:cd:df:43:fb:5e:15:ab:b8:f8:31:71:22: 5b:a6:70:ef:7b:f7:27:80:ba:b1:35:61:31:ed:2c:cc:d2:70: 78:5e:08:63:9f:8f:cc:ae:a0:55:c3:3a:6e:15:5a:40:eb:1a: c4:16:2d:49:c3:f9:13:69:53:18:53:25:e7:f0:7a:66:ac:4f: e6:1b:41:12:cc:7e:b9:45:1d:ba:db:c2:50:da:9c:7d:e1:33: 91:23:8b:bc:17:cb:0e:10:36:8b:55:b7:f9:3c:1b:5a:0f:3c: 7d:ad:f0:7c:72:2e:75:54:9c:b4:1a:7d:6d:5e:ee:4f:5e:6e: 64:df:63:74:0a:86:0d:07:53:bb:aa:55:62:a7:31:a3:26:40: 17:1a:93:0f:72:f0:fc:14:ba:a6:9c:2d:08:fc:ce:67:e8:a5: 4e:97:cb:3f:73:7d:fe:b0:e8:0c:c9:94:68:a6:5b:51:4e:c0: 87:e7:6a:5c:e1:32:42:8d:c7:04:73:e2:18:f9:f7:15:90:f6: 55:73:98:70:3e:ed:41:44:99:3d:b2:4b:8d:f1:86:99:b1:f7: 08:d8:fd:f8:44:c7:02:69:cf:eb:46:fa:57:85:fb:1b:82:db: 16:12:50:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZFRkUxMTAvBgNVBAUTKEU4NzE3MjhDM0EyQzI2RDBFNjA4MDA0QkE3RDFFNUEz NTgzMDk1NkMwHhcNMjUwNzA1MDI1MjIzWhcNMjUwNzEyMDI1MjIzWjAYMRYwFAYD VQQDEw02ODY4OTM2OC1lNGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2vTgvAohuA+AfoWmd5UylG74wc3VSmwuZlWs/SdH0x3lf34k0PGd2OVPyaOl KjuK2EteHkSgxYcyF3NhnHe18tM4W48is1gOrd54rx0oRu2WK0+OyKSA7GNW7Xan FcKLDtI2RUvWad6wlBBg96OZO3j2nFSY3XTrDkT31SDIEUNTqLCvLAC/iTcpPZUu 7puVywcLOfuEOQguXITQifXx6OsIEQ/rZMXgfWc5ArKfDHwd1Va8X9w5R4p9pxDk r7Mw+1r9BcoulXpopBx6wL4LSre+vviCLGcZ7kZLP3j0jp7rTnlBXIVZIGzu45RQ p9HpOSDpGo72ljwqVjhwS2tQqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH1bW1Af /5vY2RpA5j/iRuRijN0JMB8GA1UdIwQYMBaAFOhxcow6LCbQ5ggAS6fR5aNYMJVs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkVGRS9FNEMwMEQzQzZD QTExMUVEQjQ0RTc2NUJDNEY5QUUwMi82SEZ5akRvc0p0RG1DQUJMcDlIbG8xZ3ds V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZIRnlqRG9zSnREbUNBQkxwOUhsbzFnd2xXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkVGRS9FNEMwMEQzQzZDQTExMUVEQjQ0RTc2NUJDNEY5QUUwMi82SEZ5akRvc0p0 RG1DQUJMcDlIbG8xZ3dsV3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYovvg2tSCGN0ja1Q9EMA1PhzC53BIH8zN30P7XhWruPgxcSJbpnDv e/cngLqxNWEx7SzM0nB4Xghjn4/MrqBVwzpuFVpA6xrEFi1Jw/kTaVMYUyXn8Hpm rE/mG0ESzH65RR2628JQ2px94TORI4u8F8sOEDaLVbf5PBtaDzx9rfB8ci51VJy0 Gn1tXu5PXm5k32N0CoYNB1O7qlVipzGjJkAXGpMPcvD8FLqmnC0I/M5n6KVOl8s/ c33+sOgMyZRopltRTsCH52pc4TJCjccEc+IY+fcVkPZVc5hwPu1BRJk9skuN8YaZ sfcI2P34RMcCac/rRvpXhfsbgtsWElDT -----END CERTIFICATE-----Generated at Sat Jul 5 11:30:09 2025 by rpki-client