$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.mft File: l6zd4pEaCfOTXxhg2wV9TP9GssU.mft (raw, json) Hash identifier: xjRB2Vten1BR0CXAkW3NK8WUY1OaMWryWLJTuCKPk34= Subject key identifier: B6:E6:DC:C5:A1:9F:6A:EA:D6:CF:D6:73:1F:7A:42:A5:6E:86:01:43 Authority key identifier: 97:AC:DD:E2:91:1A:09:F3:93:5F:18:60:DB:05:7D:4C:FF:46:B2:C5 Certificate issuer: /CN=A91E7A75/serialNumber=97ACDDE2911A09F3935F1860DB057D4CFF46B2C5 Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6zd4pEaCfOTXxhg2wV9TP9GssU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.mft Manifest number: 21 Signing time: Sun 29 Jun 2025 06:53:51 +0000 Manifest this update: Sun 29 Jun 2025 06:53:50 +0000 Manifest next update: Sun 06 Jul 2025 06:53:50 +0000 Files and hashes: 1: l6zd4pEaCfOTXxhg2wV9TP9GssU.crl (hash: rathTf7U6lnAlUftV5uoHp9AWlvbEOvPdvBcEUuFvWY=) 2: 9E314E3A275211F09DB11A29C4F9AE02.roa (hash: xeAIE2lZn+YXNt0L7vlDN0DVHrs7CNulexHVxcXbegs=) 3: 7538A8FC275211F0A14FD328C4F9AE02.roa (hash: 1L8lUrtPjTnoEjcERsj866aTFLWQJPYnWRL13TGRub4=) 4: 9ECB0CF0275211F09DB11A29C4F9AE02.roa (hash: Pfe2htQw7FQ69zCdUGOvP9JJR+bvYFVzLzCF/2HMviU=) 5: 74B37F24275211F0A14FD328C4F9AE02.roa (hash: 5FSb2Jsk8vMB09hl36LtVE9KBpWP+PzKRBhhPkFdcWI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.crl rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6zd4pEaCfOTXxhg2wV9TP9GssU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 06:53:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7A75, serialNumber=97ACDDE2911A09F3935F1860DB057D4CFF46B2C5 Validity Not Before: Jun 29 06:53:50 2025 GMT Not After : Jul 6 06:53:50 2025 GMT Subject: CN=6860e2fe-f0c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c0:95:e6:4c:0d:36:9c:16:70:4d:c0:c3:9a: 8f:72:19:81:12:cd:a5:be:7d:ee:75:90:4b:d9:bb: 4c:5d:11:0d:28:4e:e8:d4:ed:ab:7a:d7:8c:b0:3d: 74:f8:06:85:e9:47:90:21:ad:5a:e2:26:d4:e4:d3: fd:95:98:9c:bc:2f:10:21:49:25:18:9b:40:05:36: 56:36:65:c6:64:2c:e0:83:ee:8f:3d:21:3b:bc:ed: 05:5c:f7:49:75:c8:62:33:bf:3d:98:2b:5b:a6:86: 28:d1:d5:58:2f:a7:e7:dc:88:19:c9:ff:ee:18:81: 2d:53:6e:85:9c:2e:46:61:c8:ef:a2:d3:7d:19:cd: db:06:10:06:b2:ba:da:80:12:e6:04:4b:cc:84:63: 37:61:c2:34:89:8f:c4:73:13:94:30:48:6d:08:07: 58:27:19:f3:93:72:ed:7c:e4:51:96:75:9c:0a:69: 06:4e:20:ba:84:fe:65:69:59:14:be:0e:62:d9:56: 58:e8:c5:9c:20:6c:bc:12:8f:5e:e1:69:82:5e:37: 11:68:4b:76:90:f4:2a:c0:44:ed:4f:fc:66:8e:02: 8d:67:6d:df:cb:aa:a2:d2:61:e3:81:a7:62:60:a6: 5f:f0:b1:35:06:af:10:12:f3:72:cf:79:68:8d:39: a1:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:E6:DC:C5:A1:9F:6A:EA:D6:CF:D6:73:1F:7A:42:A5:6E:86:01:43 X509v3 Authority Key Identifier: keyid:97:AC:DD:E2:91:1A:09:F3:93:5F:18:60:DB:05:7D:4C:FF:46:B2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6zd4pEaCfOTXxhg2wV9TP9GssU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:85:20:8f:1a:05:89:99:9e:3a:7f:c9:22:78:7d:70:9a:16: f2:85:48:41:7e:76:b1:61:a5:77:60:7d:48:1f:06:10:29:02: 8e:b0:42:94:e6:eb:b1:a2:03:c6:b9:5f:7a:be:1c:c9:c8:38: 68:3b:b0:22:b9:ef:7b:01:cd:27:b0:4b:3f:82:a7:b7:f2:9f: 62:18:47:83:34:81:eb:f7:90:9a:5c:96:66:d5:b3:06:98:3e: 57:ea:37:58:72:03:c8:6c:1f:1d:e0:f0:c5:97:44:e2:14:59: 4a:08:9f:40:51:f0:d2:98:77:3e:7a:fd:81:21:3a:9c:6b:f5: d7:4c:99:11:7a:85:9b:d3:ad:8c:49:2a:b4:6f:ec:3a:67:d2: 94:93:34:34:f0:1d:bb:ce:39:a1:b4:aa:57:00:78:52:d2:24: 22:9a:e6:84:41:55:3b:51:84:be:19:5e:f6:96:4d:ba:eb:f5: 79:da:05:8c:74:66:9f:ec:6d:64:63:0e:7c:c1:8b:a9:44:17: 90:2c:60:b8:ec:97:88:4e:4d:95:0b:7d:7e:c5:81:61:82:83: f9:ba:f1:2e:b4:01:fa:05:32:9f:cf:ee:64:da:fc:9f:63:9f: 34:a9:e2:af:c0:f0:16:27:14:78:d3:20:d0:f4:9d:a2:4b:3f: 29:cd:5b:69 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF N0E3NTExMC8GA1UEBRMoOTdBQ0RERTI5MTFBMDlGMzkzNUYxODYwREIwNTdENENG RjQ2QjJDNTAeFw0yNTA2MjkwNjUzNTBaFw0yNTA3MDYwNjUzNTBaMBgxFjAUBgNV BAMTDTY4NjBlMmZlLWYwYzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7wJXmTA02nBZwTcDDmo9yGYESzaW+fe51kEvZu0xdEQ0oTujU7at614ywPXT4 BoXpR5AhrVriJtTk0/2VmJy8LxAhSSUYm0AFNlY2ZcZkLOCD7o89ITu87QVc90l1 yGIzvz2YK1umhijR1Vgvp+fciBnJ/+4YgS1TboWcLkZhyO+i030ZzdsGEAayutqA EuYES8yEYzdhwjSJj8RzE5QwSG0IB1gnGfOTcu185FGWdZwKaQZOILqE/mVpWRS+ DmLZVljoxZwgbLwSj17haYJeNxFoS3aQ9CrARO1P/GaOAo1nbd/LqqLSYeOBp2Jg pl/wsTUGrxAS83LPeWiNOaFdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUtubcxaGf aurWz9ZzH3pCpW6GAUMwHwYDVR0jBBgwFoAUl6zd4pEaCfOTXxhg2wV9TP9GssUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU3QTc1L0U2RjRCNkRBMjc1 MTExRjBBQ0YwQUYyNEM0RjlBRTAyL2w2emQ0cEVhQ2ZPVFh4aGcyd1Y5VFA5R3Nz VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbDZ6ZDRwRWFDZk9UWHhoZzJ3VjlUUDlHc3NVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU3 QTc1L0U2RjRCNkRBMjc1MTExRjBBQ0YwQUYyNEM0RjlBRTAyL2w2emQ0cEVhQ2ZP VFh4aGcyd1Y5VFA5R3NzVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD6FII8aBYmZnjp/ySJ4fXCaFvKFSEF+drFhpXdgfUgfBhApAo6wQpTm 67GiA8a5X3q+HMnIOGg7sCK573sBzSewSz+Cp7fyn2IYR4M0gev3kJpclmbVswaY PlfqN1hyA8hsHx3g8MWXROIUWUoIn0BR8NKYdz56/YEhOpxr9ddMmRF6hZvTrYxJ KrRv7Dpn0pSTNDTwHbvOOaG0qlcAeFLSJCKa5oRBVTtRhL4ZXvaWTbrr9XnaBYx0 Zp/sbWRjDnzBi6lEF5AsYLjsl4hOTZULfX7FgWGCg/m68S60AfoFMp/P7mTa/J9j nzSp4q/A8BYnFHjTIND0naJLPynNW2k= -----END CERTIFICATE-----Generated at Mon Jun 30 19:52:38 2025 by rpki-client