$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7FB1/AAD69040543811ED938C6628C4F9AE02/6Mzcv70o1xGQ6JN_PapZWP1IFUE.mft File: 6Mzcv70o1xGQ6JN_PapZWP1IFUE.mft (raw, json) Hash identifier: 3fgyGOSQXzQGuO9c6aZfXxkhumgS7GD9gvRXOD3NUUA= Subject key identifier: A4:2E:1E:6D:8B:A7:92:38:94:4F:CA:03:AC:CE:BF:16:18:8F:33:DD Authority key identifier: E8:CC:DC:BF:BD:28:D7:11:90:E8:93:7F:3D:AA:59:58:FD:48:15:41 Certificate issuer: /CN=A91E7FB1/serialNumber=E8CCDCBFBD28D71190E8937F3DAA5958FD481541 Certificate serial: 01FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Mzcv70o1xGQ6JN_PapZWP1IFUE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7FB1/AAD69040543811ED938C6628C4F9AE02/6Mzcv70o1xGQ6JN_PapZWP1IFUE.mft Manifest number: 01F9 Signing time: Sat 05 Jul 2025 02:42:08 +0000 Manifest this update: Sat 05 Jul 2025 02:42:08 +0000 Manifest next update: Sat 12 Jul 2025 02:42:08 +0000 Files and hashes: 1: 6Mzcv70o1xGQ6JN_PapZWP1IFUE.crl (hash: LfDxyGLMRZJG85NzXfU/rW1tlCgcYm+q0GH150jpvHg=) 2: FE79EA9A543C11ED972CDD2FC4F9AE02.roa (hash: TXPIWerNT1GXv7TyCQJNbBBoD6VtScjOMdZFAdd3h8A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7FB1/AAD69040543811ED938C6628C4F9AE02/6Mzcv70o1xGQ6JN_PapZWP1IFUE.crl rsync://rpki.apnic.net/member_repository/A91E7FB1/AAD69040543811ED938C6628C4F9AE02/6Mzcv70o1xGQ6JN_PapZWP1IFUE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Mzcv70o1xGQ6JN_PapZWP1IFUE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 510 (0x1fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7FB1, serialNumber=E8CCDCBFBD28D71190E8937F3DAA5958FD481541 Validity Not Before: Jul 5 02:42:08 2025 GMT Not After : Jul 12 02:42:08 2025 GMT Subject: CN=68689100-2901 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f8:53:dd:5c:f3:27:cf:b3:6e:1a:3c:1b:b1: 2d:30:09:94:3f:ea:f9:2d:ca:14:67:c2:97:7e:e4: 78:43:d5:18:e1:09:80:4e:62:43:94:87:18:68:15: e8:df:a7:1c:18:b7:5b:f7:7e:3a:b1:5f:fe:1f:d3: 9e:c0:47:37:23:d9:3c:0a:b5:1b:21:02:3c:68:62: 15:cd:00:ba:87:9e:9e:fe:c7:38:c7:43:2d:88:1a: e6:3b:13:fe:d4:5e:a3:41:4b:3a:74:3b:99:5a:01: 8b:c4:00:96:cb:b4:1f:27:81:f1:d0:61:48:04:5d: c1:1d:0d:30:3b:5a:dd:19:91:b9:38:c7:46:13:e8: fe:e3:8c:84:51:3c:f3:db:8c:33:5e:25:12:05:7e: 8c:ca:32:8f:86:54:1c:7a:cd:5d:4a:84:79:33:f9: 2e:83:aa:13:c8:01:99:bf:56:97:90:f7:ef:d6:63: 66:c0:56:4f:a2:b3:75:b1:f3:50:a0:4e:36:6a:e8: 36:bd:53:64:bc:32:e0:18:e3:fa:8d:d6:94:48:62: a3:96:5b:66:a4:86:27:f9:e4:b2:79:e2:df:e2:55: f0:4e:b7:be:6f:22:cf:2e:b3:6e:71:36:86:55:1e: 8e:03:06:aa:2c:cf:b2:6a:7d:a2:56:c3:8e:63:be: 9a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:2E:1E:6D:8B:A7:92:38:94:4F:CA:03:AC:CE:BF:16:18:8F:33:DD X509v3 Authority Key Identifier: keyid:E8:CC:DC:BF:BD:28:D7:11:90:E8:93:7F:3D:AA:59:58:FD:48:15:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7FB1/AAD69040543811ED938C6628C4F9AE02/6Mzcv70o1xGQ6JN_PapZWP1IFUE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Mzcv70o1xGQ6JN_PapZWP1IFUE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7FB1/AAD69040543811ED938C6628C4F9AE02/6Mzcv70o1xGQ6JN_PapZWP1IFUE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:aa:84:3a:04:35:f1:96:d3:56:d4:e1:50:f0:a4:53:da:0d: 1e:08:f3:1c:56:7e:ec:4a:00:01:9f:f5:b0:56:87:d8:1f:28: 56:19:89:7b:d3:b9:47:a5:f0:2e:a2:1a:4c:db:b9:61:3a:ab: 3f:7f:a3:36:1b:4e:d3:4b:db:b9:63:ff:a6:fd:c2:f2:e0:ee: 4b:4f:6a:df:f1:45:ef:27:80:19:07:d7:44:ff:4b:af:66:a6: 4e:49:e1:89:e2:34:0e:fe:69:d7:c5:c4:2e:99:31:77:b8:38: 72:04:88:3b:77:58:e9:16:34:36:36:85:cf:bb:2f:10:82:90: c3:ff:c6:02:0a:02:3e:0b:4a:26:19:99:6c:b4:94:c8:7c:25: 0a:1f:3c:ce:41:50:a7:0f:34:15:2c:e8:cf:35:aa:82:fe:d8: 77:66:84:3b:71:ca:05:82:72:8e:4c:91:f2:86:1e:bc:ff:e5: f5:40:a8:a9:e8:88:6f:6a:7e:48:cd:97:63:12:f0:1c:31:44: 23:c9:e5:f5:29:85:40:5a:e3:c8:1a:08:1b:92:71:90:44:ef: e6:91:d7:2f:7b:01:e6:60:21:90:88:86:dd:31:64:f3:eb:06: 1e:ef:3e:3f:ed:a8:12:cd:0d:6b:e6:60:71:1d:98:eb:bd:5b: 93:02:0c:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdGQjExMTAvBgNVBAUTKEU4Q0NEQ0JGQkQyOEQ3MTE5MEU4OTM3RjNEQUE1OTU4 RkQ0ODE1NDEwHhcNMjUwNzA1MDI0MjA4WhcNMjUwNzEyMDI0MjA4WjAYMRYwFAYD VQQDEw02ODY4OTEwMC0yOTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvfhT3VzzJ8+zbho8G7EtMAmUP+r5LcoUZ8KXfuR4Q9UY4QmATmJDlIcYaBXo 36ccGLdb9346sV/+H9OewEc3I9k8CrUbIQI8aGIVzQC6h56e/sc4x0MtiBrmOxP+ 1F6jQUs6dDuZWgGLxACWy7QfJ4Hx0GFIBF3BHQ0wO1rdGZG5OMdGE+j+44yEUTzz 24wzXiUSBX6MyjKPhlQces1dSoR5M/kug6oTyAGZv1aXkPfv1mNmwFZPorN1sfNQ oE42aug2vVNkvDLgGOP6jdaUSGKjlltmpIYn+eSyeeLf4lXwTre+byLPLrNucTaG VR6OAwaqLM+yan2iVsOOY76aaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKQuHm2L p5I4lE/KA6zOvxYYjzPdMB8GA1UdIwQYMBaAFOjM3L+9KNcRkOiTfz2qWVj9SBVB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0ZCMS9BQUQ2OTA0MDU0 MzgxMUVEOTM4QzY2MjhDNEY5QUUwMi82TXpjdjcwbzF4R1E2Sk5fUGFwWldQMUlG VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZNemN2NzBvMXhHUTZKTl9QYXBaV1AxSUZVRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0ZCMS9BQUQ2OTA0MDU0MzgxMUVEOTM4QzY2MjhDNEY5QUUwMi82TXpjdjcwbzF4 R1E2Sk5fUGFwWldQMUlGVUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZqoQ6BDXxltNW1OFQ8KRT2g0eCPMcVn7sSgABn/WwVofYHyhWGYl7 07lHpfAuohpM27lhOqs/f6M2G07TS9u5Y/+m/cLy4O5LT2rf8UXvJ4AZB9dE/0uv ZqZOSeGJ4jQO/mnXxcQumTF3uDhyBIg7d1jpFjQ2NoXPuy8QgpDD/8YCCgI+C0om GZlstJTIfCUKHzzOQVCnDzQVLOjPNaqC/th3ZoQ7ccoFgnKOTJHyhh68/+X1QKip 6Ihvan5IzZdjEvAcMUQjyeX1KYVAWuPIGggbknGQRO/mkdcvewHmYCGQiIbdMWTz 6wYe7z4/7agSzQ1r5mBxHZjrvVuTAgzF -----END CERTIFICATE-----Generated at Sat Jul 5 18:19:41 2025 by rpki-client