$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft File: r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft (raw, json) Hash identifier: HJaOYfuSNXi+Ey4wqxpVBfPtopR4ZZ5mRaMbc8wni9E= Subject key identifier: B0:C8:2D:B5:7E:8C:15:DC:93:3A:3D:67:EE:75:4B:2D:C2:F7:37:77 Authority key identifier: AF:A6:D7:BD:C3:7B:64:C8:F1:46:EE:A6:17:36:D3:D4:51:78:FB:37 Certificate issuer: /CN=A91E8CB0/serialNumber=AFA6D7BDC37B64C8F146EEA61736D3D45178FB37 Certificate serial: 01F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft Manifest number: 01EB Signing time: Thu 03 Jul 2025 02:40:45 +0000 Manifest this update: Thu 03 Jul 2025 02:40:45 +0000 Manifest next update: Thu 10 Jul 2025 02:40:45 +0000 Files and hashes: 1: r6bXvcN7ZMjxRu6mFzbT1FF4-zc.crl (hash: 3mGsPcg0dxT6Den63HrjR0Vn0RBFJqawTiWQMkAPIMM=) 2: F11BA4EA75B811EDA34F9687C4F9AE02.roa (hash: ZxJWdKT+dhhJyfungVSpx3334JD5sGMO+S5A+zHFl74=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.crl rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:40:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 496 (0x1f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8CB0, serialNumber=AFA6D7BDC37B64C8F146EEA61736D3D45178FB37 Validity Not Before: Jul 3 02:40:45 2025 GMT Not After : Jul 10 02:40:45 2025 GMT Subject: CN=6865edad-314d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a9:df:50:15:1c:0a:2b:c2:a8:51:dd:d9:48: b5:d3:0a:60:bb:a0:46:57:ff:bc:29:93:56:25:44: bf:15:c8:4f:53:90:f1:3e:24:a3:61:65:60:a8:a7: ad:f6:a8:4b:dc:ba:8a:40:fc:0a:41:b3:f4:5b:df: e8:31:85:bd:b4:4e:45:13:25:0e:69:e4:56:0f:1b: b0:57:8b:1d:26:c0:fd:54:41:9a:31:69:a6:cc:13: 78:fe:b5:41:60:72:4a:52:88:34:d0:21:e4:d2:e1: 1c:43:35:e5:98:de:9b:d5:c5:73:72:af:91:be:76: 6d:5c:15:bf:70:28:14:b5:6d:e6:39:d6:58:35:ef: a8:ed:e4:92:9b:af:80:c3:9b:8b:35:ea:88:22:fb: 76:1b:a2:00:00:be:4f:11:26:0a:6b:63:38:e9:08: e0:82:cd:4e:1c:5c:4f:fa:a0:ec:67:e4:b3:fa:d6: 0c:e7:c0:87:cd:03:b0:86:3a:14:96:59:48:de:62: 96:d8:07:f1:e8:15:90:91:9b:88:a6:7f:02:f9:71: b6:e0:22:a4:f3:2a:80:a7:6b:55:ee:cc:62:51:95: 84:ce:45:a4:a2:39:0f:37:00:9b:a7:d6:61:35:d8: d5:4c:73:cf:c1:fc:47:97:a2:39:95:8d:cd:fb:13: a8:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:C8:2D:B5:7E:8C:15:DC:93:3A:3D:67:EE:75:4B:2D:C2:F7:37:77 X509v3 Authority Key Identifier: keyid:AF:A6:D7:BD:C3:7B:64:C8:F1:46:EE:A6:17:36:D3:D4:51:78:FB:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:7f:c9:2d:88:86:5f:93:9c:83:7c:1a:cd:4f:3e:cf:d6:f0: 99:05:43:13:9e:ae:3c:fc:b2:00:c7:ab:ae:ca:aa:63:a0:46: a5:ea:9f:f2:84:27:9b:ac:66:0d:85:e6:99:6c:de:ba:fb:03: 34:88:bd:92:86:21:7e:4f:00:b1:02:ed:01:4c:00:5e:b3:6f: 4e:2d:fe:f1:58:5c:94:2f:6c:0a:97:03:ce:a2:df:8b:76:ff: ea:12:91:00:fd:d7:84:51:46:47:2b:7c:9e:c2:98:c0:7f:27: 2b:71:09:99:74:ae:c9:e0:a5:7a:ac:48:c1:4d:aa:b0:2e:b2: 00:7a:92:81:dc:36:71:2b:4d:ac:bc:ad:01:7c:1b:41:2e:b7: c6:24:7e:76:1f:56:52:0d:01:89:61:77:cb:d4:b1:c4:a0:0b: eb:49:2e:3e:5f:e2:11:15:69:62:f5:50:0b:51:dd:1d:6f:9a: 9d:8c:dd:2d:54:78:ee:e1:70:8b:56:5a:93:ee:f6:5a:1b:d4: 38:b7:e3:77:52:df:f3:33:14:40:66:65:19:fd:8a:b5:e7:e2: 77:32:4b:3a:83:39:3e:11:36:80:80:72:25:2f:ef:09:86:52: 0a:c2:4f:85:be:dd:75:29:b9:bc:9b:11:07:36:f6:be:5f:ff: 0a:8e:ac:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThDQjAxMTAvBgNVBAUTKEFGQTZEN0JEQzM3QjY0QzhGMTQ2RUVBNjE3MzZEM0Q0 NTE3OEZCMzcwHhcNMjUwNzAzMDI0MDQ1WhcNMjUwNzEwMDI0MDQ1WjAYMRYwFAYD VQQDEw02ODY1ZWRhZC0zMTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA16nfUBUcCivCqFHd2Ui10wpgu6BGV/+8KZNWJUS/FchPU5DxPiSjYWVgqKet 9qhL3LqKQPwKQbP0W9/oMYW9tE5FEyUOaeRWDxuwV4sdJsD9VEGaMWmmzBN4/rVB YHJKUog00CHk0uEcQzXlmN6b1cVzcq+RvnZtXBW/cCgUtW3mOdZYNe+o7eSSm6+A w5uLNeqIIvt2G6IAAL5PESYKa2M46Qjggs1OHFxP+qDsZ+Sz+tYM58CHzQOwhjoU lllI3mKW2Afx6BWQkZuIpn8C+XG24CKk8yqAp2tV7sxiUZWEzkWkojkPNwCbp9Zh NdjVTHPPwfxHl6I5lY3N+xOoqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLDILbV+ jBXckzo9Z+51Sy3C9zd3MB8GA1UdIwQYMBaAFK+m173De2TI8Ubuphc209RRePs3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOENCMC8zNzcwMTI0RTZC QzUxMUVEODY2QTdENUVDNEY5QUUwMi9yNmJYdmNON1pNanhSdTZtRnpiVDFGRjQt emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I2Ylh2Y043Wk1qeFJ1Nm1GemJUMUZGNC16Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OENCMC8zNzcwMTI0RTZCQzUxMUVEODY2QTdENUVDNEY5QUUwMi9yNmJYdmNON1pN anhSdTZtRnpiVDFGRjQtemMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxf8ktiIZfk5yDfBrNTz7P1vCZBUMTnq48/LIAx6uuyqpjoEal6p/y hCebrGYNheaZbN66+wM0iL2ShiF+TwCxAu0BTABes29OLf7xWFyUL2wKlwPOot+L dv/qEpEA/deEUUZHK3yewpjAfycrcQmZdK7J4KV6rEjBTaqwLrIAepKB3DZxK02s vK0BfBtBLrfGJH52H1ZSDQGJYXfL1LHEoAvrSS4+X+IRFWli9VALUd0db5qdjN0t VHju4XCLVlqT7vZaG9Q4t+N3Ut/zMxRAZmUZ/Yq15+J3Mks6gzk+ETaAgHIlL+8J hlIKwk+Fvt11Kbm8mxEHNva+X/8KjqwN -----END CERTIFICATE-----Generated at Thu Jul 3 07:07:21 2025 by rpki-client