$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.mft File: 6Is7I-CWdbQ3qDKJY8XNPOPpX-4.mft (raw, json) Hash identifier: Eya8uiATtUofZN6+Jf6reNfqF5K11PYo7eVZSfwRe3A= Subject key identifier: 31:66:74:6B:BD:DB:9D:DF:50:7D:0B:19:E5:25:13:55:F3:BE:7B:00 Authority key identifier: E8:8B:3B:23:E0:96:75:B4:37:A8:32:89:63:C5:CD:3C:E3:E9:5F:EE Certificate issuer: /CN=A91EBDB8/serialNumber=E88B3B23E09675B437A8328963C5CD3CE3E95FEE Certificate serial: 1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.mft Manifest number: 1C Signing time: Thu 03 Jul 2025 08:10:23 +0000 Manifest this update: Thu 03 Jul 2025 08:10:23 +0000 Manifest next update: Thu 10 Jul 2025 08:10:23 +0000 Files and hashes: 1: 6Is7I-CWdbQ3qDKJY8XNPOPpX-4.crl (hash: +KGPQfOdRbn80pW1x13XL+WxbDs91UXzjmfMlHslQAU=) 2: B0B587222FC911F0938FE136C4F9AE02.roa (hash: AJ6f5YKXMBqxmiNf5w59genHsLltTfcxiqmemHdhYMs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.crl rsync://rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBDB8, serialNumber=E88B3B23E09675B437A8328963C5CD3CE3E95FEE Validity Not Before: Jul 3 08:10:23 2025 GMT Not After : Jul 10 08:10:23 2025 GMT Subject: CN=68663aef-28b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a9:e4:10:a5:8b:e3:c1:fd:37:ab:01:15:75: 53:c9:7b:39:39:d8:ab:3f:ab:a0:55:6c:de:63:02: 21:28:fe:fa:4f:cc:ba:45:fd:54:9b:0d:1a:97:c2: dc:16:9d:26:6a:74:c3:4c:d2:0d:a3:9c:3e:45:8b: 47:4f:b9:b6:91:64:63:0d:1f:51:1a:83:ac:c6:fa: 4a:22:b6:66:9c:67:a2:d9:b4:cb:5c:19:c2:d0:70: c1:4f:97:ba:46:6d:c3:29:d0:f9:8d:60:2e:38:7b: 3f:4f:45:4f:5e:e7:43:e0:bd:ba:d7:bf:79:4c:69: 2c:b2:37:ca:19:32:98:ab:83:74:28:c9:dc:5c:ed: ef:00:72:e3:be:36:cd:d3:7b:12:19:2e:70:98:45: 8f:6d:0b:e2:9d:33:18:69:74:62:f2:92:34:52:d9: 51:ae:99:fb:b3:0e:6a:e1:0d:6e:46:34:76:00:22: d8:a0:5a:f6:16:63:ee:de:13:53:27:13:ec:c8:56: 5a:cd:da:71:27:3b:d4:eb:ea:96:1b:0b:97:b3:ea: 8b:ae:b7:36:fe:84:09:3c:f1:22:bf:61:34:c9:48: 9b:10:74:66:eb:1d:ea:ac:8a:53:62:8f:15:72:09: ae:d9:96:fc:ba:9e:37:f9:e2:0c:2b:ab:c9:54:2f: 4f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:66:74:6B:BD:DB:9D:DF:50:7D:0B:19:E5:25:13:55:F3:BE:7B:00 X509v3 Authority Key Identifier: keyid:E8:8B:3B:23:E0:96:75:B4:37:A8:32:89:63:C5:CD:3C:E3:E9:5F:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:6a:62:a7:25:f2:b0:ee:3b:60:60:19:c7:9f:42:41:4f:b7: 84:2c:7d:b0:fa:9c:ae:67:4d:e4:2e:d7:99:d7:68:62:fa:11: c8:4b:8c:68:6e:55:da:e9:ea:d9:46:a5:72:dc:e3:b0:96:53: 06:66:ca:dd:5d:ea:30:a3:de:ad:80:c8:7c:cb:d4:8f:c2:75: 99:a7:3f:e2:d2:66:f7:86:f3:aa:09:92:ab:14:c0:8b:33:4f: c2:37:a9:16:37:50:4a:63:8d:6c:76:1c:b6:81:48:99:33:c3: 0a:26:19:41:4e:e9:ad:58:09:d1:cc:63:0c:50:51:d8:82:c5: a6:da:44:68:f5:89:81:15:14:fe:e2:88:64:27:b9:ac:f3:4a: 6d:b0:1d:38:53:0c:5d:16:1f:67:18:d4:94:18:55:67:d5:1a: 1a:80:d0:50:c0:44:6e:42:5c:a5:c5:45:96:03:84:5d:91:72: 4c:6c:9c:1c:7b:27:07:5b:90:83:eb:3e:0e:fc:50:2c:56:69: 9a:91:62:63:d1:d2:32:4a:b5:50:9d:85:5b:81:ef:d8:6e:e1: 56:b0:33:cc:1b:9b:56:9a:f0:dd:5c:a6:45:68:ed:c9:ed:9e: 45:75:44:8b:20:8e:68:64:fc:ae:e4:99:5c:7b:b6:85:ff:36: 6e:2a:77:c1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QkRCODExMC8GA1UEBRMoRTg4QjNCMjNFMDk2NzVCNDM3QTgzMjg5NjNDNUNEM0NF M0U5NUZFRTAeFw0yNTA3MDMwODEwMjNaFw0yNTA3MTAwODEwMjNaMBgxFjAUBgNV BAMTDTY4NjYzYWVmLTI4YjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCiqeQQpYvjwf03qwEVdVPJezk52Ks/q6BVbN5jAiEo/vpPzLpF/VSbDRqXwtwW nSZqdMNM0g2jnD5Fi0dPubaRZGMNH1Eag6zG+koitmacZ6LZtMtcGcLQcMFPl7pG bcMp0PmNYC44ez9PRU9e50PgvbrXv3lMaSyyN8oZMpirg3Qoydxc7e8AcuO+Ns3T exIZLnCYRY9tC+KdMxhpdGLykjRS2VGumfuzDmrhDW5GNHYAItigWvYWY+7eE1Mn E+zIVlrN2nEnO9Tr6pYbC5ez6ouutzb+hAk88SK/YTTJSJsQdGbrHeqsilNijxVy Ca7Zlvy6njf54gwrq8lUL0/HAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMWZ0a73b nd9QfQsZ5SUTVfO+ewAwHwYDVR0jBBgwFoAU6Is7I+CWdbQ3qDKJY8XNPOPpX+4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCREI4Lzk4MjMwQjJDMkVG QjExRjA5MEUzNjM4NUM0RjlBRTAyLzZJczdJLUNXZGJRM3FES0pZOFhOUE9QcFgt NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNklzN0ktQ1dkYlEzcURLSlk4WE5QT1BwWC00LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC REI4Lzk4MjMwQjJDMkVGQjExRjA5MEUzNjM4NUM0RjlBRTAyLzZJczdJLUNXZGJR M3FES0pZOFhOUE9QcFgtNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB9qYqcl8rDuO2BgGcefQkFPt4QsfbD6nK5nTeQu15nXaGL6EchLjGhu Vdrp6tlGpXLc47CWUwZmyt1d6jCj3q2AyHzL1I/CdZmnP+LSZveG86oJkqsUwIsz T8I3qRY3UEpjjWx2HLaBSJkzwwomGUFO6a1YCdHMYwxQUdiCxabaRGj1iYEVFP7i iGQnuazzSm2wHThTDF0WH2cY1JQYVWfVGhqA0FDARG5CXKXFRZYDhF2RckxsnBx7 JwdbkIPrPg78UCxWaZqRYmPR0jJKtVCdhVuB79hu4VawM8wbm1aa8N1cpkVo7cnt nkV1RIsgjmhk/K7kmVx7toX/Nm4qd8E= -----END CERTIFICATE-----Generated at Thu Jul 3 10:18:10 2025 by rpki-client