$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft File: i6wN0-SRhYlP2uKChO3IBHILRhQ.mft (raw, json) Hash identifier: Ymq8FFs2H+lXP51IwB0ltGo+a1a/bkFjvUKdjixroFc= Subject key identifier: D6:7C:44:4C:6E:8B:A0:B8:F9:66:E8:DB:A4:80:6C:8B:34:52:92:DD Authority key identifier: 8B:AC:0D:D3:E4:91:85:89:4F:DA:E2:82:84:ED:C8:04:72:0B:46:14 Certificate issuer: /CN=A91EBFAE/serialNumber=8BAC0DD3E49185894FDAE28284EDC804720B4614 Certificate serial: 3498 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft Manifest number: 3498 Signing time: Mon 30 Jun 2025 14:36:01 +0000 Manifest this update: Mon 30 Jun 2025 14:36:01 +0000 Manifest next update: Mon 07 Jul 2025 14:36:01 +0000 Files and hashes: 1: i6wN0-SRhYlP2uKChO3IBHILRhQ.crl (hash: L74QHXrRHdqZeAwS1SXO1oYa3u+varT+jS6Lxq/+IE4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.crl rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 14:36:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13464 (0x3498) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBFAE, serialNumber=8BAC0DD3E49185894FDAE28284EDC804720B4614 Validity Not Before: Jun 30 14:36:01 2025 GMT Not After : Jul 7 14:36:01 2025 GMT Subject: CN=6862a0d1-3705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:da:5e:fb:71:cb:6d:6f:15:f5:60:06:6f:00: 90:1b:d5:d5:4d:73:c7:32:e5:51:bf:1d:14:cb:d4: 28:59:9c:61:91:ee:ee:17:f2:4f:1b:de:14:92:9c: 7a:ca:49:ee:e8:6d:75:d7:a6:90:56:38:de:8a:d9: ed:b3:99:01:b1:d5:6a:1a:be:62:dc:ed:7b:e3:29: ed:78:72:9a:07:4c:5d:86:2e:34:8d:72:dc:f2:09: b7:4f:ed:7e:b6:ef:95:a1:05:cb:cb:ae:f7:40:8d: 94:d9:13:d3:84:eb:a5:bc:e9:7b:bf:2d:0b:15:12: 2b:2b:bc:27:6f:14:13:42:73:41:c9:d8:98:37:5e: ac:86:ef:f1:7e:3b:fc:d7:34:4a:48:cd:3e:75:3c: cc:d9:e0:13:c7:0f:eb:bf:96:1e:79:38:68:eb:9d: bc:16:3f:2f:1b:9d:87:1a:2e:78:f8:54:6a:97:20: 74:0d:8d:f9:1f:f9:25:04:a5:8b:21:7c:ad:2d:e4: ae:90:85:ce:7d:e7:1b:a3:5e:51:0c:11:c4:31:c4: 24:ff:8c:7c:40:2c:70:1f:fa:08:36:0d:61:26:ba: 42:df:20:13:7c:1e:b9:4c:7d:f4:7b:21:34:71:e3: eb:4c:e6:49:a3:e5:b6:42:f4:7e:52:f3:12:d2:4a: 83:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:7C:44:4C:6E:8B:A0:B8:F9:66:E8:DB:A4:80:6C:8B:34:52:92:DD X509v3 Authority Key Identifier: keyid:8B:AC:0D:D3:E4:91:85:89:4F:DA:E2:82:84:ED:C8:04:72:0B:46:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:0c:d9:0b:4b:91:c7:25:71:e8:e2:d0:c7:c1:95:67:cc:b3: aa:4a:97:b6:30:f3:e3:cf:4b:8e:d7:cc:21:83:c5:1e:90:ca: d3:0c:39:18:b2:db:c7:81:f4:66:53:3d:c0:1d:5d:c9:26:79: 31:df:ba:01:eb:e2:84:30:97:e4:a3:67:00:87:8f:ab:e3:7c: 39:a6:70:20:7e:05:c4:8a:68:2f:21:f1:ee:ce:1b:94:9c:84: 2f:dd:59:d4:ee:08:e0:57:72:54:b4:3a:21:5f:c6:55:33:93: 35:4f:84:08:bf:25:32:72:89:03:bf:87:be:d4:4f:32:fe:3b: 8d:70:c8:d9:1e:81:8b:06:fc:aa:f7:a4:72:39:4a:3a:3b:06: 95:d8:c7:ea:eb:07:4e:9d:5c:02:70:db:e3:6b:27:a3:0f:13: b8:e2:0e:26:14:ec:6b:ba:25:cf:9b:66:1f:ea:37:57:5a:b2: 07:f4:74:6a:64:1e:f0:c6:e2:2f:7e:86:1d:4f:31:d3:13:01: 71:12:87:5b:f0:3d:24:c6:31:bd:eb:a5:82:9d:e3:bf:1f:a5: a6:f9:3f:3a:d4:b4:cb:bf:09:38:39:e1:f2:ed:4c:dd:cf:fc: 49:df:69:59:55:e4:0a:28:a9:a7:08:60:1f:c4:70:75:d9:40: 5f:99:ac:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJGQUUxMTAvBgNVBAUTKDhCQUMwREQzRTQ5MTg1ODk0RkRBRTI4Mjg0RURDODA0 NzIwQjQ2MTQwHhcNMjUwNjMwMTQzNjAxWhcNMjUwNzA3MTQzNjAxWjAYMRYwFAYD VQQDEw02ODYyYTBkMS0zNzA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4tpe+3HLbW8V9WAGbwCQG9XVTXPHMuVRvx0Uy9QoWZxhke7uF/JPG94Ukpx6 yknu6G1116aQVjjeitnts5kBsdVqGr5i3O174ynteHKaB0xdhi40jXLc8gm3T+1+ tu+VoQXLy673QI2U2RPThOulvOl7vy0LFRIrK7wnbxQTQnNBydiYN16shu/xfjv8 1zRKSM0+dTzM2eATxw/rv5YeeTho6528Fj8vG52HGi54+FRqlyB0DY35H/klBKWL IXytLeSukIXOfecbo15RDBHEMcQk/4x8QCxwH/oINg1hJrpC3yATfB65TH30eyE0 cePrTOZJo+W2QvR+UvMS0kqDQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNZ8RExu i6C4+Wbo26SAbIs0UpLdMB8GA1UdIwQYMBaAFIusDdPkkYWJT9rigoTtyARyC0YU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkZBRS8xNjhGRkQ2QzFE OEExMUUyOTBEMERFRTMwOEIwMkNEMi9pNndOMC1TUmhZbFAydUtDaE8zSUJISUxS aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2k2d04wLVNSaFlsUDJ1S0NoTzNJQkhJTFJoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkZBRS8xNjhGRkQ2QzFEOEExMUUyOTBEMERFRTMwOEIwMkNEMi9pNndOMC1TUmhZ bFAydUtDaE8zSUJISUxSaFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLDNkLS5HHJXHo4tDHwZVnzLOqSpe2MPPjz0uO18whg8UekMrTDDkY stvHgfRmUz3AHV3JJnkx37oB6+KEMJfko2cAh4+r43w5pnAgfgXEimgvIfHuzhuU nIQv3VnU7gjgV3JUtDohX8ZVM5M1T4QIvyUycokDv4e+1E8y/juNcMjZHoGLBvyq 96RyOUo6OwaV2Mfq6wdOnVwCcNvjayejDxO44g4mFOxruiXPm2Yf6jdXWrIH9HRq ZB7wxuIvfoYdTzHTEwFxEodb8D0kxjG966WCneO/H6Wm+T861LTLvwk4OeHy7Uzd z/xJ32lZVeQKKKmnCGAfxHB12UBfmaxS -----END CERTIFICATE-----Generated at Wed Jul 2 06:48:01 2025 by rpki-client