$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft File: 6NbUISgrkBkAAJd2GiVjIjyngV4.mft (raw, json) Hash identifier: x01i7DnX0xD6/sg0EiD2SQLF/G/gG5/HwvtZYa5E0Dk= Subject key identifier: BA:61:6A:01:55:5E:A4:2C:A0:EA:1C:13:AE:D4:98:BC:D4:83:CC:A7 Authority key identifier: E8:D6:D4:21:28:2B:90:19:00:00:97:76:1A:25:63:22:3C:A7:81:5E Certificate issuer: /CN=A91EFCFF/serialNumber=E8D6D421282B9019000097761A2563223CA7815E Certificate serial: 8E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6NbUISgrkBkAAJd2GiVjIjyngV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft Manifest number: 8D Signing time: Thu 03 Jul 2025 06:41:01 +0000 Manifest this update: Thu 03 Jul 2025 06:41:01 +0000 Manifest next update: Thu 10 Jul 2025 06:41:01 +0000 Files and hashes: 1: 6NbUISgrkBkAAJd2GiVjIjyngV4.crl (hash: /Ov/6St2UROyw9i5HRJHINNEk95j6menHhtj4enOFTY=) 2: CCEAF60C911311EFA9C63854C4F9AE02.roa (hash: lpawVFjrLTQaiIY8ph0aOBiFjAIuxDOp5nWen5zsXsU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.crl rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6NbUISgrkBkAAJd2GiVjIjyngV4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFCFF, serialNumber=E8D6D421282B9019000097761A2563223CA7815E Validity Not Before: Jul 3 06:41:01 2025 GMT Not After : Jul 10 06:41:01 2025 GMT Subject: CN=686625fd-753f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d1:a8:ac:6c:c6:99:a1:fb:08:06:7b:56:f7: 34:c9:86:80:30:6d:b0:1c:77:60:6f:85:19:0c:7a: 1d:59:50:d4:a5:76:33:86:2e:a6:1d:57:f8:d5:9c: ba:3a:6e:10:6b:c5:51:ec:06:0a:a7:a7:d7:6b:41: aa:cc:67:fd:5b:bf:9e:56:5d:53:a8:ae:3d:29:54: 6f:35:6d:83:f8:9d:4e:7b:85:ff:4a:fb:69:6e:d7: 40:76:16:e2:bc:e7:c1:82:31:a4:39:ce:1b:f1:81: 74:6a:d5:88:9a:ca:25:0d:61:82:a2:1e:3e:cf:84: 19:37:51:a9:33:f2:a3:b3:13:91:4e:68:87:ae:ae: 04:4d:af:72:73:52:4c:10:04:43:1d:a3:d3:72:26: e4:88:fc:59:17:d3:e1:19:52:9d:f2:a6:d0:57:75: 88:3f:16:88:c6:e7:51:d1:e8:79:62:ce:9b:ae:fa: 5a:c9:70:0b:6c:96:2e:c0:68:cb:08:f2:37:07:77: 2b:22:fd:87:e3:c0:5e:3a:23:2d:6b:ae:ca:4e:57: cd:2d:6b:e9:1d:d2:47:88:a0:9e:40:da:15:53:75: 08:ff:51:08:74:db:8a:1e:d6:7d:1c:f1:e4:29:ee: 66:25:d8:89:4e:ea:4d:0a:9d:5b:f4:3f:a0:7e:1f: 43:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:61:6A:01:55:5E:A4:2C:A0:EA:1C:13:AE:D4:98:BC:D4:83:CC:A7 X509v3 Authority Key Identifier: keyid:E8:D6:D4:21:28:2B:90:19:00:00:97:76:1A:25:63:22:3C:A7:81:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6NbUISgrkBkAAJd2GiVjIjyngV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:21:23:f5:cb:b6:b8:22:b3:29:eb:9d:1d:4b:0f:29:e3:e4: 47:7d:20:e1:ae:0d:0b:4a:17:31:c2:83:92:bb:37:1e:f3:46: 08:b8:60:e5:56:26:7e:07:95:b4:35:48:3e:61:99:f5:5e:74: 4d:55:33:50:bb:ba:7e:0f:24:8d:a7:13:fb:5b:ec:6b:97:b2: e3:5a:78:e7:f1:82:8f:cf:20:4b:4c:ba:6f:31:b9:7f:db:df: b3:f8:63:81:93:1a:76:12:5a:fb:1b:35:31:f9:14:2b:4e:d8: 82:b9:f9:6a:12:4e:3c:14:e1:1e:fd:30:3d:ea:64:57:62:59: 4c:01:26:69:c3:20:b3:c9:97:c9:ea:b8:c6:0f:31:63:80:00: 14:1c:a9:49:4d:34:b8:bb:de:1f:2a:6a:5c:cc:2b:80:15:dc: 7c:73:21:e2:41:03:3a:39:d4:ea:6d:30:13:0b:78:7f:fb:e3: 25:e2:76:8b:0a:c2:3e:e5:62:96:18:1e:fd:c7:b6:82:6a:7a: 4a:6b:f3:c9:fb:1b:94:c1:1a:b5:05:1c:d2:7f:87:1e:b4:e4: 53:85:57:88:a3:72:ef:65:95:5c:94:ac:a8:cb:3a:52:06:c6: b4:48:cb:d8:35:08:06:c0:30:97:45:a9:b8:a4:57:3a:84:a5: 70:60:8e:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZDRkYxMTAvBgNVBAUTKEU4RDZENDIxMjgyQjkwMTkwMDAwOTc3NjFBMjU2MzIy M0NBNzgxNUUwHhcNMjUwNzAzMDY0MTAxWhcNMjUwNzEwMDY0MTAxWjAYMRYwFAYD VQQDEw02ODY2MjVmZC03NTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0tGorGzGmaH7CAZ7Vvc0yYaAMG2wHHdgb4UZDHodWVDUpXYzhi6mHVf41Zy6 Om4Qa8VR7AYKp6fXa0GqzGf9W7+eVl1TqK49KVRvNW2D+J1Oe4X/SvtpbtdAdhbi vOfBgjGkOc4b8YF0atWImsolDWGCoh4+z4QZN1GpM/KjsxORTmiHrq4ETa9yc1JM EARDHaPTcibkiPxZF9PhGVKd8qbQV3WIPxaIxudR0eh5Ys6brvpayXALbJYuwGjL CPI3B3crIv2H48BeOiMta67KTlfNLWvpHdJHiKCeQNoVU3UI/1EIdNuKHtZ9HPHk Ke5mJdiJTupNCp1b9D+gfh9DBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLphagFV XqQsoOocE67UmLzUg8ynMB8GA1UdIwQYMBaAFOjW1CEoK5AZAACXdholYyI8p4Fe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkNGRi8wRkE4NUY4ODgy MUYxMUVGQTFEQjRDNzVDNEY5QUUwMi82TmJVSVNncmtCa0FBSmQyR2lWaklqeW5n VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZOYlVJU2dya0JrQUFKZDJHaVZqSWp5bmdWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkNGRi8wRkE4NUY4ODgyMUYxMUVGQTFEQjRDNzVDNEY5QUUwMi82TmJVSVNncmtC a0FBSmQyR2lWaklqeW5nVjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgISP1y7a4IrMp650dSw8p4+RHfSDhrg0LShcxwoOSuzce80YIuGDl ViZ+B5W0NUg+YZn1XnRNVTNQu7p+DySNpxP7W+xrl7LjWnjn8YKPzyBLTLpvMbl/ 29+z+GOBkxp2Elr7GzUx+RQrTtiCuflqEk48FOEe/TA96mRXYllMASZpwyCzyZfJ 6rjGDzFjgAAUHKlJTTS4u94fKmpczCuAFdx8cyHiQQM6OdTqbTATC3h/++Ml4naL CsI+5WKWGB79x7aCanpKa/PJ+xuUwRq1BRzSf4cetORThVeIo3LvZZVclKyoyzpS Bsa0SMvYNQgGwDCXRam4pFc6hKVwYI5c -----END CERTIFICATE-----Generated at Thu Jul 3 15:12:41 2025 by rpki-client