$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/s6HqYHo_df54qoQuuJCSWZEQ_cY.mft File: s6HqYHo_df54qoQuuJCSWZEQ_cY.mft (raw, json) Hash identifier: HU4EYmzIE+Gp7Jnhj9FvHLMcAvc51+Q0Hp9opclZG9Q= Subject key identifier: 27:51:85:1A:56:33:B2:BD:AC:0A:68:0E:C8:68:7C:A5:61:C8:71:F1 Authority key identifier: B3:A1:EA:60:7A:3F:75:FE:78:AA:84:2E:B8:90:92:59:91:10:FD:C6 Certificate issuer: /CN=A91F5BCC/serialNumber=B3A1EA607A3F75FE78AA842EB89092599110FDC6 Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s6HqYHo_df54qoQuuJCSWZEQ_cY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/s6HqYHo_df54qoQuuJCSWZEQ_cY.mft Manifest number: 5D Signing time: Thu 03 Jul 2025 07:21:51 +0000 Manifest this update: Thu 03 Jul 2025 07:21:51 +0000 Manifest next update: Thu 10 Jul 2025 07:21:50 +0000 Files and hashes: 1: s6HqYHo_df54qoQuuJCSWZEQ_cY.crl (hash: T57XzshzFXWkxfYxEjzn5WjGtHExzWyYWdmtFsqqEj8=) 2: 5FEB0DA8E90611EFA74B611DC4F9AE02.roa (hash: hwuul9zOvXSQLDdgabC6PgRyfpY9SzpmngkkmJxvu+k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/s6HqYHo_df54qoQuuJCSWZEQ_cY.crl rsync://rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/s6HqYHo_df54qoQuuJCSWZEQ_cY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s6HqYHo_df54qoQuuJCSWZEQ_cY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5BCC, serialNumber=B3A1EA607A3F75FE78AA842EB89092599110FDC6 Validity Not Before: Jul 3 07:21:51 2025 GMT Not After : Jul 10 07:21:50 2025 GMT Subject: CN=68662f8f-c8fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d0:ec:66:0f:d8:6b:98:ed:e5:25:49:a7:0e: fb:2f:0f:82:d8:aa:f8:ce:9d:0b:23:f0:1d:3c:98: 74:5d:03:5c:a8:df:77:2c:32:73:15:1f:0d:1b:2d: 95:29:1d:1d:8a:8e:0c:b4:8f:7f:dc:7c:b9:70:ac: 20:5d:d3:c2:de:36:9d:ee:17:89:b3:5c:0d:00:16: 91:65:73:b2:f4:50:20:a2:a9:ae:17:a2:80:de:8e: f1:c4:30:06:82:5e:9d:bb:4b:7d:ed:67:31:a7:52: c7:d5:4a:54:99:14:3e:7e:f4:5a:c1:df:ea:ac:fa: 2d:ff:d4:3a:6d:1f:91:a5:b6:35:f2:1b:3d:eb:f3: 4c:02:f8:0c:8f:f1:a3:5f:85:06:39:58:52:3b:d4: 80:27:10:3a:44:65:20:e0:d1:83:01:66:f6:94:ae: 49:03:b9:bc:02:e7:3b:a6:e8:5a:89:2b:de:0f:c3: 0d:89:ba:0c:ce:97:f9:3f:a2:7e:89:f3:03:bc:00: 0b:27:dc:9f:0d:c6:92:93:8e:0f:c2:f0:f5:f8:1f: 22:2b:42:d8:77:c9:34:e5:13:7a:75:9e:4c:09:cf: 69:e3:54:83:ab:d1:10:59:87:a5:e0:fa:98:87:db: 73:97:65:72:dc:ce:97:8f:70:23:8e:88:ab:22:8e: 15:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:51:85:1A:56:33:B2:BD:AC:0A:68:0E:C8:68:7C:A5:61:C8:71:F1 X509v3 Authority Key Identifier: keyid:B3:A1:EA:60:7A:3F:75:FE:78:AA:84:2E:B8:90:92:59:91:10:FD:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/s6HqYHo_df54qoQuuJCSWZEQ_cY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s6HqYHo_df54qoQuuJCSWZEQ_cY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/s6HqYHo_df54qoQuuJCSWZEQ_cY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:b4:0b:eb:21:96:b1:0b:de:10:5c:45:1a:74:19:33:5c:0f: f1:f5:1f:c0:bc:c0:80:1e:df:ae:2e:d2:ea:90:4a:50:55:f6: 60:e8:c9:86:d1:be:b7:3a:68:e2:12:d9:a5:4b:e5:67:a0:d4: b0:c9:be:62:7c:69:66:0a:e4:11:f0:87:ee:60:57:54:da:7a: e3:92:39:bf:04:33:05:02:c9:b7:e1:b1:a7:92:d4:78:a2:c3: 0d:8b:1a:bf:7f:c9:f1:3e:64:ae:cf:45:6b:b9:43:8a:92:6a: 8c:34:e7:be:5d:57:75:36:11:bf:41:f3:cb:c5:eb:07:fe:b9: b5:b4:a7:dc:57:98:e3:34:cc:00:c8:00:f2:ae:96:6a:5a:d8: b7:4b:72:50:70:40:9e:86:69:4a:bc:c3:72:05:e5:9d:ac:00: 42:04:a2:c0:23:ed:72:05:1f:1e:3c:71:18:99:d9:00:52:df: 4f:81:44:1a:01:27:35:52:90:13:fa:2e:6e:17:a4:13:75:bc: 02:34:d1:55:b5:70:e3:47:df:66:70:b7:28:ae:0c:d6:f8:3b: e0:56:83:19:d6:45:50:07:9f:16:65:38:2d:61:b1:c3:ef:7c: 38:a1:9b:cb:f8:32:83:e1:77:ff:b2:49:35:f3:4b:1b:2d:c7: 48:b1:21:68 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NUJDQzExMC8GA1UEBRMoQjNBMUVBNjA3QTNGNzVGRTc4QUE4NDJFQjg5MDkyNTk5 MTEwRkRDNjAeFw0yNTA3MDMwNzIxNTFaFw0yNTA3MTAwNzIxNTBaMBgxFjAUBgNV BAMTDTY4NjYyZjhmLWM4ZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC00OxmD9hrmO3lJUmnDvsvD4LYqvjOnQsj8B08mHRdA1yo33csMnMVHw0bLZUp HR2Kjgy0j3/cfLlwrCBd08LeNp3uF4mzXA0AFpFlc7L0UCCiqa4XooDejvHEMAaC Xp27S33tZzGnUsfVSlSZFD5+9FrB3+qs+i3/1DptH5GltjXyGz3r80wC+AyP8aNf hQY5WFI71IAnEDpEZSDg0YMBZvaUrkkDubwC5zum6FqJK94Pww2JugzOl/k/on6J 8wO8AAsn3J8NxpKTjg/C8PX4HyIrQth3yTTlE3p1nkwJz2njVIOr0RBZh6Xg+piH 23OXZXLczpePcCOOiKsijhVbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJ1GFGlYz sr2sCmgOyGh8pWHIcfEwHwYDVR0jBBgwFoAUs6HqYHo/df54qoQuuJCSWZEQ/cYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1QkNDL0IxMTgxQjEwQ0U3 ODExRUY4MEVGNEQ0NEM0RjlBRTAyL3M2SHFZSG9fZGY1NHFvUXV1SkNTV1pFUV9j WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvczZIcVlIb19kZjU0cW9RdXVKQ1NXWkVRX2NZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1 QkNDL0IxMTgxQjEwQ0U3ODExRUY4MEVGNEQ0NEM0RjlBRTAyL3M2SHFZSG9fZGY1 NHFvUXV1SkNTV1pFUV9jWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH+0C+shlrEL3hBcRRp0GTNcD/H1H8C8wIAe364u0uqQSlBV9mDoyYbR vrc6aOIS2aVL5Weg1LDJvmJ8aWYK5BHwh+5gV1TaeuOSOb8EMwUCybfhsaeS1Hii ww2LGr9/yfE+ZK7PRWu5Q4qSaow0575dV3U2Eb9B88vF6wf+ubW0p9xXmOM0zADI APKulmpa2LdLclBwQJ6GaUq8w3IF5Z2sAEIEosAj7XIFHx48cRiZ2QBS30+BRBoB JzVSkBP6Lm4XpBN1vAI00VW1cONH32ZwtyiuDNb4O+BWgxnWRVAHnxZlOC1hscPv fDihm8v4MoPhd/+ySTXzSxstx0ixIWg= -----END CERTIFICATE-----Generated at Thu Jul 3 23:19:40 2025 by rpki-client