$ rpki-client -vvf rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.mft File: K6Guk7v1am9sllCE8EiBe7epjw8.mft (raw, json) Hash identifier: aKUIVa7b6WtuYFykfX6H8Aw9/u0aGBteXjpvCusuSxc= Subject key identifier: 28:28:90:BF:1B:24:B5:EF:10:98:6C:CF:5B:1E:3E:E6:52:3D:AD:2D Authority key identifier: 2B:A1:AE:93:BB:F5:6A:6F:6C:96:50:84:F0:48:81:7B:B7:A9:8F:0F Certificate issuer: /CN=A91F65C7/serialNumber=2BA1AE93BBF56A6F6C965084F048817BB7A98F0F Certificate serial: 0109 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/K6Guk7v1am9sllCE8EiBe7epjw8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.mft Manifest number: 0107 Signing time: Thu 03 Jul 2025 05:12:05 +0000 Manifest this update: Thu 03 Jul 2025 05:12:04 +0000 Manifest next update: Thu 10 Jul 2025 05:12:04 +0000 Files and hashes: 1: K6Guk7v1am9sllCE8EiBe7epjw8.crl (hash: YEwvZzihG/hY+M4L7ceQLNEpEP2O3zlinW7R+2alzbQ=) 2: 44673792C3E511EEA9660E85C4F9AE02.roa (hash: 9frZlnTUA25wzcLVRZfcMG1N4NRYNcJ6CAVrVhpGid0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.crl rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/K6Guk7v1am9sllCE8EiBe7epjw8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 265 (0x109) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F65C7, serialNumber=2BA1AE93BBF56A6F6C965084F048817BB7A98F0F Validity Not Before: Jul 3 05:12:04 2025 GMT Not After : Jul 10 05:12:04 2025 GMT Subject: CN=68661125-e842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1a:bc:87:00:48:e8:9d:21:b3:10:9b:fd:c0: 36:c7:b2:e9:e8:db:07:05:a6:97:f8:0e:b9:38:d7: b2:77:b5:68:bc:04:8b:79:ad:96:b2:b7:05:41:b5: d8:93:62:27:66:44:b9:63:53:c5:e5:df:f4:eb:44: 63:dd:6d:46:26:ae:1a:45:93:dc:ad:9f:d2:92:f0: 96:dd:8b:cb:a5:97:2f:37:af:a8:64:78:8d:a5:d2: 49:9c:90:b8:b1:6e:1c:5c:6d:69:9f:2e:49:53:01: 93:99:2c:3b:e8:26:e6:ad:d1:d6:1b:ae:6a:86:50: 78:c3:1b:8c:bc:6a:8b:bf:5a:51:c6:4a:f4:5e:37: dc:f0:3c:3b:cf:73:64:a1:e0:f0:2c:81:88:21:f5: 88:0b:fb:63:0f:20:28:07:42:d5:d6:82:3b:2e:c2: 78:19:30:5b:7e:34:5e:9c:9b:84:5b:47:a6:82:35: 2a:3b:62:f7:6e:5e:1c:f6:cf:37:3e:54:36:76:ed: e4:8b:c2:23:89:5f:a4:c0:c9:01:59:68:58:c3:91: 99:85:09:12:83:2f:fa:72:bd:71:34:4f:54:c3:6a: 24:1f:d4:4c:e3:ff:0d:4b:45:79:dd:ee:5b:58:53: 90:d9:f6:3f:78:8b:05:79:54:41:c6:67:b1:0c:43: 1e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:28:90:BF:1B:24:B5:EF:10:98:6C:CF:5B:1E:3E:E6:52:3D:AD:2D X509v3 Authority Key Identifier: keyid:2B:A1:AE:93:BB:F5:6A:6F:6C:96:50:84:F0:48:81:7B:B7:A9:8F:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/K6Guk7v1am9sllCE8EiBe7epjw8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:e3:4c:50:92:18:02:0a:cb:21:7f:94:4b:f5:a7:30:4d:ea: ca:ed:b0:80:0f:54:ce:29:1e:35:08:65:ca:b7:9e:23:04:d1: 2e:0b:f3:61:32:e2:44:e2:cb:8f:7c:cc:47:5b:9c:4d:bc:1e: c4:96:8b:21:b8:10:9d:cd:2f:43:5a:3c:ed:87:d1:30:12:5b: 30:04:73:4c:1b:b3:a0:b1:03:e0:4b:34:e0:61:38:4f:a1:73: f9:55:e2:d3:76:c8:86:59:e2:24:45:3e:1b:74:bc:8c:4f:a6: 61:bc:6a:61:7e:c9:72:dc:a0:4a:ff:14:28:99:9f:37:1a:7a: 49:a2:bf:6b:08:b3:0b:9b:bb:d2:cf:70:5b:62:f1:9a:b1:2f: 7f:76:40:80:be:d6:6b:76:93:7f:36:b4:b4:39:03:3e:ec:c8: a5:68:c9:6e:9d:b0:8d:12:ac:e8:25:45:b5:08:1d:f1:09:c3: 0c:c7:40:09:39:dc:7c:60:c3:2f:2b:33:d2:12:08:c4:68:41: a9:68:a6:8c:ac:d0:ab:88:ad:12:fd:df:ec:0c:73:cf:64:d7: 71:ce:ae:38:be:93:b7:5a:30:8a:d7:74:d2:6d:8a:43:67:66: bb:f0:1a:44:44:d3:f8:4c:ed:a6:74:1e:e6:74:b5:60:ed:ba: 1f:7c:7e:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY1QzcxMTAvBgNVBAUTKDJCQTFBRTkzQkJGNTZBNkY2Qzk2NTA4NEYwNDg4MTdC QjdBOThGMEYwHhcNMjUwNzAzMDUxMjA0WhcNMjUwNzEwMDUxMjA0WjAYMRYwFAYD VQQDEw02ODY2MTEyNS1lODQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvBq8hwBI6J0hsxCb/cA2x7Lp6NsHBaaX+A65ONeyd7VovASLea2WsrcFQbXY k2InZkS5Y1PF5d/060Rj3W1GJq4aRZPcrZ/SkvCW3YvLpZcvN6+oZHiNpdJJnJC4 sW4cXG1pny5JUwGTmSw76CbmrdHWG65qhlB4wxuMvGqLv1pRxkr0Xjfc8Dw7z3Nk oeDwLIGIIfWIC/tjDyAoB0LV1oI7LsJ4GTBbfjRenJuEW0emgjUqO2L3bl4c9s83 PlQ2du3ki8IjiV+kwMkBWWhYw5GZhQkSgy/6cr1xNE9Uw2okH9RM4/8NS0V53e5b WFOQ2fY/eIsFeVRBxmexDEMekwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCgokL8b JLXvEJhsz1sePuZSPa0tMB8GA1UdIwQYMBaAFCuhrpO79WpvbJZQhPBIgXu3qY8P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjVDNy9FM0JFQTQ3QUMz RTQxMUVFOTYxM0Y1ODNDNEY5QUUwMi9LNkd1azd2MWFtOXNsbENFOEVpQmU3ZXBq dzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0s2R3VrN3YxYW05c2xsQ0U4RWlCZTdlcGp3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjVDNy9FM0JFQTQ3QUMzRTQxMUVFOTYxM0Y1ODNDNEY5QUUwMi9LNkd1azd2MWFt OXNsbENFOEVpQmU3ZXBqdzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAU40xQkhgCCsshf5RL9acwTerK7bCAD1TOKR41CGXKt54jBNEuC/Nh MuJE4suPfMxHW5xNvB7EloshuBCdzS9DWjzth9EwElswBHNMG7OgsQPgSzTgYThP oXP5VeLTdsiGWeIkRT4bdLyMT6ZhvGphfsly3KBK/xQomZ83GnpJor9rCLMLm7vS z3BbYvGasS9/dkCAvtZrdpN/NrS0OQM+7MilaMlunbCNEqzoJUW1CB3xCcMMx0AJ Odx8YMMvKzPSEgjEaEGpaKaMrNCriK0S/d/sDHPPZNdxzq44vpO3WjCK13TSbYpD Z2a78BpERNP4TO2mdB7mdLVg7boffH5M -----END CERTIFICATE-----Generated at Thu Jul 3 23:08:49 2025 by rpki-client