$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.mft File: 6ibTI4Mc2ho4TpHg_jiR2wzrLsg.mft (raw, json) Hash identifier: Ht+rKUN4Fj4tlk4yWNYSvrk2umMRgC1OGLZ3vdD6KIU= Subject key identifier: 61:7A:E6:A3:33:BF:32:75:45:B1:1B:B0:61:34:9B:53:FC:CC:2B:FA Authority key identifier: EA:26:D3:23:83:1C:DA:1A:38:4E:91:E0:FE:38:91:DB:0C:EB:2E:C8 Certificate issuer: /CN=A91F6C39/serialNumber=EA26D323831CDA1A384E91E0FE3891DB0CEB2EC8 Certificate serial: 05BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.mft Manifest number: 05B5 Signing time: Wed 02 Jul 2025 23:26:43 +0000 Manifest this update: Wed 02 Jul 2025 23:26:42 +0000 Manifest next update: Wed 09 Jul 2025 23:26:42 +0000 Files and hashes: 1: 6ibTI4Mc2ho4TpHg_jiR2wzrLsg.crl (hash: i75wUBTjF9z/yv6gqJgw4UyH7FJiPg7UmITyK5Hypv0=) 2: 7EFC59BA5D0511EEB1F12C3BC4F9AE02.roa (hash: 2cmkD42QcbCRoSMZu579s8sayLfnS2VTqmE89GasVfM=) 3: 6F9ACE76CE7211EBAF46B61AC4F9AE02.roa (hash: wVYga0/tD85l8FSG82PbnxhnB2SkjvEdIkkyzqmMiv0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.crl rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:26:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1471 (0x5bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6C39, serialNumber=EA26D323831CDA1A384E91E0FE3891DB0CEB2EC8 Validity Not Before: Jul 2 23:26:42 2025 GMT Not After : Jul 9 23:26:42 2025 GMT Subject: CN=6865c033-ea7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:db:1c:aa:37:b4:ab:a8:67:3a:71:6f:69:bb: a7:a2:2d:2b:7e:94:ab:7f:04:52:2c:07:ce:26:b3: 4d:a7:c2:e0:51:00:87:2d:45:ca:50:0b:24:27:75: 37:31:56:4e:7d:ef:84:b1:0d:69:6b:ac:e1:c2:a8: 02:2f:37:3d:a4:b6:3b:8d:f0:fb:3b:98:9f:ef:30: 35:1c:f4:9a:c9:17:38:78:cb:d0:ab:6f:6c:d9:4a: 55:90:e1:6a:1a:57:3c:eb:b8:8c:86:ce:96:59:9e: ee:f9:5a:fd:c6:8c:46:48:2d:e4:de:d0:71:39:a4: 3b:a4:51:bf:93:98:38:13:ab:76:41:d4:df:55:95: 71:00:ee:3c:a4:d7:0f:7f:4b:5f:61:52:96:cb:41: 28:ea:fd:9c:36:2e:5b:e1:04:67:80:c2:c5:90:34: df:1d:2f:d6:c2:bd:1e:79:05:89:83:cc:b5:2e:d8: 4d:76:4d:fd:06:e6:a0:0e:2b:db:11:3d:1d:d6:bf: ba:aa:a7:f5:76:92:7d:05:d6:5f:59:f6:ea:ee:a4: ff:fe:ee:2e:69:39:af:c6:32:da:c2:4b:50:f7:35: 5f:c0:67:af:cf:21:08:10:b2:3a:65:c0:27:4e:a6: a3:20:83:1e:f7:de:fc:ff:0a:e1:85:5e:24:71:86: 6d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:7A:E6:A3:33:BF:32:75:45:B1:1B:B0:61:34:9B:53:FC:CC:2B:FA X509v3 Authority Key Identifier: keyid:EA:26:D3:23:83:1C:DA:1A:38:4E:91:E0:FE:38:91:DB:0C:EB:2E:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:85:a3:1b:20:48:46:77:22:30:b1:42:a0:0d:5c:1d:41:c9: 68:ed:17:db:c6:14:56:76:fe:41:ec:24:06:e2:0d:38:01:b4: 92:bb:1c:ac:a4:5e:97:e9:80:a2:1e:38:f0:0b:b6:c3:71:40: 9c:37:b3:c3:af:69:61:5a:1d:c7:d9:1a:f4:19:2d:d1:0a:a8: 04:e5:f1:1b:fd:41:6e:43:6a:66:1c:ac:67:e0:5c:68:6c:3a: 70:3b:25:cc:b7:c2:10:7f:e7:6b:3d:af:83:d0:08:75:d0:d4: e7:92:8e:ce:a2:40:1d:4b:96:1f:3a:1c:2a:84:bc:6f:ea:0c: 49:6a:c8:72:39:f7:fd:b3:4d:68:06:4f:54:ff:07:e2:1d:21: e0:bb:07:d9:4e:c8:70:a2:56:75:0f:59:0e:a8:bf:c0:22:d4: cd:d2:2c:20:f7:f6:c3:da:ce:f9:a5:02:1e:ea:2d:b1:5f:2a: 05:1d:f8:67:60:21:11:18:da:40:32:c4:63:b0:a5:bd:eb:38: d6:06:14:ad:b8:6d:a8:ba:14:b0:b7:37:21:02:23:9f:54:3d: d4:6d:40:9a:d1:b3:ea:7d:a3:1a:db:05:ca:e8:16:eb:3e:39: b5:e2:35:41:55:94:b2:d2:e4:6a:db:e2:c4:0b:08:02:7e:65: 0c:bb:dd:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZDMzkxMTAvBgNVBAUTKEVBMjZEMzIzODMxQ0RBMUEzODRFOTFFMEZFMzg5MURC MENFQjJFQzgwHhcNMjUwNzAyMjMyNjQyWhcNMjUwNzA5MjMyNjQyWjAYMRYwFAYD VQQDEw02ODY1YzAzMy1lYTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0dscqje0q6hnOnFvabunoi0rfpSrfwRSLAfOJrNNp8LgUQCHLUXKUAskJ3U3 MVZOfe+EsQ1pa6zhwqgCLzc9pLY7jfD7O5if7zA1HPSayRc4eMvQq29s2UpVkOFq Glc867iMhs6WWZ7u+Vr9xoxGSC3k3tBxOaQ7pFG/k5g4E6t2QdTfVZVxAO48pNcP f0tfYVKWy0Eo6v2cNi5b4QRngMLFkDTfHS/Wwr0eeQWJg8y1LthNdk39BuagDivb ET0d1r+6qqf1dpJ9BdZfWfbq7qT//u4uaTmvxjLawktQ9zVfwGevzyEIELI6ZcAn TqajIIMe9978/wrhhV4kcYZtAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGF65qMz vzJ1RbEbsGE0m1P8zCv6MB8GA1UdIwQYMBaAFOom0yODHNoaOE6R4P44kdsM6y7I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkMzOS83QkYwRjI3NENF NzAxMUVCQTdFMDlCMUFDNEY5QUUwMi82aWJUSTRNYzJobzRUcEhnX2ppUjJ3enJM c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZpYlRJNE1jMmhvNFRwSGdfamlSMnd6ckxzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkMzOS83QkYwRjI3NENFNzAxMUVCQTdFMDlCMUFDNEY5QUUwMi82aWJUSTRNYzJo bzRUcEhnX2ppUjJ3enJMc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARhaMbIEhGdyIwsUKgDVwdQclo7RfbxhRWdv5B7CQG4g04AbSSuxys pF6X6YCiHjjwC7bDcUCcN7PDr2lhWh3H2Rr0GS3RCqgE5fEb/UFuQ2pmHKxn4Fxo bDpwOyXMt8IQf+drPa+D0Ah10NTnko7OokAdS5YfOhwqhLxv6gxJashyOff9s01o Bk9U/wfiHSHguwfZTshwolZ1D1kOqL/AItTN0iwg9/bD2s75pQIe6i2xXyoFHfhn YCERGNpAMsRjsKW96zjWBhStuG2ouhSwtzchAiOfVD3UbUCa0bPqfaMa2wXK6Bbr Pjm14jVBVZSy0uRq2+LECwgCfmUMu91T -----END CERTIFICATE-----Generated at Thu Jul 3 06:15:34 2025 by rpki-client