$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.mft File: 6o2GS70rsdeM2IkKFQThETZ_ehM.mft (raw, json) Hash identifier: EmfeehbADr1VVTNDF41dasXki4HeL/T4L5LCpyog+zk= Subject key identifier: D2:63:E5:F3:A7:99:19:F7:61:6F:C7:98:73:F5:17:F3:6B:08:30:ED Authority key identifier: EA:8D:86:4B:BD:2B:B1:D7:8C:D8:89:0A:15:04:E1:11:36:7F:7A:13 Certificate issuer: /CN=A91F6E65/serialNumber=EA8D864BBD2BB1D78CD8890A1504E111367F7A13 Certificate serial: 124F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6o2GS70rsdeM2IkKFQThETZ_ehM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.mft Manifest number: 1248 Signing time: Sat 28 Jun 2025 16:57:59 +0000 Manifest this update: Sat 28 Jun 2025 16:57:59 +0000 Manifest next update: Sat 05 Jul 2025 16:57:59 +0000 Files and hashes: 1: 6o2GS70rsdeM2IkKFQThETZ_ehM.crl (hash: SJuVCiiVOgbNu21vdWiCRUjPHVgBYa9BI9Ljn8NbrgE=) 2: F87DE4E2518011E98D519C48C4F9AE02.roa (hash: lNg/c5OqFouAW+fJH2dEOVDXDmJq4ytAeqadsiAMyGA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.crl rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6o2GS70rsdeM2IkKFQThETZ_ehM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 16:57:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4687 (0x124f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6E65, serialNumber=EA8D864BBD2BB1D78CD8890A1504E111367F7A13 Validity Not Before: Jun 28 16:57:59 2025 GMT Not After : Jul 5 16:57:59 2025 GMT Subject: CN=68601f17-f92d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c5:a4:d2:d2:7f:18:42:b0:20:62:26:63:ec: 2a:4c:52:58:e7:6b:18:4e:18:f4:39:14:c1:51:a1: 8c:1d:b2:85:23:83:3f:ce:44:3f:d4:80:95:97:dd: cc:eb:4e:bb:ca:5a:23:5b:78:68:81:bd:e8:a8:62: fc:e6:96:67:73:14:e0:13:78:23:3c:9c:96:be:e3: d5:5c:25:6b:14:7a:39:0f:30:5c:73:76:d5:5e:f1: 06:0d:69:c6:bf:a5:2c:76:33:a9:2a:2a:a8:8f:fd: 67:2f:6d:97:67:9c:fd:f9:3c:f7:b3:dc:be:0c:90: e7:71:60:c2:0c:b6:e4:00:03:bf:df:66:7c:08:81: 6f:a2:3f:34:ed:fc:78:9d:d1:c7:ad:d3:43:46:e4: 2a:01:70:3c:3d:11:d1:3f:f7:19:f4:a7:7e:b4:ee: 1e:27:18:3c:8e:6b:f9:94:76:3d:a3:ec:9e:66:24: 2e:5d:e7:9c:4d:43:1d:e1:3d:35:8e:9d:e1:74:49: aa:a6:41:55:e1:c7:6a:29:27:65:54:ed:dd:70:70: 9c:47:89:3f:9a:3a:30:3b:8e:a0:8c:40:5c:78:f2: 98:8e:d8:77:91:0a:22:dc:05:8b:69:dd:66:a7:78: fe:e6:7d:1d:db:52:eb:ae:ea:af:af:0b:6c:67:70: 07:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:63:E5:F3:A7:99:19:F7:61:6F:C7:98:73:F5:17:F3:6B:08:30:ED X509v3 Authority Key Identifier: keyid:EA:8D:86:4B:BD:2B:B1:D7:8C:D8:89:0A:15:04:E1:11:36:7F:7A:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6o2GS70rsdeM2IkKFQThETZ_ehM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:7c:af:4d:82:33:27:a4:ab:54:76:60:70:86:fd:6f:74:27: 5f:ec:dd:f0:04:98:51:de:ae:e0:73:d7:fd:5d:eb:a0:6c:53: 23:7f:51:1f:0c:b4:8d:eb:b9:1c:25:c1:c5:21:a1:f2:d4:62: 8e:aa:c8:72:a6:52:86:57:2e:67:46:bf:8d:46:2b:69:03:41: 27:e7:16:b9:6a:50:9e:69:b7:4e:98:6a:40:d1:b7:13:cf:7b: 39:b0:6a:6f:6e:05:19:bb:83:ed:03:2d:13:6d:36:33:bd:79: 69:a6:ce:13:08:d3:01:bc:76:26:93:10:8a:15:d6:ac:82:63: ef:56:ae:65:a1:b6:30:29:64:39:ba:92:3b:b5:96:39:7a:3e: e8:bf:11:7a:b1:cb:31:ad:9b:f4:56:dd:f6:df:fc:93:c4:93: 53:cd:a4:37:54:a1:4a:68:e9:a5:e7:c7:fe:6e:34:30:ea:20: 18:8b:b1:c9:f1:c5:5c:7d:95:05:a5:6f:ef:b9:cc:91:13:89: 76:ca:aa:ea:f5:e6:12:9b:10:0f:50:dd:d4:cb:17:33:4f:5c: d7:b8:fa:7b:c0:c4:09:3a:ad:4e:28:5c:4c:05:6c:1e:ef:bd: e8:3c:22:e7:91:d2:c0:ba:99:5a:e5:5f:e4:ed:6d:f9:ab:a5: 12:85:a8:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZFNjUxMTAvBgNVBAUTKEVBOEQ4NjRCQkQyQkIxRDc4Q0Q4ODkwQTE1MDRFMTEx MzY3RjdBMTMwHhcNMjUwNjI4MTY1NzU5WhcNMjUwNzA1MTY1NzU5WjAYMRYwFAYD VQQDEw02ODYwMWYxNy1mOTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApcWk0tJ/GEKwIGImY+wqTFJY52sYThj0ORTBUaGMHbKFI4M/zkQ/1ICVl93M 6067ylojW3hogb3oqGL85pZncxTgE3gjPJyWvuPVXCVrFHo5DzBcc3bVXvEGDWnG v6UsdjOpKiqoj/1nL22XZ5z9+Tz3s9y+DJDncWDCDLbkAAO/32Z8CIFvoj807fx4 ndHHrdNDRuQqAXA8PRHRP/cZ9Kd+tO4eJxg8jmv5lHY9o+yeZiQuXeecTUMd4T01 jp3hdEmqpkFV4cdqKSdlVO3dcHCcR4k/mjowO46gjEBcePKYjth3kQoi3AWLad1m p3j+5n0d21LrruqvrwtsZ3AH0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNJj5fOn mRn3YW/HmHP1F/NrCDDtMB8GA1UdIwQYMBaAFOqNhku9K7HXjNiJChUE4RE2f3oT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkU2NS9GRUQ5M0E3Q0Q4 OEExMUU4QTNFQ0ZGNERDNEY5QUUwMi82bzJHUzcwcnNkZU0ySWtLRlFUaEVUWl9l aE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZvMkdTNzByc2RlTTJJa0tGUVRoRVRaX2VoTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkU2NS9GRUQ5M0E3Q0Q4OEExMUU4QTNFQ0ZGNERDNEY5QUUwMi82bzJHUzcwcnNk ZU0ySWtLRlFUaEVUWl9laE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6fK9NgjMnpKtUdmBwhv1vdCdf7N3wBJhR3q7gc9f9XeugbFMjf1Ef DLSN67kcJcHFIaHy1GKOqshyplKGVy5nRr+NRitpA0En5xa5alCeabdOmGpA0bcT z3s5sGpvbgUZu4PtAy0TbTYzvXlpps4TCNMBvHYmkxCKFdasgmPvVq5lobYwKWQ5 upI7tZY5ej7ovxF6scsxrZv0Vt323/yTxJNTzaQ3VKFKaOml58f+bjQw6iAYi7HJ 8cVcfZUFpW/vucyRE4l2yqrq9eYSmxAPUN3UyxczT1zXuPp7wMQJOq1OKFxMBWwe 773oPCLnkdLAupla5V/k7W35q6UShaih -----END CERTIFICATE-----Generated at Sun Jun 29 20:27:59 2025 by rpki-client