$ rpki-client -vvf rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft File: 6O2nHIlk0p8GwkorbRt3FTyo84k.mft (raw, json) Hash identifier: c/ysURLw6Ni+9YqWd9fkta4JmBaOUX75Pr8SCsmG2ag= Subject key identifier: C0:BE:5D:7E:36:C5:F6:B7:26:0F:46:F1:70:C8:48:3F:39:88:69:32 Authority key identifier: E8:ED:A7:1C:89:64:D2:9F:06:C2:4A:2B:6D:1B:77:15:3C:A8:F3:89 Certificate issuer: /CN=A91F724B/serialNumber=E8EDA71C8964D29F06C24A2B6D1B77153CA8F389 Certificate serial: 2092 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft Manifest number: 206D Signing time: Wed 02 Jul 2025 16:05:36 +0000 Manifest this update: Wed 02 Jul 2025 16:05:35 +0000 Manifest next update: Wed 09 Jul 2025 16:05:35 +0000 Files and hashes: 1: 6O2nHIlk0p8GwkorbRt3FTyo84k.crl (hash: fc4J43oURuD+oRJLyxuXB7uvgqXUCz89qaGcqtQnMZ8=) 2: D6702FB2C51411E7A0AC1A77C4F9AE02.roa (hash: dRYh9WAvcIumZjCZ5S62u32XoLkiqwXXygrg2DE1FBI=) 3: 36AB4096C51611E7AECA8B79C4F9AE02.roa (hash: 0oF1Qfg6/q63oXyqNiJvhv+IBvlt379syGArKmuw6+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.crl rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:05:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8338 (0x2092) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F724B, serialNumber=E8EDA71C8964D29F06C24A2B6D1B77153CA8F389 Validity Not Before: Jul 2 16:05:35 2025 GMT Not After : Jul 9 16:05:35 2025 GMT Subject: CN=686558cf-137b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:65:cb:13:69:b1:11:34:0d:20:a9:96:f5:81: df:6e:ea:82:1c:6f:50:3b:22:fc:63:f1:26:ca:e6: d0:3f:30:36:d3:8b:bc:e4:91:65:f9:bb:a5:c5:9c: 65:69:6c:71:94:2f:ce:e5:b1:db:53:39:8d:4f:7e: 37:52:86:fe:0b:51:89:50:19:f5:2b:18:b7:ee:a1: 02:a5:46:ee:10:31:96:6f:45:75:e5:55:9a:e9:dc: 0e:75:23:32:2e:1c:93:d5:5b:b5:d6:4a:a9:dc:9e: 84:3d:61:da:92:45:1a:8a:87:c5:a7:87:46:8a:09: d4:8f:4c:dc:f1:67:1b:2d:28:ae:00:0f:d4:c9:96: 4e:30:22:fe:95:f5:37:6e:5c:7d:7b:ef:68:a6:72: fd:8a:4a:a5:92:d0:9c:70:93:88:9b:31:72:73:7b: ea:dd:27:d8:82:6b:39:9e:f1:73:ab:10:7b:20:15: 7f:41:27:a2:c3:d0:8a:1a:bb:79:92:bd:7a:25:52: b9:05:ae:37:81:4b:55:72:03:97:4c:23:ce:c8:30: 28:48:57:3d:9c:e2:1e:f8:e7:6d:62:30:e2:58:6c: 2b:17:f7:f9:14:bf:44:61:dc:96:0e:95:fe:eb:9a: b1:91:53:44:22:cd:c4:c8:34:5f:f2:9d:52:92:27: fa:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:BE:5D:7E:36:C5:F6:B7:26:0F:46:F1:70:C8:48:3F:39:88:69:32 X509v3 Authority Key Identifier: keyid:E8:ED:A7:1C:89:64:D2:9F:06:C2:4A:2B:6D:1B:77:15:3C:A8:F3:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:ba:a6:0c:43:7b:9a:92:d2:60:bd:44:80:66:ae:77:3a:4d: f7:1b:05:5e:38:74:bb:d5:0c:52:bc:60:7f:a3:61:51:67:87: 1d:f6:62:9f:6f:3e:2e:72:65:44:02:d5:cf:2f:e8:4e:35:d3: fd:9d:80:0f:40:c3:7b:97:47:7d:c2:d0:24:b5:86:2c:df:93: 14:c6:a1:cc:0a:ca:5b:02:0f:b2:74:93:65:d3:97:c8:ef:04: d8:89:38:ea:14:37:f9:58:ec:a8:cb:fe:0c:0a:42:5a:e8:62: 7d:71:65:46:bc:42:78:2a:cb:92:a1:10:be:51:86:37:29:41: 30:d1:86:38:52:ff:b8:1d:5c:21:a3:5f:cf:25:b4:a8:c6:44: 05:dc:e0:de:48:81:6b:83:dd:ca:05:ff:95:14:ad:63:c6:da: 07:d2:8a:24:6f:92:32:c7:27:55:60:ef:13:f3:98:df:91:2e: a3:4f:af:2e:db:73:0b:e1:85:c8:13:36:b5:d9:5a:c7:83:ec: 3d:dd:c6:39:8c:ce:2c:81:73:85:12:07:69:dd:04:85:72:ba: 52:0a:28:89:56:40:70:7f:0f:2a:fb:df:3a:70:69:b9:43:a0: e3:59:60:c5:8e:84:89:a6:f8:09:d5:26:c5:20:69:4e:be:33: a8:f4:c5:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjcyNEIxMTAvBgNVBAUTKEU4RURBNzFDODk2NEQyOUYwNkMyNEEyQjZEMUI3NzE1 M0NBOEYzODkwHhcNMjUwNzAyMTYwNTM1WhcNMjUwNzA5MTYwNTM1WjAYMRYwFAYD VQQDEw02ODY1NThjZi0xMzdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo2XLE2mxETQNIKmW9YHfbuqCHG9QOyL8Y/EmyubQPzA204u85JFl+bulxZxl aWxxlC/O5bHbUzmNT343Uob+C1GJUBn1Kxi37qECpUbuEDGWb0V15VWa6dwOdSMy LhyT1Vu11kqp3J6EPWHakkUaiofFp4dGignUj0zc8WcbLSiuAA/UyZZOMCL+lfU3 blx9e+9opnL9ikqlktCccJOImzFyc3vq3SfYgms5nvFzqxB7IBV/QSeiw9CKGrt5 kr16JVK5Ba43gUtVcgOXTCPOyDAoSFc9nOIe+OdtYjDiWGwrF/f5FL9EYdyWDpX+ 65qxkVNEIs3EyDRf8p1Skif6+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMC+XX42 xfa3Jg9G8XDISD85iGkyMB8GA1UdIwQYMBaAFOjtpxyJZNKfBsJKK20bdxU8qPOJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzI0Qi8xQkM3MUE2MjE2 ODkxMUU2OEVFRkQ5N0JDNEY5QUUwMi82TzJuSElsazBwOEd3a29yYlJ0M0ZUeW84 NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZPMm5ISWxrMHA4R3drb3JiUnQzRlR5bzg0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzI0Qi8xQkM3MUE2MjE2ODkxMUU2OEVFRkQ5N0JDNEY5QUUwMi82TzJuSElsazBw OEd3a29yYlJ0M0ZUeW84NGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLuqYMQ3uaktJgvUSAZq53Ok33GwVeOHS71QxSvGB/o2FRZ4cd9mKf bz4ucmVEAtXPL+hONdP9nYAPQMN7l0d9wtAktYYs35MUxqHMCspbAg+ydJNl05fI 7wTYiTjqFDf5WOyoy/4MCkJa6GJ9cWVGvEJ4KsuSoRC+UYY3KUEw0YY4Uv+4HVwh o1/PJbSoxkQF3ODeSIFrg93KBf+VFK1jxtoH0ookb5IyxydVYO8T85jfkS6jT68u 23ML4YXIEza12VrHg+w93cY5jM4sgXOFEgdp3QSFcrpSCiiJVkBwfw8q+986cGm5 Q6DjWWDFjoSJpvgJ1SbFIGlOvjOo9MWI -----END CERTIFICATE-----Generated at Thu Jul 3 08:04:34 2025 by rpki-client