$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft File: 6XepImIg6MeKHRs74E1gzcyKIYg.mft (raw, json) Hash identifier: +J+AkL6L1lfiBNuQsJgywNEXnqc4ViZKGS6xdo8eUuQ= Subject key identifier: D9:52:A7:DA:43:D0:94:F2:5F:B1:74:15:3A:3E:AB:27:A0:3C:04:DC Authority key identifier: E9:77:A9:22:62:20:E8:C7:8A:1D:1B:3B:E0:4D:60:CD:CC:8A:21:88 Certificate issuer: /CN=A91FC5BD/serialNumber=E977A9226220E8C78A1D1B3BE04D60CDCC8A2188 Certificate serial: D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XepImIg6MeKHRs74E1gzcyKIYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft Manifest number: CF Signing time: Thu 03 Jul 2025 05:50:27 +0000 Manifest this update: Thu 03 Jul 2025 05:50:27 +0000 Manifest next update: Thu 10 Jul 2025 05:50:27 +0000 Files and hashes: 1: 6XepImIg6MeKHRs74E1gzcyKIYg.crl (hash: wjZJQd1gbfEvH8w9UanF1GgN6hbtEZ4WTB2j5+3XrW8=) 2: 1101B5C01CEC11EFA7CDC085C4F9AE02.roa (hash: BZA1P97SNGTrhAAl2/Ui2Ojz/Jo4Dfx0oXuCfnfQd+I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.crl rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XepImIg6MeKHRs74E1gzcyKIYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC5BD, serialNumber=E977A9226220E8C78A1D1B3BE04D60CDCC8A2188 Validity Not Before: Jul 3 05:50:27 2025 GMT Not After : Jul 10 05:50:27 2025 GMT Subject: CN=68661a23-b9bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:30:d0:f8:f5:29:21:04:0a:da:56:0f:19:38: 5a:23:b5:b8:98:ef:e7:31:6c:25:c6:49:50:81:c4: 46:c4:fa:e8:cf:05:a6:0c:c6:96:9a:3d:e3:47:28: 7b:3f:a0:cf:c0:9d:82:06:bb:9f:ca:29:b9:58:5f: db:97:34:7b:51:ff:65:64:42:80:da:d9:0b:80:d7: 59:f6:2e:d7:50:5b:43:6d:b1:50:6d:12:a3:0a:4b: 73:d1:3a:67:16:94:17:7b:ed:43:df:29:cd:a3:cd: 61:96:47:45:f5:68:d4:20:fd:6b:fc:dc:c8:61:c4: 31:cd:bc:3e:96:68:3c:c1:57:61:53:d1:cb:2b:6e: 4f:37:7c:43:4e:51:fc:9a:e0:25:aa:7c:cb:43:1e: 23:f0:83:68:a5:4b:27:5b:81:f5:f4:d1:da:f3:75: 76:a4:3d:d4:dd:29:59:63:a3:ad:bb:06:f2:a4:16: 8f:dd:ea:f2:07:a5:14:fb:e9:36:c0:e5:aa:24:78: 5d:59:ac:3b:a4:88:38:35:f6:06:e5:5a:b8:92:dc: 9b:f9:0f:50:e3:c4:ed:53:b7:20:cd:5d:e4:8f:77: 20:57:b6:c6:2f:d9:7e:e1:b9:9c:88:3c:24:b2:33: 07:c9:48:fd:f5:9e:21:d4:f2:7b:97:06:fb:f9:94: ec:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:52:A7:DA:43:D0:94:F2:5F:B1:74:15:3A:3E:AB:27:A0:3C:04:DC X509v3 Authority Key Identifier: keyid:E9:77:A9:22:62:20:E8:C7:8A:1D:1B:3B:E0:4D:60:CD:CC:8A:21:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XepImIg6MeKHRs74E1gzcyKIYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:e1:b0:5e:ec:ac:82:b8:fb:bb:05:b3:35:f2:c6:d2:4a:8e: e2:ad:c4:3d:6c:18:72:be:ae:c8:70:3d:ee:96:d1:99:54:70: 5e:57:e2:7b:9b:dd:63:9f:e9:14:5c:f3:0a:22:d3:6f:1d:83: 57:42:8e:5f:9a:5a:cf:dd:ed:85:ae:a4:47:01:71:69:5b:59: 73:29:2e:35:cc:98:31:bc:be:95:22:f8:ed:3a:80:0e:cb:e0: c8:f8:14:70:7c:4a:fa:75:b7:1b:c1:b8:c6:be:b8:0f:4c:f8: 9c:4d:2b:b6:67:b3:f9:ea:a9:70:fd:62:6f:f0:cf:7a:63:da: c4:ad:32:5f:ee:51:94:ef:6a:e3:b2:77:e8:42:d8:d9:02:bb: f1:c7:c7:2e:77:b6:e4:39:ab:9b:88:ca:23:88:ba:ca:2d:f9: bf:33:88:1c:e3:ae:04:d3:e1:d7:c1:47:c9:7c:3e:8d:9d:bf: 1c:d1:57:1b:6e:d8:0f:c2:81:04:83:78:50:f6:aa:1a:44:2d: 76:c2:e8:51:50:0d:16:37:68:00:60:70:44:54:19:f8:c2:65: 64:73:68:99:1c:f7:15:2c:7a:5b:65:b4:e0:a6:84:c9:24:57: d3:51:35:6a:e0:82:af:23:82:18:5c:76:eb:de:39:07:66:d1: 3d:37:2a:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM1QkQxMTAvBgNVBAUTKEU5NzdBOTIyNjIyMEU4Qzc4QTFEMUIzQkUwNEQ2MENE Q0M4QTIxODgwHhcNMjUwNzAzMDU1MDI3WhcNMjUwNzEwMDU1MDI3WjAYMRYwFAYD VQQDEw02ODY2MWEyMy1iOWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxjDQ+PUpIQQK2lYPGThaI7W4mO/nMWwlxklQgcRGxProzwWmDMaWmj3jRyh7 P6DPwJ2CBrufyim5WF/blzR7Uf9lZEKA2tkLgNdZ9i7XUFtDbbFQbRKjCktz0Tpn FpQXe+1D3ynNo81hlkdF9WjUIP1r/NzIYcQxzbw+lmg8wVdhU9HLK25PN3xDTlH8 muAlqnzLQx4j8INopUsnW4H19NHa83V2pD3U3SlZY6OtuwbypBaP3eryB6UU++k2 wOWqJHhdWaw7pIg4NfYG5Vq4ktyb+Q9Q48TtU7cgzV3kj3cgV7bGL9l+4bmciDwk sjMHyUj99Z4h1PJ7lwb7+ZTsUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNlSp9pD 0JTyX7F0FTo+qyegPATcMB8GA1UdIwQYMBaAFOl3qSJiIOjHih0bO+BNYM3MiiGI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzVCRC83NkMyQzcyRTFD RUIxMUVGODVERkQ3NzZDNEY5QUUwMi82WGVwSW1JZzZNZUtIUnM3NEUxZ3pjeUtJ WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZYZXBJbUlnNk1lS0hSczc0RTFnemN5S0lZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzVCRC83NkMyQzcyRTFDRUIxMUVGODVERkQ3NzZDNEY5QUUwMi82WGVwSW1JZzZN ZUtIUnM3NEUxZ3pjeUtJWWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCU4bBe7KyCuPu7BbM18sbSSo7ircQ9bBhyvq7IcD3ultGZVHBeV+J7 m91jn+kUXPMKItNvHYNXQo5fmlrP3e2FrqRHAXFpW1lzKS41zJgxvL6VIvjtOoAO y+DI+BRwfEr6dbcbwbjGvrgPTPicTSu2Z7P56qlw/WJv8M96Y9rErTJf7lGU72rj snfoQtjZArvxx8cud7bkOaubiMojiLrKLfm/M4gc464E0+HXwUfJfD6Nnb8c0Vcb btgPwoEEg3hQ9qoaRC12wuhRUA0WN2gAYHBEVBn4wmVkc2iZHPcVLHpbZbTgpoTJ JFfTUTVq4IKvI4IYXHbr3jkHZtE9NyrQ -----END CERTIFICATE-----Generated at Thu Jul 3 17:58:11 2025 by rpki-client