$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft File: M6AXSkpLAJwBFRWWkTbzAQidtbU.mft (raw, json) Hash identifier: CEk0UpuYhVcnFGk/PfMCpvh/0ge9/sMv6aSx4Rz2/HA= Subject key identifier: E2:E8:98:3F:11:5B:B8:A2:86:49:A5:67:4F:08:2E:D3:08:FB:B0:32 Authority key identifier: 33:A0:17:4A:4A:4B:00:9C:01:15:15:96:91:36:F3:01:08:9D:B5:B5 Certificate issuer: /CN=A91FF1CC/serialNumber=33A0174A4A4B009C011515969136F301089DB5B5 Certificate serial: 44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6AXSkpLAJwBFRWWkTbzAQidtbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft Manifest number: 44 Signing time: Tue 01 Jul 2025 08:11:38 +0000 Manifest this update: Tue 01 Jul 2025 08:11:38 +0000 Manifest next update: Tue 08 Jul 2025 08:11:38 +0000 Files and hashes: 1: M6AXSkpLAJwBFRWWkTbzAQidtbU.crl (hash: YF08et0MEGRMfEK+zQ4w4A0IRS30w7JIlD348Y/CfHg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.crl rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6AXSkpLAJwBFRWWkTbzAQidtbU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:11:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF1CC, serialNumber=33A0174A4A4B009C011515969136F301089DB5B5 Validity Not Before: Jul 1 08:11:38 2025 GMT Not After : Jul 8 08:11:38 2025 GMT Subject: CN=6863983a-aab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e4:56:46:ef:61:c9:e5:64:4b:66:29:2d:cb: b3:97:70:2e:c7:5c:21:43:50:55:34:bf:f7:04:62: 8a:31:d9:04:65:45:8d:ce:63:d8:5e:a8:de:ce:86: 67:13:08:89:04:35:83:21:36:6f:84:56:81:e2:59: 30:78:a2:09:82:e7:7f:a2:88:18:ff:83:d2:c5:e2: d2:59:a6:4c:9c:6e:f5:ab:af:93:fb:38:f2:0c:bb: 6c:b6:67:95:ee:fe:5d:13:68:ca:bb:41:54:ee:55: 65:75:e7:50:dd:99:99:44:83:f8:77:26:3c:5c:52: 21:e5:c0:7e:a9:c9:20:63:f6:43:53:be:23:fa:8d: 56:e8:a8:fb:b6:01:0c:13:59:9f:b5:8f:ac:96:39: 5b:0b:37:24:03:5e:80:68:a0:31:b6:d4:1f:51:92: 3c:75:be:1c:8f:0d:48:0a:b7:22:fd:76:8c:b7:35: be:50:8b:3d:68:76:f3:6c:46:68:90:29:c8:1a:ea: c1:d1:b5:63:a6:71:59:0e:78:c1:bb:ca:07:25:37: 55:c3:c5:14:98:87:e0:9d:6d:8b:a6:f1:e8:20:55: cc:5e:e9:96:05:ea:80:80:98:77:81:bb:f6:cf:a2: e3:85:7d:d7:4e:99:35:21:e6:a1:11:79:38:50:14: 74:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:E8:98:3F:11:5B:B8:A2:86:49:A5:67:4F:08:2E:D3:08:FB:B0:32 X509v3 Authority Key Identifier: keyid:33:A0:17:4A:4A:4B:00:9C:01:15:15:96:91:36:F3:01:08:9D:B5:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6AXSkpLAJwBFRWWkTbzAQidtbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:f3:44:17:bc:c0:57:29:4a:e1:08:6d:b6:b4:09:49:6e:85: 3b:1a:8a:41:a1:a2:00:f7:9d:55:19:06:b7:55:f4:fc:87:59: 70:ae:b2:92:9e:aa:3b:ee:9e:f2:b3:2b:59:69:ee:89:cc:f6: eb:e5:3b:a9:d3:c1:19:17:3b:a2:4b:2e:38:15:e1:09:ac:fd: 28:44:df:8b:04:e0:31:22:ff:17:2c:0d:e2:87:5d:c0:f2:2a: dc:7c:17:69:37:ae:78:29:e8:15:06:76:92:b1:08:d1:74:c1: 92:29:c0:77:2c:40:82:1d:48:d7:0a:af:93:31:07:94:73:8c: a0:29:f7:c5:87:cf:75:47:31:e8:2c:c2:bb:11:96:42:3f:26: 9e:f2:14:2f:2c:3f:f2:9f:3e:76:17:19:c5:32:64:e2:ee:73: 62:97:15:0f:6b:b2:d0:c6:2b:50:7d:d0:e7:f6:93:58:59:71: eb:58:8a:07:b6:3f:07:75:e2:3e:69:fa:e0:23:43:13:32:8f: 82:c1:de:9f:27:af:87:8f:23:71:c8:69:75:5d:ce:c3:82:eb: a6:8f:8f:02:f9:91:4b:70:5b:9b:96:b0:cf:b7:5d:c2:4c:ea: 8e:52:5f:a1:c4:fa:d0:fe:da:4b:3c:98:73:ac:b9:0f:9e:f3: 3d:5c:7d:43 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RjFDQzExMC8GA1UEBRMoMzNBMDE3NEE0QTRCMDA5QzAxMTUxNTk2OTEzNkYzMDEw ODlEQjVCNTAeFw0yNTA3MDEwODExMzhaFw0yNTA3MDgwODExMzhaMBgxFjAUBgNV BAMTDTY4NjM5ODNhLWFhYjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC25FZG72HJ5WRLZikty7OXcC7HXCFDUFU0v/cEYoox2QRlRY3OY9heqN7OhmcT CIkENYMhNm+EVoHiWTB4ogmC53+iiBj/g9LF4tJZpkycbvWrr5P7OPIMu2y2Z5Xu /l0TaMq7QVTuVWV151DdmZlEg/h3JjxcUiHlwH6pySBj9kNTviP6jVboqPu2AQwT WZ+1j6yWOVsLNyQDXoBooDG21B9Rkjx1vhyPDUgKtyL9doy3Nb5Qiz1odvNsRmiQ Kcga6sHRtWOmcVkOeMG7ygclN1XDxRSYh+CdbYum8eggVcxe6ZYF6oCAmHeBu/bP ouOFfddOmTUh5qEReThQFHQhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4uiYPxFb uKKGSaVnTwgu0wj7sDIwHwYDVR0jBBgwFoAUM6AXSkpLAJwBFRWWkTbzAQidtbUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZGMUNDLzQzRUE2QjE4RUY2 MzExRUZCRjY0QUI2QUM0RjlBRTAyL002QVhTa3BMQUp3QkZSV1drVGJ6QVFpZHRi VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTTZBWFNrcExBSndCRlJXV2tUYnpBUWlkdGJVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZG MUNDLzQzRUE2QjE4RUY2MzExRUZCRjY0QUI2QUM0RjlBRTAyL002QVhTa3BMQUp3 QkZSV1drVGJ6QVFpZHRiVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADHzRBe8wFcpSuEIbba0CUluhTsaikGhogD3nVUZBrdV9PyHWXCuspKe qjvunvKzK1lp7onM9uvlO6nTwRkXO6JLLjgV4Qms/ShE34sE4DEi/xcsDeKHXcDy Ktx8F2k3rngp6BUGdpKxCNF0wZIpwHcsQIIdSNcKr5MxB5RzjKAp98WHz3VHMegs wrsRlkI/Jp7yFC8sP/KfPnYXGcUyZOLuc2KXFQ9rstDGK1B90Of2k1hZcetYige2 Pwd14j5p+uAjQxMyj4LB3p8nr4ePI3HIaXVdzsOC66aPjwL5kUtwW5uWsM+3XcJM 6o5SX6HE+tD+2ks8mHOsuQ+e8z1cfUM= -----END CERTIFICATE-----Generated at Thu Jul 3 06:09:04 2025 by rpki-client