$ rpki-client -vvf rpki.apnic.net/member_repository/A915FCB7/6F4B32168F7211EFB75B1030C4F9AE02/83Gv20AqO1w1Haymss4PSk0ag4A.mft File: 83Gv20AqO1w1Haymss4PSk0ag4A.mft (raw, json) Hash identifier: smuZH0lNfl2C6lr9mCsCkq8r99dI8Gkms8KuqaWStVI= Subject key identifier: 59:59:09:81:67:48:69:1F:F8:40:BA:B1:67:C4:E9:18:EB:B3:3B:9B Authority key identifier: F3:71:AF:DB:40:2A:3B:5C:35:1D:AC:A6:B2:CE:0F:4A:4D:1A:83:80 Certificate issuer: /CN=A915FCB7/serialNumber=F371AFDB402A3B5C351DACA6B2CE0F4A4D1A8380 Certificate serial: 6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83Gv20AqO1w1Haymss4PSk0ag4A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FCB7/6F4B32168F7211EFB75B1030C4F9AE02/83Gv20AqO1w1Haymss4PSk0ag4A.mft Manifest number: 6B Signing time: Tue 13 May 2025 06:07:17 +0000 Manifest this update: Tue 13 May 2025 06:07:16 +0000 Manifest next update: Tue 20 May 2025 06:07:16 +0000 Files and hashes: 1: 83Gv20AqO1w1Haymss4PSk0ag4A.crl (hash: 6JFk1BIw1xdozqFSVQrwbgGNc0hCHboWqPGuLEFQ8WQ=) 2: 500ACD668F7311EF9A3C6933C4F9AE02.roa (hash: o8H7c7fck40bt6N9kc+f53iuHqxqKbLfsu+Sc8AZSh4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FCB7/6F4B32168F7211EFB75B1030C4F9AE02/83Gv20AqO1w1Haymss4PSk0ag4A.crl rsync://rpki.apnic.net/member_repository/A915FCB7/6F4B32168F7211EFB75B1030C4F9AE02/83Gv20AqO1w1Haymss4PSk0ag4A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83Gv20AqO1w1Haymss4PSk0ag4A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FCB7, serialNumber=F371AFDB402A3B5C351DACA6B2CE0F4A4D1A8380 Validity Not Before: May 13 06:07:16 2025 GMT Not After : May 20 06:07:16 2025 GMT Subject: CN=6822e195-f7ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:98:a8:f0:ab:b9:62:f3:d7:5a:36:c9:d8:38: 19:fa:7b:9b:b9:e4:79:22:6f:d6:e2:d4:e3:3c:ea: a7:91:4d:88:cb:0c:9d:c3:a3:49:8a:3e:96:70:21: 6c:40:8d:ee:c3:b9:0e:2c:e7:06:22:49:12:5c:d1: 72:f0:26:a1:1a:a5:e9:c3:28:55:42:17:5c:ba:74: ce:fb:f5:56:c5:9a:c9:83:50:8d:2c:ab:f5:0b:e5: 04:f2:70:50:d0:0f:dc:4b:33:52:26:8b:ce:b9:67: b7:31:56:e6:91:2e:57:bb:85:0a:d3:83:ec:55:81: fb:50:47:63:2e:5b:e3:0f:0b:e8:d0:f8:d8:ec:a9: 2e:c2:ef:be:35:0a:32:d0:90:40:57:08:59:17:79: 15:37:ab:0a:ec:0e:8a:5e:fe:e6:14:06:08:74:42: 76:ef:e2:6c:67:bf:55:62:ba:04:a8:d0:24:44:f5: c0:4e:ca:12:6d:46:ac:3e:4b:ab:ee:b3:76:d0:5a: 84:7b:c6:12:79:2e:7d:5b:d5:72:be:43:8e:e1:4a: b2:13:d2:e1:97:d4:72:e8:c1:64:15:5a:93:7c:ce: a0:e1:de:01:b9:55:46:d6:23:36:11:eb:2d:2a:68: c1:63:d9:0b:f5:27:c7:4f:20:c3:fb:d1:98:63:29: 87:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:59:09:81:67:48:69:1F:F8:40:BA:B1:67:C4:E9:18:EB:B3:3B:9B X509v3 Authority Key Identifier: keyid:F3:71:AF:DB:40:2A:3B:5C:35:1D:AC:A6:B2:CE:0F:4A:4D:1A:83:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FCB7/6F4B32168F7211EFB75B1030C4F9AE02/83Gv20AqO1w1Haymss4PSk0ag4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83Gv20AqO1w1Haymss4PSk0ag4A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FCB7/6F4B32168F7211EFB75B1030C4F9AE02/83Gv20AqO1w1Haymss4PSk0ag4A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:59:5c:ab:e0:fe:87:ef:ea:7b:6c:5b:30:08:8f:fd:21:77: f1:06:80:f6:f0:2d:ca:24:fb:b1:53:af:a1:09:52:43:1f:a7: 53:07:e9:aa:2a:ee:49:f1:f5:9c:b1:ef:c9:27:b3:90:12:a3: 20:38:dc:cf:4a:5b:11:84:fb:46:b7:8b:d0:9e:07:56:df:f1: ec:68:bf:b6:85:a1:19:63:65:21:37:0c:88:db:1b:6b:09:68: 57:76:8f:fc:84:f5:b5:7d:89:74:90:44:3b:39:d3:08:82:11: 4c:ec:0b:16:b1:ea:e0:56:5b:6e:fa:34:e1:b2:a0:f3:bc:75: ac:70:17:ca:88:81:42:ca:88:0f:fe:ca:e2:3f:ae:9e:17:86: 1c:50:86:f0:9c:76:54:ce:bc:c5:48:8e:dc:d4:41:9b:8b:57: 5d:72:c1:55:e0:53:fd:bf:ec:5b:ce:fd:bc:bf:72:35:cf:5f: 8f:38:b5:ee:49:2c:f2:5a:b5:ed:4d:64:d9:41:c1:80:41:8c: ea:71:1f:9b:fd:fd:2d:86:b9:68:9e:01:b9:90:63:db:ae:3c: aa:a1:3c:1e:a1:60:f9:e5:02:e7:e8:df:93:79:2b:9a:43:2e: b8:99:d9:ab:d0:09:0c:38:c6:50:7f:1b:bb:fe:a0:26:54:ea: 0e:3c:45:58 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RkNCNzExMC8GA1UEBRMoRjM3MUFGREI0MDJBM0I1QzM1MURBQ0E2QjJDRTBGNEE0 RDFBODM4MDAeFw0yNTA1MTMwNjA3MTZaFw0yNTA1MjAwNjA3MTZaMBgxFjAUBgNV BAMTDTY4MjJlMTk1LWY3Y2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEmKjwq7li89daNsnYOBn6e5u55Hkib9bi1OM86qeRTYjLDJ3Do0mKPpZwIWxA je7DuQ4s5wYiSRJc0XLwJqEapenDKFVCF1y6dM779VbFmsmDUI0sq/UL5QTycFDQ D9xLM1Imi865Z7cxVuaRLle7hQrTg+xVgftQR2MuW+MPC+jQ+NjsqS7C7741CjLQ kEBXCFkXeRU3qwrsDope/uYUBgh0Qnbv4mxnv1ViugSo0CRE9cBOyhJtRqw+S6vu s3bQWoR7xhJ5Ln1b1XK+Q47hSrIT0uGX1HLowWQVWpN8zqDh3gG5VUbWIzYR6y0q aMFj2Qv1J8dPIMP70ZhjKYf7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWVkJgWdI aR/4QLqxZ8TpGOuzO5swHwYDVR0jBBgwFoAU83Gv20AqO1w1Haymss4PSk0ag4Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVGQ0I3LzZGNEIzMjE2OEY3 MjExRUZCNzVCMTAzMEM0RjlBRTAyLzgzR3YyMEFxTzF3MUhheW1zczRQU2swYWc0 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvODNHdjIwQXFPMXcxSGF5bXNzNFBTazBhZzRBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVG Q0I3LzZGNEIzMjE2OEY3MjExRUZCNzVCMTAzMEM0RjlBRTAyLzgzR3YyMEFxTzF3 MUhheW1zczRQU2swYWc0QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABVZXKvg/ofv6ntsWzAIj/0hd/EGgPbwLcok+7FTr6EJUkMfp1MH6aoq 7knx9Zyx78kns5ASoyA43M9KWxGE+0a3i9CeB1bf8exov7aFoRljZSE3DIjbG2sJ aFd2j/yE9bV9iXSQRDs50wiCEUzsCxax6uBWW276NOGyoPO8daxwF8qIgULKiA/+ yuI/rp4XhhxQhvCcdlTOvMVIjtzUQZuLV11ywVXgU/2/7FvO/by/cjXPX484te5J LPJate1NZNlBwYBBjOpxH5v9/S2GuWieAbmQY9uuPKqhPB6hYPnlAufo35N5K5pD LriZ2avQCQw4xlB/G7v+oCZU6g48RVg= -----END CERTIFICATE-----Generated at Wed May 14 12:54:40 2025 by rpki-client