$ rpki-client -vvf rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft File: n6yKuWoNopKfw9GHG-1vdD6MlXc.mft (raw, json) Hash identifier: VlZMxEZx3L0C70d2J2BSaS6mnnj5aRvFd+yeY5WeooU= Subject key identifier: EE:3E:EA:35:22:3A:07:67:1E:0D:34:1E:CC:67:33:91:E8:0C:FE:04 Authority key identifier: 9F:AC:8A:B9:6A:0D:A2:92:9F:C3:D1:87:1B:ED:6F:74:3E:8C:95:77 Certificate issuer: /CN=A916E2DC/serialNumber=9FAC8AB96A0DA2929FC3D1871BED6F743E8C9577 Certificate serial: 01E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6yKuWoNopKfw9GHG-1vdD6MlXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft Manifest number: 01DE Signing time: Tue 13 May 2025 02:07:16 +0000 Manifest this update: Tue 13 May 2025 02:07:15 +0000 Manifest next update: Tue 20 May 2025 02:07:15 +0000 Files and hashes: 1: n6yKuWoNopKfw9GHG-1vdD6MlXc.crl (hash: C7EFNzixTtLfs5R7+Yrm0ME5AZAQa55mEAsX+9ybJaA=) 2: 6993B4CCD43B11EDA821F80DC4F9AE02.roa (hash: ZSI/iXYWNqdEgciLkCgrj+0eyDroB8ECUVdL5jcas7g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.crl rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6yKuWoNopKfw9GHG-1vdD6MlXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:07:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 487 (0x1e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E2DC, serialNumber=9FAC8AB96A0DA2929FC3D1871BED6F743E8C9577 Validity Not Before: May 13 02:07:15 2025 GMT Not After : May 20 02:07:15 2025 GMT Subject: CN=6822a954-761f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c6:d5:3f:67:e9:53:30:81:5b:b1:4e:55:1c: 8d:6a:4d:d4:28:19:b2:ea:65:0d:cf:25:dc:83:ac: 62:f9:ab:b0:9c:20:28:9d:c9:53:74:6b:cf:8f:ac: 2d:bb:8b:cd:4d:20:ac:95:75:f4:1d:d0:9a:23:06: 75:41:b7:22:b9:43:71:5b:e9:e0:43:87:48:09:c8: d9:7f:63:30:2d:e2:fc:bd:40:69:14:b2:3d:1f:81: 70:f1:0c:72:4d:9b:43:93:48:a9:aa:1b:cf:11:e6: 9f:ae:29:17:1e:46:b4:b1:a0:4b:a5:9c:2e:83:d8: 28:d5:b5:f0:e6:f4:4f:e6:ea:14:59:d2:2c:a7:6a: 71:32:77:02:c4:4f:a1:68:a7:f8:bc:1e:e3:17:11: b9:2b:42:96:cd:d8:63:44:f9:cf:53:91:be:74:4f: 6a:ef:82:1d:eb:3c:75:c9:80:f3:af:94:19:8a:2a: 41:14:90:fe:7a:7c:dd:af:6e:de:0a:60:67:1e:1a: f2:6f:89:e1:9d:ed:52:9d:18:b8:8c:d8:e7:b7:25: eb:32:5a:31:0e:ed:97:ab:b5:67:3b:77:1c:3b:8d: c8:71:a9:99:d6:bc:77:57:9f:93:fa:c4:23:e8:06: db:a4:ff:73:93:84:58:52:09:a4:61:ce:c5:a4:76: 81:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:3E:EA:35:22:3A:07:67:1E:0D:34:1E:CC:67:33:91:E8:0C:FE:04 X509v3 Authority Key Identifier: keyid:9F:AC:8A:B9:6A:0D:A2:92:9F:C3:D1:87:1B:ED:6F:74:3E:8C:95:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6yKuWoNopKfw9GHG-1vdD6MlXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:2a:c3:ad:f5:66:66:ac:73:1c:86:8b:95:d2:bb:fe:86:9f: e6:1e:3b:ad:97:e6:c3:75:5d:ed:ac:90:12:87:0d:57:5e:94: 2b:ee:b8:84:92:9c:d9:8f:f8:f5:66:8c:98:5a:d6:06:a4:c4: 6d:d6:b1:d7:91:a0:21:ad:1a:58:9d:aa:03:0a:7d:58:53:c9: cd:56:d7:75:ff:64:26:e2:52:96:31:bb:da:3c:99:d2:3e:6d: ae:53:6c:86:f3:c2:14:98:3e:02:e4:3c:4a:4c:fb:8c:2c:75: 86:f3:d7:b2:7f:b7:fe:6b:e2:35:b4:c8:18:a7:b9:85:c6:9f: 21:e8:81:62:e7:97:8a:b2:81:c7:eb:c6:4b:c8:ad:f5:7f:f9: d2:3f:4f:20:d4:03:74:3d:4e:17:10:77:84:58:67:7e:2c:1f: af:34:30:bb:d0:ff:ae:7b:d6:16:13:02:54:80:6e:b5:fe:39: 58:e3:5f:14:af:7d:68:5b:bf:60:c8:05:ea:f3:f2:4e:67:8e: 4f:4b:24:c0:33:43:07:17:1c:fd:dd:4d:ea:f6:8a:ad:83:aa: 49:db:66:4e:ba:b0:26:c5:7c:44:c6:3f:b1:1a:65:b0:02:6a: 99:cc:b3:66:5b:f6:75:38:31:0a:9b:1d:68:73:00:a9:65:67: 55:58:15:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkUyREMxMTAvBgNVBAUTKDlGQUM4QUI5NkEwREEyOTI5RkMzRDE4NzFCRUQ2Rjc0 M0U4Qzk1NzcwHhcNMjUwNTEzMDIwNzE1WhcNMjUwNTIwMDIwNzE1WjAYMRYwFAYD VQQDEw02ODIyYTk1NC03NjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtMbVP2fpUzCBW7FOVRyNak3UKBmy6mUNzyXcg6xi+auwnCAonclTdGvPj6wt u4vNTSCslXX0HdCaIwZ1QbciuUNxW+ngQ4dICcjZf2MwLeL8vUBpFLI9H4Fw8Qxy TZtDk0ipqhvPEeafrikXHka0saBLpZwug9go1bXw5vRP5uoUWdIsp2pxMncCxE+h aKf4vB7jFxG5K0KWzdhjRPnPU5G+dE9q74Id6zx1yYDzr5QZiipBFJD+enzdr27e CmBnHhryb4nhne1SnRi4jNjntyXrMloxDu2Xq7VnO3ccO43IcamZ1rx3V5+T+sQj 6AbbpP9zk4RYUgmkYc7FpHaB3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO4+6jUi OgdnHg00HsxnM5HoDP4EMB8GA1UdIwQYMBaAFJ+sirlqDaKSn8PRhxvtb3Q+jJV3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTJEQy82RDg5NjQ0QTZB RTcxMUVEOTRCNDRDODdDNEY5QUUwMi9uNnlLdVdvTm9wS2Z3OUdIRy0xdmRENk1s WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL242eUt1V29Ob3BLZnc5R0hHLTF2ZEQ2TWxYYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTJEQy82RDg5NjQ0QTZBRTcxMUVEOTRCNDRDODdDNEY5QUUwMi9uNnlLdVdvTm9w S2Z3OUdIRy0xdmRENk1sWGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArKsOt9WZmrHMchouV0rv+hp/mHjutl+bDdV3trJAShw1XXpQr7riE kpzZj/j1ZoyYWtYGpMRt1rHXkaAhrRpYnaoDCn1YU8nNVtd1/2Qm4lKWMbvaPJnS Pm2uU2yG88IUmD4C5DxKTPuMLHWG89eyf7f+a+I1tMgYp7mFxp8h6IFi55eKsoHH 68ZLyK31f/nSP08g1AN0PU4XEHeEWGd+LB+vNDC70P+ue9YWEwJUgG61/jlY418U r31oW79gyAXq8/JOZ45PSyTAM0MHFxz93U3q9oqtg6pJ22ZOurAmxXxExj+xGmWw AmqZzLNmW/Z1ODEKmx1ocwCpZWdVWBXf -----END CERTIFICATE-----Generated at Wed May 14 09:44:28 2025 by rpki-client