$ rpki-client -vvf rpki.apnic.net/member_repository/A9183A53/9852A2F21C1811EABF343C87C4F9AE02/b6MnfND3RvILaYm150QQZcbD0eE.mft File: b6MnfND3RvILaYm150QQZcbD0eE.mft (raw, json) Hash identifier: MA2ElW26PxKgUgT1fCOWiTQVz3SqoToBqf+A+KIWhuU= Subject key identifier: 11:CB:17:C1:C4:B7:2E:31:6B:C3:FA:1F:98:FD:4D:F6:7C:89:F7:D1 Authority key identifier: 6F:A3:27:7C:D0:F7:46:F2:0B:69:89:B5:E7:44:10:65:C6:C3:D1:E1 Certificate issuer: /CN=A9183A53/serialNumber=6FA3277CD0F746F20B6989B5E7441065C6C3D1E1 Certificate serial: 0BCC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b6MnfND3RvILaYm150QQZcbD0eE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183A53/9852A2F21C1811EABF343C87C4F9AE02/b6MnfND3RvILaYm150QQZcbD0eE.mft Manifest number: 0BC4 Signing time: Mon 12 May 2025 18:43:44 +0000 Manifest this update: Mon 12 May 2025 18:43:44 +0000 Manifest next update: Mon 19 May 2025 18:43:44 +0000 Files and hashes: 1: b6MnfND3RvILaYm150QQZcbD0eE.crl (hash: EkamGfOFI2FfKxy+pcgUcAkLxFUfMGKJpvydfbEUFZQ=) 2: 5B89EDAC1C1911EA905C7109C4F9AE02.roa (hash: yFbcE2/zh5W+jYTCtbp+al/Ly/eMMC6ALp6S0V30Zsc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183A53/9852A2F21C1811EABF343C87C4F9AE02/b6MnfND3RvILaYm150QQZcbD0eE.crl rsync://rpki.apnic.net/member_repository/A9183A53/9852A2F21C1811EABF343C87C4F9AE02/b6MnfND3RvILaYm150QQZcbD0eE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b6MnfND3RvILaYm150QQZcbD0eE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:43:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3020 (0xbcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183A53, serialNumber=6FA3277CD0F746F20B6989B5E7441065C6C3D1E1 Validity Not Before: May 12 18:43:44 2025 GMT Not After : May 19 18:43:44 2025 GMT Subject: CN=68224160-f351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6e:ff:4e:d0:9e:72:56:69:33:c0:2e:f5:4c: d8:a6:20:50:d7:66:6c:13:21:a4:95:e3:11:4d:8f: 20:50:6b:ba:18:92:fd:00:5e:eb:60:9a:05:54:13: 42:2e:80:f9:bd:a8:90:b9:87:75:42:45:8c:ef:bd: 3c:dd:21:55:ca:f4:1c:2d:d3:dd:cd:bb:91:74:1f: 38:a7:16:8f:f1:c7:72:95:88:c6:a8:93:25:89:b6: 1b:41:4f:ba:da:e5:4b:75:67:c0:c3:4d:b1:ef:17: 8f:95:c2:cc:80:c9:41:bf:d2:02:40:ba:7b:33:f4: fc:40:22:40:37:8c:89:d3:f9:43:9f:51:d7:c4:55: dd:3f:42:58:45:4b:78:9e:d3:44:40:d0:59:ef:8b: 8c:6e:15:1f:10:d3:07:f8:7d:9f:c3:85:0a:77:06: 62:03:51:18:ba:31:87:7f:e8:a1:7a:12:b7:f0:17: 83:af:80:44:8a:31:74:ab:99:b0:ce:37:80:73:a3: 71:fb:4c:79:ab:ef:e7:85:48:b7:31:8f:92:ed:8e: 7f:6e:b9:d2:53:0e:63:79:76:ad:e1:27:8f:2e:50: 90:9b:a7:8b:ec:a7:56:73:cb:61:5d:5b:b7:c3:b1: f6:1b:9d:4e:6c:b8:a3:89:91:43:d2:50:23:f9:de: 05:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:CB:17:C1:C4:B7:2E:31:6B:C3:FA:1F:98:FD:4D:F6:7C:89:F7:D1 X509v3 Authority Key Identifier: keyid:6F:A3:27:7C:D0:F7:46:F2:0B:69:89:B5:E7:44:10:65:C6:C3:D1:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183A53/9852A2F21C1811EABF343C87C4F9AE02/b6MnfND3RvILaYm150QQZcbD0eE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b6MnfND3RvILaYm150QQZcbD0eE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183A53/9852A2F21C1811EABF343C87C4F9AE02/b6MnfND3RvILaYm150QQZcbD0eE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:77:1a:c1:56:ac:d1:8f:be:6c:b0:93:1e:23:e0:15:e1:56: 87:37:a2:7d:d4:12:3b:97:b9:f9:bf:42:ad:d1:ba:ea:5d:73: 3d:b0:b3:4c:c1:9e:11:64:39:60:87:dc:0f:aa:3c:fd:b0:1e: d5:af:28:b7:55:2d:f6:7d:c9:0b:0a:17:fe:1a:2d:76:72:9d: f9:b0:27:bf:76:42:dc:21:06:73:55:f5:88:37:0a:79:ae:b6: a3:1f:3f:a9:7c:1e:a1:00:68:40:3e:e9:e9:7b:95:49:dc:b9: 40:25:9b:7d:07:a8:8c:20:af:ba:e7:0e:4f:c3:a7:d3:c9:af: 18:23:94:09:27:2c:35:76:c3:4f:d1:76:db:0d:da:c6:af:8a: 3d:cc:f7:a7:c5:b6:5a:b1:f2:62:17:b7:9a:f5:cc:0f:2a:d8: dc:84:3d:2b:9a:d0:7c:ba:47:41:97:76:41:d7:88:10:32:21: 39:d6:97:ec:98:ca:f2:e5:ef:82:12:d3:0f:c9:80:12:3c:58: 9f:9b:d8:a1:64:5a:10:55:71:55:f0:5a:e0:9d:70:96:75:61: 36:6c:96:f6:7a:67:77:4a:2c:58:9c:0f:ee:89:7b:5c:fb:c2: ce:7b:b1:ee:b9:7a:ab:04:79:74:f5:02:43:e6:90:01:b2:d8: 1a:19:68:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNBNTMxMTAvBgNVBAUTKDZGQTMyNzdDRDBGNzQ2RjIwQjY5ODlCNUU3NDQxMDY1 QzZDM0QxRTEwHhcNMjUwNTEyMTg0MzQ0WhcNMjUwNTE5MTg0MzQ0WjAYMRYwFAYD VQQDEw02ODIyNDE2MC1mMzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA027/TtCeclZpM8Au9UzYpiBQ12ZsEyGkleMRTY8gUGu6GJL9AF7rYJoFVBNC LoD5vaiQuYd1QkWM77083SFVyvQcLdPdzbuRdB84pxaP8cdylYjGqJMlibYbQU+6 2uVLdWfAw02x7xePlcLMgMlBv9ICQLp7M/T8QCJAN4yJ0/lDn1HXxFXdP0JYRUt4 ntNEQNBZ74uMbhUfENMH+H2fw4UKdwZiA1EYujGHf+ihehK38BeDr4BEijF0q5mw zjeAc6Nx+0x5q+/nhUi3MY+S7Y5/brnSUw5jeXat4SePLlCQm6eL7KdWc8thXVu3 w7H2G51ObLijiZFD0lAj+d4FNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBHLF8HE ty4xa8P6H5j9TfZ8iffRMB8GA1UdIwQYMBaAFG+jJ3zQ90byC2mJtedEEGXGw9Hh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0E1My85ODUyQTJGMjFD MTgxMUVBQkYzNDNDODdDNEY5QUUwMi9iNk1uZk5EM1J2SUxhWW0xNTBRUVpjYkQw ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I2TW5mTkQzUnZJTGFZbTE1MFFRWmNiRDBlRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0E1My85ODUyQTJGMjFDMTgxMUVBQkYzNDNDODdDNEY5QUUwMi9iNk1uZk5EM1J2 SUxhWW0xNTBRUVpjYkQwZUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFdxrBVqzRj75ssJMeI+AV4VaHN6J91BI7l7n5v0Kt0brqXXM9sLNM wZ4RZDlgh9wPqjz9sB7Vryi3VS32fckLChf+Gi12cp35sCe/dkLcIQZzVfWINwp5 rrajHz+pfB6hAGhAPunpe5VJ3LlAJZt9B6iMIK+65w5Pw6fTya8YI5QJJyw1dsNP 0XbbDdrGr4o9zPenxbZasfJiF7ea9cwPKtjchD0rmtB8ukdBl3ZB14gQMiE51pfs mMry5e+CEtMPyYASPFifm9ihZFoQVXFV8FrgnXCWdWE2bJb2emd3SixYnA/uiXtc +8LOe7HuuXqrBHl09QJD5pABstgaGWhd -----END CERTIFICATE-----Generated at Mon May 12 22:53:46 2025 by rpki-client