$ rpki-client -vvf rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft File: C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft (raw, json) Hash identifier: ELdNEE1Iqj6fkIJPry4WEozqKGnzbCAnWgUmcr4NIGc= Subject key identifier: 86:90:9F:CC:C4:6A:F1:02:4E:E0:27:7C:32:69:CC:48:AC:3C:30:FA Authority key identifier: 0B:A8:BA:40:F8:97:34:CC:3F:3A:E3:ED:67:74:CB:D8:43:E2:E7:72 Certificate issuer: /CN=A91868EC/serialNumber=0BA8BA40F89734CC3F3AE3ED6774CBD843E2E772 Certificate serial: 0101 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6i6QPiXNMw_OuPtZ3TL2EPi53I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft Manifest number: FE Signing time: Sun 11 May 2025 03:57:55 +0000 Manifest this update: Sun 11 May 2025 03:57:55 +0000 Manifest next update: Sun 18 May 2025 03:57:55 +0000 Files and hashes: 1: C6i6QPiXNMw_OuPtZ3TL2EPi53I.crl (hash: T7jlBkvL/HBRoyBBd7ENrhZCnm8kfnD4S2609sKBdKs=) 2: 8BDE35DAADB511EEA223FA64C4F9AE02.roa (hash: 5Euxmdyfg42rk8kh2tCEWEITcp7TGJlbx40uBqp19vc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.crl rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6i6QPiXNMw_OuPtZ3TL2EPi53I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 03:57:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 257 (0x101) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91868EC, serialNumber=0BA8BA40F89734CC3F3AE3ED6774CBD843E2E772 Validity Not Before: May 11 03:57:55 2025 GMT Not After : May 18 03:57:55 2025 GMT Subject: CN=68202043-903a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:11:62:6c:9a:d9:1d:4a:6a:cb:38:e1:cd:78: d0:e1:92:f3:9e:cb:2e:5a:56:40:73:82:d1:27:ed: 54:f8:60:3c:ef:9a:cd:29:30:f7:f1:8e:2b:bb:9b: 60:ef:7f:51:da:71:19:ba:56:8c:dc:8c:64:39:99: a5:7c:82:9f:5c:b7:3e:f0:2b:f7:4e:38:9f:97:ed: 51:0d:21:64:5a:de:fb:4d:9e:95:97:b3:de:7e:3a: 29:68:79:e9:5c:93:a3:c9:45:07:fb:06:58:1b:49: ba:80:a8:17:77:6c:46:40:4c:8c:6b:c4:96:bc:71: 67:01:53:7b:0a:7f:f4:5b:47:41:d3:eb:f2:34:38: f9:10:d1:da:80:b8:e0:2e:5b:ae:45:6e:bf:20:d4: bc:b9:0d:1d:e2:6c:20:a1:df:b6:68:fc:0c:56:e1: 8e:24:71:96:9d:96:b3:7a:01:b2:20:8f:93:19:2c: 75:2b:74:24:a7:21:bc:74:1c:e6:8b:74:4e:5f:c0: 45:c3:0b:59:19:8a:8b:72:4e:60:ba:37:fa:eb:10: 62:37:b7:c4:a7:76:4e:2d:92:af:f9:0c:73:a4:f5: 96:60:e3:36:c9:01:af:77:9e:dc:6a:34:f9:b4:19: fa:e1:ff:4c:35:79:05:b8:81:b0:70:7b:14:9f:54: ba:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:90:9F:CC:C4:6A:F1:02:4E:E0:27:7C:32:69:CC:48:AC:3C:30:FA X509v3 Authority Key Identifier: keyid:0B:A8:BA:40:F8:97:34:CC:3F:3A:E3:ED:67:74:CB:D8:43:E2:E7:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6i6QPiXNMw_OuPtZ3TL2EPi53I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:1f:2a:d7:1d:d9:5c:6c:e7:8e:84:e8:f9:e0:a2:86:65:8a: 6d:26:14:2b:b0:e0:26:13:17:5f:e9:ab:34:f8:0e:03:51:81: c7:b0:23:45:1e:8b:46:56:ed:89:c0:2e:13:20:68:81:a5:09: 9c:a5:07:4d:fd:c4:66:d0:43:5f:95:26:81:f9:b2:d5:c7:91: 24:9f:ef:af:98:24:4a:34:65:27:e3:ac:f5:bf:9b:8c:a9:94: 3a:83:83:1d:9d:4c:c2:54:29:58:80:50:44:2a:a0:1c:03:c0: f4:dd:c0:2d:ee:54:53:b5:46:f3:c1:b7:7a:b2:2f:a2:c9:ac: cf:4c:52:78:45:04:d2:f9:16:43:ec:92:4a:89:b0:40:a5:e4: 64:66:15:ee:34:f9:6f:ec:df:b1:99:c3:8d:9d:08:c6:da:b4: 5f:c8:01:a8:cc:8b:2a:96:bf:47:8c:52:da:13:b4:74:61:c2: 98:95:51:2c:33:dc:d3:67:99:f4:4c:cf:c1:7f:5c:e7:9b:80: 16:c8:f5:00:5d:b3:36:13:14:7c:9a:13:d6:98:55:ea:1d:0e: 89:04:d3:41:60:b8:1b:01:f6:6b:3b:44:1a:25:92:60:61:45: 01:c5:ea:da:67:02:a7:09:ee:c1:54:99:2c:be:1a:ce:8d:60: 10:13:ba:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY4RUMxMTAvBgNVBAUTKDBCQThCQTQwRjg5NzM0Q0MzRjNBRTNFRDY3NzRDQkQ4 NDNFMkU3NzIwHhcNMjUwNTExMDM1NzU1WhcNMjUwNTE4MDM1NzU1WjAYMRYwFAYD VQQDEw02ODIwMjA0My05MDNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0hFibJrZHUpqyzjhzXjQ4ZLznssuWlZAc4LRJ+1U+GA875rNKTD38Y4ru5tg 739R2nEZulaM3IxkOZmlfIKfXLc+8Cv3Tjifl+1RDSFkWt77TZ6Vl7PefjopaHnp XJOjyUUH+wZYG0m6gKgXd2xGQEyMa8SWvHFnAVN7Cn/0W0dB0+vyNDj5ENHagLjg LluuRW6/INS8uQ0d4mwgod+2aPwMVuGOJHGWnZazegGyII+TGSx1K3QkpyG8dBzm i3ROX8BFwwtZGYqLck5gujf66xBiN7fEp3ZOLZKv+QxzpPWWYOM2yQGvd57cajT5 tBn64f9MNXkFuIGwcHsUn1S68wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIaQn8zE avECTuAnfDJpzEisPDD6MB8GA1UdIwQYMBaAFAuoukD4lzTMPzrj7Wd0y9hD4udy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjhFQy9FMDU3RTJCMEFE QjQxMUVFQkVBN0U1NjNDNEY5QUUwMi9DNmk2UVBpWE5Nd19PdVB0WjNUTDJFUGk1 M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M2aTZRUGlYTk13X091UHRaM1RMMkVQaTUzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjhFQy9FMDU3RTJCMEFEQjQxMUVFQkVBN0U1NjNDNEY5QUUwMi9DNmk2UVBpWE5N d19PdVB0WjNUTDJFUGk1M0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYHyrXHdlcbOeOhOj54KKGZYptJhQrsOAmExdf6as0+A4DUYHHsCNF HotGVu2JwC4TIGiBpQmcpQdN/cRm0ENflSaB+bLVx5Ekn++vmCRKNGUn46z1v5uM qZQ6g4MdnUzCVClYgFBEKqAcA8D03cAt7lRTtUbzwbd6si+iyazPTFJ4RQTS+RZD 7JJKibBApeRkZhXuNPlv7N+xmcONnQjG2rRfyAGozIsqlr9HjFLaE7R0YcKYlVEs M9zTZ5n0TM/Bf1znm4AWyPUAXbM2ExR8mhPWmFXqHQ6JBNNBYLgbAfZrO0QaJZJg YUUBxeraZwKnCe7BVJksvhrOjWAQE7ra -----END CERTIFICATE-----Generated at Sun May 11 16:41:14 2025 by rpki-client