$ rpki-client -vvf rpki.apnic.net/member_repository/A91874B6/BE8911F4390511EFBF187A4AC4F9AE02/6mEYPX8HHa7UVWQxG4oadb3OcNY.mft File: 6mEYPX8HHa7UVWQxG4oadb3OcNY.mft (raw, json) Hash identifier: s04V1xuJboVVp3Y0IbLEjr7AZ7VtJxZxYfuxv4xdy64= Subject key identifier: EE:AA:F9:7A:1A:37:3B:92:BE:68:2E:AA:5E:72:2C:C2:BD:BB:AE:E6 Authority key identifier: EA:61:18:3D:7F:07:1D:AE:D4:55:64:31:1B:8A:1A:75:BD:CE:70:D6 Certificate issuer: /CN=A91874B6/serialNumber=EA61183D7F071DAED45564311B8A1A75BDCE70D6 Certificate serial: A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6mEYPX8HHa7UVWQxG4oadb3OcNY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91874B6/BE8911F4390511EFBF187A4AC4F9AE02/6mEYPX8HHa7UVWQxG4oadb3OcNY.mft Manifest number: A3 Signing time: Sun 11 May 2025 04:59:21 +0000 Manifest this update: Sun 11 May 2025 04:59:20 +0000 Manifest next update: Sun 18 May 2025 04:59:20 +0000 Files and hashes: 1: 6mEYPX8HHa7UVWQxG4oadb3OcNY.crl (hash: Rfl83FZil1jRnQ5YAmHFnB3+6XKqXegvSCF9ukAEU1k=) 2: CB54BF04390611EF93BAC362C4F9AE02.roa (hash: SBPg4qf1Hpdi+0DWgBFMwDlSC1uKF+MPsUyay046sq4=) 3: 5AFDCA16390611EF9290C361C4F9AE02.roa (hash: SumhTWc+8flvVqGSUtlnNECtrOpr5Ex0r4tAHN1aP0Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91874B6/BE8911F4390511EFBF187A4AC4F9AE02/6mEYPX8HHa7UVWQxG4oadb3OcNY.crl rsync://rpki.apnic.net/member_repository/A91874B6/BE8911F4390511EFBF187A4AC4F9AE02/6mEYPX8HHa7UVWQxG4oadb3OcNY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6mEYPX8HHa7UVWQxG4oadb3OcNY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 04:59:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91874B6, serialNumber=EA61183D7F071DAED45564311B8A1A75BDCE70D6 Validity Not Before: May 11 04:59:20 2025 GMT Not After : May 18 04:59:20 2025 GMT Subject: CN=68202ea8-dc50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f4:38:5e:48:a3:6e:4b:e4:58:de:8a:21:8d: ea:06:71:ae:86:84:d2:4e:d0:5a:e5:74:52:2d:31: e8:61:88:16:af:bd:da:54:52:b5:c1:3d:66:39:d3: d3:0a:c7:ab:3e:28:d2:99:d5:96:6e:dc:40:11:a3: 09:35:26:a9:27:bf:ec:18:2f:c6:ed:6c:88:be:63: 41:73:c4:ee:60:8b:5a:b3:34:8e:8a:d8:4f:0a:2b: 52:90:17:82:fe:59:f6:c9:73:c3:40:80:d4:7b:d7: 61:0a:96:08:f1:49:be:ae:8a:55:8b:8c:b1:39:2e: f4:55:4b:38:cb:3f:ed:1e:4a:f5:cb:af:15:c3:5b: e6:ae:cc:48:cc:f0:f5:a1:d2:8b:ce:87:bd:99:3f: dc:dd:ed:0b:f7:46:51:1a:f8:dc:2b:8f:a8:d6:88: 9e:e0:cb:b4:24:4f:3e:ed:50:f1:5e:12:71:be:a2: 11:bf:aa:16:fa:c2:e8:f2:e1:c1:d7:fe:c5:1e:c5: 45:ed:f3:7b:1a:2c:9e:1c:e3:bc:58:f3:bd:b7:63: 13:50:07:d9:d0:82:9e:8f:38:61:60:2b:66:1f:6e: 17:cd:6d:f4:82:dc:68:46:54:ed:85:1d:e6:d5:a0: 0b:51:71:07:23:72:e6:0e:55:61:a0:a7:24:39:a7: 02:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:AA:F9:7A:1A:37:3B:92:BE:68:2E:AA:5E:72:2C:C2:BD:BB:AE:E6 X509v3 Authority Key Identifier: keyid:EA:61:18:3D:7F:07:1D:AE:D4:55:64:31:1B:8A:1A:75:BD:CE:70:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91874B6/BE8911F4390511EFBF187A4AC4F9AE02/6mEYPX8HHa7UVWQxG4oadb3OcNY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6mEYPX8HHa7UVWQxG4oadb3OcNY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91874B6/BE8911F4390511EFBF187A4AC4F9AE02/6mEYPX8HHa7UVWQxG4oadb3OcNY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:c1:c0:1f:42:3e:32:87:fe:b8:15:f9:6a:21:60:f0:06:ca: d3:e0:02:13:f6:ca:8c:48:47:97:04:9f:5a:b8:e6:d5:0a:86: db:65:be:fb:5d:ca:64:c2:05:5d:54:95:7e:20:6a:d9:49:10: 91:dd:80:e7:7e:75:85:85:16:9e:db:2b:c9:f0:6e:9e:11:72: 98:6a:46:f9:c2:9e:6d:59:59:c7:3c:83:87:8b:23:65:0a:ab: 1c:98:a5:e5:58:eb:c5:62:e8:bc:06:b0:a0:57:0f:c6:d3:c6: af:d5:e8:33:93:64:eb:90:1d:bf:c6:94:14:4f:08:ee:b5:7e: 6e:1b:b7:05:11:ed:7b:55:85:ca:e6:e1:05:70:d4:a8:17:92: 8d:ae:4e:ea:72:1e:57:2d:a7:d6:c9:44:91:b4:d6:ea:e3:70: 17:cb:12:9c:cf:27:d4:96:8e:c4:1c:c6:f8:c1:90:7f:61:60: 78:0f:37:09:22:70:0a:ac:94:83:5a:64:e9:c6:59:94:5a:5f: e9:f7:80:e8:23:f7:a4:03:2c:b1:8c:30:ec:74:41:03:af:1f: 27:87:59:d4:10:b1:fc:3e:7c:c7:7e:1f:d2:26:f1:d8:d6:be: 44:35:0d:54:14:cb:6b:5f:2f:50:42:80:3a:f9:d3:9e:ec:90: 56:6e:02:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc0QjYxMTAvBgNVBAUTKEVBNjExODNEN0YwNzFEQUVENDU1NjQzMTFCOEExQTc1 QkRDRTcwRDYwHhcNMjUwNTExMDQ1OTIwWhcNMjUwNTE4MDQ1OTIwWjAYMRYwFAYD VQQDEw02ODIwMmVhOC1kYzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0PQ4XkijbkvkWN6KIY3qBnGuhoTSTtBa5XRSLTHoYYgWr73aVFK1wT1mOdPT CserPijSmdWWbtxAEaMJNSapJ7/sGC/G7WyIvmNBc8TuYItaszSOithPCitSkBeC /ln2yXPDQIDUe9dhCpYI8Um+ropVi4yxOS70VUs4yz/tHkr1y68Vw1vmrsxIzPD1 odKLzoe9mT/c3e0L90ZRGvjcK4+o1oie4Mu0JE8+7VDxXhJxvqIRv6oW+sLo8uHB 1/7FHsVF7fN7GiyeHOO8WPO9t2MTUAfZ0IKejzhhYCtmH24XzW30gtxoRlTthR3m 1aALUXEHI3LmDlVhoKckOacCLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO6q+Xoa NzuSvmguql5yLMK9u67mMB8GA1UdIwQYMBaAFOphGD1/Bx2u1FVkMRuKGnW9znDW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzRCNi9CRTg5MTFGNDM5 MDUxMUVGQkYxODdBNEFDNEY5QUUwMi82bUVZUFg4SEhhN1VWV1F4RzRvYWRiM09j TlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZtRVlQWDhISGE3VVZXUXhHNG9hZGIzT2NOWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzRCNi9CRTg5MTFGNDM5MDUxMUVGQkYxODdBNEFDNEY5QUUwMi82bUVZUFg4SEhh N1VWV1F4RzRvYWRiM09jTlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0wcAfQj4yh/64FflqIWDwBsrT4AIT9sqMSEeXBJ9auObVCobbZb77 XcpkwgVdVJV+IGrZSRCR3YDnfnWFhRae2yvJ8G6eEXKYakb5wp5tWVnHPIOHiyNl CqscmKXlWOvFYui8BrCgVw/G08av1egzk2TrkB2/xpQUTwjutX5uG7cFEe17VYXK 5uEFcNSoF5KNrk7qch5XLafWyUSRtNbq43AXyxKczyfUlo7EHMb4wZB/YWB4DzcJ InAKrJSDWmTpxlmUWl/p94DoI/ekAyyxjDDsdEEDrx8nh1nUELH8PnzHfh/SJvHY 1r5ENQ1UFMtrXy9QQoA6+dOe7JBWbgLN -----END CERTIFICATE-----Generated at Sun May 11 20:07:17 2025 by rpki-client