$ rpki-client -vvf rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.mft File: 6FKljehxn4vGvWSUmFS0dEe4nN4.mft (raw, json) Hash identifier: 11H6lBvdJNBgZCFyO8HpshwYysxjYTvrOOBJB/bnsw8= Subject key identifier: 6A:94:CA:E6:45:67:4D:5B:86:3C:22:C4:68:4C:F5:61:3B:D2:B6:76 Authority key identifier: E8:52:A5:8D:E8:71:9F:8B:C6:BD:64:94:98:54:B4:74:47:B8:9C:DE Certificate issuer: /CN=A918F862/serialNumber=E852A58DE8719F8BC6BD64949854B47447B89CDE Certificate serial: 112D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6FKljehxn4vGvWSUmFS0dEe4nN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.mft Manifest number: 1120 Signing time: Sat 10 May 2025 17:10:02 +0000 Manifest this update: Sat 10 May 2025 17:10:01 +0000 Manifest next update: Sat 17 May 2025 17:10:01 +0000 Files and hashes: 1: 6FKljehxn4vGvWSUmFS0dEe4nN4.crl (hash: LX/To2wTkOOX82bCZfDyALhjl5qsTSTzAJ708Swe9n0=) 2: D1D7F9AE0FF911E9B45E3B10C4F9AE02.roa (hash: 3Wqu6xOv+Yqgn98imVoKo0C/3S3sn8xVZaKt7qUGL5g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.crl rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6FKljehxn4vGvWSUmFS0dEe4nN4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 17:10:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4397 (0x112d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F862, serialNumber=E852A58DE8719F8BC6BD64949854B47447B89CDE Validity Not Before: May 10 17:10:01 2025 GMT Not After : May 17 17:10:01 2025 GMT Subject: CN=681f8869-3de5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ae:31:ba:98:2f:bc:76:a7:b6:88:06:cf:a4: 39:24:f8:0a:ff:bd:8b:dc:30:16:53:8f:56:b4:b2: 88:42:4a:00:80:1c:aa:89:bd:e3:a9:c9:c0:27:33: da:81:b0:43:be:81:9d:0f:0d:e8:09:30:f3:80:fe: 1d:01:91:34:23:42:4d:08:ce:75:38:18:b4:bb:54: 2a:06:7f:43:75:d6:31:58:f2:4b:95:8a:68:3e:63: 44:dd:b1:7c:7b:5a:91:69:a2:bd:ac:49:91:ed:32: fe:d4:d9:48:a8:56:46:2e:fa:e2:94:9f:2e:47:8b: 85:eb:67:71:cf:d3:1e:93:dd:c4:5f:ce:8a:03:bf: 87:93:a7:68:2d:ee:50:5b:0c:3f:d1:5f:d9:7a:5c: e8:a1:0a:be:ad:f7:3d:b9:19:1a:88:18:a5:b8:15: fe:90:9b:b0:a9:4e:60:ae:b7:a4:07:cd:94:05:35: 1c:0a:27:50:9c:78:08:2d:2f:d0:cc:da:58:5f:df: 64:5c:9b:d8:12:3f:73:a6:13:ab:8c:76:88:36:ac: ca:b7:7e:8e:74:d7:41:db:35:47:94:eb:e8:be:36: 15:a7:aa:3f:91:bd:b9:3c:d7:b4:c6:32:4f:a7:0b: 84:bc:07:7d:fc:30:5e:9c:44:b9:0b:8c:17:73:42: 9b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:94:CA:E6:45:67:4D:5B:86:3C:22:C4:68:4C:F5:61:3B:D2:B6:76 X509v3 Authority Key Identifier: keyid:E8:52:A5:8D:E8:71:9F:8B:C6:BD:64:94:98:54:B4:74:47:B8:9C:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6FKljehxn4vGvWSUmFS0dEe4nN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:7e:62:fc:3d:68:06:cd:b1:fc:e4:46:b7:e9:33:ce:04:fa: 5b:de:28:49:ec:25:cd:a5:01:42:a6:36:f4:0c:4b:ab:54:12: 64:20:98:d4:d2:a0:64:0c:db:eb:01:08:41:d3:5c:42:33:17: 24:9d:ac:22:ae:04:03:06:e4:10:27:7e:b0:8e:7b:b1:e9:61: 20:df:56:09:12:cb:03:10:3c:87:1b:77:96:a6:42:d4:e0:b4: 85:31:5d:4a:01:7d:30:ac:ab:76:4d:a7:3d:71:cc:2e:d0:1c: cd:7a:f7:a8:6f:69:31:60:59:91:78:08:2c:dd:80:de:8b:a1: 80:3c:2f:dd:cc:1d:ba:b2:47:b0:45:44:fb:f1:81:9b:2d:81: 9f:9d:3c:14:df:d5:c5:02:5d:f8:ee:83:2f:a9:8e:00:66:0e: 69:e5:95:c6:ae:da:2c:09:d9:5f:5c:80:22:8d:e0:a3:d9:87: 30:78:d4:c1:11:40:34:a3:33:a8:c6:c0:de:bc:8a:c5:50:65: fe:43:d2:ff:61:41:d7:89:6b:d2:6c:62:bf:f6:3b:b7:9f:05: 29:e9:f4:6e:9a:d6:d3:0e:62:6d:f3:e8:1b:7b:ee:58:30:e1: 73:1c:b8:56:86:63:03:09:02:73:20:e0:e5:75:77:71:bb:af: 9e:38:9a:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICES0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY4NjIxMTAvBgNVBAUTKEU4NTJBNThERTg3MTlGOEJDNkJENjQ5NDk4NTRCNDc0 NDdCODlDREUwHhcNMjUwNTEwMTcxMDAxWhcNMjUwNTE3MTcxMDAxWjAYMRYwFAYD VQQDEw02ODFmODg2OS0zZGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAra4xupgvvHantogGz6Q5JPgK/72L3DAWU49WtLKIQkoAgByqib3jqcnAJzPa gbBDvoGdDw3oCTDzgP4dAZE0I0JNCM51OBi0u1QqBn9DddYxWPJLlYpoPmNE3bF8 e1qRaaK9rEmR7TL+1NlIqFZGLvrilJ8uR4uF62dxz9Mek93EX86KA7+Hk6doLe5Q Www/0V/ZelzooQq+rfc9uRkaiBiluBX+kJuwqU5grrekB82UBTUcCidQnHgILS/Q zNpYX99kXJvYEj9zphOrjHaINqzKt36OdNdB2zVHlOvovjYVp6o/kb25PNe0xjJP pwuEvAd9/DBenES5C4wXc0Kb2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGqUyuZF Z01bhjwixGhM9WE70rZ2MB8GA1UdIwQYMBaAFOhSpY3ocZ+Lxr1klJhUtHRHuJze MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Rjg2Mi8xRTZGNkMxMjBG RjkxMUU5QTBEOTJCMEZDNEY5QUUwMi82RktsamVoeG40dkd2V1NVbUZTMGRFZTRu TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZGS2xqZWh4bjR2R3ZXU1VtRlMwZEVlNG5ONC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Rjg2Mi8xRTZGNkMxMjBGRjkxMUU5QTBEOTJCMEZDNEY5QUUwMi82RktsamVoeG40 dkd2V1NVbUZTMGRFZTRuTjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCafmL8PWgGzbH85Ea36TPOBPpb3ihJ7CXNpQFCpjb0DEurVBJkIJjU 0qBkDNvrAQhB01xCMxcknawirgQDBuQQJ36wjnux6WEg31YJEssDEDyHG3eWpkLU 4LSFMV1KAX0wrKt2Tac9ccwu0BzNeveob2kxYFmReAgs3YDei6GAPC/dzB26skew RUT78YGbLYGfnTwU39XFAl347oMvqY4AZg5p5ZXGrtosCdlfXIAijeCj2YcweNTB EUA0ozOoxsDevIrFUGX+Q9L/YUHXiWvSbGK/9ju3nwUp6fRumtbTDmJt8+gbe+5Y MOFzHLhWhmMDCQJzIODldXdxu6+eOJpW -----END CERTIFICATE-----Generated at Sun May 11 04:17:49 2025 by rpki-client