$ rpki-client -vvf rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.mft File: C6xCmG6avbfO4s37Kp_o1tAqq1w.mft (raw, json) Hash identifier: XeBIbiinAN0AzJHrJoBBS6u7+gWAQOsm6nvVxpzAE4I= Subject key identifier: DD:9D:B4:55:42:E7:8F:B5:5A:3A:EB:3D:1C:BA:16:A0:26:DC:6F:00 Authority key identifier: 0B:AC:42:98:6E:9A:BD:B7:CE:E2:CD:FB:2A:9F:E8:D6:D0:2A:AB:5C Certificate issuer: /CN=A91975CC/serialNumber=0BAC42986E9ABDB7CEE2CDFB2A9FE8D6D02AAB5C Certificate serial: 0384 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6xCmG6avbfO4s37Kp_o1tAqq1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.mft Manifest number: 0374 Signing time: Tue 13 May 2025 00:45:52 +0000 Manifest this update: Tue 13 May 2025 00:45:51 +0000 Manifest next update: Tue 20 May 2025 00:45:51 +0000 Files and hashes: 1: C6xCmG6avbfO4s37Kp_o1tAqq1w.crl (hash: /6HvStCAQkGkkkjArZEumlTpGQg5EmHFloxf9kwAv4E=) 2: 1CF68346F0BF11EEA1A0B559C4F9AE02.roa (hash: 6/4Wi7NNWL18DEfbDuCr0VcAnjHlRgOew4WUdCphh0Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.crl rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6xCmG6avbfO4s37Kp_o1tAqq1w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 00:45:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 900 (0x384) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91975CC, serialNumber=0BAC42986E9ABDB7CEE2CDFB2A9FE8D6D02AAB5C Validity Not Before: May 13 00:45:51 2025 GMT Not After : May 20 00:45:51 2025 GMT Subject: CN=68229640-35b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bc:1b:e3:32:ef:0d:d3:b9:f7:fa:de:c1:cf: ea:ae:0a:7d:94:8c:dd:a3:6a:d6:b5:8e:a3:bc:32: 14:d7:6a:3b:a8:af:cf:85:f4:8b:e5:90:dc:4d:8b: 40:67:a4:e3:82:e4:f7:c2:c9:1b:23:8a:26:5e:c3: 40:e5:59:9c:fa:c2:0d:84:80:6c:79:53:3f:34:5f: b4:37:a4:12:40:a2:2e:7c:fb:ef:1e:3e:1f:b2:9b: 7f:c9:d0:8e:27:11:2b:ba:82:21:8e:af:a1:6a:6f: a2:88:8b:fc:07:81:a2:38:37:62:79:a0:37:1e:cf: c6:7b:41:6c:52:3d:17:e9:ee:05:ae:b8:a5:37:88: f5:e5:44:04:9e:e4:85:f7:ad:a6:12:cc:f4:88:5c: 0d:69:ad:11:d5:e2:5b:c5:54:93:c5:a2:2d:1d:e5: bd:93:77:9c:9f:9f:2e:3b:8e:3f:c2:d5:35:2e:78: 9b:7e:38:23:10:af:c0:30:74:8d:ab:22:f4:7d:c1: 4d:64:b0:c6:bd:85:da:9f:49:29:01:75:13:91:68: 21:9b:60:77:f6:1a:ed:01:a3:02:84:18:5d:8e:ea: df:a6:81:76:77:14:9d:df:6b:85:73:7d:32:a2:97: 5a:38:46:59:22:4f:26:23:6e:46:76:08:05:14:d4: 2e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:9D:B4:55:42:E7:8F:B5:5A:3A:EB:3D:1C:BA:16:A0:26:DC:6F:00 X509v3 Authority Key Identifier: keyid:0B:AC:42:98:6E:9A:BD:B7:CE:E2:CD:FB:2A:9F:E8:D6:D0:2A:AB:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6xCmG6avbfO4s37Kp_o1tAqq1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:b4:3c:f8:08:d8:b2:e3:18:4e:1f:f3:3f:0a:0b:e6:b9:35: 35:5a:1d:51:ab:15:cb:15:52:04:a3:bb:56:78:de:a5:e8:67: 73:68:66:ba:d3:33:aa:5c:6e:63:20:43:3b:c0:4c:0e:f6:8e: e6:be:fb:d0:28:01:02:1e:69:ac:02:8b:63:31:7b:25:8a:8c: ab:d8:cd:ac:6d:dc:28:65:43:dc:54:dd:e5:50:7b:ba:46:cc: b9:64:27:dc:8d:9a:0d:af:73:43:c0:95:b1:67:65:4c:b4:a5: 68:9f:da:67:03:1d:2c:fc:a5:a9:96:7d:a0:bd:4b:c6:5b:ca: 5e:d1:99:bb:9e:41:53:5c:23:b9:20:15:d5:73:f8:69:dc:4a: ab:3c:3b:67:53:66:0d:52:d6:b4:07:24:3e:aa:e7:48:e0:31: 50:e1:fd:d1:90:f3:c1:c4:7c:94:5f:71:bb:97:20:cb:ab:f0: f4:8a:b2:08:57:6d:06:ff:a5:39:f4:23:b8:b5:5d:cc:f8:29: 2c:41:12:a8:fc:f7:77:e4:55:5b:eb:c1:a0:b3:83:8e:18:fb: 7b:00:de:70:9f:c3:45:22:82:9a:e3:19:19:02:ef:f3:09:c7: 08:e3:87:c7:5d:29:9a:df:44:1a:c0:00:73:08:83:93:e7:64: 92:94:50:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc1Q0MxMTAvBgNVBAUTKDBCQUM0Mjk4NkU5QUJEQjdDRUUyQ0RGQjJBOUZFOEQ2 RDAyQUFCNUMwHhcNMjUwNTEzMDA0NTUxWhcNMjUwNTIwMDA0NTUxWjAYMRYwFAYD VQQDEw02ODIyOTY0MC0zNWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAurwb4zLvDdO59/rewc/qrgp9lIzdo2rWtY6jvDIU12o7qK/PhfSL5ZDcTYtA Z6TjguT3wskbI4omXsNA5Vmc+sINhIBseVM/NF+0N6QSQKIufPvvHj4fspt/ydCO JxEruoIhjq+ham+iiIv8B4GiODdieaA3Hs/Ge0FsUj0X6e4FrrilN4j15UQEnuSF 962mEsz0iFwNaa0R1eJbxVSTxaItHeW9k3ecn58uO44/wtU1LnibfjgjEK/AMHSN qyL0fcFNZLDGvYXan0kpAXUTkWghm2B39hrtAaMChBhdjurfpoF2dxSd32uFc30y opdaOEZZIk8mI25GdggFFNQuhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN2dtFVC 54+1WjrrPRy6FqAm3G8AMB8GA1UdIwQYMBaAFAusQphumr23zuLN+yqf6NbQKqtc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzVDQy8xRUEzNDNFMkFG RTMxMUVDQTJDQjA2NkRDNEY5QUUwMi9DNnhDbUc2YXZiZk80czM3S3BfbzF0QXFx MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M2eENtRzZhdmJmTzRzMzdLcF9vMXRBcXExdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzVDQy8xRUEzNDNFMkFGRTMxMUVDQTJDQjA2NkRDNEY5QUUwMi9DNnhDbUc2YXZi Zk80czM3S3BfbzF0QXFxMXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8tDz4CNiy4xhOH/M/CgvmuTU1Wh1RqxXLFVIEo7tWeN6l6GdzaGa6 0zOqXG5jIEM7wEwO9o7mvvvQKAECHmmsAotjMXslioyr2M2sbdwoZUPcVN3lUHu6 Rsy5ZCfcjZoNr3NDwJWxZ2VMtKVon9pnAx0s/KWpln2gvUvGW8pe0Zm7nkFTXCO5 IBXVc/hp3EqrPDtnU2YNUta0ByQ+qudI4DFQ4f3RkPPBxHyUX3G7lyDLq/D0irII V20G/6U59CO4tV3M+CksQRKo/Pd35FVb68Ggs4OOGPt7AN5wn8NFIoKa4xkZAu/z CccI44fHXSma30QawABzCIOT52SSlFCC -----END CERTIFICATE-----Generated at Tue May 13 09:21:45 2025 by rpki-client