$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.mft File: 6t6GhZIRcEQyqBm4GJm2DF093os.mft (raw, json) Hash identifier: 6UZExIE0vyudupUR1k2WWWQjKGwxF2vzpRTnchG9kJ4= Subject key identifier: E4:A9:E6:DA:C5:67:F1:17:39:E6:DC:2D:CE:F0:B0:D3:D6:7A:48:B9 Authority key identifier: EA:DE:86:85:92:11:70:44:32:A8:19:B8:18:99:B6:0C:5D:3D:DE:8B Certificate issuer: /CN=A91A0432/serialNumber=EADE86859211704432A819B81899B60C5D3DDE8B Certificate serial: 037C Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6t6GhZIRcEQyqBm4GJm2DF093os.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.mft Manifest number: 037A Signing time: Tue 13 May 2025 00:41:56 +0000 Manifest this update: Tue 13 May 2025 00:41:55 +0000 Manifest next update: Tue 20 May 2025 00:41:55 +0000 Files and hashes: 1: 6t6GhZIRcEQyqBm4GJm2DF093os.crl (hash: zWDj8zi+SDm5gSbtZb1YDzq/WJ0rVQS3XuaRdZ6V8qY=) 2: 7185135A61AE11EEA6D61C37C4F9AE02.roa (hash: UHVSesVCfWDMX6Rqc2a1Y5ozgn2h4LiLzFeoFn9E+ys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.crl rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6t6GhZIRcEQyqBm4GJm2DF093os.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 00:41:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 892 (0x37c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0432, serialNumber=EADE86859211704432A819B81899B60C5D3DDE8B Validity Not Before: May 13 00:41:55 2025 GMT Not After : May 20 00:41:55 2025 GMT Subject: CN=68229554-f7c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:83:da:ca:db:80:90:de:c4:b1:a7:87:8a:bc: ee:66:65:89:c6:e0:b0:f9:be:3d:a3:7a:5f:57:df: a3:5c:3e:34:cd:7d:47:50:15:43:fb:6d:51:27:1f: 94:60:2f:0e:dd:fd:89:b0:80:70:63:5a:c8:cb:2d: 4a:c2:e8:06:1b:58:9d:82:1e:de:2c:98:51:b0:ca: 41:b6:b7:c1:e9:75:b3:fa:af:ce:c5:c8:f5:d7:46: 0d:50:3a:ad:03:4e:13:71:2c:1d:1e:95:fb:f8:b7: 31:26:fc:8e:dc:8a:57:f8:5b:49:d6:f7:71:74:76: 7e:53:8f:09:df:5f:1d:08:91:55:b1:0c:df:9f:05: a7:d3:55:f4:a8:57:dc:ff:52:47:65:1f:4c:ae:b8: dd:18:e7:0a:10:42:46:42:de:37:b1:25:58:af:ff: fe:26:4a:0f:b2:aa:02:d3:13:74:4e:d9:4a:62:03: 68:f5:fb:d4:b5:52:af:99:fc:59:25:71:5e:79:83: 3d:f2:38:82:49:fd:ec:c0:ca:99:0a:df:3c:3b:05: 9e:1c:6d:77:a7:83:5a:ce:a4:ae:ad:98:0d:54:83: 09:94:e8:a4:bf:50:57:61:41:0a:73:5f:d7:69:5b: 81:47:28:69:b5:9b:57:1f:d0:20:bd:1e:0d:f8:1f: 82:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:A9:E6:DA:C5:67:F1:17:39:E6:DC:2D:CE:F0:B0:D3:D6:7A:48:B9 X509v3 Authority Key Identifier: keyid:EA:DE:86:85:92:11:70:44:32:A8:19:B8:18:99:B6:0C:5D:3D:DE:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6t6GhZIRcEQyqBm4GJm2DF093os.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:f8:3e:36:74:bc:18:21:90:bf:50:24:10:0b:74:7c:c0:45: b2:6e:b7:d7:6d:98:8d:7b:75:3e:3b:be:3f:79:52:b0:e9:66: 12:e1:e3:37:f0:f1:2f:a4:ee:ed:2d:d4:e1:19:03:59:ce:ea: f1:36:0e:8a:b1:b3:f4:49:4e:e8:94:96:60:f2:0a:8d:ad:2b: 32:01:e6:75:b3:64:b9:b1:9a:58:48:d0:b0:1d:ab:b0:f4:3e: 04:79:b9:3c:0f:5d:03:39:e5:e1:0d:8f:fe:31:27:bc:a4:ae: 0f:7b:67:ba:77:f6:7d:f4:13:7c:fe:55:79:b5:33:68:e1:d1: ce:28:01:3c:c7:09:1f:3a:c3:8a:ca:af:97:a9:33:88:34:16: 6b:d0:6c:34:1c:77:d4:5e:ae:31:16:56:6a:f1:d9:8f:6f:3e: 74:e0:75:a3:cf:e9:40:7b:b2:04:7e:37:6d:f1:11:7b:59:32: b2:31:6d:10:0c:60:fa:fc:20:31:dc:97:e7:7d:35:7e:d7:17: 92:37:f1:98:65:f6:d7:f3:33:f4:a2:93:81:02:5f:24:31:9e: 88:26:02:01:4c:e8:cb:7a:0e:c3:8c:aa:44:56:86:1d:93:56: 64:61:b2:a9:9a:6d:1b:42:6e:4e:dd:c2:96:33:65:99:d3:48: c1:83:2e:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA0MzIxMTAvBgNVBAUTKEVBREU4Njg1OTIxMTcwNDQzMkE4MTlCODE4OTlCNjBD NUQzRERFOEIwHhcNMjUwNTEzMDA0MTU1WhcNMjUwNTIwMDA0MTU1WjAYMRYwFAYD VQQDEw02ODIyOTU1NC1mN2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvIPaytuAkN7EsaeHirzuZmWJxuCw+b49o3pfV9+jXD40zX1HUBVD+21RJx+U YC8O3f2JsIBwY1rIyy1KwugGG1idgh7eLJhRsMpBtrfB6XWz+q/Oxcj110YNUDqt A04TcSwdHpX7+LcxJvyO3IpX+FtJ1vdxdHZ+U48J318dCJFVsQzfnwWn01X0qFfc /1JHZR9MrrjdGOcKEEJGQt43sSVYr//+JkoPsqoC0xN0TtlKYgNo9fvUtVKvmfxZ JXFeeYM98jiCSf3swMqZCt88OwWeHG13p4NazqSurZgNVIMJlOikv1BXYUEKc1/X aVuBRyhptZtXH9AgvR4N+B+CRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOSp5trF Z/EXOebcLc7wsNPWeki5MB8GA1UdIwQYMBaAFOrehoWSEXBEMqgZuBiZtgxdPd6L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDQzMi9FQzY5MkYwNEE0 Q0ExMUVDQUM0RTU3NDRDNEY5QUUwMi82dDZHaFpJUmNFUXlxQm00R0ptMkRGMDkz b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzZ0NkdoWklSY0VReXFCbTRHSm0yREYwOTNvcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDQzMi9FQzY5MkYwNEE0Q0ExMUVDQUM0RTU3NDRDNEY5QUUwMi82dDZHaFpJUmNF UXlxQm00R0ptMkRGMDkzb3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2+D42dLwYIZC/UCQQC3R8wEWybrfXbZiNe3U+O74/eVKw6WYS4eM3 8PEvpO7tLdThGQNZzurxNg6KsbP0SU7olJZg8gqNrSsyAeZ1s2S5sZpYSNCwHauw 9D4Eebk8D10DOeXhDY/+MSe8pK4Pe2e6d/Z99BN8/lV5tTNo4dHOKAE8xwkfOsOK yq+XqTOINBZr0Gw0HHfUXq4xFlZq8dmPbz504HWjz+lAe7IEfjdt8RF7WTKyMW0Q DGD6/CAx3JfnfTV+1xeSN/GYZfbX8zP0opOBAl8kMZ6IJgIBTOjLeg7DjKpEVoYd k1ZkYbKpmm0bQm5O3cKWM2WZ00jBgy5P -----END CERTIFICATE-----Generated at Tue May 13 20:49:22 2025 by rpki-client