$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0847/33B23F7E8C8E11EFA2DC5360C4F9AE02/6GFAAj8MoF8XFLinDcmVX_eXvbE.mft File: 6GFAAj8MoF8XFLinDcmVX_eXvbE.mft (raw, json) Hash identifier: 6euF4VYvC9KOEL4cBhME/3u7h9DQYI5WRq0zWjiOnCU= Subject key identifier: D4:87:EE:0C:72:6E:CE:7E:3D:DC:13:84:DD:CD:C9:EF:69:0E:76:BE Authority key identifier: E8:61:40:02:3F:0C:A0:5F:17:14:B8:A7:0D:C9:95:5F:F7:97:BD:B1 Certificate issuer: /CN=A91A0847/serialNumber=E86140023F0CA05F1714B8A70DC9955FF797BDB1 Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GFAAj8MoF8XFLinDcmVX_eXvbE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0847/33B23F7E8C8E11EFA2DC5360C4F9AE02/6GFAAj8MoF8XFLinDcmVX_eXvbE.mft Manifest number: 6B Signing time: Sun 11 May 2025 05:40:42 +0000 Manifest this update: Sun 11 May 2025 05:40:41 +0000 Manifest next update: Sun 18 May 2025 05:40:41 +0000 Files and hashes: 1: 6GFAAj8MoF8XFLinDcmVX_eXvbE.crl (hash: fSnXtUaSnUG6pyWAQYzaQglNm02r9tMX3vY3li0iw0o=) 2: 9A36771A8C8E11EF86852961C4F9AE02.roa (hash: 9OuRCyTKARyxu0HVGwX+7EOD8zJcO3DB6HwcIsyXsFM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0847/33B23F7E8C8E11EFA2DC5360C4F9AE02/6GFAAj8MoF8XFLinDcmVX_eXvbE.crl rsync://rpki.apnic.net/member_repository/A91A0847/33B23F7E8C8E11EFA2DC5360C4F9AE02/6GFAAj8MoF8XFLinDcmVX_eXvbE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GFAAj8MoF8XFLinDcmVX_eXvbE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0847, serialNumber=E86140023F0CA05F1714B8A70DC9955FF797BDB1 Validity Not Before: May 11 05:40:41 2025 GMT Not After : May 18 05:40:41 2025 GMT Subject: CN=68203859-e845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c0:67:4e:b2:67:cd:77:d3:f8:fa:cd:9a:88: 5a:e8:75:ed:e7:3e:a0:93:88:cf:57:d9:e1:41:31: 95:4a:ac:56:42:c6:60:f8:b0:dc:88:fd:a1:4b:38: d2:f7:4c:f0:6b:42:72:25:d3:51:29:6f:95:3c:37: 76:f8:ac:92:58:7f:98:6d:0a:62:31:53:cf:c3:a4: 99:7d:3e:53:9d:bc:63:d4:b3:3f:d6:3a:a2:ed:76: 74:21:68:09:0d:bf:d9:4f:b5:c8:09:ca:f0:06:11: bd:71:4f:d9:83:c0:0b:a6:40:06:9b:b4:1b:b2:a6: c9:1e:57:39:94:8f:4c:f3:03:39:73:62:63:05:78: dc:5d:19:1b:4b:43:45:73:29:39:ec:a3:38:c8:e4: 59:66:b2:eb:3a:1c:4d:e8:f9:8f:36:4c:07:34:00: 6f:3f:ba:59:12:f9:9c:72:92:4d:5c:51:f0:30:16: 4d:19:19:b0:e2:3e:3e:05:b3:9e:26:13:c5:f1:48: 1e:98:19:e6:48:7c:c1:e3:47:52:04:11:ae:b9:7d: 3b:85:0b:22:8d:1d:1c:ab:c2:6b:fe:09:73:6c:42: c2:14:08:9b:ba:a0:3e:ba:0a:4b:be:d4:ab:af:d3: 0b:83:d9:b3:a6:d7:1b:34:ad:d5:be:44:60:12:9c: 40:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:87:EE:0C:72:6E:CE:7E:3D:DC:13:84:DD:CD:C9:EF:69:0E:76:BE X509v3 Authority Key Identifier: keyid:E8:61:40:02:3F:0C:A0:5F:17:14:B8:A7:0D:C9:95:5F:F7:97:BD:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0847/33B23F7E8C8E11EFA2DC5360C4F9AE02/6GFAAj8MoF8XFLinDcmVX_eXvbE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GFAAj8MoF8XFLinDcmVX_eXvbE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0847/33B23F7E8C8E11EFA2DC5360C4F9AE02/6GFAAj8MoF8XFLinDcmVX_eXvbE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:69:01:90:03:ce:3f:07:3f:8d:cb:22:f4:1e:6b:28:79:58: 6c:a5:dc:6a:74:65:5c:02:05:9c:a3:51:17:f1:c9:07:26:b1: 4a:ba:83:ad:e9:0c:70:f3:4e:47:e5:34:72:29:34:a6:7a:12: 5c:3a:29:f0:bb:02:14:30:4b:9d:67:74:4a:33:ae:eb:6e:ab: a3:5c:d7:54:d6:1c:e3:30:b7:be:00:de:76:53:62:63:c4:aa: a9:06:ac:28:32:5c:6d:bb:41:7d:ef:2c:0d:97:86:63:01:28: 31:65:7c:00:a4:ed:e1:c7:93:a3:cf:c6:03:55:3b:7a:2e:70: f6:36:f0:61:36:86:19:59:28:8a:f4:e6:c6:9f:ae:f3:f7:c3: 39:56:4a:52:e8:f4:fc:55:14:6b:e0:9f:a3:2c:d9:57:80:e3: 37:a5:34:25:c1:da:7c:53:1d:a4:0c:8b:3b:6d:b5:1d:64:7d: dc:de:d8:6f:27:7a:fd:09:90:71:81:3e:92:47:ee:61:99:70: 75:a3:10:71:c6:02:48:58:2a:78:8d:b6:36:cb:6d:71:4b:1e: 45:9b:a0:ad:e1:f0:fa:1a:db:53:7d:f1:f4:8c:a8:45:88:a2: c6:60:e2:b9:86:0e:1c:3c:17:47:15:c1:0e:fc:34:59:16:cd: 56:9c:83:98 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MDg0NzExMC8GA1UEBRMoRTg2MTQwMDIzRjBDQTA1RjE3MTRCOEE3MERDOTk1NUZG Nzk3QkRCMTAeFw0yNTA1MTEwNTQwNDFaFw0yNTA1MTgwNTQwNDFaMBgxFjAUBgNV BAMTDTY4MjAzODU5LWU4NDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUwGdOsmfNd9P4+s2aiFrode3nPqCTiM9X2eFBMZVKrFZCxmD4sNyI/aFLONL3 TPBrQnIl01Epb5U8N3b4rJJYf5htCmIxU8/DpJl9PlOdvGPUsz/WOqLtdnQhaAkN v9lPtcgJyvAGEb1xT9mDwAumQAabtBuypskeVzmUj0zzAzlzYmMFeNxdGRtLQ0Vz KTnsozjI5Flmsus6HE3o+Y82TAc0AG8/ulkS+Zxykk1cUfAwFk0ZGbDiPj4Fs54m E8XxSB6YGeZIfMHjR1IEEa65fTuFCyKNHRyrwmv+CXNsQsIUCJu6oD66Cku+1Kuv 0wuD2bOm1xs0rdW+RGASnEDvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1IfuDHJu zn493BOE3c3J72kOdr4wHwYDVR0jBBgwFoAU6GFAAj8MoF8XFLinDcmVX/eXvbEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEwODQ3LzMzQjIzRjdFOEM4 RTExRUZBMkRDNTM2MEM0RjlBRTAyLzZHRkFBajhNb0Y4WEZMaW5EY21WWF9lWHZi RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNkdGQUFqOE1vRjhYRkxpbkRjbVZYX2VYdmJFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEw ODQ3LzMzQjIzRjdFOEM4RTExRUZBMkRDNTM2MEM0RjlBRTAyLzZHRkFBajhNb0Y4 WEZMaW5EY21WWF9lWHZiRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALlpAZADzj8HP43LIvQeayh5WGyl3Gp0ZVwCBZyjURfxyQcmsUq6g63p DHDzTkflNHIpNKZ6Elw6KfC7AhQwS51ndEozrutuq6Nc11TWHOMwt74A3nZTYmPE qqkGrCgyXG27QX3vLA2XhmMBKDFlfACk7eHHk6PPxgNVO3oucPY28GE2hhlZKIr0 5safrvP3wzlWSlLo9PxVFGvgn6Ms2VeA4zelNCXB2nxTHaQMiztttR1kfdze2G8n ev0JkHGBPpJH7mGZcHWjEHHGAkhYKniNtjbLbXFLHkWboK3h8Poa21N98fSMqEWI osZg4rmGDhw8F0cVwQ78NFkWzVacg5g= -----END CERTIFICATE-----Generated at Sun May 11 14:53:18 2025 by rpki-client