$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft File: 6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft (raw, json) Hash identifier: eD0yZ7UAUOPD++2+P5hoL/rdXXxmkXV9eCNkJhGHcJk= Subject key identifier: 7E:8B:F8:DB:D3:F2:16:21:EB:F8:C7:18:2B:05:54:37:FE:93:46:3A Authority key identifier: E8:CF:22:A0:8E:43:91:CA:D1:50:FA:31:B4:4D:C9:3C:8A:B8:25:EA Certificate issuer: /CN=A91A9083/serialNumber=E8CF22A08E4391CAD150FA31B44DC93C8AB825EA Certificate serial: 47 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft Manifest number: 44 Signing time: Sun 11 May 2025 06:14:04 +0000 Manifest this update: Sun 11 May 2025 06:14:04 +0000 Manifest next update: Sun 18 May 2025 06:14:04 +0000 Files and hashes: 1: 6M8ioI5DkcrRUPoxtE3JPIq4Jeo.crl (hash: mZCEiARYaGT092Pn6k+vOqLpft5Ky4+Uxs1jc5n56oU=) 2: 0C2077B6D1B511EF944F205DC4F9AE02.roa (hash: rlJlkHo65xec8U7bYSTnPjms9g6+7D4Hmq1L6Dej1SU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.crl rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 06:14:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9083, serialNumber=E8CF22A08E4391CAD150FA31B44DC93C8AB825EA Validity Not Before: May 11 06:14:04 2025 GMT Not After : May 18 06:14:04 2025 GMT Subject: CN=6820402c-ef03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a1:ca:8e:ad:e8:fc:10:54:cd:cd:ba:13:b7: 9e:7e:49:9f:fa:b2:04:14:e1:70:78:c3:31:39:bb: ae:1d:0e:f2:56:5c:59:0f:15:96:75:b6:0f:2c:09: e0:f6:6c:e5:26:c1:6e:ff:07:6e:99:8a:5d:f1:07: 23:e9:35:5c:88:6c:e6:78:19:e6:1c:cb:1f:e1:4b: 01:86:e4:67:9d:de:03:96:4d:a6:7a:c2:25:46:31: 9f:3e:8a:e6:e1:cf:1f:20:78:ab:9e:ce:b0:90:53: 49:5a:1e:61:33:a2:91:e6:68:15:e8:ad:c6:2e:d0: d5:d7:cc:cb:ad:9e:36:f4:5a:ef:94:6a:58:14:58: 21:01:6a:61:a7:08:31:94:9d:d8:6f:96:cf:0d:a7: dc:f5:7b:a7:94:9c:b9:94:89:79:c9:1c:59:1f:85: d2:c7:dc:77:7f:44:4b:65:03:e4:db:78:de:69:9e: 9f:17:9d:84:d7:7d:d9:fb:de:2d:75:8f:c3:3f:2d: 9c:b5:1c:a3:d1:42:93:57:08:cc:a9:de:64:69:11: 99:28:44:15:ee:80:7d:fc:09:d5:3a:a1:ff:66:49: 7b:6f:e1:6d:87:2e:b9:45:46:cb:64:09:02:75:3b: c6:7b:34:11:13:4b:89:1e:f0:21:99:d9:35:0c:f9: 0a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:8B:F8:DB:D3:F2:16:21:EB:F8:C7:18:2B:05:54:37:FE:93:46:3A X509v3 Authority Key Identifier: keyid:E8:CF:22:A0:8E:43:91:CA:D1:50:FA:31:B4:4D:C9:3C:8A:B8:25:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:41:42:e1:62:d6:01:f9:93:be:05:bf:bc:17:6a:09:ee:b1: 19:8c:55:15:fb:f5:c9:64:86:0b:e2:93:f4:2d:57:93:89:de: 39:c9:d6:4b:26:1d:6a:8b:bf:40:c0:ff:88:4c:ef:6c:84:8f: 81:ea:54:65:c6:6a:00:65:27:87:49:db:3c:28:8b:8f:fa:c7: 3a:64:a3:9d:7e:9f:4b:f1:51:e2:bc:67:d0:34:d3:d0:f0:f5: e3:80:85:05:9e:ef:28:76:fb:70:96:fe:6f:a1:d3:48:ac:d9: 84:e8:a7:fa:55:72:83:76:58:18:99:db:54:2b:b5:3f:3a:bb: b9:25:a3:42:9e:9c:17:79:29:29:a7:2a:0e:67:f4:68:b7:d7: df:ff:26:0e:1c:49:c2:1e:e4:e1:40:72:b6:1f:65:f4:ce:9d: a9:53:84:3e:33:a5:5b:26:1a:c5:c3:a9:bd:73:77:72:b6:cc: 3d:92:15:e8:4e:18:48:c8:b9:6b:79:76:fc:f7:65:f0:33:08: 66:10:61:bd:20:82:2d:ec:4f:e6:28:5e:a6:0f:11:42:eb:01: b3:11:62:88:0c:06:b4:2a:50:85:f0:60:cc:6d:5c:38:3a:8d: f1:af:9b:34:39:4d:ca:d1:d2:0c:e2:31:4b:eb:d5:1e:fb:72: e1:a6:3b:95 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OTA4MzExMC8GA1UEBRMoRThDRjIyQTA4RTQzOTFDQUQxNTBGQTMxQjQ0REM5M0M4 QUI4MjVFQTAeFw0yNTA1MTEwNjE0MDRaFw0yNTA1MTgwNjE0MDRaMBgxFjAUBgNV BAMTDTY4MjA0MDJjLWVmMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPocqOrej8EFTNzboTt55+SZ/6sgQU4XB4wzE5u64dDvJWXFkPFZZ1tg8sCeD2 bOUmwW7/B26Zil3xByPpNVyIbOZ4GeYcyx/hSwGG5Ged3gOWTaZ6wiVGMZ8+iubh zx8geKuezrCQU0laHmEzopHmaBXorcYu0NXXzMutnjb0Wu+UalgUWCEBamGnCDGU ndhvls8Np9z1e6eUnLmUiXnJHFkfhdLH3Hd/REtlA+TbeN5pnp8XnYTXfdn73i11 j8M/LZy1HKPRQpNXCMyp3mRpEZkoRBXugH38CdU6of9mSXtv4W2HLrlFRstkCQJ1 O8Z7NBETS4ke8CGZ2TUM+QqfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfov429Py FiHr+McYKwVUN/6TRjowHwYDVR0jBBgwFoAU6M8ioI5DkcrRUPoxtE3JPIq4Jeow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5MDgzL0MwNkYyRTQyRDFC MDExRUY4ODMzQzkzM0M0RjlBRTAyLzZNOGlvSTVEa2NyUlVQb3h0RTNKUElxNEpl by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNk04aW9JNURrY3JSVVBveHRFM0pQSXE0SmVvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 MDgzL0MwNkYyRTQyRDFCMDExRUY4ODMzQzkzM0M0RjlBRTAyLzZNOGlvSTVEa2Ny UlVQb3h0RTNKUElxNEplby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG9BQuFi1gH5k74Fv7wXagnusRmMVRX79clkhgvik/QtV5OJ3jnJ1ksm HWqLv0DA/4hM72yEj4HqVGXGagBlJ4dJ2zwoi4/6xzpko51+n0vxUeK8Z9A009Dw 9eOAhQWe7yh2+3CW/m+h00is2YTop/pVcoN2WBiZ21QrtT86u7klo0KenBd5KSmn Kg5n9Gi319//Jg4cScIe5OFAcrYfZfTOnalThD4zpVsmGsXDqb1zd3K2zD2SFehO GEjIuWt5dvz3ZfAzCGYQYb0ggi3sT+YoXqYPEULrAbMRYogMBrQqUIXwYMxtXDg6 jfGvmzQ5TcrR0gziMUvr1R77cuGmO5U= -----END CERTIFICATE-----Generated at Sun May 11 22:58:28 2025 by rpki-client