$ rpki-client -vvf rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft File: 6N-NXkyE2ofXKac8HE6GETgassE.mft (raw, json) Hash identifier: Q02F0tN7WJpTd9r9ipohhLuL6aVXkFvcHbBsRS523S0= Subject key identifier: CF:98:84:78:0C:E3:A4:75:08:87:70:0A:C8:95:A1:0C:66:8D:00:88 Authority key identifier: E8:DF:8D:5E:4C:84:DA:87:D7:29:A7:3C:1C:4E:86:11:38:1A:B2:C1 Certificate issuer: /CN=A91B01C7/serialNumber=E8DF8D5E4C84DA87D729A73C1C4E8611381AB2C1 Certificate serial: 2A25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft Manifest number: 2A05 Signing time: Mon 12 May 2025 15:34:19 +0000 Manifest this update: Mon 12 May 2025 15:34:18 +0000 Manifest next update: Mon 19 May 2025 15:34:18 +0000 Files and hashes: 1: 6N-NXkyE2ofXKac8HE6GETgassE.crl (hash: Jr0clxQhjKDwOJJ3smpqaf2TLp1H5bRS4aW8sX2iuec=) 2: 3785190EF0FE11EEA034D07EC4F9AE02.roa (hash: 7QHA7SnGm3Slg6UtKljXqvO3oOcVcBIhggVBhihsz2U=) 3: 445DB498796011EFA7E9391DC4F9AE02.roa (hash: NM7FShW06/HQ6VqGb5G2xSzxEZkPVe4ddn8MqSf2TiQ=) 4: E86E188A795F11EFBF3B491CC4F9AE02.roa (hash: 7r3+bfJMmECiAzmN3nCQ3UiLeoGkCPSVCRUYmPSHhFI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.crl rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 15:34:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10789 (0x2a25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B01C7, serialNumber=E8DF8D5E4C84DA87D729A73C1C4E8611381AB2C1 Validity Not Before: May 12 15:34:18 2025 GMT Not After : May 19 15:34:18 2025 GMT Subject: CN=682214fa-3c82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3e:3d:14:fb:e5:07:0e:48:5d:76:20:92:e2: 0f:50:53:76:fc:89:ef:1a:f5:b1:99:83:e1:2e:c1: 9e:da:ba:5b:4e:fc:33:cc:72:4b:36:7a:25:fe:6a: 51:bc:3a:d7:62:09:81:67:68:5a:0b:37:68:01:94: 0c:f1:f7:2b:75:6d:e0:0a:c8:49:4a:e2:1e:2c:b6: 53:95:60:11:73:14:cd:55:47:eb:a0:0e:39:a7:50: 32:af:1b:c4:04:1e:d0:5c:2d:d1:83:4a:a3:1c:8d: 7a:61:88:13:01:7b:eb:32:41:51:61:e1:7a:88:d7: 0b:5b:95:c5:76:81:a2:fd:1c:db:a2:7a:44:4c:46: 5b:f7:23:17:33:ba:54:d7:fc:a6:76:b5:2d:07:b5: c1:af:97:6b:8f:d0:bb:7a:4e:3e:83:5f:69:2b:2f: 3d:b1:fe:03:b1:28:6b:8d:2a:0e:7a:97:af:07:9d: 22:b6:08:07:a3:f9:14:25:b4:0c:10:13:77:e4:be: a2:47:41:31:47:e4:d3:e9:3a:ac:6d:98:73:e3:dc: ed:ca:8f:e6:a6:aa:23:9f:fc:0d:3b:0b:d0:58:0d: f6:03:be:ed:12:a0:fa:cf:56:e9:d1:74:a7:2e:11: b0:77:7a:e1:7b:3c:ef:f8:77:3e:43:a8:75:57:53: 98:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:98:84:78:0C:E3:A4:75:08:87:70:0A:C8:95:A1:0C:66:8D:00:88 X509v3 Authority Key Identifier: keyid:E8:DF:8D:5E:4C:84:DA:87:D7:29:A7:3C:1C:4E:86:11:38:1A:B2:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:5c:c7:1b:bc:92:f6:e4:d2:54:91:93:a8:e5:0f:6e:a8:bf: 4a:71:68:df:07:3b:f0:e7:10:ff:4b:84:6d:e8:5f:2e:c2:14: 0c:ab:42:f7:8e:c3:fc:8a:c2:34:64:aa:74:3f:de:58:c0:d9: 52:87:2c:bb:b1:53:09:b8:6f:9a:d1:46:c9:f3:5a:4a:f8:6d: 7c:87:02:dc:83:38:6a:f8:04:35:47:b0:32:40:53:62:0b:d3: fd:50:0c:b9:81:95:e3:57:2c:91:e0:32:fd:1a:d0:ca:01:a6: 2d:a3:77:41:15:8f:cf:f7:6f:89:9c:8f:fb:ff:f4:48:01:91: 47:53:ab:55:55:7a:9b:e1:49:02:32:15:2d:b9:63:3f:84:41: 34:a5:16:9e:00:9b:23:ed:c5:40:60:e8:88:c5:ea:2a:be:e8: 56:ca:5c:24:d7:83:76:bf:3f:11:97:e9:af:97:ed:90:85:11: 6c:1d:73:51:9c:da:21:de:05:44:ac:7d:8d:bb:86:62:52:5f: 3b:b0:e4:9e:c2:ca:ce:64:b9:65:d6:75:64:fc:77:1b:99:94: 58:1f:44:45:06:24:8f:fd:b2:4f:54:26:cf:17:7e:bc:6d:8d: 57:6f:2e:7d:5c:2d:ec:2e:c8:b5:7e:e5:cd:92:10:fb:81:92: 77:ce:ab:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAxQzcxMTAvBgNVBAUTKEU4REY4RDVFNEM4NERBODdENzI5QTczQzFDNEU4NjEx MzgxQUIyQzEwHhcNMjUwNTEyMTUzNDE4WhcNMjUwNTE5MTUzNDE4WjAYMRYwFAYD VQQDEw02ODIyMTRmYS0zYzgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApz49FPvlBw5IXXYgkuIPUFN2/InvGvWxmYPhLsGe2rpbTvwzzHJLNnol/mpR vDrXYgmBZ2haCzdoAZQM8fcrdW3gCshJSuIeLLZTlWARcxTNVUfroA45p1AyrxvE BB7QXC3Rg0qjHI16YYgTAXvrMkFRYeF6iNcLW5XFdoGi/RzbonpETEZb9yMXM7pU 1/ymdrUtB7XBr5drj9C7ek4+g19pKy89sf4DsShrjSoOepevB50itggHo/kUJbQM EBN35L6iR0ExR+TT6TqsbZhz49ztyo/mpqojn/wNOwvQWA32A77tEqD6z1bp0XSn LhGwd3rhezzv+Hc+Q6h1V1OY5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM+YhHgM 46R1CIdwCsiVoQxmjQCIMB8GA1UdIwQYMBaAFOjfjV5MhNqH1ymnPBxOhhE4GrLB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDFDNy85N0NGMjBGQTMz MjMxMUU0QTZFNzQ5MTFDNEY5QUUwMi82Ti1OWGt5RTJvZlhLYWM4SEU2R0VUZ2Fz c0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZOLU5Ya3lFMm9mWEthYzhIRTZHRVRnYXNzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDFDNy85N0NGMjBGQTMzMjMxMUU0QTZFNzQ5MTFDNEY5QUUwMi82Ti1OWGt5RTJv ZlhLYWM4SEU2R0VUZ2Fzc0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdXMcbvJL25NJUkZOo5Q9uqL9KcWjfBzvw5xD/S4Rt6F8uwhQMq0L3 jsP8isI0ZKp0P95YwNlShyy7sVMJuG+a0UbJ81pK+G18hwLcgzhq+AQ1R7AyQFNi C9P9UAy5gZXjVyyR4DL9GtDKAaYto3dBFY/P92+JnI/7//RIAZFHU6tVVXqb4UkC MhUtuWM/hEE0pRaeAJsj7cVAYOiIxeoqvuhWylwk14N2vz8Rl+mvl+2QhRFsHXNR nNoh3gVErH2Nu4ZiUl87sOSewsrOZLll1nVk/HcbmZRYH0RFBiSP/bJPVCbPF368 bY1Xby59XC3sLsi1fuXNkhD7gZJ3zquc -----END CERTIFICATE-----Generated at Mon May 12 22:31:22 2025 by rpki-client