$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft File: bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft (raw, json) Hash identifier: oOp3rIBGkXGGwCE5T7FtsI6gBOtnS+0Yd6S9zZkAlko= Subject key identifier: E3:16:64:06:39:BA:B3:23:88:9F:6E:8E:18:21:B2:34:C3:18:FA:57 Authority key identifier: 6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25 Certificate issuer: /CN=A91C2C8A/serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325 Certificate serial: C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft Manifest number: B6 Signing time: Thu 15 May 2025 05:20:02 +0000 Manifest this update: Thu 15 May 2025 05:20:02 +0000 Manifest next update: Thu 22 May 2025 05:20:02 +0000 Files and hashes: 1: bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl (hash: DEPu1QJt3vP6VnFMJkq0IH18my60R3BbSserW/SWAvM=) 2: AA97516E24CA11EFB59A9379C4F9AE02.roa (hash: vY7AsZ08Pw1TlHVY7hGbU3NQuV3eecatAeSNrTUiOFk=) 3: A1732A0E24CA11EF93486579C4F9AE02.roa (hash: c1fiRMTzx+sKc+PUXDGG2MhU2IceNjiS5ZTGcmsSFDc=) 4: 41A8950C272F11EF9D0A0C5CC4F9AE02.roa (hash: Zeo9E1pvK7pqXxcoNJpNgvy4k5rrUkurswNhSqNf24s=) 5: A074721624CA11EF93486579C4F9AE02.roa (hash: EAuwmClXGMo+6npZ19N/RRkMj4x/6MUGDRCOhMDeS9A=) 6: 0E49D1E024CC11EFB113A27BC4F9AE02.roa (hash: NR/+YgQkm7A4mmhSV+xz9O4OYp+ZS9oT3gP6zL7oedM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 05:20:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 195 (0xc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2C8A, serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325 Validity Not Before: May 15 05:20:02 2025 GMT Not After : May 22 05:20:02 2025 GMT Subject: CN=68257982-11d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ff:b2:e5:31:f5:64:50:b6:e3:d2:cb:c8:99: fd:4d:4b:db:65:67:24:24:48:46:54:55:18:75:3e: cf:b2:37:7d:b6:11:d8:3a:36:c2:5c:02:76:0f:46: 15:2f:26:2a:3e:a3:1b:b2:ca:63:0a:de:00:cc:17: 08:23:c0:1e:a7:7c:df:97:b0:f2:03:2f:ac:e9:35: 56:eb:1f:67:74:3c:66:2d:b2:84:e5:99:9e:94:7f: d6:3a:ad:92:5d:bf:eb:16:24:32:a0:6e:0b:61:9e: bb:ec:41:0e:7a:48:7d:7e:ea:94:7b:57:0b:aa:55: 29:9b:32:40:dd:a7:d6:d8:f1:69:7b:ab:b7:c2:b3: 9b:15:9e:53:9c:df:46:f6:44:2d:06:1d:11:e6:d4: 6c:f4:26:24:bc:b3:e9:a4:92:48:d1:74:de:f1:2a: cc:18:4b:c4:31:4a:22:e1:8c:f8:15:5e:69:fa:5e: 99:79:c5:52:97:ac:d1:62:b2:3a:96:78:eb:f5:4e: 97:32:04:53:c0:23:79:67:c7:44:81:24:3a:ff:1a: 8e:52:1e:4b:06:f9:11:dc:ef:20:50:9b:65:0c:ac: 19:6a:cf:d0:00:f0:55:6e:42:e0:93:8b:fd:7a:a5: d4:21:70:a6:b5:c8:69:ea:8a:21:61:15:9f:ed:b4: b9:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:16:64:06:39:BA:B3:23:88:9F:6E:8E:18:21:B2:34:C3:18:FA:57 X509v3 Authority Key Identifier: keyid:6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:5c:e0:fa:29:d8:8b:45:1b:ac:4d:46:1a:93:e5:96:b9:49: b4:86:7f:12:b5:3a:b9:a0:84:18:b9:91:70:e9:a7:5f:f3:df: eb:9f:7a:bc:92:36:73:a6:37:91:a4:da:15:d2:af:58:c2:7e: f3:cb:91:69:02:54:d2:fd:dc:ef:2a:87:50:2e:f7:7e:92:69: 7a:5d:39:ae:3f:2d:85:37:fd:66:6e:61:bc:ad:80:bf:b9:d6: c3:db:3e:3a:d7:ed:13:7a:09:31:39:f5:9a:e8:b2:89:18:29: 35:79:e2:76:61:0c:4d:77:dd:bb:af:c0:2b:af:c5:b9:11:ec: fe:12:d3:e5:29:46:af:78:a2:f0:24:9f:cc:87:2b:82:30:8e: f9:4e:47:3d:f7:c6:9d:ee:48:ba:41:e3:1d:11:5a:30:eb:57: a0:a6:0d:a0:e9:52:a5:63:96:f4:d7:82:8d:bb:31:8b:9e:42: bf:c0:1d:6d:e4:94:e9:68:e2:d7:9d:4e:1c:ff:8c:81:9c:53: 02:fd:9a:0d:d7:ab:bf:f2:f3:d1:7b:19:48:ac:10:22:4b:f6: 32:04:4b:fa:3a:d7:b3:94:14:5c:a0:4d:a0:e1:3d:0d:b0:85: 10:6b:93:11:08:c6:b0:b8:60:cf:9d:b7:d8:83:f8:35:52:a9: fa:fe:47:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJDOEExMTAvBgNVBAUTKDZDRTdCNTc1MEU2RTE3RDNEMzlFQjVCMDg3RkQzRkFE NTk1OUYzMjUwHhcNMjUwNTE1MDUyMDAyWhcNMjUwNTIyMDUyMDAyWjAYMRYwFAYD VQQDEw02ODI1Nzk4Mi0xMWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwP+y5TH1ZFC249LLyJn9TUvbZWckJEhGVFUYdT7Psjd9thHYOjbCXAJ2D0YV LyYqPqMbsspjCt4AzBcII8Aep3zfl7DyAy+s6TVW6x9ndDxmLbKE5ZmelH/WOq2S Xb/rFiQyoG4LYZ677EEOekh9fuqUe1cLqlUpmzJA3afW2PFpe6u3wrObFZ5TnN9G 9kQtBh0R5tRs9CYkvLPppJJI0XTe8SrMGEvEMUoi4Yz4FV5p+l6ZecVSl6zRYrI6 lnjr9U6XMgRTwCN5Z8dEgSQ6/xqOUh5LBvkR3O8gUJtlDKwZas/QAPBVbkLgk4v9 eqXUIXCmtchp6oohYRWf7bS5YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOMWZAY5 urMjiJ9ujhghsjTDGPpXMB8GA1UdIwQYMBaAFGzntXUObhfT0561sIf9P61ZWfMl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkM4QS82MUVDNDkxNjI0 QzkxMUVGOUM4QzYyNTlDNEY5QUUwMi9iT2UxZFE1dUY5UFRucld3aF8wX3JWbFo4 eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JPZTFkUTV1RjlQVG5yV3doXzBfclZsWjh5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkM4QS82MUVDNDkxNjI0QzkxMUVGOUM4QzYyNTlDNEY5QUUwMi9iT2UxZFE1dUY5 UFRucld3aF8wX3JWbFo4eVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhXOD6KdiLRRusTUYak+WWuUm0hn8StTq5oIQYuZFw6adf89/rn3q8 kjZzpjeRpNoV0q9Ywn7zy5FpAlTS/dzvKodQLvd+kml6XTmuPy2FN/1mbmG8rYC/ udbD2z461+0TegkxOfWa6LKJGCk1eeJ2YQxNd927r8Arr8W5Eez+EtPlKUaveKLw JJ/MhyuCMI75Tkc998ad7ki6QeMdEVow61egpg2g6VKlY5b014KNuzGLnkK/wB1t 5JTpaOLXnU4c/4yBnFMC/ZoN16u/8vPRexlIrBAiS/YyBEv6OtezlBRcoE2g4T0N sIUQa5MRCMawuGDPnbfYg/g1Uqn6/kff -----END CERTIFICATE-----Generated at Thu May 15 13:32:11 2025 by rpki-client