$ rpki-client -vvf rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft File: 6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft (raw, json) Hash identifier: jIZYq+sPnoR3LdfcbaRdIQpc/V8U82jDlbE7nXKhRVA= Subject key identifier: 79:22:67:A6:B8:7E:4C:DD:5A:61:33:02:A7:AE:C2:EA:CE:74:BF:16 Authority key identifier: E9:F2:CE:48:3F:1B:06:D2:9D:5E:A2:AB:E3:75:BD:1D:22:A9:E1:C4 Certificate issuer: /CN=A91C68AD/serialNumber=E9F2CE483F1B06D29D5EA2ABE375BD1D22A9E1C4 Certificate serial: 72 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft Manifest number: 71 Signing time: Tue 13 May 2025 06:01:17 +0000 Manifest this update: Tue 13 May 2025 06:01:17 +0000 Manifest next update: Tue 20 May 2025 06:01:17 +0000 Files and hashes: 1: 6fLOSD8bBtKdXqKr43W9HSKp4cQ.crl (hash: lk+vs5OTXHCquwll6wl2WewUnb6HEWI86Y0qXVkO77A=) 2: FC3E29FC85E111EFB365E459C4F9AE02.roa (hash: 0DxgUjIqfTQVxs1j3QKSFbDtA+jK21POEd6C/CDA/hA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.crl rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 114 (0x72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C68AD, serialNumber=E9F2CE483F1B06D29D5EA2ABE375BD1D22A9E1C4 Validity Not Before: May 13 06:01:17 2025 GMT Not After : May 20 06:01:17 2025 GMT Subject: CN=6822e02d-dd3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7a:ea:29:d6:31:b9:84:99:8a:87:d8:e0:5b: 3e:80:ff:5e:41:29:d2:21:81:a6:10:18:71:63:f0: 82:80:24:ef:60:8c:20:57:0d:f6:15:9d:1a:e4:24: 92:b7:4f:14:8e:37:0c:68:49:94:12:77:64:b0:8b: 59:bd:49:a7:88:50:ba:d0:ba:c0:95:46:6b:d7:6c: 58:b8:ae:85:2a:77:bd:a2:a5:ba:74:ad:ac:a6:3a: bc:81:8c:dc:e6:7e:f2:c9:0d:e7:ef:25:ca:ea:b7: 2d:b0:1b:8e:6f:15:5b:27:db:1d:a7:cd:f8:42:4e: be:20:50:2f:3f:ed:1d:37:ab:58:b4:74:ec:7a:d3: c0:e4:28:98:8a:fb:7a:68:f1:76:cf:2f:c1:7c:98: ce:ab:30:a4:a1:6f:58:87:b9:d8:90:11:6e:65:82: 6e:0b:8e:00:72:c2:b3:7f:72:cb:08:c0:d4:6b:23: f0:7d:81:97:0c:0b:cf:d3:b8:e3:c4:21:7a:55:05: ea:b3:60:2f:53:cf:63:15:b4:59:6b:22:af:89:79: b1:16:32:37:ae:bd:3a:c3:b0:02:73:9a:54:61:c7: 48:39:ac:fe:9f:81:74:f6:2b:32:d8:3e:9c:3e:23: 5a:b3:05:f6:41:5b:69:53:6a:c7:8c:1b:11:b6:fd: 03:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:22:67:A6:B8:7E:4C:DD:5A:61:33:02:A7:AE:C2:EA:CE:74:BF:16 X509v3 Authority Key Identifier: keyid:E9:F2:CE:48:3F:1B:06:D2:9D:5E:A2:AB:E3:75:BD:1D:22:A9:E1:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:4b:6a:39:ab:8f:93:5f:5d:f8:cf:a5:4c:d1:1d:0d:8f:01: ea:40:73:7d:50:a7:73:8a:90:b6:dc:b5:da:52:04:2e:7c:bf: 9f:74:19:73:b5:cd:40:dc:23:7b:db:c7:26:6d:ca:d3:15:90: 5e:a3:39:c1:af:11:e4:f9:14:88:6a:bd:dc:df:af:2e:4d:32: 00:b4:b0:ec:a6:bc:ac:b9:86:de:cc:12:b0:6b:7b:60:94:d4: 6a:25:e4:74:ef:21:97:81:ae:5c:54:5e:e6:58:f2:f9:b0:8b: bf:3c:08:2e:1f:48:31:2e:8a:a3:21:91:ed:09:d8:ef:b1:3a: ca:b0:1c:08:51:92:d7:43:ca:31:1a:98:ea:fd:0e:f4:f1:b0: 6c:1a:f7:e7:65:02:26:77:0b:cc:0f:7f:56:59:1d:11:c2:28: b8:2d:b4:36:82:28:85:eb:6c:88:c2:e8:b4:c0:30:c7:17:f6: 9d:11:90:0c:f9:4c:c0:76:44:f0:a4:0f:a0:37:bd:99:64:28: 0c:f4:86:fd:73:49:8a:ec:4b:70:75:00:61:a2:c3:22:14:6e: a1:c9:97:5b:94:e6:99:f5:d8:0e:ad:ee:8f:2b:f3:79:83:c9: 08:b4:57:16:30:a3:5d:c6:33:b0:2d:b0:d9:00:31:2a:c6:8c: 35:bb:2b:75 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NjhBRDExMC8GA1UEBRMoRTlGMkNFNDgzRjFCMDZEMjlENUVBMkFCRTM3NUJEMUQy MkE5RTFDNDAeFw0yNTA1MTMwNjAxMTdaFw0yNTA1MjAwNjAxMTdaMBgxFjAUBgNV BAMTDTY4MjJlMDJkLWRkM2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPeuop1jG5hJmKh9jgWz6A/15BKdIhgaYQGHFj8IKAJO9gjCBXDfYVnRrkJJK3 TxSONwxoSZQSd2Swi1m9SaeIULrQusCVRmvXbFi4roUqd72ipbp0raymOryBjNzm fvLJDefvJcrqty2wG45vFVsn2x2nzfhCTr4gUC8/7R03q1i0dOx608DkKJiK+3po 8XbPL8F8mM6rMKShb1iHudiQEW5lgm4LjgBywrN/cssIwNRrI/B9gZcMC8/TuOPE IXpVBeqzYC9Tz2MVtFlrIq+JebEWMjeuvTrDsAJzmlRhx0g5rP6fgXT2KzLYPpw+ I1qzBfZBW2lTaseMGxG2/QPVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUeSJnprh+ TN1aYTMCp67C6s50vxYwHwYDVR0jBBgwFoAU6fLOSD8bBtKdXqKr43W9HSKp4cQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2OEFELzQ5REVFRTY0ODVF MDExRUZBNzU4NzY1NUM0RjlBRTAyLzZmTE9TRDhiQnRLZFhxS3I0M1c5SFNLcDRj US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNmZMT1NEOGJCdEtkWHFLcjQzVzlIU0twNGNRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2 OEFELzQ5REVFRTY0ODVFMDExRUZBNzU4NzY1NUM0RjlBRTAyLzZmTE9TRDhiQnRL ZFhxS3I0M1c5SFNLcDRjUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKJLajmrj5NfXfjPpUzRHQ2PAepAc31Qp3OKkLbctdpSBC58v590GXO1 zUDcI3vbxyZtytMVkF6jOcGvEeT5FIhqvdzfry5NMgC0sOymvKy5ht7MErBre2CU 1Gol5HTvIZeBrlxUXuZY8vmwi788CC4fSDEuiqMhke0J2O+xOsqwHAhRktdDyjEa mOr9DvTxsGwa9+dlAiZ3C8wPf1ZZHRHCKLgttDaCKIXrbIjC6LTAMMcX9p0RkAz5 TMB2RPCkD6A3vZlkKAz0hv1zSYrsS3B1AGGiwyIUbqHJl1uU5pn12A6t7o8r83mD yQi0VxYwo13GM7AtsNkAMSrGjDW7K3U= -----END CERTIFICATE-----Generated at Thu May 15 03:49:50 2025 by rpki-client