$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft File: 6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft (raw, json) Hash identifier: RDYXmqsqvBWB74yHM5ySWMLCi8WF/Uvcg/YZaYC6USY= Subject key identifier: 91:7A:7C:D1:5E:60:57:22:87:C6:F6:D7:32:E5:75:21:F5:26:FA:EA Authority key identifier: E8:68:21:E9:F2:3D:42:F3:62:E4:2A:E2:AF:B5:BD:98:E0:B1:11:93 Certificate issuer: /CN=A91C6FD6/serialNumber=E86821E9F23D42F362E42AE2AFB5BD98E0B11193 Certificate serial: A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ggh6fI9QvNi5Crir7W9mOCxEZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft Manifest number: A3 Signing time: Tue 13 May 2025 05:23:06 +0000 Manifest this update: Tue 13 May 2025 05:23:05 +0000 Manifest next update: Tue 20 May 2025 05:23:05 +0000 Files and hashes: 1: 6Ggh6fI9QvNi5Crir7W9mOCxEZM.crl (hash: m5Xx+yx9dMqflNZmuSBPzbkdm++CvaWBeVFoo26Vl0w=) 2: 70F3668238F711EFB4132D26C4F9AE02.roa (hash: 6q2HJGghYczmtOW7uCV2DY5B1dnxfLxnRSXR0JIpe1c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.crl rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ggh6fI9QvNi5Crir7W9mOCxEZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 05:23:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165 (0xa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6FD6, serialNumber=E86821E9F23D42F362E42AE2AFB5BD98E0B11193 Validity Not Before: May 13 05:23:05 2025 GMT Not After : May 20 05:23:05 2025 GMT Subject: CN=6822d739-28a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9f:24:4d:e1:5e:ae:12:03:78:ea:ad:59:7f: 00:a3:f2:fb:76:d2:14:be:1f:10:d7:51:5e:17:46: 13:d2:cf:01:44:d2:0c:b6:ef:10:71:9e:1d:f1:8e: 6a:92:93:de:6d:1c:55:a5:b8:bc:40:e7:8d:76:2d: 08:ee:c9:b5:f6:18:32:f1:d3:cf:58:7c:58:ab:56: 41:16:e7:94:ae:61:e2:a1:3c:6d:00:23:85:96:90: 57:01:f2:14:dd:88:56:da:31:de:40:64:5c:7f:ad: cd:dd:2b:0f:c4:9a:da:39:a0:05:f7:c5:03:93:b9: 1f:c0:10:0b:ff:38:1c:7e:6d:90:41:15:31:4f:7b: d7:24:fe:d6:43:14:85:ce:c9:8b:54:52:82:ba:3e: 35:88:83:03:b1:2e:3a:ba:fe:ea:bf:15:2b:b0:25: f3:07:7e:f2:78:d0:c5:d7:4b:e9:c4:2e:b4:33:a7: 2f:80:e8:86:15:7f:33:56:77:45:bb:7b:22:01:79: bd:18:d5:32:17:ea:d2:90:ad:15:37:c4:40:47:74: c9:e1:15:ca:0b:0b:7a:3d:39:6e:e5:50:89:28:f2: 52:4e:fb:ed:5c:d9:fb:bb:f1:90:a5:cc:ef:76:b6: 3e:40:25:ca:7b:de:55:4e:ad:14:c7:26:b5:31:40: 04:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:7A:7C:D1:5E:60:57:22:87:C6:F6:D7:32:E5:75:21:F5:26:FA:EA X509v3 Authority Key Identifier: keyid:E8:68:21:E9:F2:3D:42:F3:62:E4:2A:E2:AF:B5:BD:98:E0:B1:11:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ggh6fI9QvNi5Crir7W9mOCxEZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:48:01:c0:9c:37:41:fe:14:82:49:4d:dd:fa:aa:a2:00:bc: 58:12:33:57:d2:81:a8:91:a2:41:11:f0:19:98:fc:e6:d0:64: b9:4f:a4:7b:1c:dc:8d:83:88:93:88:8e:47:f7:dc:42:c2:84: 5e:e9:0c:49:fa:99:f5:c2:79:66:9f:49:64:22:84:b6:4c:70: cf:72:4e:a5:78:d8:43:7b:6d:ef:54:c1:60:73:fe:1d:ac:bb: c4:a6:81:e2:53:e3:f4:f1:08:b7:7c:78:5f:9b:e3:ef:06:6d: c7:6a:ae:36:60:f0:ca:91:5b:a0:20:73:2d:3b:78:17:e7:06: 84:b3:ff:8d:92:7f:bf:d1:04:44:d9:b2:4b:e1:a1:8f:7a:35: 8f:28:22:22:e5:00:1b:e2:ac:a3:06:08:5e:e6:8a:ac:47:f4: f0:db:a9:ae:20:3c:31:7f:ef:e8:33:7e:a4:20:50:88:aa:0a: 5b:a5:0e:ad:f1:be:1c:e6:c5:30:fa:33:42:2f:c2:69:91:84: 3c:50:26:1a:fe:7d:eb:3e:1d:cd:a5:ba:fd:40:48:79:6a:36: 9e:34:da:c8:35:e1:17:97:e6:19:b0:4e:43:d7:7e:10:ab:87: 98:fd:2e:d9:7f:a4:7b:c1:49:03:90:da:de:32:c4:a8:68:d5: a8:ab:7b:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZGRDYxMTAvBgNVBAUTKEU4NjgyMUU5RjIzRDQyRjM2MkU0MkFFMkFGQjVCRDk4 RTBCMTExOTMwHhcNMjUwNTEzMDUyMzA1WhcNMjUwNTIwMDUyMzA1WjAYMRYwFAYD VQQDEw02ODIyZDczOS0yOGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx58kTeFerhIDeOqtWX8Ao/L7dtIUvh8Q11FeF0YT0s8BRNIMtu8QcZ4d8Y5q kpPebRxVpbi8QOeNdi0I7sm19hgy8dPPWHxYq1ZBFueUrmHioTxtACOFlpBXAfIU 3YhW2jHeQGRcf63N3SsPxJraOaAF98UDk7kfwBAL/zgcfm2QQRUxT3vXJP7WQxSF zsmLVFKCuj41iIMDsS46uv7qvxUrsCXzB37yeNDF10vpxC60M6cvgOiGFX8zVndF u3siAXm9GNUyF+rSkK0VN8RAR3TJ4RXKCwt6PTlu5VCJKPJSTvvtXNn7u/GQpczv drY+QCXKe95VTq0Uxya1MUAExQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJF6fNFe YFcih8b21zLldSH1JvrqMB8GA1UdIwQYMBaAFOhoIenyPULzYuQq4q+1vZjgsRGT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkZENi82OERBNEI2QTM4 RjYxMUVGQjEzMTg0MjNDNEY5QUUwMi82R2doNmZJOVF2Tmk1Q3JpcjdXOW1PQ3hF Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZHZ2g2Zkk5UXZOaTVDcmlyN1c5bU9DeEVaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkZENi82OERBNEI2QTM4RjYxMUVGQjEzMTg0MjNDNEY5QUUwMi82R2doNmZJOVF2 Tmk1Q3JpcjdXOW1PQ3hFWk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvSAHAnDdB/hSCSU3d+qqiALxYEjNX0oGokaJBEfAZmPzm0GS5T6R7 HNyNg4iTiI5H99xCwoRe6QxJ+pn1wnlmn0lkIoS2THDPck6leNhDe23vVMFgc/4d rLvEpoHiU+P08Qi3fHhfm+PvBm3Haq42YPDKkVugIHMtO3gX5waEs/+Nkn+/0QRE 2bJL4aGPejWPKCIi5QAb4qyjBghe5oqsR/Tw26muIDwxf+/oM36kIFCIqgpbpQ6t 8b4c5sUw+jNCL8JpkYQ8UCYa/n3rPh3Npbr9QEh5ajaeNNrINeEXl+YZsE5D134Q q4eY/S7Zf6R7wUkDkNreMsSoaNWoq3st -----END CERTIFICATE-----Generated at Wed May 14 04:36:16 2025 by rpki-client