$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.mft File: 6LCK3PScYMutkdHtbTe9hEOtvUw.mft (raw, json) Hash identifier: BMXfNkTLb3Mvc1wWJ76dVolh1Zt/I9ftygaTbMY1+4M= Subject key identifier: ED:93:75:3C:65:AC:48:2A:3C:54:42:19:C8:A2:31:BC:EC:3E:A3:6A Authority key identifier: E8:B0:8A:DC:F4:9C:60:CB:AD:91:D1:ED:6D:37:BD:84:43:AD:BD:4C Certificate issuer: /CN=A91D6C2E/serialNumber=E8B08ADCF49C60CBAD91D1ED6D37BD8443ADBD4C Certificate serial: 0114 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6LCK3PScYMutkdHtbTe9hEOtvUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.mft Manifest number: 0110 Signing time: Sun 11 May 2025 03:49:10 +0000 Manifest this update: Sun 11 May 2025 03:49:09 +0000 Manifest next update: Sun 18 May 2025 03:49:09 +0000 Files and hashes: 1: 6LCK3PScYMutkdHtbTe9hEOtvUw.crl (hash: d/Z/yWwdBrasenXB4iGOoT/hUh9m1hTlzCQVaa07GYc=) 2: 5FB99B82934511EE87C1BE7EC4F9AE02.roa (hash: 8pKe3+4xRyiS1MHB1KBCyB6GyZL8OjDx7TX9aT1ieFo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.crl rsync://rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6LCK3PScYMutkdHtbTe9hEOtvUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 276 (0x114) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6C2E, serialNumber=E8B08ADCF49C60CBAD91D1ED6D37BD8443ADBD4C Validity Not Before: May 11 03:49:09 2025 GMT Not After : May 18 03:49:09 2025 GMT Subject: CN=68201e35-06dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:87:fa:46:7e:2f:8c:9a:00:87:a9:bd:b1:19: 79:87:a0:e5:59:33:8d:f3:49:4d:c4:2d:54:a5:7f: 7a:e6:19:65:c7:20:54:6b:da:13:6f:da:ce:25:e8: ae:59:e6:68:09:50:3f:f8:35:e2:ad:6b:f3:06:43: f5:3c:17:94:08:c1:24:0e:78:37:9b:11:93:3f:03: dd:be:f5:80:62:08:e8:8a:02:1a:6e:89:f2:43:a3: 37:18:0c:3f:74:2e:86:35:3c:84:56:54:89:0b:bf: fb:57:39:12:35:38:91:00:ff:4e:70:f0:e9:3a:bd: 1e:af:1f:d6:d3:ea:12:a0:d7:50:0e:b1:59:73:3d: 8a:6c:2b:e8:60:e7:07:e4:2b:19:85:74:28:8e:9f: e7:1a:6e:63:99:93:7f:30:91:ab:2c:64:ab:7c:4b: c8:00:8f:66:66:cc:69:45:c5:c8:96:12:58:22:91: 32:04:88:79:65:08:9f:59:12:26:d6:1f:ea:45:3f: cc:19:14:ff:80:c0:d3:61:93:4e:03:fd:83:06:16: 3b:37:5f:17:67:75:19:ba:7d:ff:c1:73:97:4c:bf: e8:8f:89:d6:42:37:b4:b9:21:13:19:9f:24:86:67: 1d:b2:8c:e1:b8:fb:47:12:ee:57:09:28:e2:ea:0b: 6f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:93:75:3C:65:AC:48:2A:3C:54:42:19:C8:A2:31:BC:EC:3E:A3:6A X509v3 Authority Key Identifier: keyid:E8:B0:8A:DC:F4:9C:60:CB:AD:91:D1:ED:6D:37:BD:84:43:AD:BD:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6LCK3PScYMutkdHtbTe9hEOtvUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:9a:98:53:ab:ad:af:5b:93:8a:cd:40:22:28:be:be:ce:b9: 2f:e8:2e:dc:39:85:bb:cf:84:2f:1e:6b:7d:6b:6c:ac:d4:7d: e3:84:ab:44:d2:03:0c:3e:5a:61:2a:9b:37:e2:25:a3:a8:eb: b6:bc:83:3c:7d:70:23:a1:f1:11:62:21:86:b4:5b:4c:7b:2e: 4f:c1:ab:e6:e8:e7:11:5a:3b:fb:00:58:31:6a:d7:93:e7:ae: 12:f0:2a:1b:83:40:18:8a:57:6b:75:23:d6:9e:b4:3d:e6:17: 2b:33:b2:0a:f7:f7:7f:aa:8f:b0:6e:9b:50:cb:e1:4c:0c:98: 49:c8:93:c8:75:92:3f:d5:9a:b6:ca:08:fb:c3:8c:fa:c2:e1: 07:8a:6a:ad:97:54:c2:02:d0:2d:ff:5e:e3:76:e6:07:ec:83: f4:3c:71:5c:28:3f:e9:f3:5f:13:cb:e3:84:59:71:0d:b7:c8: a6:51:78:f0:6e:31:1e:b2:15:a9:8e:3d:cc:b0:85:82:2b:89: 8a:53:62:c2:6b:99:89:44:93:69:f1:47:76:d5:2d:3f:a7:ab: ca:dd:4d:f1:b5:9f:57:83:d3:f0:fc:74:65:ea:0f:a1:73:4f: bb:ba:7c:b4:e3:bc:4b:40:69:e6:86:64:19:75:d1:46:e6:15: 39:c5:b1:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZDMkUxMTAvBgNVBAUTKEU4QjA4QURDRjQ5QzYwQ0JBRDkxRDFFRDZEMzdCRDg0 NDNBREJENEMwHhcNMjUwNTExMDM0OTA5WhcNMjUwNTE4MDM0OTA5WjAYMRYwFAYD VQQDEw02ODIwMWUzNS0wNmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsof6Rn4vjJoAh6m9sRl5h6DlWTON80lNxC1UpX965hllxyBUa9oTb9rOJeiu WeZoCVA/+DXirWvzBkP1PBeUCMEkDng3mxGTPwPdvvWAYgjoigIabonyQ6M3GAw/ dC6GNTyEVlSJC7/7VzkSNTiRAP9OcPDpOr0erx/W0+oSoNdQDrFZcz2KbCvoYOcH 5CsZhXQojp/nGm5jmZN/MJGrLGSrfEvIAI9mZsxpRcXIlhJYIpEyBIh5ZQifWRIm 1h/qRT/MGRT/gMDTYZNOA/2DBhY7N18XZ3UZun3/wXOXTL/oj4nWQje0uSETGZ8k hmcdsozhuPtHEu5XCSji6gtvAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO2TdTxl rEgqPFRCGciiMbzsPqNqMB8GA1UdIwQYMBaAFOiwitz0nGDLrZHR7W03vYRDrb1M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkMyRS84MThGREE0Njkz NDAxMUVFODQzRjgzNzRDNEY5QUUwMi82TENLM1BTY1lNdXRrZEh0YlRlOWhFT3R2 VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZMQ0szUFNjWU11dGtkSHRiVGU5aEVPdHZVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkMyRS84MThGREE0NjkzNDAxMUVFODQzRjgzNzRDNEY5QUUwMi82TENLM1BTY1lN dXRrZEh0YlRlOWhFT3R2VXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkmphTq62vW5OKzUAiKL6+zrkv6C7cOYW7z4QvHmt9a2ys1H3jhKtE 0gMMPlphKps34iWjqOu2vIM8fXAjofERYiGGtFtMey5Pwavm6OcRWjv7AFgxateT 564S8Cobg0AYildrdSPWnrQ95hcrM7IK9/d/qo+wbptQy+FMDJhJyJPIdZI/1Zq2 ygj7w4z6wuEHimqtl1TCAtAt/17jduYH7IP0PHFcKD/p818Ty+OEWXENt8imUXjw bjEeshWpjj3MsIWCK4mKU2LCa5mJRJNp8Ud21S0/p6vK3U3xtZ9Xg9Pw/HRl6g+h c0+7uny047xLQGnmhmQZddFG5hU5xbHS -----END CERTIFICATE-----Generated at Sun May 11 15:16:21 2025 by rpki-client