$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft File: B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft (raw, json) Hash identifier: L0nnJixj1HP5CHgTZ4h57RY18bZb2lpbQEBRWPhDpXE= Subject key identifier: D1:56:C7:C0:C6:D4:8F:BE:5D:B9:1D:2D:73:38:A4:7D:39:7B:34:2A Authority key identifier: 07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60 Certificate issuer: /CN=A91DF93A/serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260 Certificate serial: 08A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft Manifest number: 0845 Signing time: Sat 10 May 2025 20:39:12 +0000 Manifest this update: Sat 10 May 2025 20:39:12 +0000 Manifest next update: Sat 17 May 2025 20:39:12 +0000 Files and hashes: 1: B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl (hash: MbcPyFezXxez9eyLAHRZuy1kyWufIdkLo/PjtyPyVlk=) 2: F8C02F3CDA4E11EC9C09A446C4F9AE02.roa (hash: ek3DgpwlstOVnuguW/pHkiP1RxK/zlxH+dHxarNuX94=) 3: BA1752AE176B11EF9ADED980C4F9AE02.roa (hash: gNhMiv6IOJKkeLTLwPi9wU4oN+h+wv5IF758wi0C6FI=) 4: E518ECC6D52A11ED99D55E2EC4F9AE02.roa (hash: /8xSOlLPXmPawwC5JqVN/51Xoq+s+zm8+cCCkXo4uBE=) 5: FEEC2C90643811EB9D7F624EC4F9AE02.roa (hash: J1xLa8yTtXAlg7OlLT4nxVjtOt9A7iYZpXvZJDERl8o=) 6: 007CF9924F1111EFA7D2F345C4F9AE02.roa (hash: USwhKOtUAYw8MFn1BXt5pSc1VM2o2X7NQRCh9KM+x7o=) 7: 5B5CBC68751B11EB9065A822C4F9AE02.roa (hash: 5HlGKag658JvYwBq45MtXDAz/r3WmbZjF3WX8Bnxu6I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:24:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2214 (0x8a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF93A, serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260 Validity Not Before: May 10 20:39:12 2025 GMT Not After : May 17 20:39:12 2025 GMT Subject: CN=681fb970-0b5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:5a:f1:b4:71:92:b0:00:81:51:f4:c0:b7:46: 86:b4:97:6d:33:9c:63:59:b0:74:05:e9:2c:a2:e4: a6:53:33:56:e2:1a:5e:0f:42:6a:90:13:57:bd:6b: df:22:fa:08:75:d1:7b:59:94:a0:11:d1:9d:cc:45: 4e:12:33:f9:3b:45:8a:d6:2b:2d:32:f5:13:61:ad: e0:be:6d:4c:66:ff:54:e9:9b:38:c6:88:c7:fe:61: 25:4a:23:81:e9:f4:14:df:82:76:bb:cf:01:86:5b: c5:29:9c:ff:c1:0e:63:0b:33:be:db:e3:5d:de:82: df:83:8d:af:3b:83:df:a1:b0:8b:9b:e8:e3:08:b4: cb:b7:7b:af:51:0f:b6:50:1b:61:58:a8:88:68:78: ef:a0:56:70:78:53:d7:53:ae:97:04:ef:8a:09:6c: 23:39:ed:65:b5:55:09:d0:4e:aa:16:76:ac:a5:0d: e2:38:d5:2f:91:83:a4:a1:73:e2:98:c0:33:ad:11: 52:3f:0d:6c:a6:63:46:27:eb:05:5d:d2:51:65:55: 31:b7:b6:49:56:d7:e2:90:f4:2d:93:c0:75:84:c4: 45:17:25:56:a6:dc:94:fc:9c:d2:cb:39:c8:6b:15: e4:6c:9d:37:06:2c:af:92:19:43:31:3c:5c:e8:53: 68:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:56:C7:C0:C6:D4:8F:BE:5D:B9:1D:2D:73:38:A4:7D:39:7B:34:2A X509v3 Authority Key Identifier: keyid:07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:5f:9f:d6:df:5b:9d:b7:78:76:8d:64:05:ae:d7:c2:72:72: 1c:6d:47:4c:3e:cf:7a:d4:56:8f:15:e9:7d:60:64:77:93:d3: 0a:45:0f:d9:84:79:b9:00:91:fe:1c:a7:94:02:ae:2f:ef:39: d1:b0:ca:1b:77:46:12:b8:c2:1e:7c:f5:9a:00:3c:2f:b2:69: 8f:ae:9d:a4:1e:70:b3:1d:87:22:5e:2e:c8:a3:b9:05:23:9e: c5:a9:ce:e0:d9:13:49:f3:e4:da:44:ed:0b:07:0b:34:31:bb: c2:ba:6f:c6:77:44:25:a5:71:59:60:77:9c:89:78:3b:1d:23: bb:03:c1:5a:96:38:5e:77:f4:9e:65:ff:b9:9c:9f:53:37:10: 59:69:71:e8:ec:2b:85:9e:3f:3b:17:26:86:01:86:75:c4:b1: ac:cc:d7:99:dc:cf:99:be:83:a4:b0:f6:0d:3a:8d:59:58:80: c9:98:1a:7f:7a:4f:40:9c:4d:77:40:7a:0b:7e:ac:42:15:3e: 7c:ae:05:ce:07:9e:7f:44:78:0c:cf:1f:e2:b6:c4:30:04:d0: 1f:07:22:84:ae:18:ae:43:00:39:03:1d:0b:26:cc:d6:65:5f: e1:96:76:9e:9e:0d:a8:dc:9d:2c:27:e8:85:a2:11:61:a8:1c: 94:38:d8:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY5M0ExMTAvBgNVBAUTKDA3QTFDMDg1NDVDQUNDNjVFMDg4MkQ0OUU5RjJGOENG RDJCRTgyNjAwHhcNMjUwNTEwMjAzOTEyWhcNMjUwNTE3MjAzOTEyWjAYMRYwFAYD VQQDEw02ODFmYjk3MC0wYjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5FrxtHGSsACBUfTAt0aGtJdtM5xjWbB0BeksouSmUzNW4hpeD0JqkBNXvWvf IvoIddF7WZSgEdGdzEVOEjP5O0WK1istMvUTYa3gvm1MZv9U6Zs4xojH/mElSiOB 6fQU34J2u88BhlvFKZz/wQ5jCzO+2+Nd3oLfg42vO4PfobCLm+jjCLTLt3uvUQ+2 UBthWKiIaHjvoFZweFPXU66XBO+KCWwjOe1ltVUJ0E6qFnaspQ3iONUvkYOkoXPi mMAzrRFSPw1spmNGJ+sFXdJRZVUxt7ZJVtfikPQtk8B1hMRFFyVWptyU/JzSyznI axXkbJ03BiyvkhlDMTxc6FNoIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNFWx8DG 1I++XbkdLXM4pH05ezQqMB8GA1UdIwQYMBaAFAehwIVFysxl4IgtSeny+M/SvoJg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjkzQS9GRjUxRTU5RUU1 RjMxMUVBQjNBOTE1NjFDNEY5QUUwMi9CNkhBaFVYS3pHWGdpQzFKNmZMNHo5Sy1n bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I2SEFoVVhLekdYZ2lDMUo2Zkw0ejlLLWdtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjkzQS9GRjUxRTU5RUU1RjMxMUVBQjNBOTE1NjFDNEY5QUUwMi9CNkhBaFVYS3pH WGdpQzFKNmZMNHo5Sy1nbUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4X5/W31udt3h2jWQFrtfCcnIcbUdMPs961FaPFel9YGR3k9MKRQ/Z hHm5AJH+HKeUAq4v7znRsMobd0YSuMIefPWaADwvsmmPrp2kHnCzHYciXi7Io7kF I57Fqc7g2RNJ8+TaRO0LBws0MbvCum/Gd0QlpXFZYHeciXg7HSO7A8Faljhed/Se Zf+5nJ9TNxBZaXHo7CuFnj87FyaGAYZ1xLGszNeZ3M+ZvoOksPYNOo1ZWIDJmBp/ ek9AnE13QHoLfqxCFT58rgXOB55/RHgMzx/itsQwBNAfByKErhiuQwA5Ax0LJszW ZV/hlnaeng2o3J0sJ+iFohFhqByUONgS -----END CERTIFICATE-----Generated at Sun May 11 04:30:00 2025 by rpki-client