$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.mft File: 9BDEg6TIyRb_1M9CDEwRCIl5iJE.mft (raw, json) Hash identifier: 4JaxmYcilKbFqc0KTM+EfRCQaMMkgTEQVnG7xfU8Ikw= Subject key identifier: 46:70:F3:AF:E8:32:46:BD:76:2E:7A:9D:DE:33:0F:D1:C2:E7:F6:47 Authority key identifier: F4:10:C4:83:A4:C8:C9:16:FF:D4:CF:42:0C:4C:11:08:89:79:88:91 Certificate issuer: /CN=A91E2F80/serialNumber=F410C483A4C8C916FFD4CF420C4C110889798891 Certificate serial: E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BDEg6TIyRb_1M9CDEwRCIl5iJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.mft Manifest number: D6 Signing time: Thu 15 May 2025 05:06:46 +0000 Manifest this update: Thu 15 May 2025 05:06:45 +0000 Manifest next update: Thu 22 May 2025 05:06:45 +0000 Files and hashes: 1: 9BDEg6TIyRb_1M9CDEwRCIl5iJE.crl (hash: LK4l72h/EO+KbIgIZQq3wOjr6z1MhCy56ht5DL+3KEM=) 2: DAC9D5960C7E11EF9A189E18C4F9AE02.roa (hash: cLX/WlgP7K24ucXGUUtpNzmDrPk9vKJrsn64OyHEFQQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.crl rsync://rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BDEg6TIyRb_1M9CDEwRCIl5iJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 05:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 228 (0xe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2F80, serialNumber=F410C483A4C8C916FFD4CF420C4C110889798891 Validity Not Before: May 15 05:06:45 2025 GMT Not After : May 22 05:06:45 2025 GMT Subject: CN=68257666-6b84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:13:77:4d:50:d9:5d:1f:f1:83:b3:ad:c4:22: 05:53:25:8d:84:b4:ce:2a:4c:e0:fb:de:6d:45:91: ed:33:61:f7:40:19:f4:e2:cd:5c:2a:3c:d8:f3:05: 70:48:af:5f:44:86:c4:3b:aa:57:8a:79:b8:c8:03: c3:9e:04:83:2c:92:ff:cb:07:60:62:eb:5d:7d:db: 0a:cb:4b:e5:ca:f7:eb:9c:20:06:79:d4:d4:f3:ed: 68:eb:ee:d7:61:b6:30:78:f6:59:8f:1d:da:4a:df: 29:2c:3d:58:e8:0e:4a:28:ae:37:46:db:e8:cc:93: 0f:6f:2d:0f:18:35:4b:93:c9:e9:82:3d:8f:fe:f6: c8:52:57:13:5f:62:21:4f:53:76:e9:62:d9:24:10: 2d:f6:64:9a:5e:36:2f:45:9a:d0:2c:79:13:fe:b7: b9:e5:fc:86:d9:4a:93:a2:70:7b:88:aa:52:06:f6: 0c:19:ea:b1:c2:50:93:98:7e:fb:b2:93:35:9b:71: 93:f3:b6:ca:3b:21:24:3f:ff:f7:21:45:67:4b:9a: bd:6c:33:95:14:c8:89:51:bc:b3:97:af:d7:57:5d: 35:ec:60:00:c5:e2:3a:9d:d6:f5:45:e3:cd:e6:2b: 0d:c5:4b:cf:35:d0:71:02:aa:3e:51:41:b2:e7:42: 39:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:70:F3:AF:E8:32:46:BD:76:2E:7A:9D:DE:33:0F:D1:C2:E7:F6:47 X509v3 Authority Key Identifier: keyid:F4:10:C4:83:A4:C8:C9:16:FF:D4:CF:42:0C:4C:11:08:89:79:88:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BDEg6TIyRb_1M9CDEwRCIl5iJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:1c:8b:38:48:63:1b:56:b5:82:e2:0e:01:2e:10:38:72:3e: 0b:b5:a9:aa:2b:b2:92:e1:4c:84:fb:fc:2e:f8:80:ff:86:61: 27:b7:c8:01:94:3a:94:46:83:d7:97:54:6c:06:43:4a:a3:ee: 65:c7:25:cc:d0:9b:58:e8:21:f4:39:51:bc:23:d7:d5:ec:03: f4:7e:59:a5:61:8f:da:4b:55:13:43:28:68:c4:78:e8:cf:45: 7e:45:a0:5a:12:1c:3e:14:cd:28:9c:a1:d8:d3:60:96:f2:63: 27:05:e6:f3:ce:20:40:a8:7e:cb:84:93:9d:63:fd:6a:cb:b1: 8a:3a:04:4c:5e:01:61:15:40:e7:64:81:4e:6b:7b:70:e7:80: 7c:70:68:c2:8e:58:42:1e:e8:90:28:73:7a:fa:77:b5:26:99: 29:a1:e2:e7:24:fe:22:7c:6b:c3:54:17:5e:ed:a2:19:0b:6b: 14:1d:c3:3c:0f:11:73:6c:18:3d:08:b0:45:22:09:19:d3:7d: ff:b4:3b:32:78:46:c2:01:c5:a7:94:39:15:fd:f3:78:1b:49: ab:a3:e4:50:8f:8f:3c:d5:34:39:77:c7:0c:d2:a3:ec:ec:ce: 97:18:00:cf:76:de:f7:89:0a:18:83:1b:9f:28:56:be:23:3d: 17:ce:4b:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJGODAxMTAvBgNVBAUTKEY0MTBDNDgzQTRDOEM5MTZGRkQ0Q0Y0MjBDNEMxMTA4 ODk3OTg4OTEwHhcNMjUwNTE1MDUwNjQ1WhcNMjUwNTIyMDUwNjQ1WjAYMRYwFAYD VQQDEw02ODI1NzY2Ni02Yjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvRN3TVDZXR/xg7OtxCIFUyWNhLTOKkzg+95tRZHtM2H3QBn04s1cKjzY8wVw SK9fRIbEO6pXinm4yAPDngSDLJL/ywdgYutdfdsKy0vlyvfrnCAGedTU8+1o6+7X YbYwePZZjx3aSt8pLD1Y6A5KKK43RtvozJMPby0PGDVLk8npgj2P/vbIUlcTX2Ih T1N26WLZJBAt9mSaXjYvRZrQLHkT/re55fyG2UqTonB7iKpSBvYMGeqxwlCTmH77 spM1m3GT87bKOyEkP//3IUVnS5q9bDOVFMiJUbyzl6/XV1017GAAxeI6ndb1RePN 5isNxUvPNdBxAqo+UUGy50I5JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEZw86/o Mka9di56nd4zD9HC5/ZHMB8GA1UdIwQYMBaAFPQQxIOkyMkW/9TPQgxMEQiJeYiR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkY4MC85NEM1NEI4MDAz OTUxMUVGODVCNjlGNEVDNEY5QUUwMi85QkRFZzZUSXlSYl8xTTlDREV3UkNJbDVp SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlCREVnNlRJeVJiXzFNOUNERXdSQ0lsNWlKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkY4MC85NEM1NEI4MDAzOTUxMUVGODVCNjlGNEVDNEY5QUUwMi85QkRFZzZUSXlS Yl8xTTlDREV3UkNJbDVpSkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsHIs4SGMbVrWC4g4BLhA4cj4LtamqK7KS4UyE+/wu+ID/hmEnt8gB lDqURoPXl1RsBkNKo+5lxyXM0JtY6CH0OVG8I9fV7AP0flmlYY/aS1UTQyhoxHjo z0V+RaBaEhw+FM0onKHY02CW8mMnBebzziBAqH7LhJOdY/1qy7GKOgRMXgFhFUDn ZIFOa3tw54B8cGjCjlhCHuiQKHN6+ne1JpkpoeLnJP4ifGvDVBde7aIZC2sUHcM8 DxFzbBg9CLBFIgkZ033/tDsyeEbCAcWnlDkV/fN4G0mro+RQj4881TQ5d8cM0qPs 7M6XGADPdt73iQoYgxufKFa+Iz0XzkuC -----END CERTIFICATE-----Generated at Fri May 16 21:45:57 2025 by rpki-client