$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft File: 6HFyjDosJtDmCABLp9Hlo1gwlWw.mft (raw, json) Hash identifier: NVOQF7obBn7sdQaylnPIO/py/WEdBZSUhNPP17GTEWw= Subject key identifier: 32:38:5D:E7:44:F5:5E:60:93:18:D1:F4:D0:29:63:79:49:FD:F9:8A Authority key identifier: E8:71:72:8C:3A:2C:26:D0:E6:08:00:4B:A7:D1:E5:A3:58:30:95:6C Certificate issuer: /CN=A91E6EFE/serialNumber=E871728C3A2C26D0E608004BA7D1E5A35830956C Certificate serial: 01D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HFyjDosJtDmCABLp9Hlo1gwlWw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft Manifest number: 01D2 Signing time: Tue 13 May 2025 02:08:53 +0000 Manifest this update: Tue 13 May 2025 02:08:52 +0000 Manifest next update: Tue 20 May 2025 02:08:52 +0000 Files and hashes: 1: 6HFyjDosJtDmCABLp9Hlo1gwlWw.crl (hash: KWTspE2p4tvPYtGUbf5f7uibcq8zo9RSR+R3J312n+4=) 2: 8367C13A6CA411ED9DD6425CC4F9AE02.roa (hash: qStgTKoKUIh+qGv4WydL84alI8T6N4vvNinWDR/WOZo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.crl rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HFyjDosJtDmCABLp9Hlo1gwlWw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:08:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 471 (0x1d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6EFE, serialNumber=E871728C3A2C26D0E608004BA7D1E5A35830956C Validity Not Before: May 13 02:08:52 2025 GMT Not After : May 20 02:08:52 2025 GMT Subject: CN=6822a9b5-6df0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:00:80:66:76:1d:36:83:5d:22:f4:2c:df:22: 5b:2a:ed:04:d1:80:10:7a:e1:09:77:b8:ad:c5:cb: 7f:56:59:11:6c:9c:ae:fb:13:ad:d4:93:68:00:c9: a1:56:22:87:53:df:e8:6a:f2:8d:f6:72:b8:0b:0c: ec:57:fa:a8:f9:0f:4e:2d:f0:43:b4:28:18:bd:71: 36:21:19:7c:55:27:a5:28:60:5f:79:4f:dd:6f:a9: ce:09:ef:d5:90:06:66:92:bf:cc:dc:88:1a:da:72: 39:32:98:63:8b:50:1b:b6:46:40:09:73:36:d9:7a: 55:9c:48:4a:11:a1:a2:15:2a:7d:9c:54:5f:5b:48: 1b:63:de:c3:f6:08:68:da:ad:70:d5:e9:e9:90:0a: 1a:bc:60:a6:de:18:be:ab:26:2d:52:64:80:15:73: b7:0b:d9:51:88:bc:85:99:c7:30:7d:af:c3:1c:6d: 99:8b:a3:cf:28:74:e8:2e:ae:01:af:2d:ad:90:c7: 80:f7:13:92:40:06:70:40:8c:03:6d:86:56:2d:61: ec:d1:86:3a:da:02:98:45:b5:9f:5c:b2:22:46:53: f1:d6:a6:95:04:f2:48:6f:98:34:a6:ba:3f:d8:78: 4a:e8:4d:bb:ab:1a:5d:61:83:3f:55:1a:f5:40:48: a2:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:38:5D:E7:44:F5:5E:60:93:18:D1:F4:D0:29:63:79:49:FD:F9:8A X509v3 Authority Key Identifier: keyid:E8:71:72:8C:3A:2C:26:D0:E6:08:00:4B:A7:D1:E5:A3:58:30:95:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HFyjDosJtDmCABLp9Hlo1gwlWw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:3a:f7:4d:71:3c:6e:59:21:5f:69:e2:73:20:2e:76:b7:2d: c7:42:1a:f4:f8:f7:3f:04:8f:7a:d4:97:29:06:2f:b3:52:79: ef:4c:36:d0:32:5b:19:51:33:83:c5:ba:c7:49:4b:22:0e:f3: d6:0e:96:d5:00:9d:46:42:1a:66:5f:cc:67:1c:c6:e1:0b:55: 4c:44:01:9d:fc:ef:40:cb:46:de:89:01:e3:c5:50:f1:5e:12: d5:45:79:b7:64:f6:bc:e2:4c:11:42:0b:b8:ff:be:55:c3:de: 0a:e7:6a:00:cf:4f:3a:a2:35:d5:fc:e0:fd:84:86:9b:7f:81: 54:69:9d:e4:e7:cf:9b:8a:36:ce:ba:79:86:8d:2b:cc:20:e0: 89:d8:89:ec:93:07:31:c6:ca:2c:69:90:6e:61:09:5a:98:b5: d0:9f:fa:45:8b:5d:c3:e2:b7:a1:df:a4:9d:e9:93:2b:26:03: 05:fa:44:f4:b5:60:80:4d:d6:40:ab:fe:f0:cb:7e:7c:1d:3c: 78:18:e5:d8:70:99:1c:51:a3:a8:78:50:49:e9:55:1b:9a:28: 59:dc:de:72:6c:f2:c9:5f:a6:80:98:75:ea:f8:47:af:e3:09: 74:02:73:f0:e8:44:0b:f8:53:54:57:9f:af:00:3f:94:87:48: 8a:b4:37:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZFRkUxMTAvBgNVBAUTKEU4NzE3MjhDM0EyQzI2RDBFNjA4MDA0QkE3RDFFNUEz NTgzMDk1NkMwHhcNMjUwNTEzMDIwODUyWhcNMjUwNTIwMDIwODUyWjAYMRYwFAYD VQQDEw02ODIyYTliNS02ZGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQCAZnYdNoNdIvQs3yJbKu0E0YAQeuEJd7itxct/VlkRbJyu+xOt1JNoAMmh ViKHU9/oavKN9nK4CwzsV/qo+Q9OLfBDtCgYvXE2IRl8VSelKGBfeU/db6nOCe/V kAZmkr/M3Iga2nI5Mphji1AbtkZACXM22XpVnEhKEaGiFSp9nFRfW0gbY97D9gho 2q1w1enpkAoavGCm3hi+qyYtUmSAFXO3C9lRiLyFmccwfa/DHG2Zi6PPKHToLq4B ry2tkMeA9xOSQAZwQIwDbYZWLWHs0YY62gKYRbWfXLIiRlPx1qaVBPJIb5g0pro/ 2HhK6E27qxpdYYM/VRr1QEiijwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDI4XedE 9V5gkxjR9NApY3lJ/fmKMB8GA1UdIwQYMBaAFOhxcow6LCbQ5ggAS6fR5aNYMJVs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkVGRS9FNEMwMEQzQzZD QTExMUVEQjQ0RTc2NUJDNEY5QUUwMi82SEZ5akRvc0p0RG1DQUJMcDlIbG8xZ3ds V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZIRnlqRG9zSnREbUNBQkxwOUhsbzFnd2xXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkVGRS9FNEMwMEQzQzZDQTExMUVEQjQ0RTc2NUJDNEY5QUUwMi82SEZ5akRvc0p0 RG1DQUJMcDlIbG8xZ3dsV3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxOvdNcTxuWSFfaeJzIC52ty3HQhr0+Pc/BI961JcpBi+zUnnvTDbQ MlsZUTODxbrHSUsiDvPWDpbVAJ1GQhpmX8xnHMbhC1VMRAGd/O9Ay0beiQHjxVDx XhLVRXm3ZPa84kwRQgu4/75Vw94K52oAz086ojXV/OD9hIabf4FUaZ3k58+bijbO unmGjSvMIOCJ2InskwcxxsosaZBuYQlamLXQn/pFi13D4reh36Sd6ZMrJgMF+kT0 tWCATdZAq/7wy358HTx4GOXYcJkcUaOoeFBJ6VUbmihZ3N5ybPLJX6aAmHXq+Eev 4wl0AnPw6EQL+FNUV5+vAD+Uh0iKtDcE -----END CERTIFICATE-----Generated at Tue May 13 19:46:45 2025 by rpki-client