$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7FB1/AAD69040543811ED938C6628C4F9AE02/6Mzcv70o1xGQ6JN_PapZWP1IFUE.mft File: 6Mzcv70o1xGQ6JN_PapZWP1IFUE.mft (raw, json) Hash identifier: a94fnoMZJuRmvtgI+IFWHHVauJZSePe3gg6BEtRDC0w= Subject key identifier: 3F:37:0C:F8:7A:DB:B2:A2:4D:E3:40:C8:5A:FE:22:69:B4:53:5E:47 Authority key identifier: E8:CC:DC:BF:BD:28:D7:11:90:E8:93:7F:3D:AA:59:58:FD:48:15:41 Certificate issuer: /CN=A91E7FB1/serialNumber=E8CCDCBFBD28D71190E8937F3DAA5958FD481541 Certificate serial: 01E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Mzcv70o1xGQ6JN_PapZWP1IFUE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7FB1/AAD69040543811ED938C6628C4F9AE02/6Mzcv70o1xGQ6JN_PapZWP1IFUE.mft Manifest number: 01DE Signing time: Sun 11 May 2025 01:42:49 +0000 Manifest this update: Sun 11 May 2025 01:42:48 +0000 Manifest next update: Sun 18 May 2025 01:42:48 +0000 Files and hashes: 1: 6Mzcv70o1xGQ6JN_PapZWP1IFUE.crl (hash: bXTKCFLBLa26UYItGlOaq+pDBulmHAdv2cnu1fouigc=) 2: FE79EA9A543C11ED972CDD2FC4F9AE02.roa (hash: TXPIWerNT1GXv7TyCQJNbBBoD6VtScjOMdZFAdd3h8A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7FB1/AAD69040543811ED938C6628C4F9AE02/6Mzcv70o1xGQ6JN_PapZWP1IFUE.crl rsync://rpki.apnic.net/member_repository/A91E7FB1/AAD69040543811ED938C6628C4F9AE02/6Mzcv70o1xGQ6JN_PapZWP1IFUE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Mzcv70o1xGQ6JN_PapZWP1IFUE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 01:42:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 483 (0x1e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7FB1, serialNumber=E8CCDCBFBD28D71190E8937F3DAA5958FD481541 Validity Not Before: May 11 01:42:48 2025 GMT Not After : May 18 01:42:48 2025 GMT Subject: CN=68200099-5c6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7f:b5:1e:51:16:8d:66:bc:57:b0:81:68:04: d6:8b:92:e4:7d:b1:cd:07:2d:0d:a4:0e:6f:b4:28: 70:b3:c3:5d:60:11:71:f8:54:56:43:b6:90:b4:8b: 70:53:1c:f8:5e:ff:97:d7:fb:ec:2d:8d:85:07:d7: fc:a0:72:02:e2:38:cb:4f:35:f0:9e:c3:5c:07:4c: 0c:60:2b:8c:ac:b7:3b:2c:ee:22:65:7e:57:71:a1: b5:6e:63:d6:a8:21:6c:9b:fe:82:a0:d5:0e:e5:22: 83:1e:0a:a1:57:06:3a:93:2b:b1:41:58:be:1d:00: bf:47:b0:46:5b:53:1c:d5:b0:1f:1c:d3:77:2e:5f: d8:a0:a5:5c:cb:fd:1c:8d:16:ef:84:58:c1:b5:ed: 2f:c0:c9:45:26:75:b9:3d:24:71:f5:3f:75:b2:25: 56:1a:0f:05:7b:47:5b:72:7d:e8:18:60:97:3e:a3: 5d:64:cb:7e:a3:38:47:4f:d5:c0:f9:c2:a0:e5:00: 1b:7e:b6:3b:b4:70:8c:d2:83:17:83:61:b1:cf:52: ff:8e:0f:26:3d:91:ab:90:75:13:3d:db:75:f3:c1: 41:33:16:6c:76:a0:7e:22:b3:69:c4:65:0a:55:af: 3e:5f:22:33:7f:4d:70:e8:68:40:84:96:75:c1:36: 0a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:37:0C:F8:7A:DB:B2:A2:4D:E3:40:C8:5A:FE:22:69:B4:53:5E:47 X509v3 Authority Key Identifier: keyid:E8:CC:DC:BF:BD:28:D7:11:90:E8:93:7F:3D:AA:59:58:FD:48:15:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7FB1/AAD69040543811ED938C6628C4F9AE02/6Mzcv70o1xGQ6JN_PapZWP1IFUE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Mzcv70o1xGQ6JN_PapZWP1IFUE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7FB1/AAD69040543811ED938C6628C4F9AE02/6Mzcv70o1xGQ6JN_PapZWP1IFUE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:77:eb:cc:84:b0:74:97:a4:8e:6f:74:06:ae:46:8a:91:5b: 26:74:68:87:9b:d2:9b:66:49:5b:d8:df:e9:fa:b1:17:de:29: be:c8:70:fc:ae:ae:37:cf:df:c5:80:e7:c9:eb:b7:1a:33:c8: 66:dc:41:1f:47:bd:18:16:23:61:50:e5:e2:2c:ac:b7:95:b3: 36:21:08:63:10:70:0b:1e:e1:85:15:4b:8a:4c:94:36:74:7c: b7:48:d7:98:d8:d1:b9:9c:bf:26:6e:4d:41:23:90:7b:50:58: 26:88:d9:42:dc:20:f8:bd:cc:4c:eb:74:5e:f2:d2:df:1c:af: 2f:61:db:38:cb:02:6d:fc:aa:4a:81:f2:c0:15:ba:70:34:a8: da:00:a1:cb:1e:91:94:27:bc:b3:da:37:c7:fe:b8:57:56:de: e8:d9:8c:f4:e1:93:67:a4:c2:fc:8e:a3:79:95:13:5e:7a:b1: 97:7f:17:7f:78:ce:e3:d7:81:01:5e:b5:a4:ad:bb:44:69:79: d4:b3:be:43:b3:d5:95:5f:72:bd:16:7f:49:d0:7e:ac:b2:cd: 55:eb:d3:a1:c1:6d:45:59:2d:4f:5f:fd:65:43:b4:92:c9:94: f4:b1:23:13:29:54:a7:7d:42:ce:74:66:18:9a:2a:f0:10:58: 7c:f2:b6:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdGQjExMTAvBgNVBAUTKEU4Q0NEQ0JGQkQyOEQ3MTE5MEU4OTM3RjNEQUE1OTU4 RkQ0ODE1NDEwHhcNMjUwNTExMDE0MjQ4WhcNMjUwNTE4MDE0MjQ4WjAYMRYwFAYD VQQDEw02ODIwMDA5OS01YzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzX+1HlEWjWa8V7CBaATWi5LkfbHNBy0NpA5vtChws8NdYBFx+FRWQ7aQtItw Uxz4Xv+X1/vsLY2FB9f8oHIC4jjLTzXwnsNcB0wMYCuMrLc7LO4iZX5XcaG1bmPW qCFsm/6CoNUO5SKDHgqhVwY6kyuxQVi+HQC/R7BGW1Mc1bAfHNN3Ll/YoKVcy/0c jRbvhFjBte0vwMlFJnW5PSRx9T91siVWGg8Fe0dbcn3oGGCXPqNdZMt+ozhHT9XA +cKg5QAbfrY7tHCM0oMXg2Gxz1L/jg8mPZGrkHUTPdt188FBMxZsdqB+IrNpxGUK Va8+XyIzf01w6GhAhJZ1wTYKGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD83DPh6 27KiTeNAyFr+Imm0U15HMB8GA1UdIwQYMBaAFOjM3L+9KNcRkOiTfz2qWVj9SBVB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0ZCMS9BQUQ2OTA0MDU0 MzgxMUVEOTM4QzY2MjhDNEY5QUUwMi82TXpjdjcwbzF4R1E2Sk5fUGFwWldQMUlG VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZNemN2NzBvMXhHUTZKTl9QYXBaV1AxSUZVRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0ZCMS9BQUQ2OTA0MDU0MzgxMUVEOTM4QzY2MjhDNEY5QUUwMi82TXpjdjcwbzF4 R1E2Sk5fUGFwWldQMUlGVUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMd+vMhLB0l6SOb3QGrkaKkVsmdGiHm9KbZklb2N/p+rEX3im+yHD8 rq43z9/FgOfJ67caM8hm3EEfR70YFiNhUOXiLKy3lbM2IQhjEHALHuGFFUuKTJQ2 dHy3SNeY2NG5nL8mbk1BI5B7UFgmiNlC3CD4vcxM63Re8tLfHK8vYds4ywJt/KpK gfLAFbpwNKjaAKHLHpGUJ7yz2jfH/rhXVt7o2Yz04ZNnpML8jqN5lRNeerGXfxd/ eM7j14EBXrWkrbtEaXnUs75Ds9WVX3K9Fn9J0H6sss1V69OhwW1FWS1PX/1lQ7SS yZT0sSMTKVSnfULOdGYYmirwEFh88ra0 -----END CERTIFICATE-----Generated at Mon May 12 22:28:40 2025 by rpki-client