$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft File: 6NbUISgrkBkAAJd2GiVjIjyngV4.mft (raw, json) Hash identifier: VfJKgDmk4g/F2b0rHXbsISMN4p5KUT0eeityN/N2M6w= Subject key identifier: 13:D1:91:EC:94:61:99:80:58:0F:28:C8:EF:81:57:1B:56:40:C5:DD Authority key identifier: E8:D6:D4:21:28:2B:90:19:00:00:97:76:1A:25:63:22:3C:A7:81:5E Certificate issuer: /CN=A91EFCFF/serialNumber=E8D6D421282B9019000097761A2563223CA7815E Certificate serial: 76 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6NbUISgrkBkAAJd2GiVjIjyngV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft Manifest number: 75 Signing time: Thu 15 May 2025 06:04:09 +0000 Manifest this update: Thu 15 May 2025 06:04:08 +0000 Manifest next update: Thu 22 May 2025 06:04:08 +0000 Files and hashes: 1: 6NbUISgrkBkAAJd2GiVjIjyngV4.crl (hash: FyKCta77cLYdRlp7+rQWAhqj6W9vqcU9Hfh4LF+SRCM=) 2: CCEAF60C911311EFA9C63854C4F9AE02.roa (hash: lpawVFjrLTQaiIY8ph0aOBiFjAIuxDOp5nWen5zsXsU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.crl rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6NbUISgrkBkAAJd2GiVjIjyngV4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 06:04:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 118 (0x76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFCFF, serialNumber=E8D6D421282B9019000097761A2563223CA7815E Validity Not Before: May 15 06:04:08 2025 GMT Not After : May 22 06:04:08 2025 GMT Subject: CN=682583d9-3c13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:bb:ff:04:e0:61:cf:52:85:9f:b2:35:9a:f9: 22:ce:c1:e2:78:53:9b:16:1e:0a:5d:ab:4c:cb:4d: 25:9a:db:aa:e4:8f:60:c3:68:43:5c:fb:13:68:c1: 70:4b:35:a8:ce:97:62:fe:b1:4d:93:77:bc:c7:c9: 47:fe:21:24:3b:9a:73:4b:58:27:e6:13:77:bb:70: c2:22:b7:07:34:c3:09:b5:44:74:31:ef:26:36:ab: 09:c2:4e:53:8e:89:6e:57:4e:bc:25:67:37:89:84: 3a:40:e4:b5:cf:3c:39:ce:e5:8a:70:8b:79:e5:cb: 00:00:21:3c:bc:ff:38:39:08:70:c2:e5:bb:35:41: f5:b7:3e:4b:c6:e3:1c:86:c1:a3:8b:7c:c0:82:27: 1d:51:ee:d2:8a:bb:f7:dd:e6:f2:08:74:d0:07:b9: 67:b7:56:2f:f7:5b:37:d0:a5:26:93:53:7b:5e:20: 92:1b:0a:b8:cd:74:4a:6f:a2:3a:9b:ba:41:15:bc: a7:8e:9f:f9:f5:5a:b6:e4:46:2d:a9:e9:8e:a8:5b: c4:9d:4f:d6:fd:7b:2b:6c:3d:2f:b5:3f:e2:e8:8c: de:37:22:bc:92:51:1c:54:75:50:0c:30:dd:dd:a1: b9:bf:d4:9f:38:e6:f7:2e:95:b9:74:01:77:2d:94: 84:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:D1:91:EC:94:61:99:80:58:0F:28:C8:EF:81:57:1B:56:40:C5:DD X509v3 Authority Key Identifier: keyid:E8:D6:D4:21:28:2B:90:19:00:00:97:76:1A:25:63:22:3C:A7:81:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6NbUISgrkBkAAJd2GiVjIjyngV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:1b:f8:b3:04:3c:07:e3:ae:11:b1:ae:e6:91:e3:dc:4b:74: 93:7a:4c:02:d1:7c:87:29:cd:d2:5c:06:e1:0b:65:a6:83:ce: 33:e6:c5:35:81:9c:01:e3:4b:1a:00:35:ad:e1:c9:2b:5d:e3: e1:83:99:1f:3f:e1:e0:5e:ea:7d:c4:46:dc:5b:8a:21:f0:12: a1:61:05:bf:55:f0:b4:67:02:1c:cd:b1:c1:90:76:86:2d:09: 52:e0:ce:7b:24:fc:7e:47:b0:48:94:65:03:1c:33:2b:71:30: 41:19:33:d8:3b:30:63:28:7c:fa:8c:5d:60:b6:59:20:72:0e: 9f:06:d4:25:bf:de:85:31:c0:7a:47:32:5a:32:ff:89:6c:45: 36:ee:94:a6:c4:19:92:ec:ef:88:d1:3f:f2:69:04:88:60:82: 12:73:7b:1b:3d:ba:c7:31:f8:c1:59:78:b4:9f:57:78:e4:a3: 63:a6:97:4c:eb:e4:0e:bc:e2:f0:81:da:76:ed:d9:05:6b:81: ce:22:99:09:a8:b6:6e:88:0f:79:7d:d2:d8:ff:a5:c6:a7:f1: 6b:c2:1b:b8:df:a6:41:6a:35:b6:80:b3:99:c2:6f:d9:5d:9f: f7:63:20:5f:fd:ce:f9:ae:60:2a:c0:37:d8:fa:37:03:3c:31: 7c:bd:4d:7e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RkNGRjExMC8GA1UEBRMoRThENkQ0MjEyODJCOTAxOTAwMDA5Nzc2MUEyNTYzMjIz Q0E3ODE1RTAeFw0yNTA1MTUwNjA0MDhaFw0yNTA1MjIwNjA0MDhaMBgxFjAUBgNV BAMTDTY4MjU4M2Q5LTNjMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVu/8E4GHPUoWfsjWa+SLOweJ4U5sWHgpdq0zLTSWa26rkj2DDaENc+xNowXBL NajOl2L+sU2Td7zHyUf+ISQ7mnNLWCfmE3e7cMIitwc0wwm1RHQx7yY2qwnCTlOO iW5XTrwlZzeJhDpA5LXPPDnO5Ypwi3nlywAAITy8/zg5CHDC5bs1QfW3PkvG4xyG waOLfMCCJx1R7tKKu/fd5vIIdNAHuWe3Vi/3WzfQpSaTU3teIJIbCrjNdEpvojqb ukEVvKeOn/n1WrbkRi2p6Y6oW8SdT9b9eytsPS+1P+LojN43IrySURxUdVAMMN3d obm/1J845vculbl0AXctlITNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUE9GR7JRh mYBYDyjI74FXG1ZAxd0wHwYDVR0jBBgwFoAU6NbUISgrkBkAAJd2GiVjIjyngV4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVGQ0ZGLzBGQTg1Rjg4ODIx RjExRUZBMURCNEM3NUM0RjlBRTAyLzZOYlVJU2dya0JrQUFKZDJHaVZqSWp5bmdW NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNk5iVUlTZ3JrQmtBQUpkMkdpVmpJanluZ1Y0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVG Q0ZGLzBGQTg1Rjg4ODIxRjExRUZBMURCNEM3NUM0RjlBRTAyLzZOYlVJU2dya0Jr QUFKZDJHaVZqSWp5bmdWNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKwb+LMEPAfjrhGxruaR49xLdJN6TALRfIcpzdJcBuELZaaDzjPmxTWB nAHjSxoANa3hyStd4+GDmR8/4eBe6n3ERtxbiiHwEqFhBb9V8LRnAhzNscGQdoYt CVLgznsk/H5HsEiUZQMcMytxMEEZM9g7MGMofPqMXWC2WSByDp8G1CW/3oUxwHpH Mloy/4lsRTbulKbEGZLs74jRP/JpBIhgghJzexs9uscx+MFZeLSfV3jko2Oml0zr 5A684vCB2nbt2QVrgc4imQmotm6ID3l90tj/pcan8WvCG7jfpkFqNbaAs5nCb9ld n/djIF/9zvmuYCrAN9j6NwM8MXy9TX4= -----END CERTIFICATE-----Generated at Fri May 16 16:49:23 2025 by rpki-client