$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFCFF/18ACE3F6821F11EFA1DB4C75C4F9AE02/6_vUy5tYrAgtPzgph6WXpYyWupE.mft File: 6_vUy5tYrAgtPzgph6WXpYyWupE.mft (raw, json) Hash identifier: 6UMiiVum4a9xLjqR+5lAEZ8IYDDRdsWsdkDVWFbz/MM= Subject key identifier: 50:58:4E:49:55:59:5B:F7:17:2C:C1:53:7F:4F:6A:A0:A2:A1:97:94 Authority key identifier: EB:FB:D4:CB:9B:58:AC:08:2D:3F:38:29:87:A5:97:A5:8C:96:BA:91 Certificate issuer: /CN=A91EFCFF/serialNumber=EBFBD4CB9B58AC082D3F382987A597A58C96BA91 Certificate serial: 74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6_vUy5tYrAgtPzgph6WXpYyWupE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFCFF/18ACE3F6821F11EFA1DB4C75C4F9AE02/6_vUy5tYrAgtPzgph6WXpYyWupE.mft Manifest number: 73 Signing time: Sun 11 May 2025 05:33:38 +0000 Manifest this update: Sun 11 May 2025 05:33:38 +0000 Manifest next update: Sun 18 May 2025 05:33:38 +0000 Files and hashes: 1: 6_vUy5tYrAgtPzgph6WXpYyWupE.crl (hash: dotgCkYOxiSL2J3x9OD2TO4GPpsTh8fIbe1lOwdWa9E=) 2: F042F19A911311EF9A1A7F54C4F9AE02.roa (hash: hBFHKnjfNPkSPQ8LFBtT/taQcDMk7/Q7iyGIaAxoH34=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFCFF/18ACE3F6821F11EFA1DB4C75C4F9AE02/6_vUy5tYrAgtPzgph6WXpYyWupE.crl rsync://rpki.apnic.net/member_repository/A91EFCFF/18ACE3F6821F11EFA1DB4C75C4F9AE02/6_vUy5tYrAgtPzgph6WXpYyWupE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6_vUy5tYrAgtPzgph6WXpYyWupE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFCFF, serialNumber=EBFBD4CB9B58AC082D3F382987A597A58C96BA91 Validity Not Before: May 11 05:33:38 2025 GMT Not After : May 18 05:33:38 2025 GMT Subject: CN=682036b2-a175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:34:60:ea:e0:cb:7d:5f:13:ff:38:95:f7:f4: 51:b6:5f:11:80:c7:b9:f7:8a:75:9e:cd:d7:d0:69: e2:4f:96:0e:fd:b1:2b:3f:7f:68:d7:f7:59:33:51: 52:29:ea:86:cd:0b:a2:72:6b:f1:9d:49:7f:e0:ce: c9:06:07:93:2e:0b:bd:71:46:e5:9b:f0:42:c6:8f: b3:2c:d6:39:a1:af:df:d8:d9:5a:74:20:96:e9:76: f2:2d:e5:14:85:b2:b3:ac:ea:44:20:9a:76:07:65: 55:88:cd:88:cd:10:45:b1:60:d5:63:fd:f3:df:57: 57:60:77:8f:20:d4:f1:7c:a3:84:92:43:08:c4:b0: 06:3e:62:9e:44:b8:8a:db:f1:be:e4:82:8d:93:83: ab:cf:c3:d8:61:ef:67:65:e1:d7:45:b5:b0:57:fa: 99:8b:c8:67:4e:64:08:66:79:07:3c:48:d9:7d:1b: 64:9a:7c:9d:ca:e6:41:60:40:1b:7b:63:be:12:7c: ae:fb:35:58:66:7e:d2:0d:a4:f6:92:07:24:5d:b7: ba:6f:ae:4a:79:4d:b2:78:75:23:3a:23:c7:8d:23: 91:e4:72:04:83:b0:d7:83:7a:84:d7:a0:e2:55:15: 6f:04:fb:28:c8:93:1b:f4:6a:76:3b:58:e2:62:c0: cf:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:58:4E:49:55:59:5B:F7:17:2C:C1:53:7F:4F:6A:A0:A2:A1:97:94 X509v3 Authority Key Identifier: keyid:EB:FB:D4:CB:9B:58:AC:08:2D:3F:38:29:87:A5:97:A5:8C:96:BA:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFCFF/18ACE3F6821F11EFA1DB4C75C4F9AE02/6_vUy5tYrAgtPzgph6WXpYyWupE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6_vUy5tYrAgtPzgph6WXpYyWupE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFCFF/18ACE3F6821F11EFA1DB4C75C4F9AE02/6_vUy5tYrAgtPzgph6WXpYyWupE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:96:d7:93:6f:91:af:24:b6:73:e6:3c:49:e9:d1:ea:ea:49: ca:1d:c6:0d:7b:2b:58:ac:8b:0a:55:8b:2a:1c:c0:3e:31:0e: ae:32:eb:08:93:d3:69:72:07:85:e7:3a:cb:82:29:d6:7a:f7: d7:10:8b:e3:72:ff:da:c1:32:aa:c2:de:d9:86:99:c1:74:13: 23:3d:2a:d6:48:6c:94:fe:ea:0b:95:0f:3c:49:bb:88:6c:5b: 9b:1c:11:5c:cb:89:4e:d8:24:8d:7f:7b:f8:73:19:03:3b:41: 04:59:e5:de:95:64:7f:42:a2:2d:bc:2f:c6:19:e7:fb:7f:d3: 76:fe:28:64:4f:5e:e2:25:26:0b:c2:91:b2:60:58:13:22:20: 50:44:8c:ca:74:bf:dd:35:70:98:9a:82:96:c3:22:66:05:84: b5:08:38:41:93:5d:8c:9e:95:1a:37:63:d2:e9:8d:5e:9b:ea: 44:8b:e6:5a:4d:32:9f:3e:c9:1d:25:81:2b:33:1b:0c:77:25: fd:90:19:81:b1:20:9c:27:28:84:c0:68:02:19:fa:87:da:76: 02:5f:52:49:70:4e:11:13:52:eb:8b:e6:50:9c:4e:a0:66:2f: f0:4c:ab:9b:b2:58:b4:80:fb:b3:3b:09:ba:8c:1e:02:ef:b1: 6d:6d:d4:ec -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RkNGRjExMC8GA1UEBRMoRUJGQkQ0Q0I5QjU4QUMwODJEM0YzODI5ODdBNTk3QTU4 Qzk2QkE5MTAeFw0yNTA1MTEwNTMzMzhaFw0yNTA1MTgwNTMzMzhaMBgxFjAUBgNV BAMTDTY4MjAzNmIyLWExNzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnNGDq4Mt9XxP/OJX39FG2XxGAx7n3inWezdfQaeJPlg79sSs/f2jX91kzUVIp 6obNC6Jya/GdSX/gzskGB5MuC71xRuWb8ELGj7Ms1jmhr9/Y2Vp0IJbpdvIt5RSF srOs6kQgmnYHZVWIzYjNEEWxYNVj/fPfV1dgd48g1PF8o4SSQwjEsAY+Yp5EuIrb 8b7kgo2Tg6vPw9hh72dl4ddFtbBX+pmLyGdOZAhmeQc8SNl9G2SafJ3K5kFgQBt7 Y74SfK77NVhmftINpPaSByRdt7pvrkp5TbJ4dSM6I8eNI5HkcgSDsNeDeoTXoOJV FW8E+yjIkxv0anY7WOJiwM9RAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUFhOSVVZ W/cXLMFTf09qoKKhl5QwHwYDVR0jBBgwFoAU6/vUy5tYrAgtPzgph6WXpYyWupEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVGQ0ZGLzE4QUNFM0Y2ODIx RjExRUZBMURCNEM3NUM0RjlBRTAyLzZfdlV5NXRZckFndFB6Z3BoNldYcFl5V3Vw RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNl92VXk1dFlyQWd0UHpncGg2V1hwWXlXdXBFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVG Q0ZGLzE4QUNFM0Y2ODIxRjExRUZBMURCNEM3NUM0RjlBRTAyLzZfdlV5NXRZckFn dFB6Z3BoNldYcFl5V3VwRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGCW15Nvka8ktnPmPEnp0erqScodxg17K1isiwpViyocwD4xDq4y6wiT 02lyB4XnOsuCKdZ699cQi+Ny/9rBMqrC3tmGmcF0EyM9KtZIbJT+6guVDzxJu4hs W5scEVzLiU7YJI1/e/hzGQM7QQRZ5d6VZH9Coi28L8YZ5/t/03b+KGRPXuIlJgvC kbJgWBMiIFBEjMp0v901cJiagpbDImYFhLUIOEGTXYyelRo3Y9LpjV6b6kSL5lpN Mp8+yR0lgSszGwx3Jf2QGYGxIJwnKITAaAIZ+ofadgJfUklwThETUuuL5lCcTqBm L/BMq5uyWLSA+7M7CbqMHgLvsW1t1Ow= -----END CERTIFICATE-----Generated at Sun May 11 11:40:05 2025 by rpki-client