$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/s6HqYHo_df54qoQuuJCSWZEQ_cY.mft File: s6HqYHo_df54qoQuuJCSWZEQ_cY.mft (raw, json) Hash identifier: NwBX3I4Fi08GBtkyGWV9UpsCBEiK5Q5naw8NYXxwALs= Subject key identifier: 7F:62:9B:B0:BB:00:96:7E:56:DD:AB:7B:B8:57:3F:3F:91:D5:EA:B8 Authority key identifier: B3:A1:EA:60:7A:3F:75:FE:78:AA:84:2E:B8:90:92:59:91:10:FD:C6 Certificate issuer: /CN=A91F5BCC/serialNumber=B3A1EA607A3F75FE78AA842EB89092599110FDC6 Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s6HqYHo_df54qoQuuJCSWZEQ_cY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/s6HqYHo_df54qoQuuJCSWZEQ_cY.mft Manifest number: 43 Signing time: Sun 11 May 2025 06:11:22 +0000 Manifest this update: Sun 11 May 2025 06:11:21 +0000 Manifest next update: Sun 18 May 2025 06:11:21 +0000 Files and hashes: 1: s6HqYHo_df54qoQuuJCSWZEQ_cY.crl (hash: gnR24LoqgEtcKUG5cXtQ0gBYIpxL8WSsA7FlzfiSOnA=) 2: 5FEB0DA8E90611EFA74B611DC4F9AE02.roa (hash: hwuul9zOvXSQLDdgabC6PgRyfpY9SzpmngkkmJxvu+k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/s6HqYHo_df54qoQuuJCSWZEQ_cY.crl rsync://rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/s6HqYHo_df54qoQuuJCSWZEQ_cY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s6HqYHo_df54qoQuuJCSWZEQ_cY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 06:11:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5BCC, serialNumber=B3A1EA607A3F75FE78AA842EB89092599110FDC6 Validity Not Before: May 11 06:11:21 2025 GMT Not After : May 18 06:11:21 2025 GMT Subject: CN=68203f8a-1371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2c:c6:41:6b:a6:1a:12:9e:59:a4:83:9c:75: 83:74:7c:2f:61:00:26:19:fb:d4:0f:13:99:0a:fe: eb:6a:2b:3c:89:a3:3c:ef:c1:1e:b9:52:5e:3f:35: bb:46:8b:20:40:c8:66:cb:04:b6:fc:c7:16:e3:cb: d8:72:37:8a:6d:ca:d6:0e:c3:90:f7:b3:73:5f:ad: 59:c5:23:44:cb:a8:68:1d:3f:dc:54:c2:4a:6b:ae: aa:53:c4:b0:92:d7:b1:17:d8:dd:91:95:e1:b9:24: 07:c8:c8:99:40:f8:1d:07:3e:1f:03:6b:f7:eb:95: 87:f7:5f:14:7f:fb:6d:86:55:6d:16:f4:35:95:e0: d9:bd:fd:53:96:f6:b8:07:09:48:88:b8:36:b9:7c: 97:98:c4:cb:f4:8c:c9:ed:43:d9:86:2f:f4:bb:87: cb:a5:6f:bd:cb:a5:78:36:d1:40:1f:eb:f8:f6:ef: 09:9f:52:10:61:01:d7:45:f3:3b:73:b0:2e:ed:41: a5:f7:73:32:78:94:30:5e:dd:4a:22:03:79:4b:70: 4a:48:65:71:a8:39:40:0b:2b:73:df:26:96:7f:5f: 1f:a0:4b:dc:95:40:65:b1:b1:f6:f5:76:da:a0:5b: 00:7e:0f:85:ba:09:b8:08:aa:ca:cd:8b:68:ff:e4: 39:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:62:9B:B0:BB:00:96:7E:56:DD:AB:7B:B8:57:3F:3F:91:D5:EA:B8 X509v3 Authority Key Identifier: keyid:B3:A1:EA:60:7A:3F:75:FE:78:AA:84:2E:B8:90:92:59:91:10:FD:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/s6HqYHo_df54qoQuuJCSWZEQ_cY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s6HqYHo_df54qoQuuJCSWZEQ_cY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/s6HqYHo_df54qoQuuJCSWZEQ_cY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:f3:13:94:8e:46:85:61:6c:22:12:47:fb:17:71:b1:53:59: e1:26:ad:48:cf:3b:cf:f1:fb:5f:d5:2d:c2:29:e3:1e:69:13: 46:63:4a:33:f4:3e:99:a9:6a:53:8c:19:21:9e:40:93:dc:00: 90:d7:4f:0e:21:05:6b:ae:23:a5:b8:8e:3a:0f:fa:e4:64:e6: a4:f3:9c:9b:64:d6:71:3d:3c:fc:22:ae:03:4c:2f:36:ee:87: 01:11:2a:3d:f0:75:fe:23:ef:50:24:67:86:99:4d:84:30:2b: e5:15:75:05:70:16:89:ed:00:43:9d:b4:5c:47:5d:87:cb:7b: 2d:cf:bb:d4:78:bf:b5:c6:3b:90:3b:2d:61:60:4d:d4:fe:73: 6e:78:d1:c8:b0:48:1e:55:47:bf:30:60:fe:12:65:72:d5:3c: 29:4c:dd:bd:34:d5:5a:96:a8:f0:62:73:12:53:79:47:72:6f: bd:ed:c7:5e:a7:28:c6:3a:e6:52:43:38:ac:c4:eb:66:a2:4e: 57:52:c1:f7:e8:06:0a:13:72:f7:d6:3f:e4:25:30:66:8c:dc: 2d:c6:7f:0a:96:eb:a5:47:ec:8a:05:03:87:08:bb:79:3a:f1: 44:9d:fc:53:e5:c9:da:e7:88:6b:89:7e:fc:06:e1:3a:9b:50: 0e:72:43:b6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NUJDQzExMC8GA1UEBRMoQjNBMUVBNjA3QTNGNzVGRTc4QUE4NDJFQjg5MDkyNTk5 MTEwRkRDNjAeFw0yNTA1MTEwNjExMjFaFw0yNTA1MTgwNjExMjFaMBgxFjAUBgNV BAMTDTY4MjAzZjhhLTEzNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8LMZBa6YaEp5ZpIOcdYN0fC9hACYZ+9QPE5kK/utqKzyJozzvwR65Ul4/NbtG iyBAyGbLBLb8xxbjy9hyN4ptytYOw5D3s3NfrVnFI0TLqGgdP9xUwkprrqpTxLCS 17EX2N2RleG5JAfIyJlA+B0HPh8Da/frlYf3XxR/+22GVW0W9DWV4Nm9/VOW9rgH CUiIuDa5fJeYxMv0jMntQ9mGL/S7h8ulb73LpXg20UAf6/j27wmfUhBhAddF8ztz sC7tQaX3czJ4lDBe3UoiA3lLcEpIZXGoOUALK3PfJpZ/Xx+gS9yVQGWxsfb1dtqg WwB+D4W6CbgIqsrNi2j/5DkBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUf2KbsLsA ln5W3at7uFc/P5HV6rgwHwYDVR0jBBgwFoAUs6HqYHo/df54qoQuuJCSWZEQ/cYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1QkNDL0IxMTgxQjEwQ0U3 ODExRUY4MEVGNEQ0NEM0RjlBRTAyL3M2SHFZSG9fZGY1NHFvUXV1SkNTV1pFUV9j WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvczZIcVlIb19kZjU0cW9RdXVKQ1NXWkVRX2NZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1 QkNDL0IxMTgxQjEwQ0U3ODExRUY4MEVGNEQ0NEM0RjlBRTAyL3M2SHFZSG9fZGY1 NHFvUXV1SkNTV1pFUV9jWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACTzE5SORoVhbCISR/sXcbFTWeEmrUjPO8/x+1/VLcIp4x5pE0ZjSjP0 PpmpalOMGSGeQJPcAJDXTw4hBWuuI6W4jjoP+uRk5qTznJtk1nE9PPwirgNMLzbu hwERKj3wdf4j71AkZ4aZTYQwK+UVdQVwFontAEOdtFxHXYfLey3Pu9R4v7XGO5A7 LWFgTdT+c2540ciwSB5VR78wYP4SZXLVPClM3b001VqWqPBicxJTeUdyb73tx16n KMY65lJDOKzE62aiTldSwffoBgoTcvfWP+QlMGaM3C3GfwqW66VH7IoFA4cIu3k6 8USd/FPlydrniGuJfvwG4TqbUA5yQ7Y= -----END CERTIFICATE-----Generated at Mon May 12 12:38:21 2025 by rpki-client