$ rpki-client -vvf rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/6mETfAkAkG5HSNHgfMVV5qfM4QA.mft File: 6mETfAkAkG5HSNHgfMVV5qfM4QA.mft (raw, json) Hash identifier: oEeLc9IZyV7qTN+Wop5M0KgUH1zXloGv8YXP8UnueWw= Subject key identifier: 30:18:14:CB:1C:93:D1:EF:D0:1C:25:29:80:76:EA:09:E8:96:61:56 Authority key identifier: EA:61:13:7C:09:00:90:6E:47:48:D1:E0:7C:C5:55:E6:A7:CC:E1:00 Certificate issuer: /CN=A91175BA/serialNumber=EA61137C0900906E4748D1E07CC555E6A7CCE100 Certificate serial: 0105 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6mETfAkAkG5HSNHgfMVV5qfM4QA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/6mETfAkAkG5HSNHgfMVV5qfM4QA.mft Manifest number: 06A9 Signing time: Thu 24 Apr 2025 22:58:59 +0000 Manifest this update: Thu 24 Apr 2025 22:58:58 +0000 Manifest next update: Thu 01 May 2025 22:58:58 +0000 Files and hashes: 1: 6mETfAkAkG5HSNHgfMVV5qfM4QA.crl (hash: 013wFc2ZAZY0im3HJ1RiHGVyz44wh96JC3twzM3VmtQ=) 2: 2E22941AB6C811EE925FF152C4F9AE02.roa (hash: m4EezZIyNf7dli/AKbn/pkjhnxkvLMdKf/jlx7B+sWg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/6mETfAkAkG5HSNHgfMVV5qfM4QA.crl rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/6mETfAkAkG5HSNHgfMVV5qfM4QA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6mETfAkAkG5HSNHgfMVV5qfM4QA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:58:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 261 (0x105) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91175BA, serialNumber=EA61137C0900906E4748D1E07CC555E6A7CCE100 Validity Not Before: Apr 24 22:58:58 2025 GMT Not After : May 1 22:58:58 2025 GMT Subject: CN=680ac232-fb4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:74:26:2e:0d:fb:2c:37:d0:37:b8:97:18:ef: 26:73:4b:c9:ed:3d:54:bb:2d:83:c9:08:47:ed:44: 05:4f:e2:b7:c5:65:15:56:f0:2e:c8:9b:7a:4d:9d: e9:42:35:c7:a5:ac:c5:3f:68:d0:89:36:ab:72:e7: c5:e8:07:3e:fe:f0:c8:cb:ec:d7:50:a8:1e:ed:b4: 2a:3d:76:7f:4b:bb:64:80:0b:04:49:38:ca:54:c6: 76:8b:6c:ba:43:f3:0a:41:89:8f:73:ab:e7:8e:5d: 27:7f:d5:1e:d9:14:1d:9a:b9:da:0a:bc:5b:63:06: 4a:83:fa:bc:f5:71:c5:19:d7:3a:7d:c3:d5:50:af: 23:0c:40:5e:42:56:e7:5c:4c:f6:cd:f3:2d:ce:bc: 57:35:2a:b6:3b:25:19:a4:21:bc:85:b4:9d:bb:31: ea:be:32:62:18:e1:c6:43:04:26:20:81:94:c9:a8: b8:4a:d2:eb:7a:dc:4b:d6:4c:d0:84:a3:a5:1a:26: 16:ae:79:f0:5c:47:a5:39:67:10:48:f6:81:e9:3f: 4e:cb:9a:b7:03:5e:09:ce:50:27:c3:6a:95:16:db: e2:90:7c:f4:a6:2a:eb:50:a1:1f:0b:c0:fd:c8:e3: 3b:e9:59:9a:d7:d7:8f:5b:4a:e8:5f:ce:9f:0b:cd: 75:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:18:14:CB:1C:93:D1:EF:D0:1C:25:29:80:76:EA:09:E8:96:61:56 X509v3 Authority Key Identifier: keyid:EA:61:13:7C:09:00:90:6E:47:48:D1:E0:7C:C5:55:E6:A7:CC:E1:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/6mETfAkAkG5HSNHgfMVV5qfM4QA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6mETfAkAkG5HSNHgfMVV5qfM4QA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/6mETfAkAkG5HSNHgfMVV5qfM4QA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:3d:40:da:75:8f:ff:c4:f1:13:d8:77:1b:33:7f:76:2b:88: b3:7c:ee:74:2f:cc:7d:66:34:f9:d7:2d:43:64:6c:bb:a1:9f: 4b:93:c4:75:03:84:56:c1:8b:f4:0b:fd:72:ea:47:09:e4:46: 70:30:15:c9:b8:34:25:65:49:39:be:9d:f7:17:dd:10:e6:f6: e2:11:d0:1c:99:da:69:d3:65:7c:36:40:a5:54:5e:37:81:3b: 7f:70:df:c4:c2:cd:bf:8e:36:8c:4a:b4:03:cb:62:4e:c9:21: 9a:a5:8c:c9:50:e8:3c:ed:3f:6f:d4:73:ac:4b:47:1d:d8:70: 02:2c:96:7c:01:b6:1d:79:67:60:85:4f:ee:8a:62:2a:a1:58: 93:50:79:c9:83:1b:f8:2a:96:c7:05:71:6e:c3:17:2a:1d:bf: 0b:7a:18:20:42:fa:74:fb:1b:d8:88:9c:36:b3:59:41:f1:e8: 16:34:81:39:46:9d:55:59:07:4d:ea:01:a8:b2:3b:96:c8:63: 2e:fd:19:08:38:4e:f6:8f:93:b5:52:14:4e:92:a3:5c:94:d6: 99:67:d2:e0:10:f6:ec:d6:74:0a:c3:de:3f:8c:24:f7:e4:fc: e1:bd:33:0c:e3:e2:78:4b:cb:1e:02:f2:fa:5e:87:6e:6c:e8: 26:1e:6b:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc1QkExMTAvBgNVBAUTKEVBNjExMzdDMDkwMDkwNkU0NzQ4RDFFMDdDQzU1NUU2 QTdDQ0UxMDAwHhcNMjUwNDI0MjI1ODU4WhcNMjUwNTAxMjI1ODU4WjAYMRYwFAYD VQQDEw02ODBhYzIzMi1mYjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw3QmLg37LDfQN7iXGO8mc0vJ7T1Uuy2DyQhH7UQFT+K3xWUVVvAuyJt6TZ3p QjXHpazFP2jQiTarcufF6Ac+/vDIy+zXUKge7bQqPXZ/S7tkgAsESTjKVMZ2i2y6 Q/MKQYmPc6vnjl0nf9Ue2RQdmrnaCrxbYwZKg/q89XHFGdc6fcPVUK8jDEBeQlbn XEz2zfMtzrxXNSq2OyUZpCG8hbSduzHqvjJiGOHGQwQmIIGUyai4StLretxL1kzQ hKOlGiYWrnnwXEelOWcQSPaB6T9Oy5q3A14JzlAnw2qVFtvikHz0pirrUKEfC8D9 yOM76Vma19ePW0roX86fC811BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDAYFMsc k9Hv0BwlKYB26gnolmFWMB8GA1UdIwQYMBaAFOphE3wJAJBuR0jR4HzFVeanzOEA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzVCQS8xNkM0RDJCOEM4 NEQxMUVCOTkxM0QzMkRDNEY5QUUwMi82bUVUZkFrQWtHNUhTTkhnZk1WVjVxZk00 UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZtRVRmQWtBa0c1SFNOSGdmTVZWNXFmTTRRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzVCQS8xNkM0RDJCOEM4NEQxMUVCOTkxM0QzMkRDNEY5QUUwMi82bUVUZkFrQWtH NUhTTkhnZk1WVjVxZk00UUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOPUDadY//xPET2HcbM392K4izfO50L8x9ZjT51y1DZGy7oZ9Lk8R1 A4RWwYv0C/1y6kcJ5EZwMBXJuDQlZUk5vp33F90Q5vbiEdAcmdpp02V8NkClVF43 gTt/cN/Ews2/jjaMSrQDy2JOySGapYzJUOg87T9v1HOsS0cd2HACLJZ8AbYdeWdg hU/uimIqoViTUHnJgxv4KpbHBXFuwxcqHb8LehggQvp0+xvYiJw2s1lB8egWNIE5 Rp1VWQdN6gGosjuWyGMu/RkIOE72j5O1UhROkqNclNaZZ9LgEPbs1nQKw94/jCT3 5PzhvTMM4+J4S8seAvL6XodubOgmHmvQ -----END CERTIFICATE-----Generated at Sat Apr 26 03:39:35 2025 by rpki-client