$ rpki-client -vvf rpki.apnic.net/member_repository/A9183A53/9852A2F21C1811EABF343C87C4F9AE02/b6MnfND3RvILaYm150QQZcbD0eE.mft File: b6MnfND3RvILaYm150QQZcbD0eE.mft (raw, json) Hash identifier: cIf4KT0DKUgjeWMIni0zAhRYK2W1Dr26EavFLqSX/dY= Subject key identifier: D6:A2:F7:22:3D:B9:90:DB:28:3D:AF:38:B0:70:F1:83:11:BF:6F:AC Authority key identifier: 6F:A3:27:7C:D0:F7:46:F2:0B:69:89:B5:E7:44:10:65:C6:C3:D1:E1 Certificate issuer: /CN=A9183A53/serialNumber=6FA3277CD0F746F20B6989B5E7441065C6C3D1E1 Certificate serial: 0BC3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b6MnfND3RvILaYm150QQZcbD0eE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183A53/9852A2F21C1811EABF343C87C4F9AE02/b6MnfND3RvILaYm150QQZcbD0eE.mft Manifest number: 0BBB Signing time: Thu 24 Apr 2025 18:48:11 +0000 Manifest this update: Thu 24 Apr 2025 18:48:11 +0000 Manifest next update: Thu 01 May 2025 18:48:11 +0000 Files and hashes: 1: b6MnfND3RvILaYm150QQZcbD0eE.crl (hash: clzmUJpJtWl7HwMz/au5HZ/eis+AStkY8uKkDc1DREs=) 2: 5B89EDAC1C1911EA905C7109C4F9AE02.roa (hash: yFbcE2/zh5W+jYTCtbp+al/Ly/eMMC6ALp6S0V30Zsc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183A53/9852A2F21C1811EABF343C87C4F9AE02/b6MnfND3RvILaYm150QQZcbD0eE.crl rsync://rpki.apnic.net/member_repository/A9183A53/9852A2F21C1811EABF343C87C4F9AE02/b6MnfND3RvILaYm150QQZcbD0eE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b6MnfND3RvILaYm150QQZcbD0eE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:48:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3011 (0xbc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183A53, serialNumber=6FA3277CD0F746F20B6989B5E7441065C6C3D1E1 Validity Not Before: Apr 24 18:48:11 2025 GMT Not After : May 1 18:48:11 2025 GMT Subject: CN=680a876b-2a14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:40:81:20:ee:16:79:13:40:43:0d:f3:f2:d2: 4f:ba:ef:d3:e1:41:14:ca:c7:a2:c2:67:5f:35:71: 91:f0:53:d9:9d:e3:13:97:fe:5d:39:00:d7:09:2a: 19:9a:66:e0:94:77:f0:c2:be:49:23:62:85:2a:d1: 54:1e:10:3f:d4:f3:4b:60:81:27:e4:c5:d0:2c:32: 6b:b3:c1:f2:2c:8b:4e:82:67:52:50:74:da:f1:cc: a0:52:ef:ff:31:3d:6c:82:9c:7c:38:3e:a3:32:fa: 48:e5:4f:c3:6e:55:ce:fe:36:74:d7:fc:f2:45:b1: 9a:09:a9:3f:a4:cd:c1:d8:3c:b0:f1:29:87:a2:65: 5f:82:32:43:71:5d:cc:f2:da:f9:80:f7:86:2b:95: 5b:d4:80:6f:e5:7e:04:4a:24:87:e9:5d:b8:f2:57: 7b:b4:a4:8d:46:a3:fc:e7:e2:93:99:d9:71:6b:f1: 63:ed:c8:0e:27:e2:13:07:25:79:11:74:2b:76:7f: 48:0b:19:43:b8:4b:2e:03:29:56:31:a0:67:40:83: a1:00:63:44:d8:4c:3d:98:c5:b8:47:cb:40:ed:55: 6a:e2:b8:4e:35:8a:57:8e:01:1e:d2:2b:05:ba:fa: 71:f6:07:e1:94:6b:fc:93:e4:8c:e9:f3:b8:ff:c4: 0d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:A2:F7:22:3D:B9:90:DB:28:3D:AF:38:B0:70:F1:83:11:BF:6F:AC X509v3 Authority Key Identifier: keyid:6F:A3:27:7C:D0:F7:46:F2:0B:69:89:B5:E7:44:10:65:C6:C3:D1:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183A53/9852A2F21C1811EABF343C87C4F9AE02/b6MnfND3RvILaYm150QQZcbD0eE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b6MnfND3RvILaYm150QQZcbD0eE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183A53/9852A2F21C1811EABF343C87C4F9AE02/b6MnfND3RvILaYm150QQZcbD0eE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:a2:85:43:6c:28:fa:bd:18:81:14:f4:ef:42:1c:46:1e:e5: 54:ba:00:3a:0a:25:cf:e4:3c:66:e1:63:cd:d2:d1:10:99:52: 07:fd:bd:21:60:9c:53:1b:36:5f:0c:7e:e8:c7:6e:73:e0:38: 0d:50:d8:f3:3d:30:b3:0a:34:e8:ce:6a:05:04:c7:d6:66:46: c3:27:8d:15:cf:5d:d3:a4:d3:a2:cd:2c:1d:ab:21:1a:4c:fe: 52:b9:48:0f:45:36:b7:03:7b:ab:3b:28:65:cc:1c:84:9b:06: 5f:53:21:4a:ae:87:04:c5:ee:81:19:74:ea:b4:aa:c1:8d:3b: b7:1b:85:a4:7d:18:9d:b6:b7:df:63:be:fa:b6:57:b3:4b:a0: 73:b6:ce:d8:e2:a3:5c:ff:1c:ba:e8:c6:0a:f6:6f:1b:01:c2: 08:80:43:55:81:1e:73:dc:5d:ff:32:1f:50:5e:82:76:03:1d: 54:b2:7c:16:81:c1:b4:a6:2b:34:7b:ca:7f:c7:34:bd:1a:cb: 7b:d5:8d:ca:99:a1:5d:cc:9c:9c:0d:92:bf:c9:60:45:da:d5: 3e:f7:e9:8c:bc:d2:8b:56:0a:6c:e7:79:b9:92:a1:70:21:f2: 4b:5b:72:b9:9b:5a:21:be:a9:e0:aa:a8:6c:6a:8d:62:40:0b: d1:ce:b3:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNBNTMxMTAvBgNVBAUTKDZGQTMyNzdDRDBGNzQ2RjIwQjY5ODlCNUU3NDQxMDY1 QzZDM0QxRTEwHhcNMjUwNDI0MTg0ODExWhcNMjUwNTAxMTg0ODExWjAYMRYwFAYD VQQDEw02ODBhODc2Yi0yYTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtUCBIO4WeRNAQw3z8tJPuu/T4UEUyseiwmdfNXGR8FPZneMTl/5dOQDXCSoZ mmbglHfwwr5JI2KFKtFUHhA/1PNLYIEn5MXQLDJrs8HyLItOgmdSUHTa8cygUu// MT1sgpx8OD6jMvpI5U/DblXO/jZ01/zyRbGaCak/pM3B2Dyw8SmHomVfgjJDcV3M 8tr5gPeGK5Vb1IBv5X4ESiSH6V248ld7tKSNRqP85+KTmdlxa/Fj7cgOJ+ITByV5 EXQrdn9ICxlDuEsuAylWMaBnQIOhAGNE2Ew9mMW4R8tA7VVq4rhONYpXjgEe0isF uvpx9gfhlGv8k+SM6fO4/8QNfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNai9yI9 uZDbKD2vOLBw8YMRv2+sMB8GA1UdIwQYMBaAFG+jJ3zQ90byC2mJtedEEGXGw9Hh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0E1My85ODUyQTJGMjFD MTgxMUVBQkYzNDNDODdDNEY5QUUwMi9iNk1uZk5EM1J2SUxhWW0xNTBRUVpjYkQw ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I2TW5mTkQzUnZJTGFZbTE1MFFRWmNiRDBlRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0E1My85ODUyQTJGMjFDMTgxMUVBQkYzNDNDODdDNEY5QUUwMi9iNk1uZk5EM1J2 SUxhWW0xNTBRUVpjYkQwZUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeooVDbCj6vRiBFPTvQhxGHuVUugA6CiXP5Dxm4WPN0tEQmVIH/b0h YJxTGzZfDH7ox25z4DgNUNjzPTCzCjTozmoFBMfWZkbDJ40Vz13TpNOizSwdqyEa TP5SuUgPRTa3A3urOyhlzByEmwZfUyFKrocExe6BGXTqtKrBjTu3G4WkfRidtrff Y776tlezS6Bzts7Y4qNc/xy66MYK9m8bAcIIgENVgR5z3F3/Mh9QXoJ2Ax1UsnwW gcG0pis0e8p/xzS9Gst71Y3KmaFdzJycDZK/yWBF2tU+9+mMvNKLVgps53m5kqFw IfJLW3K5m1ohvqngqqhsao1iQAvRzrPm -----END CERTIFICATE-----Generated at Sat Apr 26 16:52:18 2025 by rpki-client