$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.mft File: 6t6GhZIRcEQyqBm4GJm2DF093os.mft (raw, json) Hash identifier: RJLEa6AxxnMLaW2hVzWf9f0/3WGtRmq8I2VAHcw/vTg= Subject key identifier: 24:7F:74:52:5F:CF:0E:D0:D7:B8:0C:AB:98:62:C7:68:08:79:78:7E Authority key identifier: EA:DE:86:85:92:11:70:44:32:A8:19:B8:18:99:B6:0C:5D:3D:DE:8B Certificate issuer: /CN=A91A0432/serialNumber=EADE86859211704432A819B81899B60C5D3DDE8B Certificate serial: 0373 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6t6GhZIRcEQyqBm4GJm2DF093os.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.mft Manifest number: 0371 Signing time: Fri 25 Apr 2025 00:41:16 +0000 Manifest this update: Fri 25 Apr 2025 00:41:15 +0000 Manifest next update: Fri 02 May 2025 00:41:15 +0000 Files and hashes: 1: 6t6GhZIRcEQyqBm4GJm2DF093os.crl (hash: yBSidqL5EJB5pPHon7ntO+fo+8IFIYsmnRnIsxHz+4U=) 2: 7185135A61AE11EEA6D61C37C4F9AE02.roa (hash: UHVSesVCfWDMX6Rqc2a1Y5ozgn2h4LiLzFeoFn9E+ys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.crl rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6t6GhZIRcEQyqBm4GJm2DF093os.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:41:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 883 (0x373) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0432, serialNumber=EADE86859211704432A819B81899B60C5D3DDE8B Validity Not Before: Apr 25 00:41:15 2025 GMT Not After : May 2 00:41:15 2025 GMT Subject: CN=680ada2b-3e31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:02:0c:b2:4d:13:82:cb:37:a3:99:91:67:80: 37:37:9d:bd:f5:c7:09:8d:7b:64:4a:39:25:17:6c: 44:64:f9:c5:e2:cd:e5:18:25:31:4a:1d:a8:43:d9: 6e:c1:aa:ed:c4:88:a4:57:da:06:8f:c9:21:e4:d7: 42:95:a5:4e:c6:16:9c:4f:13:ba:3c:19:8a:f1:5c: 5c:a7:70:78:ed:f6:4a:92:18:55:76:53:0a:75:c3: ee:e3:a4:d2:94:85:4b:56:30:9d:db:a5:8e:a2:9b: 6e:a3:1a:11:f4:f9:22:6c:b7:e9:28:d9:0a:2e:5f: 7d:15:ef:34:9f:5f:fd:9b:b6:9b:05:b0:12:a5:01: 7a:b0:55:5b:27:e7:8c:c3:4b:23:1a:2b:7d:0d:04: 9d:17:89:fb:54:99:81:19:a6:a8:63:5c:58:00:02: 87:55:50:cf:54:f2:0e:ff:d7:ff:83:75:ee:b6:97: 7e:fc:3d:d9:11:47:97:e5:f8:90:b8:ec:99:33:82: 44:16:43:29:b7:06:8a:75:2a:44:89:cd:2c:89:63: 85:31:e5:12:80:d4:a7:4a:cb:8f:d3:01:f4:81:a0: 5f:84:97:db:cc:04:2b:58:fd:ce:d1:68:d0:2f:89: a5:11:3d:b5:38:52:c4:06:66:d9:ec:86:92:f2:05: 60:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:7F:74:52:5F:CF:0E:D0:D7:B8:0C:AB:98:62:C7:68:08:79:78:7E X509v3 Authority Key Identifier: keyid:EA:DE:86:85:92:11:70:44:32:A8:19:B8:18:99:B6:0C:5D:3D:DE:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6t6GhZIRcEQyqBm4GJm2DF093os.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:89:23:56:ff:9c:0e:7f:83:1a:83:91:52:4c:73:9e:3e:31: 01:43:44:df:3b:4e:98:01:a0:a4:d2:48:75:00:c2:41:61:f8: 6a:7f:f7:91:fa:6b:67:71:1e:5d:cf:78:fb:34:2a:81:65:7c: 4c:aa:69:3d:e1:73:0e:a5:02:c1:31:70:36:64:f4:c7:a5:ca: bc:8b:5f:3f:37:d1:a3:85:e5:e3:8c:5b:6f:2a:19:cc:e8:01: b4:7b:e9:c8:8f:fc:a5:45:57:c3:f8:3a:ec:a3:00:25:e6:c6: c2:b4:9f:d8:eb:eb:ca:13:ee:d5:f7:84:03:25:91:ff:a4:ce: 1e:24:c1:31:2b:f4:c6:d9:19:76:fb:6e:db:5b:5d:cc:e8:84: 80:fb:19:1e:7b:70:51:30:fc:0b:de:aa:f7:b6:4c:0e:a5:a4: 6e:6d:ad:15:53:44:43:11:bb:32:de:4b:f8:09:a4:4f:ab:c1: b8:3c:7b:4a:f0:c4:39:db:ad:0f:57:af:0e:cc:69:05:02:52: 62:34:d3:15:20:9b:8d:c4:4e:fa:47:9b:e1:30:1a:14:c2:c8: e3:35:3e:a9:d1:48:0f:98:ce:02:0b:2b:b6:ae:df:bb:ef:58: 7f:12:bf:0c:00:ff:b4:0b:62:f0:bf:13:23:74:9a:e8:42:3f: 6c:ad:8c:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA0MzIxMTAvBgNVBAUTKEVBREU4Njg1OTIxMTcwNDQzMkE4MTlCODE4OTlCNjBD NUQzRERFOEIwHhcNMjUwNDI1MDA0MTE1WhcNMjUwNTAyMDA0MTE1WjAYMRYwFAYD VQQDEw02ODBhZGEyYi0zZTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxQIMsk0Tgss3o5mRZ4A3N5299ccJjXtkSjklF2xEZPnF4s3lGCUxSh2oQ9lu wartxIikV9oGj8kh5NdClaVOxhacTxO6PBmK8Vxcp3B47fZKkhhVdlMKdcPu46TS lIVLVjCd26WOoptuoxoR9PkibLfpKNkKLl99Fe80n1/9m7abBbASpQF6sFVbJ+eM w0sjGit9DQSdF4n7VJmBGaaoY1xYAAKHVVDPVPIO/9f/g3Xutpd+/D3ZEUeX5fiQ uOyZM4JEFkMptwaKdSpEic0siWOFMeUSgNSnSsuP0wH0gaBfhJfbzAQrWP3O0WjQ L4mlET21OFLEBmbZ7IaS8gVgiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCR/dFJf zw7Q17gMq5hix2gIeXh+MB8GA1UdIwQYMBaAFOrehoWSEXBEMqgZuBiZtgxdPd6L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDQzMi9FQzY5MkYwNEE0 Q0ExMUVDQUM0RTU3NDRDNEY5QUUwMi82dDZHaFpJUmNFUXlxQm00R0ptMkRGMDkz b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzZ0NkdoWklSY0VReXFCbTRHSm0yREYwOTNvcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDQzMi9FQzY5MkYwNEE0Q0ExMUVDQUM0RTU3NDRDNEY5QUUwMi82dDZHaFpJUmNF UXlxQm00R0ptMkRGMDkzb3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBliSNW/5wOf4Mag5FSTHOePjEBQ0TfO06YAaCk0kh1AMJBYfhqf/eR +mtncR5dz3j7NCqBZXxMqmk94XMOpQLBMXA2ZPTHpcq8i18/N9GjheXjjFtvKhnM 6AG0e+nIj/ylRVfD+DrsowAl5sbCtJ/Y6+vKE+7V94QDJZH/pM4eJMExK/TG2Rl2 +27bW13M6ISA+xkee3BRMPwL3qr3tkwOpaRuba0VU0RDEbsy3kv4CaRPq8G4PHtK 8MQ5260PV68OzGkFAlJiNNMVIJuNxE76R5vhMBoUwsjjNT6p0UgPmM4CCyu2rt+7 71h/Er8MAP+0C2LwvxMjdJroQj9srYzk -----END CERTIFICATE-----Generated at Sat Apr 26 16:35:01 2025 by rpki-client