$ rpki-client -vvf rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.mft File: 6ysMa5yLfwlHcYJnRq99Rg7cR6o.mft (raw, json) Hash identifier: 06reQ7wBin8iGHsTV8BYchetMMFfilvSHOMIwjakT6c= Subject key identifier: B0:BA:1F:84:1D:6F:E9:7C:84:9E:BA:9C:6B:A2:4E:CA:D5:CB:4A:06 Authority key identifier: EB:2B:0C:6B:9C:8B:7F:09:47:71:82:67:46:AF:7D:46:0E:DC:47:AA Certificate issuer: /CN=A91A13C2/serialNumber=EB2B0C6B9C8B7F094771826746AF7D460EDC47AA Certificate serial: 04AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ysMa5yLfwlHcYJnRq99Rg7cR6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.mft Manifest number: 04A5 Signing time: Thu 24 Apr 2025 23:43:11 +0000 Manifest this update: Thu 24 Apr 2025 23:43:10 +0000 Manifest next update: Thu 01 May 2025 23:43:10 +0000 Files and hashes: 1: 6ysMa5yLfwlHcYJnRq99Rg7cR6o.crl (hash: 9SXdPrPSFa3b6RvoWdpAIb/+YOL2ftd4yeUsarX/SBs=) 2: A231B9362CEA11EC8F99F486C4F9AE02.roa (hash: 8LKcnydJB5oW4TBJzLAGx/1DAq+7TANc8tWAErbpeDg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.crl rsync://rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ysMa5yLfwlHcYJnRq99Rg7cR6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:43:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1194 (0x4aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A13C2, serialNumber=EB2B0C6B9C8B7F094771826746AF7D460EDC47AA Validity Not Before: Apr 24 23:43:10 2025 GMT Not After : May 1 23:43:10 2025 GMT Subject: CN=680acc8e-848b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7d:6b:54:11:71:c0:bb:28:09:e0:53:26:25: 3d:cf:d0:9b:af:3f:95:e2:fa:98:ab:4f:ea:20:85: e0:45:88:79:5f:c7:fa:42:20:2d:f9:35:ec:49:2e: b8:31:5d:d8:5d:c2:5c:c0:b6:ef:d9:00:b0:5c:43: f8:c0:18:db:84:f3:57:a2:be:ef:33:a5:b4:35:63: 5d:8f:8b:74:0c:a8:ef:4f:4e:6e:9c:47:ff:28:32: 22:9f:76:44:52:b4:5a:85:3e:55:52:fc:b9:53:b6: 82:9d:52:b9:d8:36:85:4a:e8:2e:ab:ff:eb:e6:26: 52:2c:c5:64:94:99:c8:5c:87:ee:0c:04:bc:7a:e9: e4:ff:b4:ec:ca:cf:5b:c5:ed:fa:da:9d:3f:d8:3d: 9c:38:f1:a9:db:81:b9:2e:ed:c1:4e:38:db:eb:9d: 06:43:58:52:37:f5:c1:07:9d:73:29:43:d1:d2:9d: 73:49:7a:7b:d9:ee:f2:7b:07:fd:20:47:66:5f:e2: d9:43:8d:5d:cf:52:bc:81:0f:c3:5e:64:e4:59:35: e9:1c:13:bb:a1:dc:29:3d:63:ac:af:f7:c5:2c:1b: ef:ba:ce:3b:9b:4d:05:b9:ab:1f:b9:45:17:5d:04: 37:17:d5:86:75:63:8d:e1:c8:e1:13:13:26:0c:9d: a8:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:BA:1F:84:1D:6F:E9:7C:84:9E:BA:9C:6B:A2:4E:CA:D5:CB:4A:06 X509v3 Authority Key Identifier: keyid:EB:2B:0C:6B:9C:8B:7F:09:47:71:82:67:46:AF:7D:46:0E:DC:47:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ysMa5yLfwlHcYJnRq99Rg7cR6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:15:b5:9c:cb:ba:b1:f4:1c:9c:e4:cd:94:5d:d5:03:d0:0a: d6:d2:ce:49:f5:32:1d:61:58:d1:df:f6:f0:90:23:63:fa:1d: ef:f8:f2:56:5c:6c:72:0a:fc:90:66:08:7e:c8:54:b9:5b:9a: f5:4c:00:14:f0:1d:a2:18:48:4c:a3:26:20:db:bc:38:d8:bd: 2a:5a:3b:86:cf:a9:f2:ac:7b:af:66:d5:83:57:97:8f:9d:8c: 36:82:97:f6:79:4d:d7:83:d4:8c:33:83:a1:08:43:7e:32:69: 1c:64:e7:80:de:af:ce:fa:22:8d:b8:1e:2f:ea:04:ca:93:38: 63:fd:0b:0b:de:db:95:72:6a:e1:c6:a1:e0:fb:d5:65:60:56: 5c:e5:5c:05:af:c3:80:c5:3f:b4:11:e4:e0:c7:49:7f:85:3d: 60:d2:07:b3:d2:41:9c:62:94:65:1b:3f:ff:0b:8a:a5:c8:f1: e6:cc:4d:2a:d0:3a:0e:58:58:ed:49:28:0c:1c:6d:e2:34:61: c4:06:15:a0:c4:ce:66:df:71:98:fa:25:55:e6:22:18:61:f0: 59:1a:9e:b4:64:a5:da:c5:81:7b:80:6d:78:a5:4f:8e:6d:d2: d1:38:e5:f6:d2:df:c6:32:93:52:05:91:32:80:52:1a:93:b9: 0f:ce:f2:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTEzQzIxMTAvBgNVBAUTKEVCMkIwQzZCOUM4QjdGMDk0NzcxODI2NzQ2QUY3RDQ2 MEVEQzQ3QUEwHhcNMjUwNDI0MjM0MzEwWhcNMjUwNTAxMjM0MzEwWjAYMRYwFAYD VQQDEw02ODBhY2M4ZS04NDhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqX1rVBFxwLsoCeBTJiU9z9Cbrz+V4vqYq0/qIIXgRYh5X8f6QiAt+TXsSS64 MV3YXcJcwLbv2QCwXEP4wBjbhPNXor7vM6W0NWNdj4t0DKjvT05unEf/KDIin3ZE UrRahT5VUvy5U7aCnVK52DaFSuguq//r5iZSLMVklJnIXIfuDAS8eunk/7Tsys9b xe362p0/2D2cOPGp24G5Lu3BTjjb650GQ1hSN/XBB51zKUPR0p1zSXp72e7yewf9 IEdmX+LZQ41dz1K8gQ/DXmTkWTXpHBO7odwpPWOsr/fFLBvvus47m00FuasfuUUX XQQ3F9WGdWON4cjhExMmDJ2ocQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLC6H4Qd b+l8hJ66nGuiTsrVy0oGMB8GA1UdIwQYMBaAFOsrDGuci38JR3GCZ0avfUYO3Eeq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTNDMi81QUY3RkQ3NjJD RTcxMUVDODcxQTA2NjBDNEY5QUUwMi82eXNNYTV5TGZ3bEhjWUpuUnE5OVJnN2NS Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ5c01hNXlMZndsSGNZSm5ScTk5Umc3Y1I2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTNDMi81QUY3RkQ3NjJDRTcxMUVDODcxQTA2NjBDNEY5QUUwMi82eXNNYTV5TGZ3 bEhjWUpuUnE5OVJnN2NSNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7FbWcy7qx9Byc5M2UXdUD0ArW0s5J9TIdYVjR3/bwkCNj+h3v+PJW XGxyCvyQZgh+yFS5W5r1TAAU8B2iGEhMoyYg27w42L0qWjuGz6nyrHuvZtWDV5eP nYw2gpf2eU3Xg9SMM4OhCEN+MmkcZOeA3q/O+iKNuB4v6gTKkzhj/QsL3tuVcmrh xqHg+9VlYFZc5VwFr8OAxT+0EeTgx0l/hT1g0gez0kGcYpRlGz//C4qlyPHmzE0q 0DoOWFjtSSgMHG3iNGHEBhWgxM5m33GY+iVV5iIYYfBZGp60ZKXaxYF7gG14pU+O bdLROOX20t/GMpNSBZEygFIak7kPzvKN -----END CERTIFICATE-----Generated at Sat Apr 26 14:59:28 2025 by rpki-client