$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.mft File: 6kGaeWKZYloHSmW3ys7_GLgGbIs.mft (raw, json) Hash identifier: V71vocW+ZPFbny5rL6Fz2Qumg/zMtRzq7hG8YX9fYKI= Subject key identifier: F1:3D:88:FF:06:27:0A:79:C4:86:4D:86:A8:C1:BC:F1:1D:4D:59:48 Authority key identifier: EA:41:9A:79:62:99:62:5A:07:4A:65:B7:CA:CE:FF:18:B8:06:6C:8B Certificate issuer: /CN=A91BEBB1/serialNumber=EA419A796299625A074A65B7CACEFF18B8066C8B Certificate serial: 01DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6kGaeWKZYloHSmW3ys7_GLgGbIs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.mft Manifest number: 01D7 Signing time: Fri 25 Apr 2025 01:58:36 +0000 Manifest this update: Fri 25 Apr 2025 01:58:35 +0000 Manifest next update: Fri 02 May 2025 01:58:35 +0000 Files and hashes: 1: 6kGaeWKZYloHSmW3ys7_GLgGbIs.crl (hash: mSZVx97sB3vE09prD6k1JDePTzLqIdCFlgsY0SZXMDU=) 2: 8CD5FC2253A011EDAC40531BC4F9AE02.roa (hash: IlKGwFHV9ZEo1VbyiGg5B3egdFnPmqfH6pmscMBr3y0=) 3: FEDE61B6ED2C11EEBF8F3E49C4F9AE02.roa (hash: ceGnF1r8IOwVE50G1+2RnDibZLWap/obpLcH2ZWlhhY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.crl rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6kGaeWKZYloHSmW3ys7_GLgGbIs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 476 (0x1dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEBB1, serialNumber=EA419A796299625A074A65B7CACEFF18B8066C8B Validity Not Before: Apr 25 01:58:35 2025 GMT Not After : May 2 01:58:35 2025 GMT Subject: CN=680aec4c-819a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3b:d4:aa:8b:93:6c:85:1e:6d:a2:28:59:8f: 2f:39:fe:9c:ac:d1:6b:33:72:1f:cd:e5:18:9a:97: fb:64:7b:f5:c0:db:66:c7:1e:5c:10:0b:51:e2:6b: 5b:28:8a:8d:52:ae:0a:90:f5:55:8a:b8:9c:3f:4a: f8:4b:39:b6:59:25:bd:78:7c:07:fc:b1:95:7d:24: ea:d5:d1:d6:87:75:3d:ce:95:ce:52:60:e1:ed:cf: a9:39:90:b9:84:e1:49:5b:a8:a6:2f:6b:32:c5:60: 5d:1b:e9:8a:72:32:be:d9:88:6b:b2:e4:ee:cd:f4: 43:e4:aa:bf:6c:78:e8:bb:9c:81:8d:fe:f8:a0:98: eb:bb:56:5e:86:be:36:47:1a:0d:79:4f:c4:5f:2f: ee:bb:f5:f3:fb:9f:d2:31:14:80:0f:ea:87:78:9e: b3:97:5a:96:52:63:78:a7:06:fb:bb:ea:3c:de:cd: 36:50:91:f4:4b:28:f6:29:74:fa:cf:8b:9d:c9:1e: 94:f8:a9:4d:aa:15:76:31:6d:b8:e6:4e:82:9e:20: a2:23:d7:53:fb:81:34:3a:2b:af:af:05:dd:77:20: 6f:7b:c5:e5:4a:bd:a9:b8:79:b2:f1:9b:87:e0:60: 19:17:56:15:27:e9:f6:3a:93:25:80:ee:2d:d8:58: 18:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:3D:88:FF:06:27:0A:79:C4:86:4D:86:A8:C1:BC:F1:1D:4D:59:48 X509v3 Authority Key Identifier: keyid:EA:41:9A:79:62:99:62:5A:07:4A:65:B7:CA:CE:FF:18:B8:06:6C:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6kGaeWKZYloHSmW3ys7_GLgGbIs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:7f:3f:fd:c9:fc:87:68:80:45:24:e5:d2:77:3b:72:fe:03: 2a:85:91:3d:44:93:06:d8:0c:56:00:b5:48:22:73:15:12:d5: 9b:ba:2d:1b:fc:32:f1:3f:f8:13:6d:ae:fa:34:d9:2d:c5:41: 61:70:3b:45:64:43:05:78:f0:f0:1c:3b:74:80:1a:e1:fa:53: bb:65:12:06:33:17:2e:05:a5:83:ff:f1:0e:17:0c:37:03:d7: fe:eb:c5:d8:07:35:f5:13:fe:d8:39:17:8d:07:69:e0:b4:f9: 7b:38:59:79:1c:2e:18:02:cf:4b:3c:8a:c5:66:12:b7:93:6f: e7:60:27:4d:67:b5:6d:1e:e1:41:f7:e1:06:cd:86:e3:a2:3e: b0:8c:6a:8b:bd:2d:82:78:1c:1d:30:3b:77:06:a9:ed:12:2d: 10:a4:08:ce:4d:ed:3f:7a:24:92:d7:64:26:1d:3b:0c:a8:35: 38:e9:3b:2d:5a:c7:f5:d4:d0:26:78:a0:ac:ba:7f:31:8a:14: 3e:b0:ee:ff:59:45:ce:70:20:79:2c:25:dc:08:88:62:a2:88: 42:72:9f:e3:92:ac:e3:f0:43:9f:43:a8:90:7e:1a:03:5a:74: 81:c0:75:50:68:d0:12:25:f3:ff:5e:14:f6:94:45:40:6f:8d: c3:e3:e4:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVCQjExMTAvBgNVBAUTKEVBNDE5QTc5NjI5OTYyNUEwNzRBNjVCN0NBQ0VGRjE4 QjgwNjZDOEIwHhcNMjUwNDI1MDE1ODM1WhcNMjUwNTAyMDE1ODM1WjAYMRYwFAYD VQQDEw02ODBhZWM0Yy04MTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0DvUqouTbIUebaIoWY8vOf6crNFrM3IfzeUYmpf7ZHv1wNtmxx5cEAtR4mtb KIqNUq4KkPVViricP0r4Szm2WSW9eHwH/LGVfSTq1dHWh3U9zpXOUmDh7c+pOZC5 hOFJW6imL2syxWBdG+mKcjK+2YhrsuTuzfRD5Kq/bHjou5yBjf74oJjru1Zehr42 RxoNeU/EXy/uu/Xz+5/SMRSAD+qHeJ6zl1qWUmN4pwb7u+o83s02UJH0Syj2KXT6 z4udyR6U+KlNqhV2MW245k6CniCiI9dT+4E0OiuvrwXddyBve8XlSr2puHmy8ZuH 4GAZF1YVJ+n2OpMlgO4t2FgYGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPE9iP8G Jwp5xIZNhqjBvPEdTVlIMB8GA1UdIwQYMBaAFOpBmnlimWJaB0plt8rO/xi4BmyL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUJCMS82N0JFQTQwNjUz OUMxMUVEQUUwMDRFMTdDNEY5QUUwMi82a0dhZVdLWllsb0hTbVczeXM3X0dMZ0di SXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZrR2FlV0taWWxvSFNtVzN5czdfR0xnR2JJcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUJCMS82N0JFQTQwNjUzOUMxMUVEQUUwMDRFMTdDNEY5QUUwMi82a0dhZVdLWlls b0hTbVczeXM3X0dMZ0diSXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCffz/9yfyHaIBFJOXSdzty/gMqhZE9RJMG2AxWALVIInMVEtWbui0b /DLxP/gTba76NNktxUFhcDtFZEMFePDwHDt0gBrh+lO7ZRIGMxcuBaWD//EOFww3 A9f+68XYBzX1E/7YOReNB2ngtPl7OFl5HC4YAs9LPIrFZhK3k2/nYCdNZ7VtHuFB 9+EGzYbjoj6wjGqLvS2CeBwdMDt3BqntEi0QpAjOTe0/eiSS12QmHTsMqDU46Tst Wsf11NAmeKCsun8xihQ+sO7/WUXOcCB5LCXcCIhioohCcp/jkqzj8EOfQ6iQfhoD WnSBwHVQaNASJfP/XhT2lEVAb43D4+Tw -----END CERTIFICATE-----Generated at Sat Apr 26 05:07:05 2025 by rpki-client