$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF119/94A29734092211EEB977066CC4F9AE02/6wr0cxLfFL-ROszd3wzcPTwV6mA.mft File: 6wr0cxLfFL-ROszd3wzcPTwV6mA.mft (raw, json) Hash identifier: mD15jWw2hgsxXWEZr/cVuiSyO8cN9eusfcBtYWGxgJM= Subject key identifier: 68:9E:E4:ED:23:29:6F:4F:05:02:48:E2:52:16:9B:5A:C1:C0:41:98 Authority key identifier: EB:0A:F4:73:12:DF:14:BF:91:3A:CC:DD:DF:0C:DC:3D:3C:15:EA:60 Certificate issuer: /CN=A91BF119/serialNumber=EB0AF47312DF14BF913ACCDDDF0CDC3D3C15EA60 Certificate serial: 015F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wr0cxLfFL-ROszd3wzcPTwV6mA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF119/94A29734092211EEB977066CC4F9AE02/6wr0cxLfFL-ROszd3wzcPTwV6mA.mft Manifest number: 015D Signing time: Fri 25 Apr 2025 03:07:28 +0000 Manifest this update: Fri 25 Apr 2025 03:07:28 +0000 Manifest next update: Fri 02 May 2025 03:07:28 +0000 Files and hashes: 1: 6wr0cxLfFL-ROszd3wzcPTwV6mA.crl (hash: ULjwSXW+F5LOqZ08tP1xJWzQpw7kTwwA7z+2u5seXYA=) 2: F08468EC092811EEA1BB7E73C4F9AE02.roa (hash: Z0x9gKKWkBDw1Tx7of4gTQlpFQmH8Y2i25AcvLifNqk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF119/94A29734092211EEB977066CC4F9AE02/6wr0cxLfFL-ROszd3wzcPTwV6mA.crl rsync://rpki.apnic.net/member_repository/A91BF119/94A29734092211EEB977066CC4F9AE02/6wr0cxLfFL-ROszd3wzcPTwV6mA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wr0cxLfFL-ROszd3wzcPTwV6mA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:07:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 351 (0x15f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF119, serialNumber=EB0AF47312DF14BF913ACCDDDF0CDC3D3C15EA60 Validity Not Before: Apr 25 03:07:28 2025 GMT Not After : May 2 03:07:28 2025 GMT Subject: CN=680afc70-957c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e5:76:d4:6a:a8:e2:26:eb:09:c4:8d:57:3e: 6f:e2:d8:53:2b:9c:b6:97:9a:b9:3f:ca:59:c9:7c: 4d:6b:0f:e3:57:b2:07:9d:58:cf:81:80:2b:c4:5b: ba:d0:42:02:7e:cd:4d:e1:03:df:e1:67:1d:75:49: 8d:26:27:f9:05:89:69:ab:89:8c:54:5c:f4:e0:18: 75:cc:1a:9b:a8:9a:94:b0:4f:de:51:49:e4:c1:6d: 51:f8:ad:d4:8c:70:1a:bc:57:cf:a8:c9:98:d9:81: a7:3b:9d:d1:18:be:9f:20:84:8f:66:af:cf:ef:08: d5:52:59:70:e0:a4:1e:f1:3b:96:65:14:17:fd:76: f5:06:25:98:e2:1d:f3:1b:d8:b4:ef:32:4f:eb:74: 6a:47:fe:d2:57:b0:96:1a:75:42:d9:fc:4a:42:6d: 2c:61:f0:e4:ad:27:85:6b:08:b4:b5:a8:e2:14:ee: 94:a2:36:81:7d:c0:09:50:7b:9a:71:9c:b8:1d:53: 20:f4:3b:72:8e:61:f3:d2:bc:6b:74:62:5f:c9:47: 15:3c:09:c8:28:e2:19:22:39:dc:41:46:37:48:10: a5:c2:05:88:24:82:f4:4c:e4:6a:f3:e4:93:95:1c: 9b:5e:ad:27:9b:28:9c:6a:de:64:83:68:15:f7:5d: 13:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:9E:E4:ED:23:29:6F:4F:05:02:48:E2:52:16:9B:5A:C1:C0:41:98 X509v3 Authority Key Identifier: keyid:EB:0A:F4:73:12:DF:14:BF:91:3A:CC:DD:DF:0C:DC:3D:3C:15:EA:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF119/94A29734092211EEB977066CC4F9AE02/6wr0cxLfFL-ROszd3wzcPTwV6mA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wr0cxLfFL-ROszd3wzcPTwV6mA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF119/94A29734092211EEB977066CC4F9AE02/6wr0cxLfFL-ROszd3wzcPTwV6mA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:14:20:14:a3:9a:5c:09:18:c3:b2:49:96:3f:12:b8:aa:f0: 0b:e3:1a:bb:1f:19:db:76:7e:30:ca:f6:bb:ea:84:b0:a4:ae: b6:f6:0c:4d:c4:7c:eb:c6:e2:32:77:d5:f6:fa:cb:f1:fb:28: 08:43:fd:ee:50:24:8d:90:cb:16:59:70:be:b1:f6:97:b6:93: f0:cf:63:28:fd:e5:ef:7f:ef:68:95:a2:33:75:66:76:69:a6: c1:58:d0:af:ec:36:d1:83:e7:5a:9c:25:21:cf:ad:05:f2:9b: dc:4f:26:a6:3b:8e:14:8e:ff:e0:fc:3f:1a:81:5a:c5:3a:8a: 29:6c:c3:9e:4a:e2:74:1b:5d:0f:5b:41:dd:1a:ef:2b:6a:23: f6:14:3a:c6:7d:1e:16:9a:b3:c3:fc:ff:5c:1b:ec:41:0c:27: 3c:01:47:71:57:95:71:48:a9:1e:95:be:ec:82:91:08:a4:4c: 29:15:e5:1a:83:0f:a5:54:65:e2:94:a7:11:00:e9:15:59:07: 51:f7:11:39:9a:5f:c1:7f:2b:94:72:1d:38:2c:52:3a:a8:a2: e1:c1:e0:c9:78:74:ff:3e:4e:96:a4:01:6d:00:6d:25:55:2b: 2e:87:03:13:42:eb:59:13:c3:6c:02:25:a9:2d:da:03:29:9f: 3f:d3:11:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYxMTkxMTAvBgNVBAUTKEVCMEFGNDczMTJERjE0QkY5MTNBQ0NERERGMENEQzNE M0MxNUVBNjAwHhcNMjUwNDI1MDMwNzI4WhcNMjUwNTAyMDMwNzI4WjAYMRYwFAYD VQQDEw02ODBhZmM3MC05NTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuOV21Gqo4ibrCcSNVz5v4thTK5y2l5q5P8pZyXxNaw/jV7IHnVjPgYArxFu6 0EICfs1N4QPf4WcddUmNJif5BYlpq4mMVFz04Bh1zBqbqJqUsE/eUUnkwW1R+K3U jHAavFfPqMmY2YGnO53RGL6fIISPZq/P7wjVUllw4KQe8TuWZRQX/Xb1BiWY4h3z G9i07zJP63RqR/7SV7CWGnVC2fxKQm0sYfDkrSeFawi0tajiFO6UojaBfcAJUHua cZy4HVMg9DtyjmHz0rxrdGJfyUcVPAnIKOIZIjncQUY3SBClwgWIJIL0TORq8+ST lRybXq0nmyicat5kg2gV910THQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGie5O0j KW9PBQJI4lIWm1rBwEGYMB8GA1UdIwQYMBaAFOsK9HMS3xS/kTrM3d8M3D08Fepg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjExOS85NEEyOTczNDA5 MjIxMUVFQjk3NzA2NkNDNEY5QUUwMi82d3IwY3hMZkZMLVJPc3pkM3d6Y1BUd1Y2 bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ3cjBjeExmRkwtUk9zemQzd3pjUFR3VjZtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjExOS85NEEyOTczNDA5MjIxMUVFQjk3NzA2NkNDNEY5QUUwMi82d3IwY3hMZkZM LVJPc3pkM3d6Y1BUd1Y2bUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDXFCAUo5pcCRjDskmWPxK4qvAL4xq7Hxnbdn4wyva76oSwpK629gxN xHzrxuIyd9X2+svx+ygIQ/3uUCSNkMsWWXC+sfaXtpPwz2Mo/eXvf+9olaIzdWZ2 aabBWNCv7DbRg+danCUhz60F8pvcTyamO44Ujv/g/D8agVrFOoopbMOeSuJ0G10P W0HdGu8raiP2FDrGfR4WmrPD/P9cG+xBDCc8AUdxV5VxSKkelb7sgpEIpEwpFeUa gw+lVGXilKcRAOkVWQdR9xE5ml/BfyuUch04LFI6qKLhweDJeHT/Pk6WpAFtAG0l VSsuhwMTQutZE8NsAiWpLdoDKZ8/0xFb -----END CERTIFICATE-----Generated at Sat Apr 26 13:01:14 2025 by rpki-client