$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft File: 6HFyjDosJtDmCABLp9Hlo1gwlWw.mft (raw, json) Hash identifier: eWEx6OGxbJIqAo00zlgAeVG8aFp1DzfEXs93fA0KF8s= Subject key identifier: E4:A4:56:55:B9:FB:98:91:22:EE:BA:47:26:A9:81:43:8A:AF:49:F4 Authority key identifier: E8:71:72:8C:3A:2C:26:D0:E6:08:00:4B:A7:D1:E5:A3:58:30:95:6C Certificate issuer: /CN=A91E6EFE/serialNumber=E871728C3A2C26D0E608004BA7D1E5A35830956C Certificate serial: 01CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HFyjDosJtDmCABLp9Hlo1gwlWw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft Manifest number: 01C7 Signing time: Fri 25 Apr 2025 02:08:26 +0000 Manifest this update: Fri 25 Apr 2025 02:08:25 +0000 Manifest next update: Fri 02 May 2025 02:08:25 +0000 Files and hashes: 1: 6HFyjDosJtDmCABLp9Hlo1gwlWw.crl (hash: eoQ2ir2VTohbfjj/QRBQl6rQM9V1zUbRnPo/xILnmws=) 2: 8367C13A6CA411ED9DD6425CC4F9AE02.roa (hash: epEQzlTejdqNKSVjeWewYuMv5R1UDEWC39y/ho6SoUA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.crl rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HFyjDosJtDmCABLp9Hlo1gwlWw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:08:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 459 (0x1cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6EFE, serialNumber=E871728C3A2C26D0E608004BA7D1E5A35830956C Validity Not Before: Apr 25 02:08:25 2025 GMT Not After : May 2 02:08:25 2025 GMT Subject: CN=680aee9a-00a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8d:f5:93:77:ac:e1:29:a6:5d:a8:c2:57:de: 22:e6:b0:70:1f:b1:78:b3:b1:89:01:bf:43:72:51: 98:b4:01:f6:20:bb:4f:0f:e2:5b:87:17:9c:44:cc: ec:c2:72:04:20:e6:c9:5a:ad:4f:2f:38:44:3c:5d: 45:64:48:67:c9:ae:4b:50:52:cd:f8:c4:e3:0e:ea: 61:f7:9e:9c:ad:af:ff:19:71:fb:5b:36:28:97:21: d4:1d:1c:db:82:41:1e:63:aa:c2:96:6f:49:ee:7e: 91:ec:ad:e7:17:29:12:68:3a:10:57:6b:41:04:ed: 4a:37:eb:34:ba:a9:b2:2e:7e:72:4f:2d:01:2f:59: fb:32:e0:0f:b8:bf:62:e8:8c:bd:82:fb:f2:3f:e4: 4d:d7:40:c1:dc:44:eb:06:e7:4c:dc:23:ea:c1:7b: 6c:6f:fb:8d:b8:cf:87:8e:12:6d:bd:7c:49:a3:b9: 7b:28:9c:50:06:d3:a9:3a:11:8c:21:79:f4:53:74: 8d:77:88:19:63:87:47:3a:a6:1b:e5:5e:5b:fc:3f: 0e:27:17:b9:9a:ce:b0:31:9a:3d:97:07:27:5a:72: 56:13:de:4b:d5:b1:72:9b:50:40:37:da:40:ff:6a: 92:45:e9:b1:c5:af:84:30:bb:33:23:17:00:14:ca: cd:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:A4:56:55:B9:FB:98:91:22:EE:BA:47:26:A9:81:43:8A:AF:49:F4 X509v3 Authority Key Identifier: keyid:E8:71:72:8C:3A:2C:26:D0:E6:08:00:4B:A7:D1:E5:A3:58:30:95:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HFyjDosJtDmCABLp9Hlo1gwlWw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:59:5f:5e:dd:71:cd:67:60:04:e1:16:6c:1b:a6:be:44:6c: 7e:42:70:2a:48:53:c7:fb:3a:c4:55:94:44:09:83:fd:88:e1: 79:74:85:84:4f:fc:0f:5e:19:1e:d3:69:7b:18:fd:aa:65:34: 03:01:f7:0a:55:c3:a3:b6:cf:fc:19:b9:98:7d:4c:56:c8:63: 48:9a:9e:91:dd:dc:55:4a:35:7c:55:53:3c:68:83:c8:55:37: 90:b4:46:4f:57:dd:51:15:b8:d4:b0:9b:d9:02:e7:1b:49:ae: e7:63:c6:73:3d:5d:0e:a5:dd:b4:ba:85:e5:63:41:ea:8b:19: 9f:bd:2d:a9:2e:b8:57:44:f1:93:91:0f:3f:3e:69:4f:98:6c: 01:86:a0:30:ef:1d:29:a2:1c:d3:3b:39:c9:fd:4d:cb:db:29: 89:d1:c6:89:ff:81:b8:f6:f1:77:3d:7b:e4:b2:7f:c4:9b:0c: 76:3c:2b:5a:98:8d:87:c1:6c:2a:48:0f:1d:f4:4d:6e:6d:7b: c5:46:a8:ac:91:8b:49:d6:b5:b4:8b:2f:ed:4f:35:c6:86:98: 50:29:99:c8:31:2e:33:47:c0:31:bc:6f:c1:c3:8d:bd:0b:6a: ec:1a:72:43:9f:4d:3e:5d:ab:ea:88:64:1d:68:b2:84:fb:7f: 4e:70:77:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZFRkUxMTAvBgNVBAUTKEU4NzE3MjhDM0EyQzI2RDBFNjA4MDA0QkE3RDFFNUEz NTgzMDk1NkMwHhcNMjUwNDI1MDIwODI1WhcNMjUwNTAyMDIwODI1WjAYMRYwFAYD VQQDEw02ODBhZWU5YS0wMGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl431k3es4SmmXajCV94i5rBwH7F4s7GJAb9DclGYtAH2ILtPD+JbhxecRMzs wnIEIObJWq1PLzhEPF1FZEhnya5LUFLN+MTjDuph956cra//GXH7WzYolyHUHRzb gkEeY6rClm9J7n6R7K3nFykSaDoQV2tBBO1KN+s0uqmyLn5yTy0BL1n7MuAPuL9i 6Iy9gvvyP+RN10DB3ETrBudM3CPqwXtsb/uNuM+HjhJtvXxJo7l7KJxQBtOpOhGM IXn0U3SNd4gZY4dHOqYb5V5b/D8OJxe5ms6wMZo9lwcnWnJWE95L1bFym1BAN9pA /2qSRemxxa+EMLszIxcAFMrN+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOSkVlW5 +5iRIu66RyapgUOKr0n0MB8GA1UdIwQYMBaAFOhxcow6LCbQ5ggAS6fR5aNYMJVs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkVGRS9FNEMwMEQzQzZD QTExMUVEQjQ0RTc2NUJDNEY5QUUwMi82SEZ5akRvc0p0RG1DQUJMcDlIbG8xZ3ds V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZIRnlqRG9zSnREbUNBQkxwOUhsbzFnd2xXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkVGRS9FNEMwMEQzQzZDQTExMUVEQjQ0RTc2NUJDNEY5QUUwMi82SEZ5akRvc0p0 RG1DQUJMcDlIbG8xZ3dsV3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFWV9e3XHNZ2AE4RZsG6a+RGx+QnAqSFPH+zrEVZRECYP9iOF5dIWE T/wPXhke02l7GP2qZTQDAfcKVcOjts/8GbmYfUxWyGNImp6R3dxVSjV8VVM8aIPI VTeQtEZPV91RFbjUsJvZAucbSa7nY8ZzPV0Opd20uoXlY0HqixmfvS2pLrhXRPGT kQ8/PmlPmGwBhqAw7x0pohzTOznJ/U3L2ymJ0caJ/4G49vF3PXvksn/Emwx2PCta mI2HwWwqSA8d9E1ubXvFRqiskYtJ1rW0iy/tTzXGhphQKZnIMS4zR8AxvG/Bw429 C2rsGnJDn00+XavqiGQdaLKE+39OcHc7 -----END CERTIFICATE-----Generated at Sat Apr 26 14:07:57 2025 by rpki-client