$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft File: lf6-k6M6M5S9H2Dcu925_eByt_M.mft (raw, json) Hash identifier: 9kYQW4lyz9xQNwcebAj4pcZIjw1Gk3xYAcOagCokxpw= Subject key identifier: 7C:4A:29:49:A1:E3:D6:4C:1C:4C:AC:5E:E0:DA:6E:DB:63:D2:FF:BB Authority key identifier: 95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3 Certificate issuer: /CN=A91EDB37/serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3 Certificate serial: 06DA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft Manifest number: 06A4 Signing time: Thu 24 Apr 2025 22:09:01 +0000 Manifest this update: Thu 24 Apr 2025 22:09:00 +0000 Manifest next update: Thu 01 May 2025 22:09:00 +0000 Files and hashes: 1: lf6-k6M6M5S9H2Dcu925_eByt_M.crl (hash: SvmGloiFrAcgws8Qt5pQmOOJDhvfHNLXGpxc3TAbx24=) 2: B32F80267BD111EBBB223C84C4F9AE02.roa (hash: mPpYGvQN+wpRgi56Nz1t/GvnvyaevPD3ibKv5vGoibA=) 3: 18D6D6AAB84F11EFA5BB3E78C4F9AE02.roa (hash: 6PYoBk6/FVHAdrrxpSIqCkv9HzmickfL2Dbl1yj4CUE=) 4: 15F254A8090211EEA1C06509C4F9AE02.roa (hash: hlWFyRUgGW1LDPVT2fvGX7ZTjObEtG9lX8JYZedFnkg=) 5: 15434774090211EEA1C06509C4F9AE02.roa (hash: zYMvH0bozAXHYXp1gy3dgag6JI6cAqoQfJxD1+5vnXk=) 6: A95180F2D7DA11ECB3D1AF67C4F9AE02.roa (hash: Q72iVEgncsp2lLSVgYTmWchv3C8JihagPip5Niim/gg=) 7: A45471ACC4ED11EE8A67C739C4F9AE02.roa (hash: hCvW/bIIT6VEr19d5xgLwhdssdkrsXh540frjC0/Ghg=) 8: FD6881C4438111ECBC63AC7BC4F9AE02.roa (hash: MC4D1jZCDOy7Yvm2TDa24wglg9YglvTc3EwelKavrSE=) 9: 8353BEA4F88211EEA770C016C4F9AE02.roa (hash: 46VM8I2pWnR3hV2SSnJ5PNhoRgQQwmH+XQIgWQ1aJ7U=) 10: 168FD534090211EEA1C06509C4F9AE02.roa (hash: DiDcYvq7OTLPfptklNaitiQoU1f3iwa59I66Hcfla2Y=) 11: 505CFB7465D211EFB4348E63C4F9AE02.roa (hash: teElfUQdL+ekEfll1vyTwU0zYIBH5IlNuT4o6J5+ShE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:09:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1754 (0x6da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDB37, serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3 Validity Not Before: Apr 24 22:09:00 2025 GMT Not After : May 1 22:09:00 2025 GMT Subject: CN=680ab67d-17f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:90:da:21:b6:d5:13:cf:8d:56:57:dc:60:9d: cc:a0:71:92:bb:91:f5:04:2d:18:45:e0:e3:cc:c5: ed:ce:39:42:d6:94:e2:b3:e5:57:fc:82:97:08:fc: 17:a1:f5:86:68:39:07:af:47:d4:64:4a:07:9a:21: 9d:de:b3:35:df:2f:cf:76:81:79:25:d7:dd:db:9e: 74:d7:ad:69:4f:86:64:90:80:80:a6:93:e2:b5:aa: 53:3d:03:cc:f7:b1:b4:d0:0c:f7:36:dc:88:bb:a1: c1:34:dd:34:d4:67:53:b3:2b:40:d9:6e:2e:b2:58: 9c:46:da:37:89:69:9e:cd:32:72:ce:d7:1e:13:9c: 07:2b:62:9b:c1:df:b0:64:5a:a4:18:c4:a5:b2:e3: 19:2c:68:a6:01:d8:35:82:d4:96:6c:ac:57:68:1c: 2f:01:2d:5e:8a:ff:1a:f9:85:4d:f3:df:04:11:c8: 7b:ae:ce:e4:81:a7:a1:0d:54:26:d6:bf:78:26:e7: e0:d8:48:80:a5:2b:00:34:65:5f:b2:ad:ef:53:6c: 03:61:c7:39:b9:5a:1a:a7:94:e3:f3:9b:c2:c4:76: 4a:6d:4a:dc:6c:6a:d1:1d:90:d9:b5:de:23:d3:eb: 28:45:d8:08:a5:c4:e7:66:df:47:32:6d:ce:ec:ef: b7:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:4A:29:49:A1:E3:D6:4C:1C:4C:AC:5E:E0:DA:6E:DB:63:D2:FF:BB X509v3 Authority Key Identifier: keyid:95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:2b:a5:6e:e2:2a:c8:f4:b0:b9:c6:7e:01:5f:20:7d:48:65: 82:45:7c:b2:1b:da:81:fa:22:03:51:3b:8e:ba:80:33:d7:b1: b2:e1:76:d1:21:20:e2:58:e2:d7:65:a5:6d:79:17:3f:94:e3: 10:44:bb:c0:ed:95:2d:7c:01:58:81:09:d7:54:aa:64:89:e1: 93:dc:ec:31:30:87:c5:e7:2c:fc:47:fa:62:69:4c:83:e3:3d: cc:c3:c7:f9:ff:eb:b0:33:71:b8:d1:35:88:5a:ec:a6:da:3a: 31:0e:d3:2c:6f:17:11:e1:99:20:ca:30:8c:03:38:54:fd:8c: 5e:1a:55:f6:a6:eb:1a:a8:48:2f:a0:c8:14:ba:d5:be:11:90: 84:27:16:73:9b:ca:07:d2:e8:bc:95:b8:06:9f:75:08:89:99: cb:69:d8:b7:8a:53:c0:84:96:89:9c:2b:c4:39:4d:ad:e7:72: c3:e2:c7:cd:b4:96:c5:fd:df:da:da:d6:10:39:64:e9:d4:51: c0:91:56:f1:25:8d:07:34:a5:f2:54:78:f7:a4:01:8e:2a:4b: 9b:f2:8f:55:c9:82:d1:49:a6:a5:0a:6a:62:bd:7a:09:ad:68: 8e:96:9d:57:55:91:c9:ac:93:cd:7f:53:48:9e:2a:14:cc:b3: dd:53:e3:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURCMzcxMTAvBgNVBAUTKDk1RkVCRTkzQTMzQTMzOTRCRDFGNjBEQ0JCRERCOUZE RTA3MkI3RjMwHhcNMjUwNDI0MjIwOTAwWhcNMjUwNTAxMjIwOTAwWjAYMRYwFAYD VQQDEw02ODBhYjY3ZC0xN2Y4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqpDaIbbVE8+NVlfcYJ3MoHGSu5H1BC0YReDjzMXtzjlC1pTis+VX/IKXCPwX ofWGaDkHr0fUZEoHmiGd3rM13y/PdoF5Jdfd2550161pT4ZkkICAppPitapTPQPM 97G00Az3NtyIu6HBNN001GdTsytA2W4uslicRto3iWmezTJyztceE5wHK2Kbwd+w ZFqkGMSlsuMZLGimAdg1gtSWbKxXaBwvAS1eiv8a+YVN898EEch7rs7kgaehDVQm 1r94Jufg2EiApSsANGVfsq3vU2wDYcc5uVoap5Tj85vCxHZKbUrcbGrRHZDZtd4j 0+soRdgIpcTnZt9HMm3O7O+3lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHxKKUmh 49ZMHEysXuDabttj0v+7MB8GA1UdIwQYMBaAFJX+vpOjOjOUvR9g3Lvduf3gcrfz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREIzNy80REU2MzVFMDc4 QTAxMUVCOTUwRDMxNzVDNEY5QUUwMi9sZjYtazZNNk01UzlIMkRjdTkyNV9lQnl0 X00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xmNi1rNk02TTVTOUgyRGN1OTI1X2VCeXRfTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF REIzNy80REU2MzVFMDc4QTAxMUVCOTUwRDMxNzVDNEY5QUUwMi9sZjYtazZNNk01 UzlIMkRjdTkyNV9lQnl0X00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZK6Vu4irI9LC5xn4BXyB9SGWCRXyyG9qB+iIDUTuOuoAz17Gy4XbR ISDiWOLXZaVteRc/lOMQRLvA7ZUtfAFYgQnXVKpkieGT3OwxMIfF5yz8R/piaUyD 4z3Mw8f5/+uwM3G40TWIWuym2joxDtMsbxcR4ZkgyjCMAzhU/YxeGlX2pusaqEgv oMgUutW+EZCEJxZzm8oH0ui8lbgGn3UIiZnLadi3ilPAhJaJnCvEOU2t53LD4sfN tJbF/d/a2tYQOWTp1FHAkVbxJY0HNKXyVHj3pAGOKkub8o9VyYLRSaalCmpivXoJ rWiOlp1XVZHJrJPNf1NInioUzLPdU+Nn -----END CERTIFICATE-----Generated at Sat Apr 26 17:04:27 2025 by rpki-client