$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft File: 6NbUISgrkBkAAJd2GiVjIjyngV4.mft (raw, json) Hash identifier: LAWNlrdr45ryFnxma0V7iux3AQM3vp4LiSzPW6nFbQE= Subject key identifier: 5C:35:C9:FF:2D:18:F1:A4:F9:AE:50:FD:82:1C:F0:CE:28:64:66:2B Authority key identifier: E8:D6:D4:21:28:2B:90:19:00:00:97:76:1A:25:63:22:3C:A7:81:5E Certificate issuer: /CN=A91EFCFF/serialNumber=E8D6D421282B9019000097761A2563223CA7815E Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6NbUISgrkBkAAJd2GiVjIjyngV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft Manifest number: 6B Signing time: Fri 25 Apr 2025 05:54:09 +0000 Manifest this update: Fri 25 Apr 2025 05:54:09 +0000 Manifest next update: Fri 02 May 2025 05:54:09 +0000 Files and hashes: 1: 6NbUISgrkBkAAJd2GiVjIjyngV4.crl (hash: rTkiN0+QOecVyCOsFKz7rcxFfHbQpzXkJoGwpo3h7tM=) 2: CCEAF60C911311EFA9C63854C4F9AE02.roa (hash: lpawVFjrLTQaiIY8ph0aOBiFjAIuxDOp5nWen5zsXsU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.crl rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6NbUISgrkBkAAJd2GiVjIjyngV4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:54:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFCFF, serialNumber=E8D6D421282B9019000097761A2563223CA7815E Validity Not Before: Apr 25 05:54:09 2025 GMT Not After : May 2 05:54:09 2025 GMT Subject: CN=680b2381-576d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:56:86:37:13:67:6b:b2:5b:c5:31:ba:c0:06: 01:20:56:b2:ab:34:06:47:4c:7a:32:39:63:ee:e4: c4:4f:ff:da:1e:55:72:0f:40:e7:4c:cb:a3:78:6d: 2b:17:fa:de:50:f2:42:41:0e:c7:ff:20:ba:cf:0b: 39:b1:84:e0:92:3e:62:44:f5:c3:18:e1:cd:d7:27: a9:36:1b:f9:fc:1e:71:46:88:0f:c1:8a:85:e1:25: 7b:1c:4b:e2:c0:bf:51:39:9b:35:ec:a2:dc:e7:1b: 92:28:5b:6f:25:59:f4:e7:bf:ca:9c:b7:15:9a:7f: f4:6f:95:21:d2:21:1d:4d:da:e7:94:4b:68:fe:c0: 89:40:41:a4:43:4e:4a:0b:e8:75:95:37:f9:60:35: 08:d2:8f:fa:16:5f:63:c5:a4:ab:8d:74:2f:15:fd: 0d:fc:d8:00:0d:19:5c:f7:41:a6:c3:2d:1f:01:2c: c9:2e:a8:5e:c0:2f:30:0c:4e:56:bd:16:9e:31:94: 44:f2:29:55:f8:b3:3b:e5:b8:8e:f1:46:50:b1:ca: 97:6e:a6:d4:d9:a6:ba:0e:2a:f0:18:56:ac:ff:7e: e3:3a:a3:01:b3:09:ec:a0:74:73:9a:a5:31:9b:13: 46:05:ed:15:07:53:30:d3:e6:f8:8c:a2:22:30:30: c6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:35:C9:FF:2D:18:F1:A4:F9:AE:50:FD:82:1C:F0:CE:28:64:66:2B X509v3 Authority Key Identifier: keyid:E8:D6:D4:21:28:2B:90:19:00:00:97:76:1A:25:63:22:3C:A7:81:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6NbUISgrkBkAAJd2GiVjIjyngV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:de:d9:0a:a1:43:cc:1f:b4:eb:85:29:be:06:ef:34:d9:59: 90:bf:a4:5d:d9:2c:4e:34:af:c0:7a:38:fe:6b:66:a0:b3:ad: d3:89:d1:d3:15:29:69:0e:aa:10:bd:ca:60:0a:e1:68:45:be: c7:1f:3e:6d:ef:7c:4b:26:12:fb:b5:f1:38:85:85:41:3c:6e: d3:12:68:77:90:d5:13:18:7e:f4:12:c9:6d:75:8b:69:f1:ce: 37:7a:69:9a:22:bc:48:3f:03:46:7f:00:f9:9b:69:f4:57:c6: 1e:25:73:3b:4a:ac:65:58:6e:17:74:65:72:de:c7:0b:77:44: 63:b8:52:fe:b9:c4:c3:1c:66:f0:aa:81:00:5d:c1:94:97:94: 7e:cd:8f:83:ab:5d:e7:7f:32:eb:fd:7a:ce:35:cd:d7:10:69: 9d:d8:3e:32:4b:dd:b9:c2:d4:3f:3c:65:01:dc:a9:d2:dd:89: fe:4a:11:21:8c:46:fa:f9:68:e4:60:37:35:5e:23:db:ad:a9: 01:85:85:60:a0:0c:ab:4d:f5:72:c2:be:6e:e1:6e:34:26:73: 68:0b:e5:39:0b:3b:e5:79:4d:08:af:0c:96:cd:f6:f3:f2:a1: f5:ae:3d:ce:fa:e1:0e:ff:83:4e:71:c1:b3:c7:f2:fb:41:c8: 75:bc:91:f8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RkNGRjExMC8GA1UEBRMoRThENkQ0MjEyODJCOTAxOTAwMDA5Nzc2MUEyNTYzMjIz Q0E3ODE1RTAeFw0yNTA0MjUwNTU0MDlaFw0yNTA1MDIwNTU0MDlaMBgxFjAUBgNV BAMTDTY4MGIyMzgxLTU3NmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuVoY3E2drslvFMbrABgEgVrKrNAZHTHoyOWPu5MRP/9oeVXIPQOdMy6N4bSsX +t5Q8kJBDsf/ILrPCzmxhOCSPmJE9cMY4c3XJ6k2G/n8HnFGiA/BioXhJXscS+LA v1E5mzXsotznG5IoW28lWfTnv8qctxWaf/RvlSHSIR1N2ueUS2j+wIlAQaRDTkoL 6HWVN/lgNQjSj/oWX2PFpKuNdC8V/Q382AANGVz3QabDLR8BLMkuqF7ALzAMTla9 Fp4xlETyKVX4szvluI7xRlCxypduptTZproOKvAYVqz/fuM6owGzCeygdHOapTGb E0YF7RUHUzDT5viMoiIwMMbNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXDXJ/y0Y 8aT5rlD9ghzwzihkZiswHwYDVR0jBBgwFoAU6NbUISgrkBkAAJd2GiVjIjyngV4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVGQ0ZGLzBGQTg1Rjg4ODIx RjExRUZBMURCNEM3NUM0RjlBRTAyLzZOYlVJU2dya0JrQUFKZDJHaVZqSWp5bmdW NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNk5iVUlTZ3JrQmtBQUpkMkdpVmpJanluZ1Y0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVG Q0ZGLzBGQTg1Rjg4ODIxRjExRUZBMURCNEM3NUM0RjlBRTAyLzZOYlVJU2dya0Jr QUFKZDJHaVZqSWp5bmdWNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGbe2QqhQ8wftOuFKb4G7zTZWZC/pF3ZLE40r8B6OP5rZqCzrdOJ0dMV KWkOqhC9ymAK4WhFvscfPm3vfEsmEvu18TiFhUE8btMSaHeQ1RMYfvQSyW11i2nx zjd6aZoivEg/A0Z/APmbafRXxh4lcztKrGVYbhd0ZXLexwt3RGO4Uv65xMMcZvCq gQBdwZSXlH7Nj4OrXed/Muv9es41zdcQaZ3YPjJL3bnC1D88ZQHcqdLdif5KESGM Rvr5aORgNzVeI9utqQGFhWCgDKtN9XLCvm7hbjQmc2gL5TkLO+V5TQivDJbN9vPy ofWuPc764Q7/g05xwbPH8vtByHW8kfg= -----END CERTIFICATE-----Generated at Sat Apr 26 17:11:03 2025 by rpki-client