$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFCFF/18ACE3F6821F11EFA1DB4C75C4F9AE02/6_vUy5tYrAgtPzgph6WXpYyWupE.mft File: 6_vUy5tYrAgtPzgph6WXpYyWupE.mft (raw, json) Hash identifier: dk4y7nvOGybKY9t86uczIWFdtVQta4D/9v75klQDzCg= Subject key identifier: 5D:C3:FA:1C:1A:BE:BF:F8:77:DB:35:A6:F5:AE:13:FD:F4:88:29:46 Authority key identifier: EB:FB:D4:CB:9B:58:AC:08:2D:3F:38:29:87:A5:97:A5:8C:96:BA:91 Certificate issuer: /CN=A91EFCFF/serialNumber=EBFBD4CB9B58AC082D3F382987A597A58C96BA91 Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6_vUy5tYrAgtPzgph6WXpYyWupE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFCFF/18ACE3F6821F11EFA1DB4C75C4F9AE02/6_vUy5tYrAgtPzgph6WXpYyWupE.mft Manifest number: 6B Signing time: Fri 25 Apr 2025 05:54:06 +0000 Manifest this update: Fri 25 Apr 2025 05:54:05 +0000 Manifest next update: Fri 02 May 2025 05:54:05 +0000 Files and hashes: 1: 6_vUy5tYrAgtPzgph6WXpYyWupE.crl (hash: 0p87S2i3c/VKAD35H4otOyQx9O5rMHYPOWHV1MmE+20=) 2: F042F19A911311EF9A1A7F54C4F9AE02.roa (hash: hBFHKnjfNPkSPQ8LFBtT/taQcDMk7/Q7iyGIaAxoH34=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFCFF/18ACE3F6821F11EFA1DB4C75C4F9AE02/6_vUy5tYrAgtPzgph6WXpYyWupE.crl rsync://rpki.apnic.net/member_repository/A91EFCFF/18ACE3F6821F11EFA1DB4C75C4F9AE02/6_vUy5tYrAgtPzgph6WXpYyWupE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6_vUy5tYrAgtPzgph6WXpYyWupE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:54:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFCFF, serialNumber=EBFBD4CB9B58AC082D3F382987A597A58C96BA91 Validity Not Before: Apr 25 05:54:05 2025 GMT Not After : May 2 05:54:05 2025 GMT Subject: CN=680b237d-16c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:81:fe:26:b0:4e:1d:d6:07:33:5a:8a:22:43: cd:52:94:17:1d:ce:0e:9e:44:6f:ef:40:57:dd:53: 2f:f1:00:c7:f6:95:c6:18:0d:a0:62:c5:1f:01:ea: d6:c6:69:b9:44:8d:60:20:12:c3:0f:ed:d5:07:86: 8c:6e:4d:8c:f9:38:38:d1:a9:a4:8b:b6:e5:da:d1: 59:80:54:a6:5e:5e:66:f1:74:16:12:b0:6b:e6:6d: e3:87:d5:19:01:e9:e3:91:99:a0:c7:7f:ac:e6:c1: 00:55:9e:5f:2f:9f:f3:e7:ce:20:a4:e5:83:32:af: 11:4a:94:c9:2e:08:6f:fb:df:65:ca:98:a8:2d:37: c7:a3:14:0b:ba:10:8a:41:22:15:00:d9:e9:0d:dc: c8:48:24:91:47:7b:e3:be:48:50:9c:63:cb:f6:43: 49:b2:07:6c:df:ca:4e:fb:3c:e2:93:a9:f7:1b:98: 1f:8d:e6:b6:54:0d:a4:f1:56:df:91:3d:53:0b:5c: eb:e3:32:28:06:86:e9:1d:97:e1:24:5e:21:1f:91: ea:43:2d:f0:15:08:6f:22:25:21:95:49:0b:b1:01: 54:70:69:fa:b1:8e:de:24:e3:b6:32:26:0d:62:bb: c6:99:26:70:c6:8f:53:d3:45:73:44:07:db:1c:14: 7b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:C3:FA:1C:1A:BE:BF:F8:77:DB:35:A6:F5:AE:13:FD:F4:88:29:46 X509v3 Authority Key Identifier: keyid:EB:FB:D4:CB:9B:58:AC:08:2D:3F:38:29:87:A5:97:A5:8C:96:BA:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFCFF/18ACE3F6821F11EFA1DB4C75C4F9AE02/6_vUy5tYrAgtPzgph6WXpYyWupE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6_vUy5tYrAgtPzgph6WXpYyWupE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFCFF/18ACE3F6821F11EFA1DB4C75C4F9AE02/6_vUy5tYrAgtPzgph6WXpYyWupE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:2b:59:9e:fe:ca:d9:ec:8d:6e:09:dd:ee:e1:18:22:ce:a0: 6f:4a:1f:c6:44:db:d7:0b:0d:f7:29:24:b0:3e:46:c7:42:30: 5c:93:6c:f5:f7:c8:52:f2:47:99:98:b3:c0:cb:da:10:3f:48: d5:02:75:19:a9:70:1c:9d:15:24:dc:76:c5:1c:f1:5e:2a:e0: 00:95:d7:b7:6b:09:3d:0d:de:b7:b3:97:80:ac:c0:a3:f4:23: 08:2a:42:53:df:c5:3e:c6:37:5a:34:7e:0e:d9:9e:0f:f7:d1: 1a:fa:2f:6b:4c:59:e7:b0:9e:42:2b:ae:50:c5:9e:e1:37:1e: ec:44:f9:24:be:15:39:37:3d:37:b6:c5:45:5f:0a:27:74:3f: 41:82:5d:95:d2:a2:fc:2f:b5:69:b4:64:50:24:94:87:a5:83: 12:bb:42:b0:58:87:d8:0f:a1:6b:58:27:3d:64:16:af:1d:ac: 29:13:b4:72:7c:c7:af:ea:8f:49:24:c2:a1:24:55:23:95:f1: 09:04:55:53:d0:aa:84:b2:ec:db:02:66:7a:b5:a1:72:ae:10: da:2a:73:2c:5f:9f:dc:69:b1:12:a1:a5:39:a0:c1:ca:00:a3: 88:06:de:ee:c8:66:63:8d:81:6f:3d:05:d2:84:81:b3:b1:f8: d3:24:85:bc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RkNGRjExMC8GA1UEBRMoRUJGQkQ0Q0I5QjU4QUMwODJEM0YzODI5ODdBNTk3QTU4 Qzk2QkE5MTAeFw0yNTA0MjUwNTU0MDVaFw0yNTA1MDIwNTU0MDVaMBgxFjAUBgNV BAMTDTY4MGIyMzdkLTE2YzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfgf4msE4d1gczWooiQ81SlBcdzg6eRG/vQFfdUy/xAMf2lcYYDaBixR8B6tbG ablEjWAgEsMP7dUHhoxuTYz5ODjRqaSLtuXa0VmAVKZeXmbxdBYSsGvmbeOH1RkB 6eORmaDHf6zmwQBVnl8vn/PnziCk5YMyrxFKlMkuCG/732XKmKgtN8ejFAu6EIpB IhUA2ekN3MhIJJFHe+O+SFCcY8v2Q0myB2zfyk77POKTqfcbmB+N5rZUDaTxVt+R PVMLXOvjMigGhukdl+EkXiEfkepDLfAVCG8iJSGVSQuxAVRwafqxjt4k47YyJg1i u8aZJnDGj1PTRXNEB9scFHtjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXcP6HBq+ v/h32zWm9a4T/fSIKUYwHwYDVR0jBBgwFoAU6/vUy5tYrAgtPzgph6WXpYyWupEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVGQ0ZGLzE4QUNFM0Y2ODIx RjExRUZBMURCNEM3NUM0RjlBRTAyLzZfdlV5NXRZckFndFB6Z3BoNldYcFl5V3Vw RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNl92VXk1dFlyQWd0UHpncGg2V1hwWXlXdXBFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVG Q0ZGLzE4QUNFM0Y2ODIxRjExRUZBMURCNEM3NUM0RjlBRTAyLzZfdlV5NXRZckFn dFB6Z3BoNldYcFl5V3VwRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJgrWZ7+ytnsjW4J3e7hGCLOoG9KH8ZE29cLDfcpJLA+RsdCMFyTbPX3 yFLyR5mYs8DL2hA/SNUCdRmpcBydFSTcdsUc8V4q4ACV17drCT0N3rezl4CswKP0 IwgqQlPfxT7GN1o0fg7Zng/30Rr6L2tMWeewnkIrrlDFnuE3HuxE+SS+FTk3PTe2 xUVfCid0P0GCXZXSovwvtWm0ZFAklIelgxK7QrBYh9gPoWtYJz1kFq8drCkTtHJ8 x6/qj0kkwqEkVSOV8QkEVVPQqoSy7NsCZnq1oXKuENoqcyxfn9xpsRKhpTmgwcoA o4gG3u7IZmONgW89BdKEgbOx+NMkhbw= -----END CERTIFICATE-----Generated at Sat Apr 26 12:56:31 2025 by rpki-client