$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.mft File: 6ibTI4Mc2ho4TpHg_jiR2wzrLsg.mft (raw, json) Hash identifier: X1BzT1e9IzRut6qet96tzWO5A7YZAJIo7GW2jNBFDOA= Subject key identifier: A4:23:C2:B5:54:FE:97:EB:EE:EC:24:96:85:93:0A:37:A5:03:2B:7D Authority key identifier: EA:26:D3:23:83:1C:DA:1A:38:4E:91:E0:FE:38:91:DB:0C:EB:2E:C8 Certificate issuer: /CN=A91F6C39/serialNumber=EA26D323831CDA1A384E91E0FE3891DB0CEB2EC8 Certificate serial: 0599 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.mft Manifest number: 0591 Signing time: Thu 24 Apr 2025 23:01:54 +0000 Manifest this update: Thu 24 Apr 2025 23:01:54 +0000 Manifest next update: Thu 01 May 2025 23:01:54 +0000 Files and hashes: 1: 6ibTI4Mc2ho4TpHg_jiR2wzrLsg.crl (hash: l9VMLxcbz5mtTR8eCQm3Z5KOh9muzFEIR6l81IGBbkY=) 2: 7EFC59BA5D0511EEB1F12C3BC4F9AE02.roa (hash: bXdx05k7wR9Kl1sY4+4gVobBYaiLUct0N7gXR8t0JQM=) 3: 6F9ACE76CE7211EBAF46B61AC4F9AE02.roa (hash: JPBTJ6fwr8mmKYI0rysv3RFDJmUHvWjg1nwosGPeiPE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.crl rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1433 (0x599) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6C39, serialNumber=EA26D323831CDA1A384E91E0FE3891DB0CEB2EC8 Validity Not Before: Apr 24 23:01:54 2025 GMT Not After : May 1 23:01:54 2025 GMT Subject: CN=680ac2e2-413c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:8d:e6:b2:40:a5:a4:2b:49:7f:4d:56:7c:e6: bc:44:ad:0a:0b:c2:d5:75:26:36:cf:58:84:90:e6: 91:5b:56:bd:05:16:df:0c:7f:7c:4c:44:ee:c0:fe: af:52:b4:33:1d:7b:f0:12:25:f2:1c:c7:0b:a4:d8: a2:b8:d0:99:32:4c:f5:2a:e7:f9:9d:d6:fa:d6:a1: ea:f5:da:29:93:71:cb:3c:02:b2:1d:0a:c5:ca:62: 7f:0d:03:8b:4a:6d:06:5a:fd:76:37:d4:0f:47:fb: 08:61:f2:bf:43:da:07:03:ab:0c:1c:98:ea:c7:70: b2:51:fe:0b:78:5b:c5:e9:32:29:b9:6d:78:81:c7: 60:c5:70:72:e3:e7:b1:1a:15:19:fd:98:5f:c7:c3: 5f:f6:51:9f:3e:84:da:16:b1:c4:36:a0:22:55:ac: 67:de:09:18:41:65:82:a1:94:d8:cd:91:d2:b1:e2: ff:9b:ff:ef:6e:7b:30:7e:e6:55:5c:49:61:c9:32: bb:a2:8f:0d:1c:8a:45:4a:9b:b8:76:34:3f:c0:43: 7d:a9:d0:56:e7:cd:b1:d1:bf:8b:ad:19:0c:f3:18: 25:97:3b:10:53:b5:b4:1b:83:59:a8:9d:f1:51:39: a5:97:3e:c1:89:98:1e:d7:7f:e5:7f:9d:52:56:87: cf:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:23:C2:B5:54:FE:97:EB:EE:EC:24:96:85:93:0A:37:A5:03:2B:7D X509v3 Authority Key Identifier: keyid:EA:26:D3:23:83:1C:DA:1A:38:4E:91:E0:FE:38:91:DB:0C:EB:2E:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:68:04:a7:91:74:a0:1a:2a:ac:12:87:66:20:fb:72:af:7e: 91:a0:69:cf:a7:dc:9b:64:d4:1e:2e:01:fa:4a:56:61:fa:14: d9:1d:5a:9d:e5:1f:36:ef:0d:9f:db:ba:97:a3:47:b1:9c:ea: 86:a2:a0:0b:e3:02:c2:39:d8:af:06:28:d1:2d:88:47:6e:13: 74:0e:8b:7a:c4:ae:19:b7:b3:c1:8c:1a:17:27:de:f5:36:2d: 18:91:85:26:79:0c:66:47:02:b7:12:0a:de:5f:1d:54:a9:8f: 77:83:64:74:8e:a1:d6:29:37:c2:35:ea:f7:4f:41:e9:09:7c: d2:56:74:21:97:ff:bb:a3:7f:5e:d1:8b:96:2d:74:c0:73:7d: ff:dc:e1:cf:ec:31:8e:54:65:26:d0:55:46:7a:65:0b:ce:0b: c5:01:03:0c:34:b7:96:26:87:9b:ff:1f:09:b3:06:fb:96:94: 9a:e6:8a:73:ce:cf:84:b0:b3:6c:cf:ba:81:f3:90:64:bb:df: d8:8f:31:8d:df:1c:6d:3d:b2:a8:00:52:73:8d:1a:47:76:70: 1f:5b:87:6a:72:94:9b:b9:da:26:19:a4:1d:c7:1d:61:1d:73: 6f:49:ff:f8:61:fc:39:0b:49:ff:eb:4e:45:3b:b6:df:06:2c: 3f:3c:42:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZDMzkxMTAvBgNVBAUTKEVBMjZEMzIzODMxQ0RBMUEzODRFOTFFMEZFMzg5MURC MENFQjJFQzgwHhcNMjUwNDI0MjMwMTU0WhcNMjUwNTAxMjMwMTU0WjAYMRYwFAYD VQQDEw02ODBhYzJlMi00MTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA543mskClpCtJf01WfOa8RK0KC8LVdSY2z1iEkOaRW1a9BRbfDH98TETuwP6v UrQzHXvwEiXyHMcLpNiiuNCZMkz1Kuf5ndb61qHq9dopk3HLPAKyHQrFymJ/DQOL Sm0GWv12N9QPR/sIYfK/Q9oHA6sMHJjqx3CyUf4LeFvF6TIpuW14gcdgxXBy4+ex GhUZ/Zhfx8Nf9lGfPoTaFrHENqAiVaxn3gkYQWWCoZTYzZHSseL/m//vbnswfuZV XElhyTK7oo8NHIpFSpu4djQ/wEN9qdBW582x0b+LrRkM8xgllzsQU7W0G4NZqJ3x UTmllz7BiZge13/lf51SVofPhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKQjwrVU /pfr7uwkloWTCjelAyt9MB8GA1UdIwQYMBaAFOom0yODHNoaOE6R4P44kdsM6y7I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkMzOS83QkYwRjI3NENF NzAxMUVCQTdFMDlCMUFDNEY5QUUwMi82aWJUSTRNYzJobzRUcEhnX2ppUjJ3enJM c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZpYlRJNE1jMmhvNFRwSGdfamlSMnd6ckxzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkMzOS83QkYwRjI3NENFNzAxMUVCQTdFMDlCMUFDNEY5QUUwMi82aWJUSTRNYzJo bzRUcEhnX2ppUjJ3enJMc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoaASnkXSgGiqsEodmIPtyr36RoGnPp9ybZNQeLgH6SlZh+hTZHVqd 5R827w2f27qXo0exnOqGoqAL4wLCOdivBijRLYhHbhN0Dot6xK4Zt7PBjBoXJ971 Ni0YkYUmeQxmRwK3EgreXx1UqY93g2R0jqHWKTfCNer3T0HpCXzSVnQhl/+7o39e 0YuWLXTAc33/3OHP7DGOVGUm0FVGemULzgvFAQMMNLeWJoeb/x8Jswb7lpSa5opz zs+EsLNsz7qB85Bku9/YjzGN3xxtPbKoAFJzjRpHdnAfW4dqcpSbudomGaQdxx1h HXNvSf/4Yfw5C0n/605FO7bfBiw/PEJ6 -----END CERTIFICATE-----Generated at Sat Apr 26 17:09:06 2025 by rpki-client