$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft File: a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft (raw, json) Hash identifier: B5C0v2Dh7b9HyqsyJYRWFiaOmRoLw3qfbnI55xUaMes= Subject key identifier: 2A:81:98:E5:F0:50:B0:E7:90:2D:1C:4F:BE:E9:7A:38:CD:3D:CC:4B Authority key identifier: 6B:5E:BF:E9:8A:37:87:64:C1:B1:2D:CB:69:04:E4:61:0B:50:AC:57 Certificate issuer: /CN=A91B5418/serialNumber=6B5EBFE98A378764C1B12DCB6904E4610B50AC57 Certificate serial: 0CB5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft Manifest number: 0C89 Signing time: Fri 04 Apr 2025 18:22:30 +0000 Manifest this update: Fri 04 Apr 2025 18:22:30 +0000 Manifest next update: Fri 11 Apr 2025 18:22:30 +0000 Files and hashes: 1: a16_6Yo3h2TBsS3LaQTkYQtQrFc.crl (hash: 6SPe7Vznnp9HX9WHlOaceSlrEX8LlU28fvbPRhai01E=) 2: D3EC028C2AF511EE90800A65C4F9AE02.roa (hash: zIiMG8XFOiJ8fVgB0n1RemI6nwHpnANJJ7roaqe/Oos=) 3: 990D779897A211EF8F258761C4F9AE02.roa (hash: pBmrHW7Jw1Wjm8Qc+bKje25zCa79tcOmhW5+tU398xk=) 4: 0D036EB680BC11EBAF2A1C0EC4F9AE02.roa (hash: pjzw/NFLrRgM+OcbDvv0v9A0zhJ6mbxEppscw7B3aFM=) 5: 919D74562AF511EEA2663F52C4F9AE02.roa (hash: O0iGKVrYjG+VfuAyXVwSoDV0k4iyoV7LNI4EIAcJQO0=) 6: FD2A54D8DD6311EA9EFD035CC4F9AE02.roa (hash: JEsgPmGGVDzS2y0yxDAwcuYDJ86ZFLnYIOd4ECkwCvk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.crl rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:22:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3253 (0xcb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5418 Validity Not Before: Apr 4 18:22:30 2025 GMT Not After : Apr 11 18:22:30 2025 GMT Subject: CN=67f02366-251f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e9:aa:a2:e7:51:6b:59:61:d0:36:c5:63:13: b9:0c:86:e6:33:e5:5f:7e:61:21:f5:5b:03:91:c8: a0:b1:04:c5:84:df:be:e1:79:20:2d:ef:65:ce:8e: b6:89:58:38:56:4b:f9:6c:1c:4c:7c:ef:b2:79:7e: fe:e6:44:4a:62:7e:39:ce:a2:b7:a3:f2:a4:12:41: c8:b0:f0:be:48:85:8b:94:c7:b3:1f:68:eb:22:1e: 22:13:b7:d4:2d:b2:1a:b6:e0:f0:e3:c7:0e:cf:ac: e9:76:63:df:42:7b:a5:3f:f9:fd:46:d7:50:aa:ce: 7c:17:56:91:55:ea:09:03:14:93:79:d8:4e:f0:c6: 40:c8:56:50:86:ee:e7:42:85:66:69:23:54:ea:a3: 6b:71:ba:8f:45:2d:83:fa:02:0a:d1:1d:f1:6d:fd: 53:36:24:7d:67:90:23:97:bb:d2:19:15:9a:ec:6c: 34:8c:7e:f8:c5:bb:15:43:d6:ab:32:ea:f8:76:87: 4c:4e:0e:ff:c0:5f:5e:30:80:7f:63:5e:d3:b6:60: 23:e9:23:ed:04:d3:2c:1f:18:38:77:84:74:62:cd: 27:04:86:9e:8e:c4:43:a5:37:d0:3a:44:6c:65:9a: 0d:4b:85:11:c2:09:07:1c:a1:33:d8:e3:87:8c:7a: 7d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:81:98:E5:F0:50:B0:E7:90:2D:1C:4F:BE:E9:7A:38:CD:3D:CC:4B X509v3 Authority Key Identifier: keyid:6B:5E:BF:E9:8A:37:87:64:C1:B1:2D:CB:69:04:E4:61:0B:50:AC:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:c6:2e:a7:b0:90:bb:dc:63:ab:f0:44:df:05:90:f7:8d:3b: 3a:d8:e8:43:e5:92:9d:d5:05:ee:f9:79:0b:7f:10:75:15:95: 58:c7:f8:70:d2:38:02:c6:d5:64:d7:74:38:70:9e:16:40:d4: e0:8e:79:ea:f0:78:6c:e8:b3:fe:96:b8:04:04:c1:12:57:be: 1d:34:6d:ae:34:68:ce:05:d6:1a:de:86:dd:29:dd:38:6e:6a: 7e:5a:52:10:9e:70:e5:f1:ea:18:9f:e0:05:37:b8:b0:81:43: 63:8b:d7:e9:14:d5:67:3d:50:17:12:06:c1:93:c1:c6:94:0f: 30:38:ed:62:81:59:81:56:f0:7f:42:84:fc:2d:90:b2:a9:ab: 5b:0f:b6:a7:f3:0a:4b:6d:f5:a6:79:9b:16:00:35:c2:ce:2c: 55:63:d5:09:16:1a:04:77:d8:8d:a0:bc:69:d5:aa:a6:c2:6a: 16:41:62:0e:4c:63:83:ea:0f:a8:e1:90:68:f7:f8:14:97:b0: 9d:fd:45:cf:e7:a2:c9:39:38:ad:e8:00:cc:20:54:17:ee:bb: 81:28:3d:a6:d2:a9:ad:55:81:d5:de:8b:cd:50:e1:87:fc:d7: 9c:c7:54:53:55:ea:71:d8:69:aa:73:30:6b:e3:a0:0d:9d:9b: 40:80:f7:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU0MTgxMTAvBgNVBAUTKDZCNUVCRkU5OEEzNzg3NjRDMUIxMkRDQjY5MDRFNDYx MEI1MEFDNTcwHhcNMjUwNDA0MTgyMjMwWhcNMjUwNDExMTgyMjMwWjAYMRYwFAYD VQQDEw02N2YwMjM2Ni0yNTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx+mqoudRa1lh0DbFYxO5DIbmM+VffmEh9VsDkcigsQTFhN++4XkgLe9lzo62 iVg4Vkv5bBxMfO+yeX7+5kRKYn45zqK3o/KkEkHIsPC+SIWLlMezH2jrIh4iE7fU LbIatuDw48cOz6zpdmPfQnulP/n9RtdQqs58F1aRVeoJAxSTedhO8MZAyFZQhu7n QoVmaSNU6qNrcbqPRS2D+gIK0R3xbf1TNiR9Z5Ajl7vSGRWa7Gw0jH74xbsVQ9ar Mur4dodMTg7/wF9eMIB/Y17TtmAj6SPtBNMsHxg4d4R0Ys0nBIaejsRDpTfQOkRs ZZoNS4URwgkHHKEz2OOHjHp9HQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCqBmOXw ULDnkC0cT77pejjNPcxLMB8GA1UdIwQYMBaAFGtev+mKN4dkwbEty2kE5GELUKxX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTQxOC8wQzBCODAwRUY2 ODIxMUU5QTg5OTYxNDZDNEY5QUUwMi9hMTZfNllvM2gyVEJzUzNMYVFUa1lRdFFy RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ExNl82WW8zaDJUQnNTM0xhUVRrWVF0UXJGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTQxOC8wQzBCODAwRUY2ODIxMUU5QTg5OTYxNDZDNEY5QUUwMi9hMTZfNllvM2gy VEJzUzNMYVFUa1lRdFFyRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWxi6nsJC73GOr8ETfBZD3jTs62OhD5ZKd1QXu+XkLfxB1FZVYx/hw 0jgCxtVk13Q4cJ4WQNTgjnnq8Hhs6LP+lrgEBMESV74dNG2uNGjOBdYa3obdKd04 bmp+WlIQnnDl8eoYn+AFN7iwgUNji9fpFNVnPVAXEgbBk8HGlA8wOO1igVmBVvB/ QoT8LZCyqatbD7an8wpLbfWmeZsWADXCzixVY9UJFhoEd9iNoLxp1aqmwmoWQWIO TGOD6g+o4ZBo9/gUl7Cd/UXP56LJOTit6ADMIFQX7ruBKD2m0qmtVYHV3ovNUOGH /Necx1RTVepx2GmqczBr46ANnZtAgPcu -----END CERTIFICATE-----Generated at Sat Apr 5 05:27:28 2025 by rpki-client