$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft File: B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft (raw, json) Hash identifier: XUjsifLWVY+Jl9os+Z34AaJbAZJ9M3s9au0LwM9Qe7k= Subject key identifier: 1D:56:3E:11:CE:17:46:00:97:36:DC:6E:75:42:32:04:1D:F4:4F:13 Authority key identifier: 07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60 Certificate issuer: /CN=A91DF93A/serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260 Certificate serial: 0894 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft Manifest number: 0833 Signing time: Fri 04 Apr 2025 21:10:32 +0000 Manifest this update: Fri 04 Apr 2025 21:10:32 +0000 Manifest next update: Fri 11 Apr 2025 21:10:32 +0000 Files and hashes: 1: B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl (hash: 2RZSZVI23mg9v0VZHHtJUlbOa5u7K6S+kQr2FFjtFGA=) 2: F8C02F3CDA4E11EC9C09A446C4F9AE02.roa (hash: ek3DgpwlstOVnuguW/pHkiP1RxK/zlxH+dHxarNuX94=) 3: BA1752AE176B11EF9ADED980C4F9AE02.roa (hash: gNhMiv6IOJKkeLTLwPi9wU4oN+h+wv5IF758wi0C6FI=) 4: E518ECC6D52A11ED99D55E2EC4F9AE02.roa (hash: /8xSOlLPXmPawwC5JqVN/51Xoq+s+zm8+cCCkXo4uBE=) 5: FEEC2C90643811EB9D7F624EC4F9AE02.roa (hash: J1xLa8yTtXAlg7OlLT4nxVjtOt9A7iYZpXvZJDERl8o=) 6: 007CF9924F1111EFA7D2F345C4F9AE02.roa (hash: USwhKOtUAYw8MFn1BXt5pSc1VM2o2X7NQRCh9KM+x7o=) 7: 5B5CBC68751B11EB9065A822C4F9AE02.roa (hash: 5HlGKag658JvYwBq45MtXDAz/r3WmbZjF3WX8Bnxu6I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 21:10:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2196 (0x894) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF93A Validity Not Before: Apr 4 21:10:32 2025 GMT Not After : Apr 11 21:10:32 2025 GMT Subject: CN=67f04ac8-8530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8b:5e:c2:66:f7:71:71:04:51:76:fc:e4:6e: 73:3c:00:2b:93:35:5e:2f:0d:80:a4:74:b1:7a:f1: ba:97:73:00:d9:f3:cf:a5:f4:f4:bc:4b:80:ee:af: 25:10:1a:8c:d9:20:9c:af:bd:a9:a7:bb:aa:39:1b: 1b:70:1c:2c:d6:ec:52:4a:fc:a6:60:36:22:e3:93: 11:a0:32:bd:2d:b6:36:e7:ac:54:96:3f:43:06:3c: 20:be:5a:cc:af:8e:d9:6f:02:9d:f8:6b:65:a5:24: 33:5a:af:a4:60:69:ad:2b:79:3b:47:94:85:df:5a: ee:01:45:11:e1:b8:73:dd:4e:e2:42:ac:ab:42:e8: ba:a9:a5:57:f6:9e:dc:d0:ba:cd:b2:cf:95:25:f7: d3:15:5b:1a:ca:e3:30:b0:cc:52:9b:97:d2:f1:09: 6a:90:63:96:b5:97:c7:32:88:fa:5b:c5:17:a3:da: 1f:fc:5c:29:cd:6a:55:5f:02:e4:0e:e1:b6:02:1b: de:6b:54:2a:d6:a7:fd:30:7c:12:27:c4:41:44:84: 58:19:fd:68:aa:91:1c:f8:37:b8:33:86:c4:65:1b: f3:4c:65:b0:24:0a:c7:43:eb:c1:1b:c7:f3:fd:3e: 46:54:8f:4f:14:05:55:df:d6:90:87:be:49:c9:3d: 94:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:56:3E:11:CE:17:46:00:97:36:DC:6E:75:42:32:04:1D:F4:4F:13 X509v3 Authority Key Identifier: keyid:07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:9d:d2:72:f6:01:66:e8:ac:0c:f4:61:9b:1e:b1:c8:49:9b: 1e:64:d6:92:2d:95:98:97:e4:af:1f:79:8f:b8:86:ba:5b:8c: 70:b9:6e:18:65:c9:9a:09:f2:f3:a6:57:ce:e7:86:73:06:dd: 81:ce:f8:dd:e3:39:28:b6:b9:11:2e:bb:65:48:b8:6a:5e:e3: 8b:be:ff:af:83:8d:01:cc:8a:ff:76:1c:e0:40:f9:19:f5:86: 36:e2:2c:97:05:3c:29:fb:1f:79:06:50:71:84:f5:60:1a:b6: 58:d1:4d:71:29:ef:fe:2f:e2:b2:9a:43:8d:a1:71:c0:c2:8b: a9:3b:f1:f6:cb:6d:c7:4d:11:4b:e0:0f:95:36:da:82:5f:16: 75:8c:57:26:96:7f:89:31:d0:fd:b4:44:f5:ef:a3:65:cf:64: 15:10:b2:78:7d:61:65:af:a3:42:ad:a9:a1:86:e5:f9:10:5c: 8c:e8:3b:62:c7:9d:89:2b:04:d5:3e:f6:5b:c4:61:77:1f:0e: 6b:14:cb:6f:74:65:b0:f8:bb:c9:48:9e:8b:e6:49:ab:f6:b5: 3b:ae:fd:1a:72:46:39:ad:0e:08:2e:c6:b2:2d:71:e6:a4:71: 30:00:f3:51:68:a9:c2:49:95:76:6c:fd:48:87:bd:a5:34:71: 9a:07:49:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY5M0ExMTAvBgNVBAUTKDA3QTFDMDg1NDVDQUNDNjVFMDg4MkQ0OUU5RjJGOENG RDJCRTgyNjAwHhcNMjUwNDA0MjExMDMyWhcNMjUwNDExMjExMDMyWjAYMRYwFAYD VQQDEw02N2YwNGFjOC04NTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt4tewmb3cXEEUXb85G5zPAArkzVeLw2ApHSxevG6l3MA2fPPpfT0vEuA7q8l EBqM2SCcr72pp7uqORsbcBws1uxSSvymYDYi45MRoDK9LbY256xUlj9DBjwgvlrM r47ZbwKd+GtlpSQzWq+kYGmtK3k7R5SF31ruAUUR4bhz3U7iQqyrQui6qaVX9p7c 0LrNss+VJffTFVsayuMwsMxSm5fS8QlqkGOWtZfHMoj6W8UXo9of/FwpzWpVXwLk DuG2Ahvea1Qq1qf9MHwSJ8RBRIRYGf1oqpEc+De4M4bEZRvzTGWwJArHQ+vBG8fz /T5GVI9PFAVV39aQh75JyT2USwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB1WPhHO F0YAlzbcbnVCMgQd9E8TMB8GA1UdIwQYMBaAFAehwIVFysxl4IgtSeny+M/SvoJg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjkzQS9GRjUxRTU5RUU1 RjMxMUVBQjNBOTE1NjFDNEY5QUUwMi9CNkhBaFVYS3pHWGdpQzFKNmZMNHo5Sy1n bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I2SEFoVVhLekdYZ2lDMUo2Zkw0ejlLLWdtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjkzQS9GRjUxRTU5RUU1RjMxMUVBQjNBOTE1NjFDNEY5QUUwMi9CNkhBaFVYS3pH WGdpQzFKNmZMNHo5Sy1nbUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqndJy9gFm6KwM9GGbHrHISZseZNaSLZWYl+SvH3mPuIa6W4xwuW4Y ZcmaCfLzplfO54ZzBt2Bzvjd4zkotrkRLrtlSLhqXuOLvv+vg40BzIr/dhzgQPkZ 9YY24iyXBTwp+x95BlBxhPVgGrZY0U1xKe/+L+KymkONoXHAwoupO/H2y23HTRFL 4A+VNtqCXxZ1jFcmln+JMdD9tET176Nlz2QVELJ4fWFlr6NCramhhuX5EFyM6Dti x52JKwTVPvZbxGF3Hw5rFMtvdGWw+LvJSJ6L5kmr9rU7rv0ackY5rQ4ILsayLXHm pHEwAPNRaKnCSZV2bP1Ih72lNHGaB0l3 -----END CERTIFICATE-----Generated at Sun Apr 6 13:56:41 2025 by rpki-client