$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft File: 6HFyjDosJtDmCABLp9Hlo1gwlWw.mft (raw, json) Hash identifier: Vhnpt2qoQHLbeZ5nRGwCR/g6/fSPeIjv37OkXQiyNIw= Subject key identifier: E5:A3:00:31:CC:28:1D:B5:3D:A8:94:87:16:9D:46:7E:02:22:10:A5 Authority key identifier: E8:71:72:8C:3A:2C:26:D0:E6:08:00:4B:A7:D1:E5:A3:58:30:95:6C Certificate issuer: /CN=A91E6EFE/serialNumber=E871728C3A2C26D0E608004BA7D1E5A35830956C Certificate serial: 01BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HFyjDosJtDmCABLp9Hlo1gwlWw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft Manifest number: 01B9 Signing time: Sat 29 Mar 2025 02:39:28 +0000 Manifest this update: Sat 29 Mar 2025 02:39:27 +0000 Manifest next update: Sat 05 Apr 2025 02:39:27 +0000 Files and hashes: 1: 6HFyjDosJtDmCABLp9Hlo1gwlWw.crl (hash: g0oYWayNIYnNVnf1A69OJqHpFbFuR4UOZCdgfqgN/v4=) 2: 8367C13A6CA411ED9DD6425CC4F9AE02.roa (hash: epEQzlTejdqNKSVjeWewYuMv5R1UDEWC39y/ho6SoUA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.crl rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HFyjDosJtDmCABLp9Hlo1gwlWw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 02:39:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 445 (0x1bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6EFE Validity Not Before: Mar 29 02:39:27 2025 GMT Not After : Apr 5 02:39:27 2025 GMT Subject: CN=67e75d5f-4a00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bf:60:17:96:36:02:bf:f8:fc:b9:ff:63:b2: d1:7f:9c:84:a3:6d:7a:40:1b:2d:c2:40:05:4b:4e: c6:37:11:86:f2:a2:85:c9:fe:db:11:36:87:d7:62: 13:2c:9e:37:1e:98:44:72:17:1f:f6:06:3a:ad:7e: a7:48:f5:af:d9:aa:d6:53:13:16:27:ff:ef:c2:55: a6:cc:00:eb:90:54:0e:c6:68:03:f6:1e:1b:9c:b3: 20:a2:10:53:eb:cc:ab:02:51:4d:1a:7c:a7:19:44: 2f:17:2d:df:ce:71:9a:d4:54:8e:c2:83:f2:6c:4d: 60:cd:ce:90:08:57:5b:b7:3d:71:fc:21:64:40:83: 91:64:c1:9e:aa:4b:22:b5:7f:61:14:ad:f8:a8:b3: 7d:9e:6f:58:ae:20:12:6e:2d:30:e8:a3:04:01:29: af:10:b2:99:7e:53:f3:62:37:4c:16:69:79:47:44: 98:cf:18:9a:47:a8:d9:70:21:1f:c5:1d:06:18:6d: 69:14:f4:ef:5a:0d:6f:70:ed:54:6b:6c:02:9a:5a: 90:25:de:6c:23:b0:95:39:49:d3:d0:ad:2a:3a:8c: 4f:e2:4a:bb:0f:dd:fb:65:45:40:a4:ad:71:42:1c: 43:77:47:0c:4b:d5:ca:6a:24:c9:e2:3a:3f:4b:c4: 2e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:A3:00:31:CC:28:1D:B5:3D:A8:94:87:16:9D:46:7E:02:22:10:A5 X509v3 Authority Key Identifier: keyid:E8:71:72:8C:3A:2C:26:D0:E6:08:00:4B:A7:D1:E5:A3:58:30:95:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HFyjDosJtDmCABLp9Hlo1gwlWw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:58:11:5a:97:6b:1f:40:46:5a:16:0e:08:73:0b:45:fd:05: 5c:47:33:78:40:82:af:e9:c5:79:0e:c0:86:6c:69:55:09:9d: d5:4c:dd:f5:28:a2:8d:46:29:a4:71:31:8f:0a:f7:9b:99:fb: 05:09:ad:a5:ce:2a:62:5e:0c:40:1e:82:96:0b:c5:13:32:7f: fe:88:ff:be:3e:11:75:b7:5e:df:aa:02:68:d7:2e:3f:6a:3c: d6:11:f6:13:44:4e:bd:6e:bc:85:10:4a:cf:09:b5:80:a7:87: da:71:d9:00:fa:fc:0f:3e:df:a6:de:5d:40:76:3c:ae:79:91: 50:4a:6e:8c:27:9d:3f:f4:58:25:51:79:1b:48:7d:75:71:df: 5e:aa:d7:82:13:0e:47:35:bb:c0:ad:79:d0:18:45:11:5d:49: d3:59:bc:14:94:3d:44:50:ee:10:cc:c9:7c:98:40:75:01:80: b0:17:1f:cb:f0:7e:09:09:30:b7:68:0b:f8:94:92:d8:90:a4: 93:9f:0b:84:f5:fa:9c:8c:a2:fe:7d:26:06:f0:63:04:4a:ca: 8f:15:fb:c1:50:bb:08:fe:8a:bb:15:ce:e7:e5:e0:f2:9f:ef: 48:68:fd:5d:2d:ad:cd:54:c6:32:bb:c3:b5:ec:c7:a4:d9:79: 6e:ef:6e:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZFRkUxMTAvBgNVBAUTKEU4NzE3MjhDM0EyQzI2RDBFNjA4MDA0QkE3RDFFNUEz NTgzMDk1NkMwHhcNMjUwMzI5MDIzOTI3WhcNMjUwNDA1MDIzOTI3WjAYMRYwFAYD VQQDEw02N2U3NWQ1Zi00YTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt79gF5Y2Ar/4/Ln/Y7LRf5yEo216QBstwkAFS07GNxGG8qKFyf7bETaH12IT LJ43HphEchcf9gY6rX6nSPWv2arWUxMWJ//vwlWmzADrkFQOxmgD9h4bnLMgohBT 68yrAlFNGnynGUQvFy3fznGa1FSOwoPybE1gzc6QCFdbtz1x/CFkQIORZMGeqksi tX9hFK34qLN9nm9YriASbi0w6KMEASmvELKZflPzYjdMFml5R0SYzxiaR6jZcCEf xR0GGG1pFPTvWg1vcO1Ua2wCmlqQJd5sI7CVOUnT0K0qOoxP4kq7D937ZUVApK1x QhxDd0cMS9XKaiTJ4jo/S8QuNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOWjADHM KB21PaiUhxadRn4CIhClMB8GA1UdIwQYMBaAFOhxcow6LCbQ5ggAS6fR5aNYMJVs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkVGRS9FNEMwMEQzQzZD QTExMUVEQjQ0RTc2NUJDNEY5QUUwMi82SEZ5akRvc0p0RG1DQUJMcDlIbG8xZ3ds V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZIRnlqRG9zSnREbUNBQkxwOUhsbzFnd2xXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkVGRS9FNEMwMEQzQzZDQTExMUVEQjQ0RTc2NUJDNEY5QUUwMi82SEZ5akRvc0p0 RG1DQUJMcDlIbG8xZ3dsV3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlWBFal2sfQEZaFg4IcwtF/QVcRzN4QIKv6cV5DsCGbGlVCZ3VTN31 KKKNRimkcTGPCvebmfsFCa2lzipiXgxAHoKWC8UTMn/+iP++PhF1t17fqgJo1y4/ ajzWEfYTRE69bryFEErPCbWAp4facdkA+vwPPt+m3l1AdjyueZFQSm6MJ50/9Fgl UXkbSH11cd9eqteCEw5HNbvArXnQGEURXUnTWbwUlD1EUO4QzMl8mEB1AYCwFx/L 8H4JCTC3aAv4lJLYkKSTnwuE9fqcjKL+fSYG8GMESsqPFfvBULsI/oq7Fc7n5eDy n+9IaP1dLa3NVMYyu8O17Mek2Xlu726q -----END CERTIFICATE-----Generated at Fri Apr 4 22:09:26 2025 by rpki-client