$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft File: lf6-k6M6M5S9H2Dcu925_eByt_M.mft (raw, json) Hash identifier: F76ak/S79nM9U29VRI32DLAwUfkaUbI9/X87TaKm3As= Subject key identifier: A8:FE:B3:93:9C:2F:72:8E:0F:7D:B1:18:18:7C:2C:F8:37:A1:37:92 Authority key identifier: 95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3 Certificate issuer: /CN=A91EDB37/serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3 Certificate serial: 06CA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft Manifest number: 0697 Signing time: Tue 08 Apr 2025 22:07:43 +0000 Manifest this update: Tue 08 Apr 2025 22:07:43 +0000 Manifest next update: Tue 15 Apr 2025 22:07:43 +0000 Files and hashes: 1: lf6-k6M6M5S9H2Dcu925_eByt_M.crl (hash: zV6IKl2gnA9hKS8k3N23Z8kBMic2pa2Y7PFiAocIYvE=) 2: B32F80267BD111EBBB223C84C4F9AE02.roa (hash: qKiV0IifWKZY1JQ44Petgk24Yce0GGlR2IjNCc8NQlg=) 3: 18D6D6AAB84F11EFA5BB3E78C4F9AE02.roa (hash: 6PYoBk6/FVHAdrrxpSIqCkv9HzmickfL2Dbl1yj4CUE=) 4: 15F254A8090211EEA1C06509C4F9AE02.roa (hash: hlWFyRUgGW1LDPVT2fvGX7ZTjObEtG9lX8JYZedFnkg=) 5: 15434774090211EEA1C06509C4F9AE02.roa (hash: zYMvH0bozAXHYXp1gy3dgag6JI6cAqoQfJxD1+5vnXk=) 6: A95180F2D7DA11ECB3D1AF67C4F9AE02.roa (hash: Q72iVEgncsp2lLSVgYTmWchv3C8JihagPip5Niim/gg=) 7: A45471ACC4ED11EE8A67C739C4F9AE02.roa (hash: hCvW/bIIT6VEr19d5xgLwhdssdkrsXh540frjC0/Ghg=) 8: 8353BEA4F88211EEA770C016C4F9AE02.roa (hash: 46VM8I2pWnR3hV2SSnJ5PNhoRgQQwmH+XQIgWQ1aJ7U=) 9: FD6881C4438111ECBC63AC7BC4F9AE02.roa (hash: pPxZKn2y1CbPcH9j/w8gLWF2hGu76QpyepgvN98sxQo=) 10: 168FD534090211EEA1C06509C4F9AE02.roa (hash: DiDcYvq7OTLPfptklNaitiQoU1f3iwa59I66Hcfla2Y=) 11: 505CFB7465D211EFB4348E63C4F9AE02.roa (hash: teElfUQdL+ekEfll1vyTwU0zYIBH5IlNuT4o6J5+ShE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 22:07:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1738 (0x6ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDB37 Validity Not Before: Apr 8 22:07:43 2025 GMT Not After : Apr 15 22:07:43 2025 GMT Subject: CN=67f59e2f-0d31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:98:24:c8:a8:09:ba:37:01:4c:fe:b8:09:57: c8:2b:f6:01:99:28:26:6a:f9:1e:48:cf:42:1a:21: b0:74:6d:fb:b5:25:b6:12:ef:07:50:91:6d:05:8a: 50:10:15:05:b5:13:09:6e:94:32:12:50:d3:60:1d: 55:24:ed:c3:da:5b:cb:c9:c3:8f:26:8e:af:a1:ba: d8:1c:f1:c9:3a:cb:91:db:89:b2:05:61:08:60:bb: e3:19:d0:8e:57:f9:07:87:f8:9e:77:47:8b:74:e3: 5a:f3:eb:0c:95:4b:bc:3b:99:3a:79:4e:4a:99:43: af:60:f3:34:79:03:5c:fa:cc:d1:3c:f8:ec:1a:c6: 4c:04:65:1b:21:3d:fe:67:61:e4:9e:d5:5a:c9:3f: ba:f7:3f:cd:fc:b4:fd:76:ad:ee:25:6b:61:ba:b8: a7:6f:ae:9a:60:4e:9a:b4:9f:c6:69:75:ac:c0:6c: 01:e2:fa:f6:a5:27:4b:3f:e6:d0:34:83:3e:f7:42: ee:a7:7e:de:6a:3a:b4:ab:a6:06:79:fa:e2:07:ec: 03:f2:d4:de:54:96:a8:31:42:83:5e:a3:f7:c7:94: e6:b9:36:42:7a:71:19:cb:fa:40:60:e4:4b:c9:e9: 59:a8:1d:7d:e7:1f:8e:0d:ed:bf:3f:9a:fb:a8:8e: 16:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:FE:B3:93:9C:2F:72:8E:0F:7D:B1:18:18:7C:2C:F8:37:A1:37:92 X509v3 Authority Key Identifier: keyid:95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:0a:2d:c1:d0:2c:5d:f2:9f:e0:c4:90:49:61:06:85:f4:40: 5e:2c:79:8a:86:60:3c:b3:47:7c:5d:b0:11:ab:c1:c4:aa:10: 81:c4:03:a4:70:7c:e4:c3:1e:06:d3:e1:ea:26:c3:bf:92:cc: a5:ca:8f:e0:a1:52:4a:8d:a8:f9:af:f2:08:13:c0:0d:00:41: 06:6c:f5:28:36:f4:8d:e8:7a:65:6c:f9:19:9d:04:21:6c:97: c5:75:9e:8e:b4:e8:f0:bd:71:3a:be:94:a6:5f:92:d9:97:2d: 0a:d3:9a:33:02:96:e0:a2:a6:f0:ca:2d:35:1f:30:51:cd:1d: a5:c5:38:7f:f8:e5:eb:a7:05:2f:36:06:90:4c:9b:e0:30:aa: 72:9d:a9:12:d8:2e:db:93:1b:14:ba:e7:86:84:34:56:c0:5b: 19:14:02:d6:90:29:54:e8:d9:b2:b8:e8:cf:38:4f:19:49:25: f4:66:96:18:04:6d:9d:8d:3c:0c:1c:73:45:fa:91:cb:23:42: 45:97:fa:e2:1b:1b:f0:ab:31:b3:a1:5e:30:c3:21:49:9d:97: 5c:1b:c9:d7:85:62:31:fa:8b:2c:f8:63:34:8b:ee:77:39:6a: fc:99:7d:27:7d:60:ef:88:39:d1:ad:73:d0:9a:5b:0c:82:ed: 95:79:1c:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURCMzcxMTAvBgNVBAUTKDk1RkVCRTkzQTMzQTMzOTRCRDFGNjBEQ0JCRERCOUZE RTA3MkI3RjMwHhcNMjUwNDA4MjIwNzQzWhcNMjUwNDE1MjIwNzQzWjAYMRYwFAYD VQQDEw02N2Y1OWUyZi0wZDMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArJgkyKgJujcBTP64CVfIK/YBmSgmavkeSM9CGiGwdG37tSW2Eu8HUJFtBYpQ EBUFtRMJbpQyElDTYB1VJO3D2lvLycOPJo6vobrYHPHJOsuR24myBWEIYLvjGdCO V/kHh/ied0eLdONa8+sMlUu8O5k6eU5KmUOvYPM0eQNc+szRPPjsGsZMBGUbIT3+ Z2HkntVayT+69z/N/LT9dq3uJWthurinb66aYE6atJ/GaXWswGwB4vr2pSdLP+bQ NIM+90Lup37eajq0q6YGefriB+wD8tTeVJaoMUKDXqP3x5TmuTZCenEZy/pAYORL yelZqB195x+ODe2/P5r7qI4WXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKj+s5Oc L3KOD32xGBh8LPg3oTeSMB8GA1UdIwQYMBaAFJX+vpOjOjOUvR9g3Lvduf3gcrfz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREIzNy80REU2MzVFMDc4 QTAxMUVCOTUwRDMxNzVDNEY5QUUwMi9sZjYtazZNNk01UzlIMkRjdTkyNV9lQnl0 X00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xmNi1rNk02TTVTOUgyRGN1OTI1X2VCeXRfTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF REIzNy80REU2MzVFMDc4QTAxMUVCOTUwRDMxNzVDNEY5QUUwMi9sZjYtazZNNk01 UzlIMkRjdTkyNV9lQnl0X00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/Ci3B0Cxd8p/gxJBJYQaF9EBeLHmKhmA8s0d8XbARq8HEqhCBxAOk cHzkwx4G0+HqJsO/ksylyo/goVJKjaj5r/IIE8ANAEEGbPUoNvSN6HplbPkZnQQh bJfFdZ6OtOjwvXE6vpSmX5LZly0K05ozApbgoqbwyi01HzBRzR2lxTh/+OXrpwUv NgaQTJvgMKpynakS2C7bkxsUuueGhDRWwFsZFALWkClU6NmyuOjPOE8ZSSX0ZpYY BG2djTwMHHNF+pHLI0JFl/riGxvwqzGzoV4wwyFJnZdcG8nXhWIx+oss+GM0i+53 OWr8mX0nfWDviDnRrXPQmlsMgu2VeRzr -----END CERTIFICATE-----Generated at Thu Apr 10 22:12:22 2025 by rpki-client