$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFCFF/18ACE3F6821F11EFA1DB4C75C4F9AE02/6_vUy5tYrAgtPzgph6WXpYyWupE.mft File: 6_vUy5tYrAgtPzgph6WXpYyWupE.mft (raw, json) Hash identifier: MKnY/I0tdOi0MjpRy9koyzQ5HJn0OjKyHw3ZHWSH0kY= Subject key identifier: 56:1B:A8:B9:D5:07:68:52:C1:CB:6B:82:4B:F9:74:CE:1B:0A:AF:50 Authority key identifier: EB:FB:D4:CB:9B:58:AC:08:2D:3F:38:29:87:A5:97:A5:8C:96:BA:91 Certificate issuer: /CN=A91EFCFF/serialNumber=EBFBD4CB9B58AC082D3F382987A597A58C96BA91 Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6_vUy5tYrAgtPzgph6WXpYyWupE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFCFF/18ACE3F6821F11EFA1DB4C75C4F9AE02/6_vUy5tYrAgtPzgph6WXpYyWupE.mft Manifest number: 67 Signing time: Thu 17 Apr 2025 05:46:29 +0000 Manifest this update: Thu 17 Apr 2025 05:46:28 +0000 Manifest next update: Thu 24 Apr 2025 05:46:28 +0000 Files and hashes: 1: 6_vUy5tYrAgtPzgph6WXpYyWupE.crl (hash: SgluRJ2b2bFDG1xxoZDpb8vz8wDRgxNyj29SVmG7Qw4=) 2: F042F19A911311EF9A1A7F54C4F9AE02.roa (hash: hBFHKnjfNPkSPQ8LFBtT/taQcDMk7/Q7iyGIaAxoH34=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFCFF/18ACE3F6821F11EFA1DB4C75C4F9AE02/6_vUy5tYrAgtPzgph6WXpYyWupE.crl rsync://rpki.apnic.net/member_repository/A91EFCFF/18ACE3F6821F11EFA1DB4C75C4F9AE02/6_vUy5tYrAgtPzgph6WXpYyWupE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6_vUy5tYrAgtPzgph6WXpYyWupE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 05:46:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFCFF, serialNumber=EBFBD4CB9B58AC082D3F382987A597A58C96BA91 Validity Not Before: Apr 17 05:46:28 2025 GMT Not After : Apr 24 05:46:28 2025 GMT Subject: CN=680095b4-bc5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9c:1c:41:96:86:d2:25:fa:2c:74:ca:b9:0d: 5f:04:3e:fa:20:fe:70:e2:a7:40:0e:b7:be:c3:41: e5:3d:08:c5:80:61:b4:67:84:aa:e2:8e:a6:b2:21: 65:c3:10:e1:eb:cf:d2:d0:fd:1c:41:cc:09:0a:34: bf:91:7f:1b:06:63:45:fd:71:51:ab:54:a7:fe:ac: 7c:11:33:fb:78:47:71:90:da:16:3f:ac:d8:ad:d2: cb:8c:79:c7:05:d8:12:23:9b:88:1d:cf:ff:06:65: 11:c4:43:db:ad:ea:05:af:68:eb:c8:34:8c:f1:eb: 37:91:d1:34:1d:4e:e1:61:17:7b:85:4d:46:39:d9: eb:73:aa:79:fb:c9:30:09:50:db:86:9e:3d:37:17: ce:fd:d6:a0:28:53:ff:c1:02:95:5f:98:fa:57:fd: 64:8f:55:9c:a7:d5:45:4a:9d:42:0a:6a:cf:4d:bd: 53:0c:81:39:27:80:a3:b8:3c:89:80:fb:7a:86:c1: 5c:55:a6:c5:41:ff:01:c9:7c:10:44:a6:fc:0e:37: d8:c1:ac:2d:93:73:83:0e:d5:72:ee:85:c7:c0:cb: 8b:ce:4e:90:4f:65:71:be:73:25:9a:30:8c:59:03: 2c:45:4f:8e:06:ab:6b:fb:19:46:06:41:41:0e:de: fb:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:1B:A8:B9:D5:07:68:52:C1:CB:6B:82:4B:F9:74:CE:1B:0A:AF:50 X509v3 Authority Key Identifier: keyid:EB:FB:D4:CB:9B:58:AC:08:2D:3F:38:29:87:A5:97:A5:8C:96:BA:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFCFF/18ACE3F6821F11EFA1DB4C75C4F9AE02/6_vUy5tYrAgtPzgph6WXpYyWupE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6_vUy5tYrAgtPzgph6WXpYyWupE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFCFF/18ACE3F6821F11EFA1DB4C75C4F9AE02/6_vUy5tYrAgtPzgph6WXpYyWupE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:39:65:ee:5b:29:ec:a8:26:8f:d1:26:fa:e8:17:34:0a:61: fe:da:2e:c6:a5:f7:8f:51:24:b3:7e:e2:43:63:cd:81:c6:5a: 0e:90:31:0d:e5:e7:44:b0:b9:27:70:80:33:bd:2a:0f:f8:e8: bb:7a:db:99:e4:da:63:06:04:a0:2a:0d:78:01:28:7e:fb:84: 32:ba:92:33:f4:d7:2a:44:2f:d5:b0:5e:9c:be:e4:45:9f:cb: 05:7a:d7:0c:06:8b:7c:b9:c7:e2:20:5a:2a:d9:ff:72:01:4e: 2f:31:21:45:de:be:6b:07:aa:70:d1:e5:5c:02:6f:1d:26:ce: 4f:9f:74:e4:ec:c5:cc:fc:5c:7d:f2:bc:f8:01:61:cc:a9:b5: a8:13:88:4e:bd:1d:5d:22:44:fb:b2:fb:33:1f:fa:be:74:6b: 5b:92:c5:7d:74:2a:fc:ff:0d:5e:35:94:03:b2:cd:99:ad:36: 0f:89:a5:68:a9:b8:5e:09:f0:de:07:1a:1f:61:fa:c5:3a:72: d3:e2:d1:06:9e:6d:d1:d4:1a:e5:24:36:67:12:ce:9f:84:34: 39:cf:73:e8:ec:97:ad:03:8a:f7:cf:85:af:44:15:53:18:9a: be:62:1b:64:5c:e3:ac:40:0e:b7:5b:13:42:04:76:7e:99:f6: 14:55:f5:e0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RkNGRjExMC8GA1UEBRMoRUJGQkQ0Q0I5QjU4QUMwODJEM0YzODI5ODdBNTk3QTU4 Qzk2QkE5MTAeFw0yNTA0MTcwNTQ2MjhaFw0yNTA0MjQwNTQ2MjhaMBgxFjAUBgNV BAMTDTY4MDA5NWI0LWJjNWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCnBxBlobSJfosdMq5DV8EPvog/nDip0AOt77DQeU9CMWAYbRnhKrijqayIWXD EOHrz9LQ/RxBzAkKNL+RfxsGY0X9cVGrVKf+rHwRM/t4R3GQ2hY/rNit0suMeccF 2BIjm4gdz/8GZRHEQ9ut6gWvaOvINIzx6zeR0TQdTuFhF3uFTUY52etzqnn7yTAJ UNuGnj03F8791qAoU//BApVfmPpX/WSPVZyn1UVKnUIKas9NvVMMgTkngKO4PImA +3qGwVxVpsVB/wHJfBBEpvwON9jBrC2Tc4MO1XLuhcfAy4vOTpBPZXG+cyWaMIxZ AyxFT44Gq2v7GUYGQUEO3vtpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVhuoudUH aFLBy2uCS/l0zhsKr1AwHwYDVR0jBBgwFoAU6/vUy5tYrAgtPzgph6WXpYyWupEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVGQ0ZGLzE4QUNFM0Y2ODIx RjExRUZBMURCNEM3NUM0RjlBRTAyLzZfdlV5NXRZckFndFB6Z3BoNldYcFl5V3Vw RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNl92VXk1dFlyQWd0UHpncGg2V1hwWXlXdXBFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVG Q0ZGLzE4QUNFM0Y2ODIxRjExRUZBMURCNEM3NUM0RjlBRTAyLzZfdlV5NXRZckFn dFB6Z3BoNldYcFl5V3VwRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACc5Ze5bKeyoJo/RJvroFzQKYf7aLsal949RJLN+4kNjzYHGWg6QMQ3l 50SwuSdwgDO9Kg/46Lt625nk2mMGBKAqDXgBKH77hDK6kjP01ypEL9WwXpy+5EWf ywV61wwGi3y5x+IgWirZ/3IBTi8xIUXevmsHqnDR5VwCbx0mzk+fdOTsxcz8XH3y vPgBYcyptagTiE69HV0iRPuy+zMf+r50a1uSxX10Kvz/DV41lAOyzZmtNg+JpWip uF4J8N4HGh9h+sU6ctPi0QaebdHUGuUkNmcSzp+ENDnPc+jsl60DivfPha9EFVMY mr5iG2Rc46xADrdbE0IEdn6Z9hRV9eA= -----END CERTIFICATE-----Generated at Fri Apr 18 15:01:20 2025 by rpki-client