$ rpki-client -vvf rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.mft File: 6oOvSiHLwgcfVpVuXd1YTHY4-ls.mft (raw, json) Hash identifier: DbaWCMzpbKbxa3T2Y46w6/qpYgQZxxIf/IBij5BrwzU= Subject key identifier: CE:8B:CE:AF:70:19:4C:26:23:4F:B6:03:F2:6B:89:67:D9:A7:12:28 Authority key identifier: EA:83:AF:4A:21:CB:C2:07:1F:56:95:6E:5D:DD:58:4C:76:38:FA:5B Certificate issuer: /CN=A911C362/serialNumber=EA83AF4A21CBC2071F56956E5DDD584C7638FA5B Certificate serial: F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.mft Manifest number: D9 Signing time: Sat 31 May 2025 05:32:03 +0000 Manifest this update: Sat 31 May 2025 05:32:03 +0000 Manifest next update: Sat 07 Jun 2025 05:32:03 +0000 Files and hashes: 1: 6oOvSiHLwgcfVpVuXd1YTHY4-ls.crl (hash: mr4gf8QEEQ2Q5fMQOLyt31i+8fqmKBggAcyS7I25YXk=) 2: 6492D4985B9011EF8DB48C24C4F9AE02.roa (hash: UPmCGARDDskezK4JcktOFu0RSSCwY7yg4+DuQZjC7iA=) 3: 90C05DD633A111EF862DBF10C4F9AE02.roa (hash: xnGbCBgPXY4F/fgFAEYRN9dsh6A0F9wHpHXallGErko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.crl rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:32:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 240 (0xf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C362, serialNumber=EA83AF4A21CBC2071F56956E5DDD584C7638FA5B Validity Not Before: May 31 05:32:03 2025 GMT Not After : Jun 7 05:32:03 2025 GMT Subject: CN=683a9453-24ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:98:84:2e:48:11:6b:ef:0f:32:e3:bb:84:f8: 60:3d:f8:bf:c9:8e:06:c1:5e:33:a4:e9:3c:fc:93: d9:b9:f0:84:48:52:e9:38:20:81:14:2d:71:cc:ac: e8:85:25:5e:cd:c4:fb:05:83:8a:f4:5b:5e:71:bc: 28:e1:89:a1:90:d1:da:86:85:01:9d:6b:8c:a4:4d: 6f:91:1f:0a:2c:12:78:1b:d8:43:1c:b5:a1:54:ac: c4:75:03:1b:d1:00:6b:50:ff:72:e0:a4:30:7d:f6: 77:34:56:64:b3:22:ee:78:e8:73:45:a1:37:9b:2f: d3:39:38:41:5c:d4:62:90:1c:55:1d:30:a9:47:b0: 51:39:ca:f2:74:c2:fb:51:b8:6e:c4:80:03:4b:80: ec:eb:07:c5:3f:0a:64:a0:e2:4a:14:7f:6b:a7:4d: fc:45:08:13:59:b7:5f:c9:4b:62:98:8e:c9:71:02: f4:ba:ef:04:c8:2f:17:0e:4e:cd:d0:e8:b8:d6:5f: d9:95:f0:71:39:51:6d:70:b6:7e:4e:30:14:ea:36: 8b:19:7a:80:d9:bf:26:64:3b:6f:ef:48:2f:eb:79: 3c:20:e3:18:9d:89:c7:ba:0e:e3:0f:43:2f:f4:8a: af:0c:7f:0b:eb:c4:c4:20:47:1b:ad:8f:8f:73:74: 59:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:8B:CE:AF:70:19:4C:26:23:4F:B6:03:F2:6B:89:67:D9:A7:12:28 X509v3 Authority Key Identifier: keyid:EA:83:AF:4A:21:CB:C2:07:1F:56:95:6E:5D:DD:58:4C:76:38:FA:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:f0:27:e9:1e:48:13:5a:51:1c:2c:df:24:14:75:c6:e6:27: 3e:d3:05:48:aa:74:c2:cb:e9:3b:f4:ad:7c:bd:5b:4d:d3:14: 18:2f:bd:3e:f0:d2:13:88:10:0a:97:f9:f4:04:bf:d6:ee:57: ad:26:2c:b2:88:dd:b0:48:8f:fb:95:c8:75:46:81:e2:5d:74: 38:2d:d5:61:2d:3a:89:9b:f5:df:75:e5:32:45:16:68:b1:6b: 2b:8b:c3:b5:04:18:f5:6e:d1:b8:ff:3f:ac:c7:a1:bf:21:e9: 82:4b:c5:23:ba:8e:2e:40:c9:48:49:07:71:c4:2a:e4:f3:2e: 72:20:49:98:68:4f:7c:9c:bb:59:f8:44:c5:b0:3b:85:01:db: e3:e5:aa:2e:d7:7c:bc:12:32:8d:38:5c:20:b6:0d:85:12:7c: 63:a4:ce:08:05:6e:cd:74:13:2f:db:97:5c:18:b5:e4:aa:ea: 0f:f1:fc:df:5c:66:11:e1:a4:2a:b9:9c:ba:da:72:08:2e:dc: 57:b5:c2:1b:17:28:c9:eb:90:03:a1:4d:cf:63:3d:92:c3:11: 42:e3:33:0c:62:8f:79:d4:20:22:a5:07:1d:ba:13:70:9c:85: fd:b5:e3:25:2d:cb:77:e7:ae:d9:0b:42:72:b1:8d:c8:9e:ff: 00:8d:d7:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMzNjIxMTAvBgNVBAUTKEVBODNBRjRBMjFDQkMyMDcxRjU2OTU2RTVEREQ1ODRD NzYzOEZBNUIwHhcNMjUwNTMxMDUzMjAzWhcNMjUwNjA3MDUzMjAzWjAYMRYwFAYD VQQDEw02ODNhOTQ1My0yNGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA25iELkgRa+8PMuO7hPhgPfi/yY4GwV4zpOk8/JPZufCESFLpOCCBFC1xzKzo hSVezcT7BYOK9Ftecbwo4YmhkNHahoUBnWuMpE1vkR8KLBJ4G9hDHLWhVKzEdQMb 0QBrUP9y4KQwffZ3NFZksyLueOhzRaE3my/TOThBXNRikBxVHTCpR7BROcrydML7 UbhuxIADS4Ds6wfFPwpkoOJKFH9rp038RQgTWbdfyUtimI7JcQL0uu8EyC8XDk7N 0Oi41l/ZlfBxOVFtcLZ+TjAU6jaLGXqA2b8mZDtv70gv63k8IOMYnYnHug7jD0Mv 9IqvDH8L68TEIEcbrY+Pc3RZjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM6Lzq9w GUwmI0+2A/JriWfZpxIoMB8GA1UdIwQYMBaAFOqDr0ohy8IHH1aVbl3dWEx2OPpb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzM2Mi82QTA4RjQ5MjI1 NzcxMUVGQkIwQjgyNTFDNEY5QUUwMi82b092U2lITHdnY2ZWcFZ1WGQxWVRIWTQt bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZvT3ZTaUhMd2djZlZwVnVYZDFZVEhZNC1scy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzM2Mi82QTA4RjQ5MjI1NzcxMUVGQkIwQjgyNTFDNEY5QUUwMi82b092U2lITHdn Y2ZWcFZ1WGQxWVRIWTQtbHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJ8CfpHkgTWlEcLN8kFHXG5ic+0wVIqnTCy+k79K18vVtN0xQYL70+ 8NITiBAKl/n0BL/W7letJiyyiN2wSI/7lch1RoHiXXQ4LdVhLTqJm/XfdeUyRRZo sWsri8O1BBj1btG4/z+sx6G/IemCS8Ujuo4uQMlISQdxxCrk8y5yIEmYaE98nLtZ +ETFsDuFAdvj5aou13y8EjKNOFwgtg2FEnxjpM4IBW7NdBMv25dcGLXkquoP8fzf XGYR4aQquZy62nIILtxXtcIbFyjJ65ADoU3PYz2SwxFC4zMMYo951CAipQcduhNw nIX9teMlLct3567ZC0JysY3Inv8AjdcE -----END CERTIFICATE-----Generated at Sat May 31 17:51:32 2025 by rpki-client