$ rpki-client -vvf rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.mft File: a6me1jkaZ8ymEOVl9FPrCRJRTw4.mft (raw, json) Hash identifier: xWh7yfTxjNjZphwVfjJO1761Ylx3d4OV+biPqpFBAWY= Subject key identifier: E6:E2:3E:31:34:D2:38:AB:12:18:DF:FD:06:6F:7A:B9:10:C2:4C:8F Authority key identifier: 6B:A9:9E:D6:39:1A:67:CC:A6:10:E5:65:F4:53:EB:09:12:51:4F:0E Certificate issuer: /CN=A91977B8/serialNumber=6BA99ED6391A67CCA610E565F453EB0912514F0E Certificate serial: F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6me1jkaZ8ymEOVl9FPrCRJRTw4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.mft Manifest number: EC Signing time: Sat 31 May 2025 05:03:27 +0000 Manifest this update: Sat 31 May 2025 05:03:27 +0000 Manifest next update: Sat 07 Jun 2025 05:03:27 +0000 Files and hashes: 1: a6me1jkaZ8ymEOVl9FPrCRJRTw4.crl (hash: XLLORj8aPRwF3OWG+9dzOcSKJkcYxPybq82pzgWgrGo=) 2: B35DF2B8FBA211EEA8D1C351C4F9AE02.roa (hash: k6I7AMbCMtobQeA7UDNDALlbJqAmqnjNCZm5YuU1oUU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.crl rsync://rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6me1jkaZ8ymEOVl9FPrCRJRTw4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:03:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 243 (0xf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91977B8, serialNumber=6BA99ED6391A67CCA610E565F453EB0912514F0E Validity Not Before: May 31 05:03:27 2025 GMT Not After : Jun 7 05:03:27 2025 GMT Subject: CN=683a8d9f-a613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:81:3b:05:8a:73:c1:02:bc:3d:ce:07:06:d2: af:73:46:71:8e:98:0b:75:08:53:5b:1e:9b:7a:fb: 3c:77:81:81:78:03:a9:a5:99:65:1b:4c:e7:0c:05: dc:83:39:5d:68:98:fb:df:3c:67:18:29:c1:f2:a9: a2:2e:72:5d:ae:55:1f:48:da:19:13:0a:ad:79:7f: 86:58:99:b5:7c:a4:77:a2:b5:5e:3e:12:4e:8f:c1: 19:3b:78:19:96:83:a1:5e:1b:ce:4c:de:f2:47:4d: 4a:54:cf:aa:68:ff:05:4e:61:14:e4:82:12:4e:ba: 1d:31:2f:70:42:96:1b:67:79:25:97:28:01:dc:c4: 11:17:c3:77:34:a9:aa:5e:80:be:93:b8:11:aa:73: a9:f4:32:7d:7d:59:37:b5:bb:52:a3:d7:cd:dc:02: 0b:ef:7e:44:ca:e0:bf:41:ef:52:bf:c2:b0:91:18: 43:3e:80:0f:5c:b2:cd:56:1f:2f:eb:08:31:07:7e: c0:54:19:92:8c:61:fd:06:ca:1c:d9:6d:f3:64:d9: e3:0a:41:2c:16:30:90:78:bf:7d:21:5d:3c:e0:81: f1:17:cb:bb:97:db:9d:40:8b:3b:5c:51:5b:bb:96: 2c:4c:30:74:84:f4:e7:6f:f7:d2:75:42:30:4d:2c: ec:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:E2:3E:31:34:D2:38:AB:12:18:DF:FD:06:6F:7A:B9:10:C2:4C:8F X509v3 Authority Key Identifier: keyid:6B:A9:9E:D6:39:1A:67:CC:A6:10:E5:65:F4:53:EB:09:12:51:4F:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6me1jkaZ8ymEOVl9FPrCRJRTw4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:1c:1a:d1:14:e5:54:0f:9a:c5:f1:16:5d:15:f9:91:df:b7: a9:bd:07:f2:a4:bd:ea:19:db:13:a6:93:77:7b:26:ff:61:bb: 33:08:db:29:c1:0a:c5:b8:01:af:58:6a:ab:76:c7:09:d3:38: 41:b9:7e:14:19:da:bc:10:ff:49:f1:d4:92:78:51:71:bb:96: e7:ef:b1:cf:11:24:6f:7b:fe:e7:21:54:8e:6a:d0:9a:90:19: 5f:f3:cf:0e:0b:e6:a1:f9:72:1f:ba:d1:3c:ca:fa:6f:18:f7: b0:a4:33:58:7a:98:34:8c:20:1a:f3:ff:9b:a0:8f:92:05:9a: 3d:13:9f:69:d4:1b:01:1f:2f:70:b0:aa:12:48:a0:fb:53:de: 5a:c9:95:22:c7:7f:c7:8a:20:b7:74:5f:80:c8:9f:4c:73:11: ad:2c:89:fa:46:5d:af:cf:ce:2e:ef:17:24:61:69:f8:e2:b3: a8:02:e6:cf:c5:dc:2f:bb:83:56:68:40:19:b8:d7:2f:58:c7: 8a:dd:e6:ab:63:69:af:77:98:a0:16:8a:6e:8d:e7:88:32:85: d4:67:2e:2a:2b:49:34:f4:9e:2e:d9:a7:3c:ea:44:87:f3:77: f5:5a:b6:57:b3:ad:07:ec:d8:e1:73:41:bc:df:4b:e2:63:a9: ea:42:38:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc3QjgxMTAvBgNVBAUTKDZCQTk5RUQ2MzkxQTY3Q0NBNjEwRTU2NUY0NTNFQjA5 MTI1MTRGMEUwHhcNMjUwNTMxMDUwMzI3WhcNMjUwNjA3MDUwMzI3WjAYMRYwFAYD VQQDEw02ODNhOGQ5Zi1hNjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxoE7BYpzwQK8Pc4HBtKvc0ZxjpgLdQhTWx6bevs8d4GBeAOppZllG0znDAXc gzldaJj73zxnGCnB8qmiLnJdrlUfSNoZEwqteX+GWJm1fKR3orVePhJOj8EZO3gZ loOhXhvOTN7yR01KVM+qaP8FTmEU5IISTrodMS9wQpYbZ3kllygB3MQRF8N3NKmq XoC+k7gRqnOp9DJ9fVk3tbtSo9fN3AIL735EyuC/Qe9Sv8KwkRhDPoAPXLLNVh8v 6wgxB37AVBmSjGH9Bsoc2W3zZNnjCkEsFjCQeL99IV084IHxF8u7l9udQIs7XFFb u5YsTDB0hPTnb/fSdUIwTSzs5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFObiPjE0 0jirEhjf/QZverkQwkyPMB8GA1UdIwQYMBaAFGupntY5GmfMphDlZfRT6wkSUU8O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzdCOC8wQUIwNzQwNEUx RjAxMUVFOTAxQTYwODVDNEY5QUUwMi9hNm1lMWprYVo4eW1FT1ZsOUZQckNSSlJU dzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E2bWUxamthWjh5bUVPVmw5RlByQ1JKUlR3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzdCOC8wQUIwNzQwNEUxRjAxMUVFOTAxQTYwODVDNEY5QUUwMi9hNm1lMWprYVo4 eW1FT1ZsOUZQckNSSlJUdzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnHBrRFOVUD5rF8RZdFfmR37epvQfypL3qGdsTppN3eyb/YbszCNsp wQrFuAGvWGqrdscJ0zhBuX4UGdq8EP9J8dSSeFFxu5bn77HPESRve/7nIVSOatCa kBlf888OC+ah+XIfutE8yvpvGPewpDNYepg0jCAa8/+boI+SBZo9E59p1BsBHy9w sKoSSKD7U95ayZUix3/HiiC3dF+AyJ9McxGtLIn6Rl2vz84u7xckYWn44rOoAubP xdwvu4NWaEAZuNcvWMeK3earY2mvd5igFopujeeIMoXUZy4qK0k09J4u2ac86kSH 83f1WrZXs60H7Njhc0G830viY6nqQjjC -----END CERTIFICATE-----Generated at Sat May 31 17:36:09 2025 by rpki-client