$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft File: 6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft (raw, json) Hash identifier: R1Y0RpkHXcO+kcFbbGAGIV6OPsrgg5eg0Bk3dZV8W+4= Subject key identifier: 8B:5B:DC:D8:9D:D5:CC:83:DB:44:E7:F8:9E:D7:8C:2F:F6:8F:0D:F9 Authority key identifier: E8:CF:22:A0:8E:43:91:CA:D1:50:FA:31:B4:4D:C9:3C:8A:B8:25:EA Certificate issuer: /CN=A91A9083/serialNumber=E8CF22A08E4391CAD150FA31B44DC93C8AB825EA Certificate serial: 46 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft Manifest number: 43 Signing time: Fri 09 May 2025 06:32:12 +0000 Manifest this update: Fri 09 May 2025 06:32:11 +0000 Manifest next update: Fri 16 May 2025 06:32:11 +0000 Files and hashes: 1: 6M8ioI5DkcrRUPoxtE3JPIq4Jeo.crl (hash: 200A0p5EAByCPJYjuMhI44x3uq6qPsvT/3GYqC4+/Vo=) 2: 0C2077B6D1B511EF944F205DC4F9AE02.roa (hash: rlJlkHo65xec8U7bYSTnPjms9g6+7D4Hmq1L6Dej1SU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.crl rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 06:32:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9083, serialNumber=E8CF22A08E4391CAD150FA31B44DC93C8AB825EA Validity Not Before: May 9 06:32:11 2025 GMT Not After : May 16 06:32:11 2025 GMT Subject: CN=681da16b-5b08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:96:b5:3f:dc:9d:16:7a:a0:b6:8b:10:df:41: 16:f6:bb:4c:ec:6a:19:57:96:f9:88:b7:08:72:48: 7e:45:3d:ce:26:65:03:25:82:81:b0:72:d6:8e:b9: 3e:ce:20:58:52:f4:7f:b3:56:95:42:ce:18:c9:ef: 57:96:ce:62:fc:5e:b5:31:4e:e6:b5:87:b1:18:5c: 9e:46:0a:72:41:76:c7:31:e1:c6:67:a6:ef:05:47: 80:65:72:9b:83:a1:f1:dd:83:75:ba:1c:83:5d:89: ca:b9:be:7f:ac:70:5c:27:31:2c:eb:1c:b2:ed:94: 8a:06:30:ca:89:9a:f6:f4:d4:10:8f:d5:e3:78:f8: bc:da:6e:67:e4:e1:6e:1d:6a:2a:1a:53:9a:73:39: 6c:3e:8f:96:69:f1:c2:64:b4:8a:98:d6:f4:65:bc: 2b:b4:15:69:0a:01:0a:dd:d1:a7:d0:07:0f:2f:bf: 9d:e1:13:4a:e6:6b:b4:7a:a1:cf:d1:17:6d:6c:af: 2f:6e:a6:9e:b5:77:fa:8f:d6:b5:da:0a:77:d4:06: 3b:59:e2:d6:56:f7:23:16:1c:bf:f7:8f:98:a2:b0: 1e:32:af:25:1e:ee:3b:3c:ca:92:cc:d1:91:32:79: 9c:25:2d:10:f4:81:ce:2b:bc:f6:1b:22:e5:44:4a: a5:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:5B:DC:D8:9D:D5:CC:83:DB:44:E7:F8:9E:D7:8C:2F:F6:8F:0D:F9 X509v3 Authority Key Identifier: keyid:E8:CF:22:A0:8E:43:91:CA:D1:50:FA:31:B4:4D:C9:3C:8A:B8:25:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:7f:ea:41:ad:d0:c0:f4:f0:0b:14:58:92:e9:b4:fe:26:a4: 14:12:de:96:d7:af:43:6c:4e:f8:c3:3b:85:4a:36:71:a4:17: 27:a3:e0:f6:af:c4:9e:f9:f3:88:70:42:9e:ae:36:22:36:81: 98:68:e3:c6:09:05:ca:46:e8:e0:65:53:b0:f5:5c:0a:e7:6f: 2a:23:92:7d:8f:39:49:36:6c:3b:ed:8c:22:e9:d6:9f:3b:97: 79:39:c1:ce:4b:ff:00:21:81:13:96:09:0a:d0:92:43:16:96: d3:2c:c1:e6:2e:cd:b9:75:c5:fd:61:92:48:15:38:38:dd:75: aa:13:c3:2b:e9:46:d5:7c:3b:9d:89:10:6b:fd:97:a1:f5:52: 1e:62:3a:f4:c4:2e:2a:16:a1:f2:31:08:b4:ac:22:af:0e:b3: d0:17:83:5a:e6:eb:a1:71:3e:58:1e:db:eb:27:49:69:7c:f6: 39:8b:8e:c4:ee:0b:7b:61:92:72:ad:b5:ff:44:b5:9b:31:2f: 3b:71:c4:8b:bf:23:70:22:7b:bc:7f:f2:b7:a3:a1:87:0a:be: 10:1f:5e:9d:9b:7e:9f:75:61:05:ef:69:5f:f2:9e:f0:11:aa: 32:72:d9:63:70:5b:81:6b:6b:9e:e9:2b:54:6b:26:77:18:9d: f9:24:e7:e7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OTA4MzExMC8GA1UEBRMoRThDRjIyQTA4RTQzOTFDQUQxNTBGQTMxQjQ0REM5M0M4 QUI4MjVFQTAeFw0yNTA1MDkwNjMyMTFaFw0yNTA1MTYwNjMyMTFaMBgxFjAUBgNV BAMTDTY4MWRhMTZiLTViMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDglrU/3J0WeqC2ixDfQRb2u0zsahlXlvmItwhySH5FPc4mZQMlgoGwctaOuT7O IFhS9H+zVpVCzhjJ71eWzmL8XrUxTua1h7EYXJ5GCnJBdscx4cZnpu8FR4BlcpuD ofHdg3W6HINdicq5vn+scFwnMSzrHLLtlIoGMMqJmvb01BCP1eN4+Lzabmfk4W4d aioaU5pzOWw+j5Zp8cJktIqY1vRlvCu0FWkKAQrd0afQBw8vv53hE0rma7R6oc/R F21sry9upp61d/qP1rXaCnfUBjtZ4tZW9yMWHL/3j5iisB4yryUe7js8ypLM0ZEy eZwlLRD0gc4rvPYbIuVESqUfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUi1vc2J3V zIPbROf4nteML/aPDfkwHwYDVR0jBBgwFoAU6M8ioI5DkcrRUPoxtE3JPIq4Jeow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5MDgzL0MwNkYyRTQyRDFC MDExRUY4ODMzQzkzM0M0RjlBRTAyLzZNOGlvSTVEa2NyUlVQb3h0RTNKUElxNEpl by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNk04aW9JNURrY3JSVVBveHRFM0pQSXE0SmVvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 MDgzL0MwNkYyRTQyRDFCMDExRUY4ODMzQzkzM0M0RjlBRTAyLzZNOGlvSTVEa2Ny UlVQb3h0RTNKUElxNEplby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB9/6kGt0MD08AsUWJLptP4mpBQS3pbXr0NsTvjDO4VKNnGkFyej4Pav xJ7584hwQp6uNiI2gZho48YJBcpG6OBlU7D1XArnbyojkn2POUk2bDvtjCLp1p87 l3k5wc5L/wAhgROWCQrQkkMWltMsweYuzbl1xf1hkkgVODjddaoTwyvpRtV8O52J EGv9l6H1Uh5iOvTELioWofIxCLSsIq8Os9AXg1rm66FxPlge2+snSWl89jmLjsTu C3thknKttf9EtZsxLztxxIu/I3Aie7x/8rejoYcKvhAfXp2bfp91YQXvaV/ynvAR qjJy2WNwW4Fra57pK1RrJncYnfkk5+c= -----END CERTIFICATE-----Generated at Fri May 9 21:34:59 2025 by rpki-client