$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft File: 6HFyjDosJtDmCABLp9Hlo1gwlWw.mft (raw, json) Hash identifier: NcFneSItkgM7wr/CVqCFDASHDqf+/woJU33leJWrqOA= Subject key identifier: 8F:AB:DA:58:BB:AF:B5:C7:91:AF:C7:34:2A:E2:F2:B1:11:25:D2:4D Authority key identifier: E8:71:72:8C:3A:2C:26:D0:E6:08:00:4B:A7:D1:E5:A3:58:30:95:6C Certificate issuer: /CN=A91E6EFE/serialNumber=E871728C3A2C26D0E608004BA7D1E5A35830956C Certificate serial: 01DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HFyjDosJtDmCABLp9Hlo1gwlWw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft Manifest number: 01DA Signing time: Sat 31 May 2025 02:30:52 +0000 Manifest this update: Sat 31 May 2025 02:30:52 +0000 Manifest next update: Sat 07 Jun 2025 02:30:52 +0000 Files and hashes: 1: 6HFyjDosJtDmCABLp9Hlo1gwlWw.crl (hash: r2c8vQPxaCJep0G8Zs7AdSi2qAsyIy/ZUNjAzO56mYU=) 2: 8367C13A6CA411ED9DD6425CC4F9AE02.roa (hash: qStgTKoKUIh+qGv4WydL84alI8T6N4vvNinWDR/WOZo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.crl rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HFyjDosJtDmCABLp9Hlo1gwlWw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:30:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 479 (0x1df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6EFE, serialNumber=E871728C3A2C26D0E608004BA7D1E5A35830956C Validity Not Before: May 31 02:30:52 2025 GMT Not After : Jun 7 02:30:52 2025 GMT Subject: CN=683a69dc-8780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:27:32:5b:3a:f9:a7:9b:83:66:d9:4b:49:39: 1b:5f:af:c3:60:c1:30:56:e1:76:1f:c5:e2:91:5f: b4:db:ac:2f:77:8f:a6:3d:4f:60:fc:a6:91:ed:12: cd:ef:77:3d:08:48:6a:6a:82:78:d5:37:8a:cb:1c: c3:5a:b7:8b:99:af:ee:4f:ab:bf:eb:04:18:0a:26: df:47:53:14:f7:e2:68:b8:61:e4:4e:da:bb:c0:b4: 90:d4:e2:74:86:89:d2:cb:07:8b:38:4d:0c:cc:04: 0e:2f:a6:84:42:95:3f:69:76:15:14:6c:e2:50:af: 6b:c8:d1:68:62:79:44:58:ed:8f:a1:3e:5f:53:96: 61:32:7b:08:48:3c:85:4b:ac:20:7c:c8:b5:9d:89: 00:41:0f:13:79:7a:5e:0a:77:bb:a8:dd:a6:8e:db: d7:f0:ed:1b:c1:75:75:99:d4:eb:cb:19:19:d2:a2: 79:f8:8e:f1:a0:82:9d:6a:f7:d8:ed:3f:78:b3:db: 6e:ac:f4:dd:f2:b0:a8:c5:11:25:92:f5:07:a9:41: fd:a1:cd:94:bd:31:12:25:88:6b:07:f9:a0:d8:26: e1:fa:d7:75:5d:5d:f5:fd:63:7d:41:de:ff:fd:82: a2:6d:c6:a9:8b:e9:0f:ef:0e:16:2f:80:c9:c3:cb: 91:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:AB:DA:58:BB:AF:B5:C7:91:AF:C7:34:2A:E2:F2:B1:11:25:D2:4D X509v3 Authority Key Identifier: keyid:E8:71:72:8C:3A:2C:26:D0:E6:08:00:4B:A7:D1:E5:A3:58:30:95:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HFyjDosJtDmCABLp9Hlo1gwlWw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:54:d1:d2:33:05:e9:6c:23:58:6d:8d:cc:a4:4c:bd:16:a5: 53:36:d3:9e:50:ae:e9:16:46:8e:eb:32:95:ae:e5:72:1e:aa: 98:95:99:88:16:e2:ac:10:67:a2:8b:ae:71:41:56:1f:a2:8d: 2c:e2:9c:d2:2a:69:11:e9:38:24:42:48:ab:60:da:f4:86:81: 74:e9:61:88:e1:78:71:bc:cb:35:98:6d:21:4d:e0:92:f3:5e: 29:aa:dd:d8:7f:b8:b2:34:ed:81:88:06:a8:5d:7d:cd:6e:8b: 75:d9:42:8c:af:7d:4e:99:0d:00:00:f6:e2:c1:61:47:e4:08: 17:1d:74:db:53:25:36:b4:6f:48:37:df:10:ba:89:6d:08:33: 5f:f9:7d:56:29:49:e2:02:82:24:34:11:d9:2f:b9:0d:be:e1: e7:2e:ea:41:4b:c3:67:76:21:3c:c6:e5:37:73:62:16:7d:f4: ee:48:14:24:6d:24:df:e1:22:7b:12:82:96:13:73:45:f8:a3: 6a:51:93:d3:f9:4e:59:85:88:11:73:01:8b:2a:9d:e0:cc:54: 85:30:74:c3:73:12:ff:54:00:8f:b0:15:8e:a9:e6:59:93:46: 3a:4f:54:18:d0:ea:e1:2e:75:04:e0:e4:f9:f0:f3:b4:df:f2: 06:66:d0:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZFRkUxMTAvBgNVBAUTKEU4NzE3MjhDM0EyQzI2RDBFNjA4MDA0QkE3RDFFNUEz NTgzMDk1NkMwHhcNMjUwNTMxMDIzMDUyWhcNMjUwNjA3MDIzMDUyWjAYMRYwFAYD VQQDEw02ODNhNjlkYy04NzgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwCcyWzr5p5uDZtlLSTkbX6/DYMEwVuF2H8XikV+026wvd4+mPU9g/KaR7RLN 73c9CEhqaoJ41TeKyxzDWreLma/uT6u/6wQYCibfR1MU9+JouGHkTtq7wLSQ1OJ0 honSyweLOE0MzAQOL6aEQpU/aXYVFGziUK9ryNFoYnlEWO2PoT5fU5ZhMnsISDyF S6wgfMi1nYkAQQ8TeXpeCne7qN2mjtvX8O0bwXV1mdTryxkZ0qJ5+I7xoIKdavfY 7T94s9turPTd8rCoxRElkvUHqUH9oc2UvTESJYhrB/mg2Cbh+td1XV31/WN9Qd7/ /YKibcapi+kP7w4WL4DJw8uRfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI+r2li7 r7XHka/HNCri8rERJdJNMB8GA1UdIwQYMBaAFOhxcow6LCbQ5ggAS6fR5aNYMJVs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkVGRS9FNEMwMEQzQzZD QTExMUVEQjQ0RTc2NUJDNEY5QUUwMi82SEZ5akRvc0p0RG1DQUJMcDlIbG8xZ3ds V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZIRnlqRG9zSnREbUNBQkxwOUhsbzFnd2xXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkVGRS9FNEMwMEQzQzZDQTExMUVEQjQ0RTc2NUJDNEY5QUUwMi82SEZ5akRvc0p0 RG1DQUJMcDlIbG8xZ3dsV3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuVNHSMwXpbCNYbY3MpEy9FqVTNtOeUK7pFkaO6zKVruVyHqqYlZmI FuKsEGeii65xQVYfoo0s4pzSKmkR6TgkQkirYNr0hoF06WGI4XhxvMs1mG0hTeCS 814pqt3Yf7iyNO2BiAaoXX3Nbot12UKMr31OmQ0AAPbiwWFH5AgXHXTbUyU2tG9I N98QuoltCDNf+X1WKUniAoIkNBHZL7kNvuHnLupBS8NndiE8xuU3c2IWffTuSBQk bSTf4SJ7EoKWE3NF+KNqUZPT+U5ZhYgRcwGLKp3gzFSFMHTDcxL/VACPsBWOqeZZ k0Y6T1QY0OrhLnUE4OT58PO03/IGZtBL -----END CERTIFICATE-----Generated at Sat May 31 17:12:59 2025 by rpki-client