$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA522/88692ABA534211EC8CD2D722C4F9AE02/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.mft File: 6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.mft (raw, json) Hash identifier: 0BWO4f2OUdpo9G07BAQyyCAVvfuVyoVmNrsp0ykDGqE= Subject key identifier: 5A:05:68:B5:B0:AB:C8:0A:BD:C2:30:D4:E3:46:73:EC:E8:70:7D:78 Authority key identifier: EA:CB:95:FF:05:7D:64:14:00:CA:30:94:2B:56:2B:D2:56:3C:AE:B4 Certificate issuer: /CN=A91EA522/serialNumber=EACB95FF057D641400CA30942B562BD2563CAEB4 Certificate serial: 045C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA522/88692ABA534211EC8CD2D722C4F9AE02/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.mft Manifest number: 0456 Signing time: Sat 31 May 2025 00:24:30 +0000 Manifest this update: Sat 31 May 2025 00:24:30 +0000 Manifest next update: Sat 07 Jun 2025 00:24:30 +0000 Files and hashes: 1: 6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.crl (hash: GZzQNAjB0tK/PBWZM4YBmFWBZN3kr6fRXHSzej6/DiY=) 2: DA61635E534811EC8FFBDB7CC4F9AE02.roa (hash: k6KOlaww8ZZoE8DhHLb+fcqbZNEuZUquu+zgOXhayXw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA522/88692ABA534211EC8CD2D722C4F9AE02/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.crl rsync://rpki.apnic.net/member_repository/A91EA522/88692ABA534211EC8CD2D722C4F9AE02/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:24:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1116 (0x45c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA522, serialNumber=EACB95FF057D641400CA30942B562BD2563CAEB4 Validity Not Before: May 31 00:24:30 2025 GMT Not After : Jun 7 00:24:30 2025 GMT Subject: CN=683a4c3e-471f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2f:b0:a8:7d:f5:d4:db:02:22:f5:d0:45:92: 4a:8f:48:ae:b4:bb:9d:cc:46:8b:6a:a9:7b:8f:e3: 88:43:b4:ae:83:49:c1:c1:09:99:5f:25:1b:22:22: 34:a4:b2:63:6a:46:9b:23:08:f9:bd:ac:15:7a:ab: 3d:ce:7e:36:8f:41:67:8b:d7:98:ae:bd:ef:59:e3: 13:ec:07:1b:db:25:9d:5a:a5:ab:75:d4:ea:8f:ba: 0e:26:62:7f:55:9c:35:35:1d:b7:d5:0f:9c:5a:74: f0:56:87:ba:37:4d:e0:17:f7:20:01:75:33:22:66: 16:94:ed:04:26:75:a9:41:f9:30:26:f2:8f:ca:9b: 14:f5:80:13:c6:b6:ad:e6:8a:79:81:f3:7f:80:d6: 25:5a:2c:c8:20:f1:c1:3c:b8:7a:ee:ad:b8:d9:f4: 00:0d:4a:f9:24:76:62:a8:26:a5:c2:29:c2:68:c8: 52:fe:c8:c6:d4:d7:c0:40:9e:31:3f:03:bb:a5:58: b3:c8:85:92:1b:53:e9:3e:4a:20:52:a0:0b:06:ff: 50:41:02:e6:e5:a8:47:ba:b7:8f:ed:f8:3a:b9:f4: 00:60:05:1f:1c:8e:2b:0b:63:6a:5e:8a:2f:43:b4: 78:2a:59:48:c6:fa:21:f1:ce:cb:de:20:a4:5e:6d: 39:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:05:68:B5:B0:AB:C8:0A:BD:C2:30:D4:E3:46:73:EC:E8:70:7D:78 X509v3 Authority Key Identifier: keyid:EA:CB:95:FF:05:7D:64:14:00:CA:30:94:2B:56:2B:D2:56:3C:AE:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA522/88692ABA534211EC8CD2D722C4F9AE02/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA522/88692ABA534211EC8CD2D722C4F9AE02/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:7c:af:5d:d5:17:56:c1:d2:0b:01:2b:5d:68:5d:63:ef:fa: 3f:49:6f:64:9f:55:64:b5:24:9b:4d:6e:cf:b7:43:e2:8f:31: 23:c1:81:da:4c:0d:71:bf:5a:87:d7:43:cb:5a:cc:78:39:d9: 85:08:db:d1:60:c2:76:61:95:65:ca:48:e9:44:dc:09:74:2d: 2c:be:2c:75:5f:0b:e7:6d:63:ed:40:2a:3c:11:dd:b2:0f:e9: 63:8a:f0:24:79:8f:8c:0c:9d:11:d2:de:7a:7c:b1:2f:e8:6f: 4a:26:3a:7f:5b:8d:22:46:28:19:73:87:55:f1:df:b5:a3:16: 23:9a:ea:c3:d9:53:bb:0c:54:ed:b5:84:b1:3a:58:9d:34:d8: ca:53:de:ca:64:d7:ad:f5:ea:a4:47:98:0c:9f:b8:91:0f:fb: 38:14:72:53:79:fe:b4:60:e1:95:2a:7d:50:4d:fb:ce:86:81: 0b:2a:73:08:80:98:36:3a:72:eb:1e:a6:9f:0d:21:96:a3:06: cb:a9:22:58:27:ce:4e:a7:fe:ed:60:3b:b2:dc:0a:3d:db:54: bf:ac:6f:b4:3b:cb:29:b4:c3:a8:cd:66:04:70:01:87:c9:8e: c8:be:56:13:98:f1:c8:0f:42:a9:ac:44:ba:e6:5c:18:0e:71: 2a:e1:37:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE1MjIxMTAvBgNVBAUTKEVBQ0I5NUZGMDU3RDY0MTQwMENBMzA5NDJCNTYyQkQy NTYzQ0FFQjQwHhcNMjUwNTMxMDAyNDMwWhcNMjUwNjA3MDAyNDMwWjAYMRYwFAYD VQQDEw02ODNhNGMzZS00NzFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmy+wqH311NsCIvXQRZJKj0iutLudzEaLaql7j+OIQ7Sug0nBwQmZXyUbIiI0 pLJjakabIwj5vawVeqs9zn42j0Fni9eYrr3vWeMT7Acb2yWdWqWrddTqj7oOJmJ/ VZw1NR231Q+cWnTwVoe6N03gF/cgAXUzImYWlO0EJnWpQfkwJvKPypsU9YATxrat 5op5gfN/gNYlWizIIPHBPLh67q242fQADUr5JHZiqCalwinCaMhS/sjG1NfAQJ4x PwO7pVizyIWSG1PpPkogUqALBv9QQQLm5ahHureP7fg6ufQAYAUfHI4rC2NqXoov Q7R4KllIxvoh8c7L3iCkXm05VQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFoFaLWw q8gKvcIw1ONGc+zocH14MB8GA1UdIwQYMBaAFOrLlf8FfWQUAMowlCtWK9JWPK60 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTUyMi84ODY5MkFCQTUz NDIxMUVDOENEMkQ3MjJDNEY5QUUwMi82c3VWX3dWOVpCUUF5akNVSzFZcjBsWThy clEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZzdVZfd1Y5WkJRQXlqQ1VLMVlyMGxZOHJyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTUyMi84ODY5MkFCQTUzNDIxMUVDOENEMkQ3MjJDNEY5QUUwMi82c3VWX3dWOVpC UUF5akNVSzFZcjBsWThyclEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzfK9d1RdWwdILAStdaF1j7/o/SW9kn1VktSSbTW7Pt0PijzEjwYHa TA1xv1qH10PLWsx4OdmFCNvRYMJ2YZVlykjpRNwJdC0svix1XwvnbWPtQCo8Ed2y D+ljivAkeY+MDJ0R0t56fLEv6G9KJjp/W40iRigZc4dV8d+1oxYjmurD2VO7DFTt tYSxOlidNNjKU97KZNet9eqkR5gMn7iRD/s4FHJTef60YOGVKn1QTfvOhoELKnMI gJg2OnLrHqafDSGWowbLqSJYJ85Op/7tYDuy3Ao921S/rG+0O8sptMOozWYEcAGH yY7IvlYTmPHID0KprES65lwYDnEq4TeV -----END CERTIFICATE-----Generated at Sat May 31 17:37:48 2025 by rpki-client