$ rpki-client -vvf rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.mft File: k6fYNeE4WLtZlRw5ml-eqw4uuTE.mft (raw, json) Hash identifier: r1V5rb7xeyBbdkwV8jwrCznXWFxv5JKApNLmFz0vHt4= Subject key identifier: 72:61:C8:F2:3B:A2:B4:43:09:10:9F:FF:DC:56:7E:E3:FC:59:97:FE Authority key identifier: 93:A7:D8:35:E1:38:58:BB:59:95:1C:39:9A:5F:9E:AB:0E:2E:B9:31 Certificate issuer: /CN=A91100B2/serialNumber=93A7D835E13858BB59951C399A5F9EAB0E2EB931 Certificate serial: 071F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k6fYNeE4WLtZlRw5ml-eqw4uuTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.mft Manifest number: 110D Signing time: Thu 24 Apr 2025 19:45:35 +0000 Manifest this update: Thu 24 Apr 2025 19:45:35 +0000 Manifest next update: Thu 01 May 2025 19:45:34 +0000 Files and hashes: 1: k6fYNeE4WLtZlRw5ml-eqw4uuTE.crl (hash: sdKktu+najJHBsVGzM1Taz72+XsEtqsTbC6cpfXIGXw=) 2: 6EA6EB5A355011EBAAB1E56EC4F9AE02.roa (hash: Th3Fm0yjUG5Nl/BatZiPSivvwDfuH9VTwBhqmmWBVXU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.crl rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k6fYNeE4WLtZlRw5ml-eqw4uuTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:45:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1823 (0x71f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91100B2, serialNumber=93A7D835E13858BB59951C399A5F9EAB0E2EB931 Validity Not Before: Apr 24 19:45:35 2025 GMT Not After : May 1 19:45:34 2025 GMT Subject: CN=680a94df-dbcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0e:04:21:c0:f0:08:a8:c0:e8:74:dc:2a:80: 7c:5a:9a:c7:99:d6:ed:bd:b2:81:b9:27:51:81:1a: a8:fb:72:05:75:31:5f:2a:c1:48:61:b5:a8:c7:7b: 9d:f6:1e:3a:6b:ed:7e:03:38:4c:f6:6e:9e:d2:f0: 69:d3:14:e4:f5:22:c1:fc:be:7a:74:a4:35:aa:fe: 7e:e2:ce:4b:15:1a:6d:75:ac:e5:ee:d1:29:49:b3: 03:6a:25:83:1d:56:f7:e0:e3:2f:d8:23:d8:b4:f4: 44:11:d0:20:d1:f3:2b:02:03:e5:d1:ef:cd:5d:05: 52:8b:a9:11:f2:44:fe:01:c4:f4:d6:d7:9c:34:6c: 5a:9b:71:fd:c4:38:d9:0c:5a:24:1e:3e:73:26:d9: 70:e0:87:31:05:79:53:e2:5f:bd:8a:69:20:4c:65: 21:53:9b:58:c0:88:86:b3:8b:a1:d4:61:88:61:84: d1:d4:94:87:5c:bc:12:cb:6f:2c:06:69:4b:92:3c: 1d:24:e0:be:2b:05:5f:bc:ac:5b:7f:6a:98:f1:00: 5c:ca:a4:d5:4b:65:4f:c3:a3:48:f8:be:0a:d4:85: 70:88:45:d8:37:ba:17:8c:b2:b6:27:10:1e:69:eb: c3:24:02:5e:54:11:b8:f7:e7:46:45:b1:97:c2:22: cc:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:61:C8:F2:3B:A2:B4:43:09:10:9F:FF:DC:56:7E:E3:FC:59:97:FE X509v3 Authority Key Identifier: keyid:93:A7:D8:35:E1:38:58:BB:59:95:1C:39:9A:5F:9E:AB:0E:2E:B9:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k6fYNeE4WLtZlRw5ml-eqw4uuTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:bf:1a:60:39:ca:18:a4:72:0f:28:51:fe:5d:2f:10:ed:55: f3:ca:79:b9:73:36:78:c6:a8:72:49:0d:95:e2:5a:e5:aa:10: bb:4a:be:be:87:f8:cb:b5:48:82:8d:cf:01:67:96:d7:c2:14: 6e:d1:3a:88:98:0b:d9:98:36:a1:1f:ff:05:e3:9a:42:63:cc: ca:f0:ec:75:bc:bb:4a:8f:db:17:bd:7f:1a:b7:77:88:60:23: f8:5c:32:58:dc:e9:96:35:e6:98:6a:8e:66:c3:3e:17:e7:92: 5d:92:0e:40:e4:8d:66:0b:58:9f:40:ac:1c:3f:a5:e8:b8:75: 82:60:4a:de:49:b2:1d:36:22:0e:ba:21:37:2a:98:68:ca:7a: ed:75:5e:ac:81:00:a8:ec:20:95:0f:dc:0a:f2:32:fd:29:08: 7d:62:3e:5c:4e:b5:17:7c:cd:f3:da:6a:0e:54:d0:52:62:40: a7:b6:c6:6b:2d:bf:36:c7:1d:cc:e0:7e:eb:b1:be:97:35:7c: 6b:dc:12:1a:0b:4e:ad:11:8e:9c:77:0a:12:1d:59:e3:d9:5b: ef:62:d2:d7:8f:43:68:0d:fb:76:35:b8:4e:3d:2f:65:aa:3f: a8:5b:10:3a:50:f6:c8:96:ba:d9:72:29:16:fc:ec:c7:fa:55: 4c:94:24:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBx8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTAwQjIxMTAvBgNVBAUTKDkzQTdEODM1RTEzODU4QkI1OTk1MUMzOTlBNUY5RUFC MEUyRUI5MzEwHhcNMjUwNDI0MTk0NTM1WhcNMjUwNTAxMTk0NTM0WjAYMRYwFAYD VQQDEw02ODBhOTRkZi1kYmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwg4EIcDwCKjA6HTcKoB8WprHmdbtvbKBuSdRgRqo+3IFdTFfKsFIYbWox3ud 9h46a+1+AzhM9m6e0vBp0xTk9SLB/L56dKQ1qv5+4s5LFRptdazl7tEpSbMDaiWD HVb34OMv2CPYtPREEdAg0fMrAgPl0e/NXQVSi6kR8kT+AcT01tecNGxam3H9xDjZ DFokHj5zJtlw4IcxBXlT4l+9imkgTGUhU5tYwIiGs4uh1GGIYYTR1JSHXLwSy28s BmlLkjwdJOC+KwVfvKxbf2qY8QBcyqTVS2VPw6NI+L4K1IVwiEXYN7oXjLK2JxAe aevDJAJeVBG49+dGRbGXwiLM6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHJhyPI7 orRDCRCf/9xWfuP8WZf+MB8GA1UdIwQYMBaAFJOn2DXhOFi7WZUcOZpfnqsOLrkx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDBCMi8wQUY2RUIyQTcz RTgxMUVBODg1MUY4N0NDNEY5QUUwMi9rNmZZTmVFNFdMdFpsUnc1bWwtZXF3NHV1 VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s2ZllOZUU0V0x0WmxSdzVtbC1lcXc0dXVURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDBCMi8wQUY2RUIyQTczRTgxMUVBODg1MUY4N0NDNEY5QUUwMi9rNmZZTmVFNFdM dFpsUnc1bWwtZXF3NHV1VEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsvxpgOcoYpHIPKFH+XS8Q7VXzynm5czZ4xqhySQ2V4lrlqhC7Sr6+ h/jLtUiCjc8BZ5bXwhRu0TqImAvZmDahH/8F45pCY8zK8Ox1vLtKj9sXvX8at3eI YCP4XDJY3OmWNeaYao5mwz4X55Jdkg5A5I1mC1ifQKwcP6XouHWCYEreSbIdNiIO uiE3KphoynrtdV6sgQCo7CCVD9wK8jL9KQh9Yj5cTrUXfM3z2moOVNBSYkCntsZr Lb82xx3M4H7rsb6XNXxr3BIaC06tEY6cdwoSHVnj2VvvYtLXj0NoDft2NbhOPS9l qj+oWxA6UPbIlrrZcikW/OzH+lVMlCTU -----END CERTIFICATE-----Generated at Sat Apr 26 07:58:16 2025 by rpki-client