$ rpki-client -vvf rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.mft File: kXqfeqIoGxn5R0I-mGErH2PRfg4.mft (raw, json) Hash identifier: UkfRA7cuC8op8hM7L4PP/hCSCTYdFVYHHRGaYNhmBYA= Subject key identifier: D9:45:19:C3:C9:29:A6:8C:87:D4:5D:1E:E8:DD:0D:E4:90:C2:16:AE Authority key identifier: 91:7A:9F:7A:A2:28:1B:19:F9:47:42:3E:98:61:2B:1F:63:D1:7E:0E Certificate issuer: /CN=A91135FB/serialNumber=917A9F7AA2281B19F947423E98612B1F63D17E0E Certificate serial: 06B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kXqfeqIoGxn5R0I-mGErH2PRfg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.mft Manifest number: 06A8 Signing time: Thu 24 Apr 2025 21:59:47 +0000 Manifest this update: Thu 24 Apr 2025 21:59:46 +0000 Manifest next update: Thu 01 May 2025 21:59:46 +0000 Files and hashes: 1: kXqfeqIoGxn5R0I-mGErH2PRfg4.crl (hash: +WQgycGZyl0H/tWSJPnW/mAKai2K6dtQ4MM8cqnBgsE=) 2: ED052FEC614311EB9DCDF560C4F9AE02.roa (hash: GAGLq3SP9PmEM2RBds+zOMxapkoPAz1iFLEjpssH9QA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.crl rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kXqfeqIoGxn5R0I-mGErH2PRfg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:59:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1714 (0x6b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91135FB, serialNumber=917A9F7AA2281B19F947423E98612B1F63D17E0E Validity Not Before: Apr 24 21:59:46 2025 GMT Not After : May 1 21:59:46 2025 GMT Subject: CN=680ab453-d984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3a:05:85:cd:95:50:de:bd:82:6e:6a:96:10: f8:b2:52:5d:d4:38:22:4d:c1:37:2f:1e:38:e3:ab: 6f:ac:dc:1d:2d:78:55:03:b0:60:a9:3e:49:b6:e4: 72:80:4e:a9:1d:56:9b:a3:9c:98:b9:cb:3c:00:1e: 28:3a:b8:a3:b2:54:9b:60:ac:d2:05:96:e5:51:13: e0:5a:f2:6f:bf:3d:02:46:46:3e:11:eb:d1:38:df: 41:af:f9:8d:eb:05:42:e8:80:50:8f:ee:0a:e6:55: 3e:2f:6e:85:1c:a9:a3:d9:85:be:a6:63:ec:81:73: 07:61:4c:fc:9c:29:95:7b:b9:ca:0b:90:0f:e6:56: c5:d8:87:32:dd:f2:7b:c1:43:06:7d:6f:b6:fc:99: 1a:5a:0f:2d:62:0d:10:c7:23:83:52:36:5c:77:e7: cd:24:e3:d6:48:b5:e3:8f:db:53:6a:ff:be:2a:c9: c6:e8:cf:20:08:80:ba:7d:71:f7:86:78:ca:71:a0: b0:94:85:5c:02:3f:59:30:23:db:f9:40:8d:6f:2a: b6:62:0c:57:53:3c:de:e8:a9:2e:05:55:96:5b:50: a9:b5:fb:10:5c:a1:5a:b3:f0:de:7d:21:73:b4:20: 94:0b:ef:a5:5f:e7:6e:7d:a7:d6:c8:07:de:56:d6: 73:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:45:19:C3:C9:29:A6:8C:87:D4:5D:1E:E8:DD:0D:E4:90:C2:16:AE X509v3 Authority Key Identifier: keyid:91:7A:9F:7A:A2:28:1B:19:F9:47:42:3E:98:61:2B:1F:63:D1:7E:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kXqfeqIoGxn5R0I-mGErH2PRfg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:1d:6f:c7:d7:de:58:73:3e:a2:45:c8:9b:cf:5e:a6:05:94: 27:4a:99:30:bc:ed:d3:b0:c8:70:7c:de:65:7f:c7:fd:35:7e: 9e:9d:1d:6e:4c:6b:90:6b:3e:7d:56:b1:74:85:1e:89:13:aa: 01:fe:f4:31:98:ad:10:10:eb:8b:23:e7:27:ad:0f:ae:aa:e8: 9d:a6:3b:8e:ee:8d:21:a9:bd:75:0e:a6:8c:da:52:12:86:41: eb:71:35:84:4a:3d:12:83:0f:ba:10:ed:59:3f:1b:4a:62:3c: a7:6e:99:3d:0b:14:26:eb:07:af:5c:9e:4d:71:46:7d:8f:0b: c2:9f:01:b6:29:82:b7:b3:bd:41:6d:42:7d:52:bc:ad:11:dc: be:af:5d:9b:de:9c:3a:24:41:29:aa:6f:2a:77:f3:cd:3e:a2: 85:58:a1:65:dc:99:2d:9e:42:66:2b:3c:b6:60:e8:77:e8:97: 05:79:7a:61:b1:a6:26:70:86:d1:a6:af:d7:ce:79:6a:14:55: ba:32:e3:de:ff:c4:fe:16:3b:39:de:92:3a:ad:6d:bc:3e:f6: 40:55:b7:36:1e:4a:14:9c:83:ec:96:33:e5:9f:12:bf:32:54: 00:3c:ee:70:ee:65:fc:2b:d3:df:46:33:80:d6:ee:b8:2a:47: 68:61:32:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTM1RkIxMTAvBgNVBAUTKDkxN0E5RjdBQTIyODFCMTlGOTQ3NDIzRTk4NjEyQjFG NjNEMTdFMEUwHhcNMjUwNDI0MjE1OTQ2WhcNMjUwNTAxMjE1OTQ2WjAYMRYwFAYD VQQDEw02ODBhYjQ1My1kOTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAojoFhc2VUN69gm5qlhD4slJd1DgiTcE3Lx4446tvrNwdLXhVA7BgqT5JtuRy gE6pHVabo5yYucs8AB4oOrijslSbYKzSBZblURPgWvJvvz0CRkY+EevRON9Br/mN 6wVC6IBQj+4K5lU+L26FHKmj2YW+pmPsgXMHYUz8nCmVe7nKC5AP5lbF2Icy3fJ7 wUMGfW+2/JkaWg8tYg0QxyODUjZcd+fNJOPWSLXjj9tTav++KsnG6M8gCIC6fXH3 hnjKcaCwlIVcAj9ZMCPb+UCNbyq2YgxXUzze6KkuBVWWW1CptfsQXKFas/DefSFz tCCUC++lX+dufafWyAfeVtZzIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNlFGcPJ KaaMh9RdHujdDeSQwhauMB8GA1UdIwQYMBaAFJF6n3qiKBsZ+UdCPphhKx9j0X4O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzVGQi82QzI5NkQzQTYx NDIxMUVCOTkwQkE1NUZDNEY5QUUwMi9rWHFmZXFJb0d4bjVSMEktbUdFckgyUFJm ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tYcWZlcUlvR3huNVIwSS1tR0VySDJQUmZnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzVGQi82QzI5NkQzQTYxNDIxMUVCOTkwQkE1NUZDNEY5QUUwMi9rWHFmZXFJb0d4 bjVSMEktbUdFckgyUFJmZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZHW/H195Ycz6iRcibz16mBZQnSpkwvO3TsMhwfN5lf8f9NX6enR1u TGuQaz59VrF0hR6JE6oB/vQxmK0QEOuLI+cnrQ+uquidpjuO7o0hqb11DqaM2lIS hkHrcTWESj0Sgw+6EO1ZPxtKYjynbpk9CxQm6wevXJ5NcUZ9jwvCnwG2KYK3s71B bUJ9UrytEdy+r12b3pw6JEEpqm8qd/PNPqKFWKFl3JktnkJmKzy2YOh36JcFeXph saYmcIbRpq/XznlqFFW6MuPe/8T+Fjs53pI6rW28PvZAVbc2HkoUnIPsljPlnxK/ MlQAPO5w7mX8K9PfRjOA1u64KkdoYTKI -----END CERTIFICATE-----Generated at Sat Apr 26 18:14:16 2025 by rpki-client