$ rpki-client -vvf rpki.apnic.net/member_repository/A91722C3/1523D2E407AB11E8AE5DFE64C4F9AE02/6tNqfTCwZhVrgDAlqqpf-SetdcI.mft File: 6tNqfTCwZhVrgDAlqqpf-SetdcI.mft (raw, json) Hash identifier: ttT4QrHNkbcGQEw55qUffBTld2JAMQlCwPgVgO6EhJw= Subject key identifier: 09:83:20:AD:06:56:FF:24:83:D9:1A:B1:C8:F0:CC:55:4F:9E:A7:94 Authority key identifier: EA:D3:6A:7D:30:B0:66:15:6B:80:30:25:AA:AA:5F:F9:27:AD:75:C2 Certificate issuer: /CN=A91722C3/serialNumber=EAD36A7D30B066156B803025AAAA5FF927AD75C2 Certificate serial: 1660 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tNqfTCwZhVrgDAlqqpf-SetdcI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91722C3/1523D2E407AB11E8AE5DFE64C4F9AE02/6tNqfTCwZhVrgDAlqqpf-SetdcI.mft Manifest number: 1659 Signing time: Thu 24 Apr 2025 16:43:43 +0000 Manifest this update: Thu 24 Apr 2025 16:43:42 +0000 Manifest next update: Thu 01 May 2025 16:43:42 +0000 Files and hashes: 1: 6tNqfTCwZhVrgDAlqqpf-SetdcI.crl (hash: 8nq/1onAUi4XNv3hLyGWGM1BeLH+mbj2lNBu0qQG5cw=) 2: 3B7EBA5C7D7411EBAEFB906AC4F9AE02.roa (hash: 561yu9MGU0vumwQn4MDwqvQwRWFnU69Hgu+DoY89L9g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91722C3/1523D2E407AB11E8AE5DFE64C4F9AE02/6tNqfTCwZhVrgDAlqqpf-SetdcI.crl rsync://rpki.apnic.net/member_repository/A91722C3/1523D2E407AB11E8AE5DFE64C4F9AE02/6tNqfTCwZhVrgDAlqqpf-SetdcI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tNqfTCwZhVrgDAlqqpf-SetdcI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:43:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5728 (0x1660) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91722C3, serialNumber=EAD36A7D30B066156B803025AAAA5FF927AD75C2 Validity Not Before: Apr 24 16:43:42 2025 GMT Not After : May 1 16:43:42 2025 GMT Subject: CN=680a6a3f-990c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e3:b1:e8:7b:74:14:c5:c4:09:86:73:31:65: b7:0c:ef:b1:70:83:ab:ac:98:4f:97:07:5d:18:4d: c0:5c:6d:71:d9:85:7e:4f:4a:ee:8b:d7:84:59:cc: ac:07:8b:b0:d5:43:54:a8:56:09:98:43:07:aa:06: 40:9c:0e:be:c3:29:18:e4:05:94:63:64:60:35:d9: 98:19:f8:9b:49:63:72:fa:ed:7b:3e:f9:37:be:99: 08:02:01:c8:5a:30:a2:93:5e:90:9c:3c:97:07:ea: d9:b7:a0:ce:31:98:55:3e:7f:7b:9b:eb:37:95:fc: 0c:5e:28:ff:de:8c:96:80:ab:6a:e2:4b:39:be:cd: 5b:30:cf:21:6f:89:8e:12:a4:3e:84:ee:eb:d0:38: 7e:3a:8a:51:3c:41:06:6b:f1:72:77:bb:4a:75:80: 8d:9a:b8:5c:70:c9:0e:82:7b:50:40:b3:56:f8:bc: 76:79:64:a7:a0:12:69:96:d1:af:37:1f:1e:5b:9f: 5a:51:0d:1f:c1:a9:25:0e:ab:b1:03:ba:14:19:75: 89:60:b0:c7:e6:1f:90:8a:09:8b:f1:8f:40:8b:7f: 39:63:43:70:83:3e:d2:99:50:0d:d8:87:67:39:d0: fe:02:e8:89:7e:1e:d2:57:59:ce:79:0a:94:38:90: e4:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:83:20:AD:06:56:FF:24:83:D9:1A:B1:C8:F0:CC:55:4F:9E:A7:94 X509v3 Authority Key Identifier: keyid:EA:D3:6A:7D:30:B0:66:15:6B:80:30:25:AA:AA:5F:F9:27:AD:75:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91722C3/1523D2E407AB11E8AE5DFE64C4F9AE02/6tNqfTCwZhVrgDAlqqpf-SetdcI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tNqfTCwZhVrgDAlqqpf-SetdcI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91722C3/1523D2E407AB11E8AE5DFE64C4F9AE02/6tNqfTCwZhVrgDAlqqpf-SetdcI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:81:c6:98:ca:53:7b:bd:9b:ec:10:ec:69:d2:da:b1:d4:5f: b1:0b:18:df:e3:d3:82:e3:04:83:98:62:aa:26:32:48:cd:28: 6c:d4:cb:75:32:bd:c8:df:2f:95:c4:c8:82:42:11:ab:9c:0e: d1:89:43:ce:4c:21:b8:26:34:1d:7e:89:14:71:a1:37:7d:47: 90:5b:b3:50:b7:ec:33:1a:e0:0a:d9:56:2b:cc:c2:51:e1:79: 7e:46:4d:df:0d:17:71:b2:71:53:89:90:d2:1c:0f:a7:6d:1a: ef:a5:91:d9:37:40:f3:89:a5:00:e2:5d:ea:a6:5b:5e:8a:3c: db:d0:57:85:8b:4c:36:73:21:d7:d6:49:6e:35:4b:7b:18:cc: 7b:f6:44:fb:20:bb:ed:ee:78:97:c9:6b:9e:10:a4:54:04:f5: 32:26:b9:73:13:f3:bd:5e:45:9d:ac:b2:92:fd:cb:f2:81:96: 78:bd:65:49:4b:b4:ee:6f:af:92:4d:1b:15:7d:e2:45:c9:ab: f9:37:02:f2:be:d5:ac:a3:9b:6e:69:9b:78:82:e1:56:71:42: d8:4e:b8:ee:3e:a7:39:8d:de:65:04:07:a1:87:cd:5e:13:f3: d0:67:ec:6c:36:11:13:28:f6:de:36:5e:df:1f:24:bb:95:cb: 42:9f:81:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzIyQzMxMTAvBgNVBAUTKEVBRDM2QTdEMzBCMDY2MTU2QjgwMzAyNUFBQUE1RkY5 MjdBRDc1QzIwHhcNMjUwNDI0MTY0MzQyWhcNMjUwNTAxMTY0MzQyWjAYMRYwFAYD VQQDEw02ODBhNmEzZi05OTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp+Ox6Ht0FMXECYZzMWW3DO+xcIOrrJhPlwddGE3AXG1x2YV+T0rui9eEWcys B4uw1UNUqFYJmEMHqgZAnA6+wykY5AWUY2RgNdmYGfibSWNy+u17Pvk3vpkIAgHI WjCik16QnDyXB+rZt6DOMZhVPn97m+s3lfwMXij/3oyWgKtq4ks5vs1bMM8hb4mO EqQ+hO7r0Dh+OopRPEEGa/Fyd7tKdYCNmrhccMkOgntQQLNW+Lx2eWSnoBJpltGv Nx8eW59aUQ0fwaklDquxA7oUGXWJYLDH5h+QigmL8Y9Ai385Y0Nwgz7SmVAN2Idn OdD+AuiJfh7SV1nOeQqUOJDkQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAmDIK0G Vv8kg9kascjwzFVPnqeUMB8GA1UdIwQYMBaAFOrTan0wsGYVa4AwJaqqX/knrXXC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjJDMy8xNTIzRDJFNDA3 QUIxMUU4QUU1REZFNjRDNEY5QUUwMi82dE5xZlRDd1poVnJnREFscXFwZi1TZXRk Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ0TnFmVEN3WmhWcmdEQWxxcXBmLVNldGRjSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MjJDMy8xNTIzRDJFNDA3QUIxMUU4QUU1REZFNjRDNEY5QUUwMi82dE5xZlRDd1po VnJnREFscXFwZi1TZXRkY0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZgcaYylN7vZvsEOxp0tqx1F+xCxjf49OC4wSDmGKqJjJIzShs1Mt1 Mr3I3y+VxMiCQhGrnA7RiUPOTCG4JjQdfokUcaE3fUeQW7NQt+wzGuAK2VYrzMJR 4Xl+Rk3fDRdxsnFTiZDSHA+nbRrvpZHZN0DziaUA4l3qplteijzb0FeFi0w2cyHX 1kluNUt7GMx79kT7ILvt7niXyWueEKRUBPUyJrlzE/O9XkWdrLKS/cvygZZ4vWVJ S7Tub6+STRsVfeJFyav5NwLyvtWso5tuaZt4guFWcULYTrjuPqc5jd5lBAehh81e E/PQZ+xsNhETKPbeNl7fHyS7lctCn4E2 -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:54 2025 by rpki-client