$ rpki-client -vvf rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft File: C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft (raw, json) Hash identifier: +AJcmB7EweW/gbryKcHkHHSscZImDUCHzOMWpmeqqfo= Subject key identifier: 43:44:3B:D6:9C:10:B3:20:23:41:0C:35:D1:23:A9:B7:9E:8E:C6:46 Authority key identifier: 0B:A8:BA:40:F8:97:34:CC:3F:3A:E3:ED:67:74:CB:D8:43:E2:E7:72 Certificate issuer: /CN=A91868EC/serialNumber=0BA8BA40F89734CC3F3AE3ED6774CBD843E2E772 Certificate serial: F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6i6QPiXNMw_OuPtZ3TL2EPi53I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft Manifest number: F4 Signing time: Fri 25 Apr 2025 04:17:04 +0000 Manifest this update: Fri 25 Apr 2025 04:17:04 +0000 Manifest next update: Fri 02 May 2025 04:17:04 +0000 Files and hashes: 1: C6i6QPiXNMw_OuPtZ3TL2EPi53I.crl (hash: zvJHQ5D8ayoF321adDcZnBKsjLm7Uyp34Fq0T6R0Wpc=) 2: 8BDE35DAADB511EEA223FA64C4F9AE02.roa (hash: 9KgUBwn7ZxB41N0G+ybbb26vRb4/nvvRfm6F0NtcKGs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.crl rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6i6QPiXNMw_OuPtZ3TL2EPi53I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:17:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 246 (0xf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91868EC, serialNumber=0BA8BA40F89734CC3F3AE3ED6774CBD843E2E772 Validity Not Before: Apr 25 04:17:04 2025 GMT Not After : May 2 04:17:04 2025 GMT Subject: CN=680b0cc0-6e1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a4:0c:81:df:d4:be:e8:25:c2:03:fe:9a:74: d7:d6:f1:d7:3f:45:e0:7e:6a:3a:d3:b1:1d:c9:b2: 88:f0:99:7e:15:3f:d6:95:dc:bd:82:27:db:ea:45: a8:54:eb:07:08:84:6c:3c:d1:66:a8:44:fc:62:8d: d2:6a:b9:12:14:39:1c:6c:56:0f:c1:36:40:bd:d2: 7d:d3:7a:ad:86:3d:c3:d2:b7:7a:a2:58:15:93:e3: af:52:ff:e0:35:bb:ea:a8:f7:6d:52:e2:c0:5e:d9: 16:96:7b:4c:71:9e:75:92:09:7e:93:d6:42:7c:82: 63:97:da:75:e3:0d:7d:2f:ac:87:7f:03:49:07:ca: bb:aa:99:73:3f:87:2a:8b:4e:ea:ea:8c:de:02:43: dc:a4:a3:e7:fe:27:56:ce:08:0c:20:29:86:e5:c0: cb:eb:d6:92:79:d6:ce:51:f1:cb:a8:ac:99:f7:03: 9a:41:8c:fe:8a:d6:73:3a:cc:3c:81:1a:cd:67:41: a3:2f:93:09:4d:01:65:9b:ae:9f:b8:e3:60:45:fb: c4:d4:e0:c5:a7:07:c4:1d:4e:53:f8:30:17:8f:fc: 47:07:ad:7c:d2:b0:49:2c:ce:41:07:b2:fb:7c:f0: 9f:7e:1a:3f:eb:53:31:a1:35:6c:d8:ed:de:06:03: de:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:44:3B:D6:9C:10:B3:20:23:41:0C:35:D1:23:A9:B7:9E:8E:C6:46 X509v3 Authority Key Identifier: keyid:0B:A8:BA:40:F8:97:34:CC:3F:3A:E3:ED:67:74:CB:D8:43:E2:E7:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6i6QPiXNMw_OuPtZ3TL2EPi53I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:a0:9f:b8:a3:c7:f1:ab:66:90:0b:d1:38:02:01:b1:67:5d: c9:c3:a4:ae:b2:42:6e:75:93:5b:8f:5e:4e:38:33:c1:c0:b0: 72:4e:3e:0b:fa:43:3a:bc:e8:4f:88:e1:4a:fb:29:b1:9c:12: 1e:ef:93:58:58:0d:36:22:31:e8:ec:99:cd:c0:28:45:0b:0e: a5:94:ca:20:8d:7f:07:7b:cc:03:8c:2f:eb:6f:88:ff:a3:bb: 76:34:25:de:f0:9a:be:7b:a6:82:61:e9:6b:dd:c3:ac:9f:74: 10:6a:f3:56:f8:78:5e:76:2b:54:73:3d:7f:9e:9e:5a:3b:32: 53:cb:13:52:bc:0c:6b:79:59:4b:e1:78:cc:ef:ce:49:39:86: e0:43:ee:49:77:c4:c3:64:79:a9:07:b6:8b:ce:e2:e5:06:c5: 04:40:a1:38:bc:6b:62:32:0f:ee:41:36:1d:fe:6a:21:e1:26: 73:72:4e:70:9e:df:d9:42:22:a8:38:9d:94:0d:40:fb:c3:28: cc:11:8c:a7:1a:35:d9:23:a7:cd:c1:f8:ca:f0:25:50:90:90: 28:4e:cf:08:2b:e6:f6:5c:f3:d2:54:c3:20:18:fe:dc:c3:26: 78:d7:cd:23:4e:39:10:64:9e:b8:0b:12:f6:3b:0b:55:c8:e9: 3f:da:36:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY4RUMxMTAvBgNVBAUTKDBCQThCQTQwRjg5NzM0Q0MzRjNBRTNFRDY3NzRDQkQ4 NDNFMkU3NzIwHhcNMjUwNDI1MDQxNzA0WhcNMjUwNTAyMDQxNzA0WjAYMRYwFAYD VQQDEw02ODBiMGNjMC02ZTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1aQMgd/UvuglwgP+mnTX1vHXP0Xgfmo607EdybKI8Jl+FT/Wldy9gifb6kWo VOsHCIRsPNFmqET8Yo3SarkSFDkcbFYPwTZAvdJ903qthj3D0rd6olgVk+OvUv/g NbvqqPdtUuLAXtkWlntMcZ51kgl+k9ZCfIJjl9p14w19L6yHfwNJB8q7qplzP4cq i07q6ozeAkPcpKPn/idWzggMICmG5cDL69aSedbOUfHLqKyZ9wOaQYz+itZzOsw8 gRrNZ0GjL5MJTQFlm66fuONgRfvE1ODFpwfEHU5T+DAXj/xHB6180rBJLM5BB7L7 fPCffho/61MxoTVs2O3eBgPePwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFENEO9ac ELMgI0EMNdEjqbeejsZGMB8GA1UdIwQYMBaAFAuoukD4lzTMPzrj7Wd0y9hD4udy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjhFQy9FMDU3RTJCMEFE QjQxMUVFQkVBN0U1NjNDNEY5QUUwMi9DNmk2UVBpWE5Nd19PdVB0WjNUTDJFUGk1 M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M2aTZRUGlYTk13X091UHRaM1RMMkVQaTUzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjhFQy9FMDU3RTJCMEFEQjQxMUVFQkVBN0U1NjNDNEY5QUUwMi9DNmk2UVBpWE5N d19PdVB0WjNUTDJFUGk1M0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1oJ+4o8fxq2aQC9E4AgGxZ13Jw6SuskJudZNbj15OODPBwLByTj4L +kM6vOhPiOFK+ymxnBIe75NYWA02IjHo7JnNwChFCw6llMogjX8He8wDjC/rb4j/ o7t2NCXe8Jq+e6aCYelr3cOsn3QQavNW+HheditUcz1/np5aOzJTyxNSvAxreVlL 4XjM785JOYbgQ+5Jd8TDZHmpB7aLzuLlBsUEQKE4vGtiMg/uQTYd/moh4SZzck5w nt/ZQiKoOJ2UDUD7wyjMEYynGjXZI6fNwfjK8CVQkJAoTs8IK+b2XPPSVMMgGP7c wyZ4180jTjkQZJ64CxL2OwtVyOk/2jYT -----END CERTIFICATE-----Generated at Sat Apr 26 04:24:00 2025 by rpki-client