$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0847/33B23F7E8C8E11EFA2DC5360C4F9AE02/6GFAAj8MoF8XFLinDcmVX_eXvbE.mft File: 6GFAAj8MoF8XFLinDcmVX_eXvbE.mft (raw, json) Hash identifier: 6baVL5PPAwV07ImZUe751XhIMdMtCr1bcP+1wXwstGk= Subject key identifier: 63:36:3C:98:EE:16:6F:CB:A6:67:14:36:0C:83:D6:83:75:31:6E:DA Authority key identifier: E8:61:40:02:3F:0C:A0:5F:17:14:B8:A7:0D:C9:95:5F:F7:97:BD:B1 Certificate issuer: /CN=A91A0847/serialNumber=E86140023F0CA05F1714B8A70DC9955FF797BDB1 Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GFAAj8MoF8XFLinDcmVX_eXvbE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0847/33B23F7E8C8E11EFA2DC5360C4F9AE02/6GFAAj8MoF8XFLinDcmVX_eXvbE.mft Manifest number: 63 Signing time: Fri 25 Apr 2025 06:01:19 +0000 Manifest this update: Fri 25 Apr 2025 06:01:19 +0000 Manifest next update: Fri 02 May 2025 06:01:19 +0000 Files and hashes: 1: 6GFAAj8MoF8XFLinDcmVX_eXvbE.crl (hash: yXUxdEWQr2MoLwNfqfiql+zjZf3viU9Gk0fHKfsVAYs=) 2: 9A36771A8C8E11EF86852961C4F9AE02.roa (hash: 9OuRCyTKARyxu0HVGwX+7EOD8zJcO3DB6HwcIsyXsFM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0847/33B23F7E8C8E11EFA2DC5360C4F9AE02/6GFAAj8MoF8XFLinDcmVX_eXvbE.crl rsync://rpki.apnic.net/member_repository/A91A0847/33B23F7E8C8E11EFA2DC5360C4F9AE02/6GFAAj8MoF8XFLinDcmVX_eXvbE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GFAAj8MoF8XFLinDcmVX_eXvbE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0847, serialNumber=E86140023F0CA05F1714B8A70DC9955FF797BDB1 Validity Not Before: Apr 25 06:01:19 2025 GMT Not After : May 2 06:01:19 2025 GMT Subject: CN=680b252f-28b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c0:db:94:7b:09:dd:62:1a:ed:43:88:74:2e: 21:13:c8:a0:a8:cf:34:2d:80:12:e4:b9:19:ad:a6: 49:dd:1a:55:17:4c:65:5f:a2:2c:82:af:1a:00:04: 98:8c:e1:c8:99:34:d8:3c:13:18:2b:9d:32:57:31: 17:91:35:c2:df:58:98:70:7a:86:95:14:be:cf:3a: 05:4c:53:24:bf:ec:ab:80:90:07:70:eb:5b:30:e5: be:1a:52:b7:f8:ff:94:85:cd:74:4a:9f:44:dd:cb: 43:bb:a8:44:97:d1:23:d8:3e:28:b4:fc:bf:0b:74: 1c:d1:1d:0d:3f:2b:69:6b:25:06:90:89:d7:bb:9c: 2e:b8:73:f1:1c:de:3d:95:5d:32:67:0e:ea:81:5b: 9d:dc:58:11:9a:c5:40:4c:c7:ca:73:56:48:fe:b3: 9a:36:00:66:9b:17:28:31:bb:e4:9e:cf:32:1b:6a: 22:b3:4b:45:96:f2:ba:0b:6a:6f:1d:c4:4b:13:2e: 2c:b6:1c:27:b9:30:b9:b8:1e:b0:7e:f7:30:43:42: 03:ae:2f:14:c2:5b:19:90:e6:4e:f0:5b:1d:39:08: c7:18:cb:e0:3e:8b:b9:83:21:d6:4a:9d:46:24:ab: f4:64:c5:ef:0e:b8:ab:71:f7:69:63:1e:24:7d:7a: af:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:36:3C:98:EE:16:6F:CB:A6:67:14:36:0C:83:D6:83:75:31:6E:DA X509v3 Authority Key Identifier: keyid:E8:61:40:02:3F:0C:A0:5F:17:14:B8:A7:0D:C9:95:5F:F7:97:BD:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0847/33B23F7E8C8E11EFA2DC5360C4F9AE02/6GFAAj8MoF8XFLinDcmVX_eXvbE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GFAAj8MoF8XFLinDcmVX_eXvbE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0847/33B23F7E8C8E11EFA2DC5360C4F9AE02/6GFAAj8MoF8XFLinDcmVX_eXvbE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:88:83:f0:01:ba:49:9b:8c:f3:5c:d3:b5:83:b7:8b:cb:92: c3:ec:cc:29:ec:71:52:ef:0c:dc:96:36:f1:76:9c:6b:15:25: 30:c3:a2:82:70:bb:60:86:19:06:73:60:a9:b5:08:31:56:7c: 00:ca:07:40:c0:97:97:7c:03:70:dc:09:18:35:11:7e:a2:3e: bb:1b:b7:f6:2f:69:9b:ff:6d:41:ef:d6:1c:63:2e:48:99:7a: 57:b2:8d:56:c5:ad:c1:fe:96:cf:c1:67:4c:b5:c1:66:5c:65: bc:8c:a0:45:62:89:15:8d:68:9c:fd:23:e1:a5:ef:bd:5b:5d: 81:d0:57:ed:be:74:ed:ef:d1:2f:bf:25:af:fa:7d:54:e8:17: 39:98:9e:b6:09:e1:e7:7b:2a:42:4e:cf:25:2d:e7:94:1f:69: fd:c2:c4:e1:4a:f8:76:57:d1:27:80:bd:7f:fe:53:e5:2b:c2: 18:e1:70:7e:5e:5e:46:66:69:0c:d4:dc:40:a8:ad:fa:9b:6d: f2:37:6e:02:45:3d:26:9c:00:e4:31:d9:1f:0e:ae:04:0b:ab: 22:83:e8:ab:7d:da:ae:57:7d:75:05:8c:42:20:0b:e7:45:f0: 44:a1:fa:80:14:c6:1b:16:6a:82:12:91:60:f6:cf:8b:f9:49: 3a:26:49:2c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MDg0NzExMC8GA1UEBRMoRTg2MTQwMDIzRjBDQTA1RjE3MTRCOEE3MERDOTk1NUZG Nzk3QkRCMTAeFw0yNTA0MjUwNjAxMTlaFw0yNTA1MDIwNjAxMTlaMBgxFjAUBgNV BAMTDTY4MGIyNTJmLTI4YjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCawNuUewndYhrtQ4h0LiETyKCozzQtgBLkuRmtpkndGlUXTGVfoiyCrxoABJiM 4ciZNNg8ExgrnTJXMReRNcLfWJhweoaVFL7POgVMUyS/7KuAkAdw61sw5b4aUrf4 /5SFzXRKn0Tdy0O7qESX0SPYPii0/L8LdBzRHQ0/K2lrJQaQide7nC64c/Ec3j2V XTJnDuqBW53cWBGaxUBMx8pzVkj+s5o2AGabFygxu+SezzIbaiKzS0WW8roLam8d xEsTLiy2HCe5MLm4HrB+9zBDQgOuLxTCWxmQ5k7wWx05CMcYy+A+i7mDIdZKnUYk q/Rkxe8OuKtx92ljHiR9eq85AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYzY8mO4W b8umZxQ2DIPWg3UxbtowHwYDVR0jBBgwFoAU6GFAAj8MoF8XFLinDcmVX/eXvbEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEwODQ3LzMzQjIzRjdFOEM4 RTExRUZBMkRDNTM2MEM0RjlBRTAyLzZHRkFBajhNb0Y4WEZMaW5EY21WWF9lWHZi RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNkdGQUFqOE1vRjhYRkxpbkRjbVZYX2VYdmJFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEw ODQ3LzMzQjIzRjdFOEM4RTExRUZBMkRDNTM2MEM0RjlBRTAyLzZHRkFBajhNb0Y4 WEZMaW5EY21WWF9lWHZiRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIiIg/ABukmbjPNc07WDt4vLksPszCnscVLvDNyWNvF2nGsVJTDDooJw u2CGGQZzYKm1CDFWfADKB0DAl5d8A3DcCRg1EX6iPrsbt/YvaZv/bUHv1hxjLkiZ eleyjVbFrcH+ls/BZ0y1wWZcZbyMoEViiRWNaJz9I+Gl771bXYHQV+2+dO3v0S+/ Ja/6fVToFzmYnrYJ4ed7KkJOzyUt55Qfaf3CxOFK+HZX0SeAvX/+U+UrwhjhcH5e XkZmaQzU3ECorfqbbfI3bgJFPSacAOQx2R8OrgQLqyKD6Kt92q5XfXUFjEIgC+dF 8ESh+oAUxhsWaoISkWD2z4v5STomSSw= -----END CERTIFICATE-----Generated at Sat Apr 26 16:40:20 2025 by rpki-client