$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/6DpZuIHOHlc10a3c2LrgXlO4U9A.mft File: 6DpZuIHOHlc10a3c2LrgXlO4U9A.mft (raw, json) Hash identifier: rX+9o2cps4w6q/SR0NmjzeiqeP+jerw2H+mbwH9/Nx0= Subject key identifier: 80:BE:92:06:DC:F5:29:3C:AC:98:05:02:CD:F4:73:60:8F:2E:34:72 Authority key identifier: E8:3A:59:B8:81:CE:1E:57:35:D1:AD:DC:D8:BA:E0:5E:53:B8:53:D0 Certificate issuer: /CN=A91A3BB1/serialNumber=E83A59B881CE1E5735D1ADDCD8BAE05E53B853D0 Certificate serial: 34B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6DpZuIHOHlc10a3c2LrgXlO4U9A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/6DpZuIHOHlc10a3c2LrgXlO4U9A.mft Manifest number: 348F Signing time: Thu 24 Apr 2025 14:49:56 +0000 Manifest this update: Thu 24 Apr 2025 14:49:56 +0000 Manifest next update: Thu 01 May 2025 14:49:56 +0000 Files and hashes: 1: 6DpZuIHOHlc10a3c2LrgXlO4U9A.crl (hash: SR9mNKGK7jlADC1Aq//ZSc+Dc0k8TecuRx1uFAljll8=) 2: 0B3FC58CB0DA11E5A8C8BF13C4F9AE02.roa (hash: IB+Pst0/hjjnT/aD3F4nsmgPYgJjXgVIAOW0RdKrpkY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/6DpZuIHOHlc10a3c2LrgXlO4U9A.crl rsync://rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/6DpZuIHOHlc10a3c2LrgXlO4U9A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6DpZuIHOHlc10a3c2LrgXlO4U9A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:49:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13493 (0x34b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3BB1, serialNumber=E83A59B881CE1E5735D1ADDCD8BAE05E53B853D0 Validity Not Before: Apr 24 14:49:56 2025 GMT Not After : May 1 14:49:56 2025 GMT Subject: CN=680a4f94-faee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3f:a2:8c:b1:a7:a5:f6:f1:04:41:89:8e:0b: b8:e9:90:36:c4:36:5d:1b:f9:71:ff:99:49:11:16: cf:03:01:c5:97:42:b1:90:50:97:3f:ef:f7:86:51: 46:6e:4e:ca:eb:4e:2f:39:d5:44:11:a7:6a:a1:06: cd:8a:f8:7f:bb:ca:f9:96:a2:7a:6e:f2:9c:b6:fb: a0:80:cd:fe:2c:13:c2:f5:b9:5d:eb:32:21:62:66: 7f:22:d1:27:e7:3c:b1:87:81:8f:10:af:d8:5c:3d: e0:51:bd:fc:d5:c2:07:95:1a:ae:dc:8f:e3:7d:4b: c2:04:0f:27:bb:c7:57:b6:89:14:c0:28:0c:a1:16: 3b:13:02:c7:19:c2:21:d5:ee:16:25:86:3e:62:2c: 28:0c:24:d4:41:e6:84:4c:1c:dd:e6:3d:46:fc:7d: 56:27:71:cd:33:fb:f5:92:3a:c9:fc:3b:40:a3:ea: e0:2d:f0:67:bc:b4:d2:70:36:57:c5:e9:be:cf:3b: 05:a1:7b:6e:e3:7e:c2:ac:cb:c1:91:fc:a3:e7:cd: 97:d1:fe:39:b9:5d:1f:fe:df:73:b2:27:0e:6e:b6: 78:7f:58:f1:b0:47:e7:85:39:9e:fd:c5:99:f7:dc: a3:2c:01:d7:b6:02:a1:38:0b:f0:2c:45:ef:6f:e5: b3:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:BE:92:06:DC:F5:29:3C:AC:98:05:02:CD:F4:73:60:8F:2E:34:72 X509v3 Authority Key Identifier: keyid:E8:3A:59:B8:81:CE:1E:57:35:D1:AD:DC:D8:BA:E0:5E:53:B8:53:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/6DpZuIHOHlc10a3c2LrgXlO4U9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6DpZuIHOHlc10a3c2LrgXlO4U9A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/6DpZuIHOHlc10a3c2LrgXlO4U9A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:fd:73:00:de:56:51:93:27:02:b4:19:e8:54:2c:e0:34:8b: 95:1b:40:24:66:c6:51:2a:e3:9a:f9:73:b2:7e:92:5e:c8:d6: 0b:02:d9:8b:7f:59:19:2d:b7:fa:c5:8d:b9:a5:20:90:2d:cb: 0d:3b:5a:9f:47:73:4a:f6:be:98:ef:a2:b9:c8:4e:9c:9f:f7: 90:85:d0:af:30:d8:f2:63:81:a3:25:e7:6e:94:a6:a8:6f:35: 9a:30:01:85:ad:12:e9:16:0a:99:b4:e8:e7:50:55:df:59:2e: a6:9f:e1:68:c1:ca:5e:c7:49:0f:1c:8e:d7:cf:61:66:ae:2d: 6b:69:97:7c:be:66:9c:2e:68:36:fc:48:01:71:f7:cc:c8:66: fc:40:bf:67:30:f2:c0:d5:e3:f6:2f:bb:29:c2:08:91:50:08: 6c:8b:71:ac:1f:15:15:26:41:9e:f1:b0:5d:37:1c:68:ad:70: 10:90:bb:cd:65:7a:8a:85:c0:da:dc:e2:5e:ce:59:20:66:f8: 0b:19:e7:77:97:95:cf:e7:1b:01:7f:29:75:79:6d:5c:67:3b: 80:2f:12:c3:df:fc:63:c9:a9:52:f2:13:7d:1d:be:9a:91:f3: 59:00:6e:00:1b:d0:2f:09:b9:99:d5:bf:e0:65:f4:d5:03:e2: 86:8f:9c:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNCQjExMTAvBgNVBAUTKEU4M0E1OUI4ODFDRTFFNTczNUQxQUREQ0Q4QkFFMDVF NTNCODUzRDAwHhcNMjUwNDI0MTQ0OTU2WhcNMjUwNTAxMTQ0OTU2WjAYMRYwFAYD VQQDEw02ODBhNGY5NC1mYWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzj+ijLGnpfbxBEGJjgu46ZA2xDZdG/lx/5lJERbPAwHFl0KxkFCXP+/3hlFG bk7K604vOdVEEadqoQbNivh/u8r5lqJ6bvKctvuggM3+LBPC9bld6zIhYmZ/ItEn 5zyxh4GPEK/YXD3gUb381cIHlRqu3I/jfUvCBA8nu8dXtokUwCgMoRY7EwLHGcIh 1e4WJYY+YiwoDCTUQeaETBzd5j1G/H1WJ3HNM/v1kjrJ/DtAo+rgLfBnvLTScDZX xem+zzsFoXtu437CrMvBkfyj582X0f45uV0f/t9zsicObrZ4f1jxsEfnhTme/cWZ 99yjLAHXtgKhOAvwLEXvb+WzFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIC+kgbc 9Sk8rJgFAs30c2CPLjRyMB8GA1UdIwQYMBaAFOg6WbiBzh5XNdGt3Ni64F5TuFPQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0JCMS9FQTFCMjJFMDFE OTYxMUUyOTgwNkM1N0YwOEIwMkNEMi82RHBadUlIT0hsYzEwYTNjMkxyZ1hsTzRV OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZEcFp1SUhPSGxjMTBhM2MyTHJnWGxPNFU5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0JCMS9FQTFCMjJFMDFEOTYxMUUyOTgwNkM1N0YwOEIwMkNEMi82RHBadUlIT0hs YzEwYTNjMkxyZ1hsTzRVOUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1/XMA3lZRkycCtBnoVCzgNIuVG0AkZsZRKuOa+XOyfpJeyNYLAtmL f1kZLbf6xY25pSCQLcsNO1qfR3NK9r6Y76K5yE6cn/eQhdCvMNjyY4GjJedulKao bzWaMAGFrRLpFgqZtOjnUFXfWS6mn+Fowcpex0kPHI7Xz2Fmri1raZd8vmacLmg2 /EgBcffMyGb8QL9nMPLA1eP2L7spwgiRUAhsi3GsHxUVJkGe8bBdNxxorXAQkLvN ZXqKhcDa3OJezlkgZvgLGed3l5XP5xsBfyl1eW1cZzuALxLD3/xjyalS8hN9Hb6a kfNZAG4AG9AvCbmZ1b/gZfTVA+KGj5xd -----END CERTIFICATE-----Generated at Sat Apr 26 05:29:26 2025 by rpki-client