$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.mft File: 0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.mft (raw, json) Hash identifier: REnNCqSRTHZgkR714Rg3kqd1FRrRYaZmd16RmlgVeVM= Subject key identifier: 3D:FF:6F:7B:1B:6D:CE:B1:39:21:38:3F:26:1A:07:32:23:22:70:C1 Authority key identifier: D2:41:F5:71:CD:63:97:96:30:DC:1F:16:AD:48:99:D5:BE:D5:66:E5 Certificate issuer: /CN=A91A9CD5/serialNumber=D241F571CD63979630DC1F16AD4899D5BED566E5 Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.mft Manifest number: 6B Signing time: Fri 25 Apr 2025 05:52:47 +0000 Manifest this update: Fri 25 Apr 2025 05:52:47 +0000 Manifest next update: Fri 02 May 2025 05:52:47 +0000 Files and hashes: 1: 0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.crl (hash: Y2977tYB4qife322bPyTza/FJLJEqvfGEzpjp/Kfh1Y=) 2: D1E54D607FF211EFB2910061C4F9AE02.roa (hash: K3X3GoEdbp40UjZvhBO+XoTewllnOfMeBiUtz3yrvW4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.crl rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:52:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9CD5, serialNumber=D241F571CD63979630DC1F16AD4899D5BED566E5 Validity Not Before: Apr 25 05:52:47 2025 GMT Not After : May 2 05:52:47 2025 GMT Subject: CN=680b232f-8fab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:2b:75:b1:7d:da:2f:af:9e:b7:c3:18:f3:03: 98:08:ac:9e:41:54:b8:df:ee:72:73:94:ea:3f:0b: e1:ea:15:88:74:39:f7:92:4b:13:42:ab:83:01:ea: 7a:48:d6:19:89:e6:f2:ad:0a:8f:47:10:79:64:c1: 4e:1f:f4:34:e8:af:db:c5:c0:76:34:74:8b:ee:44: 10:2f:91:4c:1b:29:bb:48:74:1b:d4:70:3b:be:35: 3c:2c:d5:bd:39:ce:d8:6e:91:99:2a:73:52:c0:3a: 48:5f:21:6e:ae:49:c3:ae:c8:fe:15:7c:ef:dc:fd: 4b:a1:be:64:3d:fe:cc:ee:51:59:02:11:53:36:b5: 57:b1:ec:dd:d3:36:d2:a5:52:de:31:3b:7c:af:37: 58:be:87:b0:83:9f:2a:5b:7f:6d:47:62:85:1c:bc: 00:2c:f8:3d:50:bd:31:2f:ef:66:1f:2a:a9:b1:33: f1:d7:2c:30:c5:f9:a9:2b:ba:54:c6:40:e9:2e:bc: 0b:52:fc:56:4e:f5:53:02:06:55:42:2a:b9:9d:f0: 17:fc:ce:49:ca:d4:12:e4:20:53:ef:c3:db:6b:2f: 1e:1e:97:7b:4b:07:0a:30:38:f8:6e:31:90:df:09: 72:de:5c:21:ec:87:32:73:a1:33:ec:34:e4:cc:a5: 77:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:FF:6F:7B:1B:6D:CE:B1:39:21:38:3F:26:1A:07:32:23:22:70:C1 X509v3 Authority Key Identifier: keyid:D2:41:F5:71:CD:63:97:96:30:DC:1F:16:AD:48:99:D5:BE:D5:66:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:08:f5:c8:d2:44:7e:d0:4c:4c:3c:7f:8d:ae:c7:9b:32:d4: c8:3a:2c:67:2b:0a:12:82:ee:9b:77:96:cc:ae:62:84:d6:c3: 63:c5:e7:f6:ec:16:27:ef:1c:40:63:21:4a:5c:35:8d:4a:af: c4:ac:96:46:78:1d:77:5b:af:eb:c6:34:d3:f4:ef:f2:fa:53: bd:33:a6:59:27:47:b6:0c:19:61:0e:82:d1:77:b6:3b:d6:63: da:8c:96:a8:5e:e3:8d:b5:cd:b9:42:a6:69:69:fa:91:f4:af: c1:3b:59:14:5f:96:cb:00:05:55:d9:d9:2c:5e:bb:66:4c:54: 4d:49:1e:4c:c7:1e:d3:42:c4:30:c9:5a:7d:9c:4e:a5:36:7a: b9:6b:0c:dc:33:73:19:00:fc:7f:df:dc:88:47:6a:31:71:19: 9a:e5:ab:16:ab:f9:c9:86:b4:b5:7c:20:f9:0f:89:f2:14:53: af:4e:8b:83:fc:87:59:2f:c5:50:e4:80:e3:47:69:6a:fc:f8: 83:28:35:8a:99:85:fb:c2:9c:85:33:25:1c:80:1f:83:0c:76: 47:03:08:8c:94:93:5e:e0:52:b6:9e:33:6f:33:98:42:4d:fe: a7:5b:09:c3:16:44:46:2a:c9:8e:fc:c6:1c:23:c6:53:7e:83: da:c3:06:b4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OUNENTExMC8GA1UEBRMoRDI0MUY1NzFDRDYzOTc5NjMwREMxRjE2QUQ0ODk5RDVC RUQ1NjZFNTAeFw0yNTA0MjUwNTUyNDdaFw0yNTA1MDIwNTUyNDdaMBgxFjAUBgNV BAMTDTY4MGIyMzJmLThmYWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDmK3Wxfdovr563wxjzA5gIrJ5BVLjf7nJzlOo/C+HqFYh0OfeSSxNCq4MB6npI 1hmJ5vKtCo9HEHlkwU4f9DTor9vFwHY0dIvuRBAvkUwbKbtIdBvUcDu+NTws1b05 zthukZkqc1LAOkhfIW6uScOuyP4VfO/c/UuhvmQ9/szuUVkCEVM2tVex7N3TNtKl Ut4xO3yvN1i+h7CDnypbf21HYoUcvAAs+D1QvTEv72YfKqmxM/HXLDDF+akrulTG QOkuvAtS/FZO9VMCBlVCKrmd8Bf8zknK1BLkIFPvw9trLx4el3tLBwowOPhuMZDf CXLeXCHshzJzoTPsNOTMpXdhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPf9vextt zrE5ITg/JhoHMiMicMEwHwYDVR0jBBgwFoAU0kH1cc1jl5Yw3B8WrUiZ1b7VZuUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5Q0Q1LzcxOTk1RjRFN0ZF RjExRUZBODJERjYzOUM0RjlBRTAyLzBrSDFjYzFqbDVZdzNCOFdyVWlaMWI3Vlp1 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMGtIMWNjMWpsNVl3M0I4V3JVaVoxYjdWWnVVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 Q0Q1LzcxOTk1RjRFN0ZFRjExRUZBODJERjYzOUM0RjlBRTAyLzBrSDFjYzFqbDVZ dzNCOFdyVWlaMWI3Vlp1VS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABkI9cjSRH7QTEw8f42ux5sy1Mg6LGcrChKC7pt3lsyuYoTWw2PF5/bs FifvHEBjIUpcNY1Kr8SslkZ4HXdbr+vGNNP07/L6U70zplknR7YMGWEOgtF3tjvW Y9qMlqhe4421zblCpmlp+pH0r8E7WRRflssABVXZ2Sxeu2ZMVE1JHkzHHtNCxDDJ Wn2cTqU2erlrDNwzcxkA/H/f3IhHajFxGZrlqxar+cmGtLV8IPkPifIUU69Oi4P8 h1kvxVDkgONHaWr8+IMoNYqZhfvCnIUzJRyAH4MMdkcDCIyUk17gUraeM28zmEJN /qdbCcMWREYqyY78xhwjxlN+g9rDBrQ= -----END CERTIFICATE-----Generated at Sat Apr 26 12:24:38 2025 by rpki-client