$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADA19/013CD7D0ED4F11EA93C8143DC4F9AE02/6A9XgW64BohdxesewuGtVKL58t8.mft File: 6A9XgW64BohdxesewuGtVKL58t8.mft (raw, json) Hash identifier: 7x7LeyYmNvs9ij4/onh/Z/MuD50KGNGQ1YekqmiKIw0= Subject key identifier: 26:77:D8:38:08:34:EF:54:9B:9F:87:39:52:10:00:44:D7:A2:E9:E1 Authority key identifier: E8:0F:57:81:6E:B8:06:88:5D:C5:EB:1E:C2:E1:AD:54:A2:F9:F2:DF Certificate issuer: /CN=A91ADA19/serialNumber=E80F57816EB806885DC5EB1EC2E1AD54A2F9F2DF Certificate serial: 07E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6A9XgW64BohdxesewuGtVKL58t8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADA19/013CD7D0ED4F11EA93C8143DC4F9AE02/6A9XgW64BohdxesewuGtVKL58t8.mft Manifest number: 07D7 Signing time: Thu 24 Apr 2025 20:53:24 +0000 Manifest this update: Thu 24 Apr 2025 20:53:24 +0000 Manifest next update: Thu 01 May 2025 20:53:24 +0000 Files and hashes: 1: 6A9XgW64BohdxesewuGtVKL58t8.crl (hash: PdZGQGFFZsbq23PAWBU74qmTG49F7/nPWvH+BoPMzt0=) 2: F95379BE124411EB9E551E38C4F9AE02.roa (hash: 8/9NmjJSzWwLgBSh9ZIA8mU7QUTPCv3Je8e4MkPOAoc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADA19/013CD7D0ED4F11EA93C8143DC4F9AE02/6A9XgW64BohdxesewuGtVKL58t8.crl rsync://rpki.apnic.net/member_repository/A91ADA19/013CD7D0ED4F11EA93C8143DC4F9AE02/6A9XgW64BohdxesewuGtVKL58t8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6A9XgW64BohdxesewuGtVKL58t8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:53:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2019 (0x7e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADA19, serialNumber=E80F57816EB806885DC5EB1EC2E1AD54A2F9F2DF Validity Not Before: Apr 24 20:53:24 2025 GMT Not After : May 1 20:53:24 2025 GMT Subject: CN=680aa4c4-c710 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9e:f3:4f:34:bd:37:ef:32:51:5e:a1:fe:8f: 73:6c:d9:05:da:26:8a:ed:6c:50:6d:16:40:78:fb: ff:54:a1:88:6b:85:68:ae:64:c9:9e:68:d7:44:7c: ae:1d:24:51:2f:91:67:d6:a9:ac:1d:db:0d:32:32: 7d:83:09:d6:c2:82:c3:d4:08:35:d4:9b:2e:f3:f2: bc:c7:fe:10:99:44:c3:b8:08:59:bb:21:21:19:b4: 6d:9f:05:f4:de:9a:e1:c2:66:0c:48:eb:65:84:f7: 8a:eb:84:06:b7:0f:70:79:90:7d:95:e7:9d:a1:95: 16:b2:29:ec:40:ef:1e:e9:f9:b5:4e:dc:43:b3:8c: 9c:90:16:75:b7:a7:59:ce:b1:c7:27:c5:03:d6:23: d7:1e:70:0d:fa:d5:39:4a:4c:67:2d:07:33:b5:45: ac:b6:b5:c3:aa:7e:5c:db:0b:ed:8c:25:21:98:e1: 40:4f:fa:62:79:eb:80:ab:f3:50:07:ba:54:05:c1: 24:47:e1:ea:b8:00:8b:67:dc:3e:da:ee:c9:1e:8c: 5d:fb:cb:6e:a2:be:14:42:c8:c7:d9:2e:80:41:56: dd:37:e0:b3:d4:24:1e:05:be:cf:6f:06:5c:79:7e: 8f:55:eb:08:f8:22:21:a0:ed:db:90:99:84:7d:61: 0d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:77:D8:38:08:34:EF:54:9B:9F:87:39:52:10:00:44:D7:A2:E9:E1 X509v3 Authority Key Identifier: keyid:E8:0F:57:81:6E:B8:06:88:5D:C5:EB:1E:C2:E1:AD:54:A2:F9:F2:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADA19/013CD7D0ED4F11EA93C8143DC4F9AE02/6A9XgW64BohdxesewuGtVKL58t8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6A9XgW64BohdxesewuGtVKL58t8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADA19/013CD7D0ED4F11EA93C8143DC4F9AE02/6A9XgW64BohdxesewuGtVKL58t8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:d8:58:da:2a:ad:a2:3b:6a:8f:bd:61:73:ac:48:5f:47:8d: 9e:da:02:0c:91:22:97:96:89:43:64:9c:12:24:61:19:91:05: 90:65:4d:94:5d:b9:e2:7c:fb:70:66:29:3f:ba:5d:1a:6e:c4: 61:37:28:59:fe:c4:14:50:bc:39:a7:2a:5e:60:37:be:ed:81: 49:a6:bb:79:09:7e:47:8c:7a:0b:62:ba:d3:bf:ec:d7:6f:c3: db:47:f8:d5:2c:41:24:2f:f5:b0:df:5e:30:6e:f8:6c:28:26: 14:3f:a0:6e:51:df:6b:c0:08:95:2e:e5:5a:9a:da:44:2e:d1: 0d:44:5a:a5:77:97:3e:4e:7b:13:ac:21:f4:da:bf:88:1e:95: a3:d5:21:fa:4c:2b:96:a5:8b:c0:c6:64:f2:50:6c:f2:07:f5: 47:10:10:48:d0:6e:f3:af:63:7d:d7:8a:74:df:d1:d8:d2:e8: d7:66:da:c4:1c:e3:30:e9:f7:8c:49:46:3d:4b:08:5b:60:24: 3d:75:f7:df:69:ba:68:af:33:bc:58:3e:aa:46:09:8a:1a:e5: 82:dd:b7:eb:8b:0c:d9:d6:38:21:2f:b3:5f:5e:a6:bd:51:ae: f6:17:ae:25:49:84:8d:6f:72:89:f1:73:73:6e:43:32:b7:37: 5f:07:5e:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURBMTkxMTAvBgNVBAUTKEU4MEY1NzgxNkVCODA2ODg1REM1RUIxRUMyRTFBRDU0 QTJGOUYyREYwHhcNMjUwNDI0MjA1MzI0WhcNMjUwNTAxMjA1MzI0WjAYMRYwFAYD VQQDEw02ODBhYTRjNC1jNzEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA057zTzS9N+8yUV6h/o9zbNkF2iaK7WxQbRZAePv/VKGIa4VormTJnmjXRHyu HSRRL5Fn1qmsHdsNMjJ9gwnWwoLD1Ag11Jsu8/K8x/4QmUTDuAhZuyEhGbRtnwX0 3prhwmYMSOtlhPeK64QGtw9weZB9leedoZUWsinsQO8e6fm1TtxDs4yckBZ1t6dZ zrHHJ8UD1iPXHnAN+tU5SkxnLQcztUWstrXDqn5c2wvtjCUhmOFAT/pieeuAq/NQ B7pUBcEkR+HquACLZ9w+2u7JHoxd+8tuor4UQsjH2S6AQVbdN+Cz1CQeBb7PbwZc eX6PVesI+CIhoO3bkJmEfWENzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCZ32DgI NO9Um5+HOVIQAETXounhMB8GA1UdIwQYMBaAFOgPV4FuuAaIXcXrHsLhrVSi+fLf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREExOS8wMTNDRDdEMEVE NEYxMUVBOTNDODE0M0RDNEY5QUUwMi82QTlYZ1c2NEJvaGR4ZXNld3VHdFZLTDU4 dDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZBOVhnVzY0Qm9oZHhlc2V3dUd0VktMNTh0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REExOS8wMTNDRDdEMEVENEYxMUVBOTNDODE0M0RDNEY5QUUwMi82QTlYZ1c2NEJv aGR4ZXNld3VHdFZLTDU4dDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBo2FjaKq2iO2qPvWFzrEhfR42e2gIMkSKXlolDZJwSJGEZkQWQZU2U XbnifPtwZik/ul0absRhNyhZ/sQUULw5pypeYDe+7YFJprt5CX5HjHoLYrrTv+zX b8PbR/jVLEEkL/Ww314wbvhsKCYUP6BuUd9rwAiVLuVamtpELtENRFqld5c+TnsT rCH02r+IHpWj1SH6TCuWpYvAxmTyUGzyB/VHEBBI0G7zr2N914p039HY0ujXZtrE HOMw6feMSUY9SwhbYCQ9dfffabporzO8WD6qRgmKGuWC3bfriwzZ1jghL7NfXqa9 Ua72F64lSYSNb3KJ8XNzbkMytzdfB150 -----END CERTIFICATE-----Generated at Sat Apr 26 15:06:44 2025 by rpki-client