$ rpki-client -vvf rpki.apnic.net/member_repository/A91B517C/CD3763E6DCED11EEBDE00E30C4F9AE02/n6-DQWde9DiWQZk2JUJXLIkoVAw.mft File: n6-DQWde9DiWQZk2JUJXLIkoVAw.mft (raw, json) Hash identifier: qa+S6U1IAK5RnpU2xe6mSgxqAGyrtzHIVVPYfIoXp3U= Subject key identifier: 70:82:6D:54:27:BC:F8:20:35:D2:2D:3E:9F:CA:C8:95:BF:81:94:61 Authority key identifier: 9F:AF:83:41:67:5E:F4:38:96:41:99:36:25:42:57:2C:89:28:54:0C Certificate issuer: /CN=A91B517C/serialNumber=9FAF8341675EF438964199362542572C8928540C Certificate serial: E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6-DQWde9DiWQZk2JUJXLIkoVAw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B517C/CD3763E6DCED11EEBDE00E30C4F9AE02/n6-DQWde9DiWQZk2JUJXLIkoVAw.mft Manifest number: DC Signing time: Fri 25 Apr 2025 04:39:17 +0000 Manifest this update: Fri 25 Apr 2025 04:39:17 +0000 Manifest next update: Fri 02 May 2025 04:39:17 +0000 Files and hashes: 1: n6-DQWde9DiWQZk2JUJXLIkoVAw.crl (hash: zBURNMKtxU+tqLSNyIfU865lWD/xCjuvw9x7rQtZmlo=) 2: 86019882E2A311EEA6A97425C4F9AE02.roa (hash: rY3nCJHEdvDis2cayySCk8QGqqZuPm71Ue/Jfr5Cod0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B517C/CD3763E6DCED11EEBDE00E30C4F9AE02/n6-DQWde9DiWQZk2JUJXLIkoVAw.crl rsync://rpki.apnic.net/member_repository/A91B517C/CD3763E6DCED11EEBDE00E30C4F9AE02/n6-DQWde9DiWQZk2JUJXLIkoVAw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6-DQWde9DiWQZk2JUJXLIkoVAw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:39:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 228 (0xe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B517C, serialNumber=9FAF8341675EF438964199362542572C8928540C Validity Not Before: Apr 25 04:39:17 2025 GMT Not After : May 2 04:39:17 2025 GMT Subject: CN=680b11f5-8ff2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:48:cc:35:f7:13:ce:76:2d:ce:a9:69:92:1b: bf:aa:38:77:e3:4d:29:99:44:50:83:72:4f:30:83: 71:b1:62:fb:f1:41:23:ed:5b:f8:d5:9a:21:55:2d: 54:1c:b6:3c:3a:eb:38:e7:cc:41:04:94:4c:e4:e8: 71:cb:7f:82:53:6e:7e:61:69:e3:be:6a:27:80:0d: 79:37:55:18:c9:3f:9a:5c:0f:38:f7:f4:23:21:ed: da:bb:48:53:b3:97:a5:0b:9e:59:90:87:f8:ee:e4: 17:48:1b:02:d7:0f:5e:c2:a4:e7:5f:d2:e0:e0:e1: c0:b3:a3:7a:37:53:f3:86:88:d7:41:68:be:e6:da: 77:52:6c:0c:74:87:39:ba:ca:b9:44:ef:8a:bc:11: f3:62:5f:f3:eb:7e:7d:64:74:dd:90:40:17:da:2a: a4:73:eb:5c:3f:dc:2e:80:9c:90:24:95:38:7a:c5: 77:17:48:36:9b:70:c6:db:e4:03:e0:6d:e8:7a:64: 3b:7d:3b:2e:e0:54:c0:ca:9a:7d:e8:75:23:ba:41: 22:d0:4d:3f:5c:09:bb:64:64:6a:f2:d9:2a:d0:46: e9:3a:43:61:eb:67:07:b8:78:f3:8a:ae:88:02:91: 99:ff:81:89:e0:41:99:2c:e6:04:55:82:0b:0c:78: 04:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:82:6D:54:27:BC:F8:20:35:D2:2D:3E:9F:CA:C8:95:BF:81:94:61 X509v3 Authority Key Identifier: keyid:9F:AF:83:41:67:5E:F4:38:96:41:99:36:25:42:57:2C:89:28:54:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B517C/CD3763E6DCED11EEBDE00E30C4F9AE02/n6-DQWde9DiWQZk2JUJXLIkoVAw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6-DQWde9DiWQZk2JUJXLIkoVAw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B517C/CD3763E6DCED11EEBDE00E30C4F9AE02/n6-DQWde9DiWQZk2JUJXLIkoVAw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:c8:5f:8e:31:6c:18:5a:1d:3c:e6:78:34:f4:05:95:dd:8b: d6:81:56:4d:ec:d4:42:62:d1:69:47:86:0a:36:d8:25:dd:ba: 40:2f:95:4b:e1:e7:7c:52:bb:ae:c0:62:77:fe:95:02:d8:5e: ef:3c:87:d0:de:ca:2d:42:f3:0f:1c:9b:0b:44:9e:5b:96:99: 0b:1d:02:2a:f0:48:2e:32:da:5c:79:78:44:67:21:f7:f6:01: f4:0a:f1:48:b9:93:a5:c7:64:03:a4:26:56:80:3e:29:a7:cd: 48:67:f8:c2:73:80:5e:38:f5:5e:9a:87:b9:35:3d:ba:b0:5e: d9:7e:ed:e5:a5:15:57:6d:36:94:b3:08:ab:7e:0c:2f:d4:97: 6f:38:52:5b:c4:8c:50:5e:51:d4:92:cc:a1:56:38:68:94:c4: ba:b0:d5:e9:3b:5c:01:ce:87:a0:41:56:20:e9:01:ad:74:03: e1:39:97:ba:6e:cb:2f:cd:be:e2:b7:0b:ab:96:57:9b:b2:2b: 42:91:21:1c:52:b8:75:58:68:ab:cc:53:8d:b0:3b:a6:ec:5b: 00:2d:13:93:0f:3c:60:ab:6b:ca:1e:56:71:3a:52:20:2a:22: cf:85:97:4c:48:d5:ce:a9:da:9f:fd:3e:c8:ef:47:79:f6:b5: 49:f5:ce:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjUxN0MxMTAvBgNVBAUTKDlGQUY4MzQxNjc1RUY0Mzg5NjQxOTkzNjI1NDI1NzJD ODkyODU0MEMwHhcNMjUwNDI1MDQzOTE3WhcNMjUwNTAyMDQzOTE3WjAYMRYwFAYD VQQDEw02ODBiMTFmNS04ZmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA00jMNfcTznYtzqlpkhu/qjh3400pmURQg3JPMINxsWL78UEj7Vv41ZohVS1U HLY8Ous458xBBJRM5Ohxy3+CU25+YWnjvmongA15N1UYyT+aXA849/QjIe3au0hT s5elC55ZkIf47uQXSBsC1w9ewqTnX9Lg4OHAs6N6N1PzhojXQWi+5tp3UmwMdIc5 usq5RO+KvBHzYl/z6359ZHTdkEAX2iqkc+tcP9wugJyQJJU4esV3F0g2m3DG2+QD 4G3oemQ7fTsu4FTAypp96HUjukEi0E0/XAm7ZGRq8tkq0EbpOkNh62cHuHjziq6I ApGZ/4GJ4EGZLOYEVYILDHgEOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHCCbVQn vPggNdItPp/KyJW/gZRhMB8GA1UdIwQYMBaAFJ+vg0FnXvQ4lkGZNiVCVyyJKFQM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTE3Qy9DRDM3NjNFNkRD RUQxMUVFQkRFMDBFMzBDNEY5QUUwMi9uNi1EUVdkZTlEaVdRWmsySlVKWExJa29W QXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL242LURRV2RlOURpV1FaazJKVUpYTElrb1ZBdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTE3Qy9DRDM3NjNFNkRDRUQxMUVFQkRFMDBFMzBDNEY5QUUwMi9uNi1EUVdkZTlE aVdRWmsySlVKWExJa29WQXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/yF+OMWwYWh085ng09AWV3YvWgVZN7NRCYtFpR4YKNtgl3bpAL5VL 4ed8UruuwGJ3/pUC2F7vPIfQ3sotQvMPHJsLRJ5blpkLHQIq8EguMtpceXhEZyH3 9gH0CvFIuZOlx2QDpCZWgD4pp81IZ/jCc4BeOPVemoe5NT26sF7Zfu3lpRVXbTaU swirfgwv1JdvOFJbxIxQXlHUksyhVjholMS6sNXpO1wBzoegQVYg6QGtdAPhOZe6 bssvzb7itwurllebsitCkSEcUrh1WGirzFONsDum7FsALROTDzxgq2vKHlZxOlIg KiLPhZdMSNXOqdqf/T7I70d59rVJ9c6Y -----END CERTIFICATE-----Generated at Sat Apr 26 14:21:06 2025 by rpki-client