$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.mft File: -6JuPNfggZmzoY8WNmp1fwTN8FQ.mft (raw, json) Hash identifier: WtL7KKw/c9xTmmrhPI6evLDObfeIX/LOvvbTgudKeXY= Subject key identifier: 92:85:55:26:68:1F:1A:19:27:6F:87:30:B0:A7:75:33:26:65:3E:05 Authority key identifier: FB:A2:6E:3C:D7:E0:81:99:B3:A1:8F:16:36:6A:75:7F:04:CD:F0:54 Certificate issuer: /CN=A91B7709/serialNumber=FBA26E3CD7E08199B3A18F16366A757F04CDF054 Certificate serial: 65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6JuPNfggZmzoY8WNmp1fwTN8FQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.mft Manifest number: 64 Signing time: Fri 25 Apr 2025 05:59:41 +0000 Manifest this update: Fri 25 Apr 2025 05:59:41 +0000 Manifest next update: Fri 02 May 2025 05:59:41 +0000 Files and hashes: 1: -6JuPNfggZmzoY8WNmp1fwTN8FQ.crl (hash: GHAhdfVH62A2JoQj07G6Wbb6CT0sJb0oi1ufvL7O7rs=) 2: 25FFA3768BB711EF9C572630C4F9AE02.roa (hash: PO3QH99TaEGXLczk5CFqhAB0Ach8mXnS87Xb+Nz/Uzg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.crl rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6JuPNfggZmzoY8WNmp1fwTN8FQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:59:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 101 (0x65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7709, serialNumber=FBA26E3CD7E08199B3A18F16366A757F04CDF054 Validity Not Before: Apr 25 05:59:41 2025 GMT Not After : May 2 05:59:41 2025 GMT Subject: CN=680b24cd-ded4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:59:17:4f:11:e9:4f:a2:d9:9f:22:08:92:d4: df:1d:23:da:88:9d:74:62:fd:a2:d4:f1:e4:6d:b4: 3c:c9:c0:24:13:01:2b:b6:03:c2:06:cc:00:3e:05: 2e:0f:29:01:6c:8a:96:34:1d:2d:af:4a:2b:4b:0d: c5:84:9e:01:b8:41:9b:d5:6d:48:1a:cf:72:3c:04: 35:a5:bf:79:bd:c3:c7:a9:b9:21:63:b4:27:c3:c5: 57:5a:0c:da:45:fc:02:34:21:4a:1e:17:d4:32:b2: 29:42:85:95:f4:97:ba:47:02:8e:50:0a:f3:87:c8: ec:0f:9c:8d:17:45:c5:15:70:31:86:9b:67:cf:ea: a7:1f:c7:ab:9a:13:c7:bf:63:bd:7d:16:d2:a3:14: b0:84:c9:6f:18:62:91:9c:04:8f:ee:d2:6f:6d:24: bf:6a:01:0e:47:78:12:aa:1e:08:67:c7:df:31:a8: d7:2e:53:91:82:72:ff:87:5d:7f:a5:6f:4d:2f:88: a4:4d:22:88:3a:97:55:66:84:cd:1e:bf:1e:82:15: 44:62:25:d1:a0:27:a7:34:ba:6c:4c:e4:7c:2b:66: 78:0b:52:d6:4f:31:cf:6d:d5:0b:f6:8d:b5:73:5c: 6f:c4:b2:97:38:5e:00:da:d2:b2:78:cc:36:02:91: b5:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:85:55:26:68:1F:1A:19:27:6F:87:30:B0:A7:75:33:26:65:3E:05 X509v3 Authority Key Identifier: keyid:FB:A2:6E:3C:D7:E0:81:99:B3:A1:8F:16:36:6A:75:7F:04:CD:F0:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6JuPNfggZmzoY8WNmp1fwTN8FQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:d8:7f:d4:a9:1b:99:37:fe:af:f3:ba:c5:3d:3c:76:88:e1: 04:ac:6f:a3:11:cc:c6:c1:9b:7f:88:ac:af:0e:e3:51:ff:b2: 1e:e2:0a:f1:0b:13:ad:19:be:58:96:ba:be:61:40:dd:8f:22: 02:3e:06:1d:12:dc:f7:8d:67:9a:11:48:e7:a7:f7:bf:d1:04: 16:f9:ad:74:bb:3d:0e:0e:77:07:43:29:9d:fd:c9:1f:32:bc: fa:16:2a:f2:17:43:02:85:c5:32:4c:ef:62:90:c3:e1:1d:fa: 57:59:86:e8:a9:69:ab:dd:da:b7:a0:9a:df:8b:07:e2:2a:8d: 73:55:f7:2c:83:16:14:ee:cc:7d:8a:34:47:bf:e5:e7:eb:54: 2f:e1:a0:d7:72:42:8a:44:f3:ed:76:b6:c8:2f:3d:ca:6e:98: 6d:51:cb:d0:d2:a9:0d:7f:2b:e9:d8:df:c4:5e:12:13:2f:6f: 39:c0:b5:e1:be:c5:e8:5f:b5:71:07:17:fb:3b:6f:77:61:a9: ac:35:7f:16:ff:d1:19:f9:ed:a2:59:e5:36:45:0a:e1:da:f9: 18:b8:5a:6e:b2:31:29:75:e6:35:04:3c:02:c9:aa:cd:0e:8a: 46:ce:cc:3a:33:dd:61:53:e9:f7:e1:8f:6a:63:08:ee:78:c2: 3e:47:86:70 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NzcwOTExMC8GA1UEBRMoRkJBMjZFM0NEN0UwODE5OUIzQTE4RjE2MzY2QTc1N0Yw NENERjA1NDAeFw0yNTA0MjUwNTU5NDFaFw0yNTA1MDIwNTU5NDFaMBgxFjAUBgNV BAMTDTY4MGIyNGNkLWRlZDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCfWRdPEelPotmfIgiS1N8dI9qInXRi/aLU8eRttDzJwCQTASu2A8IGzAA+BS4P KQFsipY0HS2vSitLDcWEngG4QZvVbUgaz3I8BDWlv3m9w8epuSFjtCfDxVdaDNpF /AI0IUoeF9QysilChZX0l7pHAo5QCvOHyOwPnI0XRcUVcDGGm2fP6qcfx6uaE8e/ Y719FtKjFLCEyW8YYpGcBI/u0m9tJL9qAQ5HeBKqHghnx98xqNcuU5GCcv+HXX+l b00viKRNIog6l1VmhM0evx6CFURiJdGgJ6c0umxM5HwrZngLUtZPMc9t1Qv2jbVz XG/Espc4XgDa0rJ4zDYCkbWNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkoVVJmgf Ghknb4cwsKd1MyZlPgUwHwYDVR0jBBgwFoAU+6JuPNfggZmzoY8WNmp1fwTN8FQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3NzA5LzgxNjIzQTRBOEJC NjExRUY5OThCQUM3MkM0RjlBRTAyLy02SnVQTmZnZ1ptem9ZOFdObXAxZndUTjhG US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLTZKdVBOZmdnWm16b1k4V05tcDFmd1ROOEZRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3 NzA5LzgxNjIzQTRBOEJCNjExRUY5OThCQUM3MkM0RjlBRTAyLy02SnVQTmZnZ1pt em9ZOFdObXAxZndUTjhGUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADPYf9SpG5k3/q/zusU9PHaI4QSsb6MRzMbBm3+IrK8O41H/sh7iCvEL E60ZvliWur5hQN2PIgI+Bh0S3PeNZ5oRSOen97/RBBb5rXS7PQ4OdwdDKZ39yR8y vPoWKvIXQwKFxTJM72KQw+Ed+ldZhuipaavd2regmt+LB+IqjXNV9yyDFhTuzH2K NEe/5efrVC/hoNdyQopE8+12tsgvPcpumG1Ry9DSqQ1/K+nY38ReEhMvbznAteG+ xehftXEHF/s7b3dhqaw1fxb/0Rn57aJZ5TZFCuHa+Ri4Wm6yMSl15jUEPALJqs0O ikbOzDoz3WFT6ffhj2pjCO54wj5HhnA= -----END CERTIFICATE-----Generated at Sat Apr 26 03:56:38 2025 by rpki-client