$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA790/129B3D5C1DA811E2B94830A208B02CD2/6hMWJXP0YIe5C7dfdIJbMSjKF6c.mft File: 6hMWJXP0YIe5C7dfdIJbMSjKF6c.mft (raw, json) Hash identifier: QbI/KmJdLHBccLFKWZK+fkmuMTfjkEdLJN/16zTxFc0= Subject key identifier: 5F:FA:15:C4:A9:97:FC:14:4F:E8:EB:5A:17:87:76:EF:04:33:DA:C6 Authority key identifier: EA:13:16:25:73:F4:60:87:B9:0B:B7:5F:74:82:5B:31:28:CA:17:A7 Certificate issuer: /CN=A91BA790/serialNumber=EA13162573F46087B90BB75F74825B3128CA17A7 Certificate serial: 3470 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6hMWJXP0YIe5C7dfdIJbMSjKF6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA790/129B3D5C1DA811E2B94830A208B02CD2/6hMWJXP0YIe5C7dfdIJbMSjKF6c.mft Manifest number: 3470 Signing time: Thu 24 Apr 2025 15:14:34 +0000 Manifest this update: Thu 24 Apr 2025 15:14:33 +0000 Manifest next update: Thu 01 May 2025 15:14:33 +0000 Files and hashes: 1: 6hMWJXP0YIe5C7dfdIJbMSjKF6c.crl (hash: UbiPvoNTVOstX6oHuT8HV/E1mBwPqEzK+fJkcKgGmhQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA790/129B3D5C1DA811E2B94830A208B02CD2/6hMWJXP0YIe5C7dfdIJbMSjKF6c.crl rsync://rpki.apnic.net/member_repository/A91BA790/129B3D5C1DA811E2B94830A208B02CD2/6hMWJXP0YIe5C7dfdIJbMSjKF6c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6hMWJXP0YIe5C7dfdIJbMSjKF6c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:14:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13424 (0x3470) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA790, serialNumber=EA13162573F46087B90BB75F74825B3128CA17A7 Validity Not Before: Apr 24 15:14:33 2025 GMT Not After : May 1 15:14:33 2025 GMT Subject: CN=680a555a-0455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:55:07:bf:fd:e1:3e:a5:b9:31:88:7b:f3:4c: ee:86:de:f5:25:b1:6e:7a:20:45:2b:a7:29:85:2a: 8e:25:29:a6:01:94:00:f2:5a:05:8e:b9:26:c2:ef: 7c:0b:bd:b5:24:14:17:22:ff:92:ae:cd:60:86:84: 21:f8:6d:ed:a2:a9:e6:23:39:f2:46:01:6b:da:1b: 2d:99:03:a4:a1:7d:63:e2:91:b5:bb:90:61:8b:f5: 38:8b:12:c6:dd:04:b1:c9:9e:8f:ae:55:31:ac:50: 76:a2:f9:24:ae:27:3b:c4:f1:f7:d6:50:5e:52:79: 4f:dc:29:0c:61:b8:ac:f1:dd:d4:67:29:93:c3:ee: bc:e1:94:77:c6:1c:f3:33:5e:e7:0e:4d:ef:14:96: 22:15:5f:a8:40:e3:31:26:1f:d9:b9:96:c2:81:5d: 8c:48:28:b6:86:a4:b6:9e:39:a2:20:d4:18:dc:91: fe:5b:53:9f:0d:0e:7d:1f:fd:58:3c:98:96:f3:38: 5f:f7:e0:09:03:a7:8a:89:98:94:0b:9e:58:d9:93: 04:5a:82:57:c8:b4:64:2c:68:f6:0c:ce:da:b0:a6: da:8a:34:84:fd:5e:87:89:0c:ea:b7:24:d2:01:6b: da:ee:73:10:f2:f8:9e:0e:d7:48:62:d4:3e:1b:00: 40:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:FA:15:C4:A9:97:FC:14:4F:E8:EB:5A:17:87:76:EF:04:33:DA:C6 X509v3 Authority Key Identifier: keyid:EA:13:16:25:73:F4:60:87:B9:0B:B7:5F:74:82:5B:31:28:CA:17:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA790/129B3D5C1DA811E2B94830A208B02CD2/6hMWJXP0YIe5C7dfdIJbMSjKF6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6hMWJXP0YIe5C7dfdIJbMSjKF6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA790/129B3D5C1DA811E2B94830A208B02CD2/6hMWJXP0YIe5C7dfdIJbMSjKF6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:13:93:ef:a3:07:72:a4:a9:51:38:62:68:50:13:bf:6e:86: 7b:f5:7b:25:47:ee:4c:36:90:c2:08:35:18:1b:b3:43:3f:c0: de:85:03:29:23:f4:6c:af:52:18:8d:ce:c3:93:68:23:5c:ef: 5d:16:b3:6f:7d:78:79:22:39:04:ad:bc:f6:6f:b4:17:82:47: c0:0f:67:bc:ec:64:3e:8e:f3:4a:da:e1:55:b5:ee:38:9e:9c: f4:3d:7f:c5:74:9a:1a:60:11:4b:7d:8d:54:12:15:e9:a9:00: 71:1a:ed:f7:be:98:db:17:17:eb:88:a0:27:f0:ad:cd:3b:12: bf:db:02:2a:74:c0:e9:a6:63:1f:59:12:c9:4c:16:d8:80:0c: 7c:d3:94:0f:65:7b:e7:48:9a:08:dc:19:ce:d9:8a:8e:95:92: 21:63:fc:b4:9d:e5:9f:30:d1:9e:29:72:2d:4d:46:e6:25:23: 21:7f:3f:05:d4:c5:e2:1b:c4:9f:93:57:c0:7f:0c:06:89:b9: a6:10:04:36:2e:10:3e:8f:1e:95:d8:62:ef:57:d0:28:75:9d: 4a:bc:d1:90:5f:e6:17:95:70:c9:f9:c7:b6:8b:bd:15:39:48: 50:27:b9:08:6c:a3:db:d6:91:11:1d:55:71:a5:bc:2b:75:65: 9d:d7:2b:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE3OTAxMTAvBgNVBAUTKEVBMTMxNjI1NzNGNDYwODdCOTBCQjc1Rjc0ODI1QjMx MjhDQTE3QTcwHhcNMjUwNDI0MTUxNDMzWhcNMjUwNTAxMTUxNDMzWjAYMRYwFAYD VQQDEw02ODBhNTU1YS0wNDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwVUHv/3hPqW5MYh780zuht71JbFueiBFK6cphSqOJSmmAZQA8loFjrkmwu98 C721JBQXIv+Srs1ghoQh+G3toqnmIznyRgFr2hstmQOkoX1j4pG1u5Bhi/U4ixLG 3QSxyZ6PrlUxrFB2ovkkric7xPH31lBeUnlP3CkMYbis8d3UZymTw+684ZR3xhzz M17nDk3vFJYiFV+oQOMxJh/ZuZbCgV2MSCi2hqS2njmiINQY3JH+W1OfDQ59H/1Y PJiW8zhf9+AJA6eKiZiUC55Y2ZMEWoJXyLRkLGj2DM7asKbaijSE/V6HiQzqtyTS AWva7nMQ8vieDtdIYtQ+GwBAiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF/6FcSp l/wUT+jrWheHdu8EM9rGMB8GA1UdIwQYMBaAFOoTFiVz9GCHuQu3X3SCWzEoyhen MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTc5MC8xMjlCM0Q1QzFE QTgxMUUyQjk0ODMwQTIwOEIwMkNEMi82aE1XSlhQMFlJZTVDN2RmZElKYk1TaktG NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZoTVdKWFAwWUllNUM3ZGZkSUpiTVNqS0Y2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTc5MC8xMjlCM0Q1QzFEQTgxMUUyQjk0ODMwQTIwOEIwMkNEMi82aE1XSlhQMFlJ ZTVDN2RmZElKYk1TaktGNmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1E5PvowdypKlROGJoUBO/boZ79XslR+5MNpDCCDUYG7NDP8DehQMp I/Rsr1IYjc7Dk2gjXO9dFrNvfXh5IjkErbz2b7QXgkfAD2e87GQ+jvNK2uFVte44 npz0PX/FdJoaYBFLfY1UEhXpqQBxGu33vpjbFxfriKAn8K3NOxK/2wIqdMDppmMf WRLJTBbYgAx805QPZXvnSJoI3BnO2YqOlZIhY/y0neWfMNGeKXItTUbmJSMhfz8F 1MXiG8Sfk1fAfwwGibmmEAQ2LhA+jx6V2GLvV9AodZ1KvNGQX+YXlXDJ+ce2i70V OUhQJ7kIbKPb1pERHVVxpbwrdWWd1yvQ -----END CERTIFICATE-----Generated at Sat Apr 26 04:21:54 2025 by rpki-client