$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.mft File: 6qltynQw36Rxyim4Q4NsHIDlQ54.mft (raw, json) Hash identifier: kygpkTU4yiJbKlABQG52T4/E+p07nQUZAFsN2E6axSM= Subject key identifier: 3D:21:94:96:49:8C:18:30:A1:B6:07:BB:34:65:FA:96:CD:A2:8B:33 Authority key identifier: EA:A9:6D:CA:74:30:DF:A4:71:CA:29:B8:43:83:6C:1C:80:E5:43:9E Certificate issuer: /CN=A91BB87C/serialNumber=EAA96DCA7430DFA471CA29B843836C1C80E5439E Certificate serial: 0C84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qltynQw36Rxyim4Q4NsHIDlQ54.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.mft Manifest number: 0C71 Signing time: Thu 24 Apr 2025 18:14:11 +0000 Manifest this update: Thu 24 Apr 2025 18:14:10 +0000 Manifest next update: Thu 01 May 2025 18:14:10 +0000 Files and hashes: 1: 6qltynQw36Rxyim4Q4NsHIDlQ54.crl (hash: Sv0c9m4CqeY7585mqcCxdWc78mJCHEp42u/iyOQYyD4=) 2: 5B01916AD15911EE8B8BB151C4F9AE02.roa (hash: exEpVAv7OmSBv6nfn1Ng6Vrt5eD/dXr6N+PdK8CnaV0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.crl rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qltynQw36Rxyim4Q4NsHIDlQ54.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:14:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3204 (0xc84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB87C, serialNumber=EAA96DCA7430DFA471CA29B843836C1C80E5439E Validity Not Before: Apr 24 18:14:10 2025 GMT Not After : May 1 18:14:10 2025 GMT Subject: CN=680a7f73-08ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ed:82:59:9f:24:48:eb:7d:03:8d:2f:cf:97: bc:fb:6f:26:04:8d:f8:d3:f4:5d:f1:49:2d:3b:f0: 78:53:f2:0f:05:5b:30:2f:50:89:22:fd:b1:2f:64: 37:03:10:d7:85:a9:93:39:28:d9:fa:e2:83:5e:0b: 50:6f:17:f8:b6:6a:49:d5:c3:81:6b:79:99:17:f3: 90:e7:cc:84:94:2a:86:c3:33:24:f1:ef:2f:21:34: a4:f2:ea:6d:b2:ff:bf:b4:7e:06:c7:f5:56:8b:a6: 39:4c:05:ed:f9:8f:45:9d:84:92:90:a5:8a:6c:46: 33:62:f2:f1:6c:2c:2c:fc:22:26:93:48:80:e0:05: ad:c3:4a:1c:2a:e9:1c:e3:9a:3c:61:63:66:af:7a: ca:a0:6f:d3:d7:89:57:69:c2:c6:49:b0:0c:82:f0: 6e:30:32:1d:25:f1:e9:a1:d8:b8:97:93:9e:4b:c5: f9:c7:a6:01:f5:fc:d1:f7:12:5e:f2:44:23:b4:d5: 40:41:41:ac:7a:ac:de:81:23:35:7a:23:b1:ac:08: 7d:01:bd:22:cb:78:bb:af:6a:b9:fe:9c:72:e5:9d: 67:97:78:49:b7:d4:ee:44:69:1e:d3:b0:59:1a:11: 04:e9:39:60:b8:09:20:4a:a9:d7:ba:8b:43:d0:9d: 5a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:21:94:96:49:8C:18:30:A1:B6:07:BB:34:65:FA:96:CD:A2:8B:33 X509v3 Authority Key Identifier: keyid:EA:A9:6D:CA:74:30:DF:A4:71:CA:29:B8:43:83:6C:1C:80:E5:43:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qltynQw36Rxyim4Q4NsHIDlQ54.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:da:b1:06:b5:01:52:97:ea:03:ed:ee:d4:5f:81:f4:82:e8: 06:e4:a7:f1:a3:f0:d1:e8:b4:11:f6:eb:83:db:29:d8:e3:a1: 5c:5c:0e:11:c3:80:be:ab:de:3d:e2:cc:eb:2c:36:0d:64:aa: e4:bd:6a:97:22:87:20:f9:63:8c:82:89:9d:85:3b:8f:e9:db: d1:1a:02:cf:05:c2:e5:71:09:11:88:9b:af:f0:bb:f1:6a:a1: ba:a5:6a:d0:6a:87:b6:16:c8:67:fb:08:54:d7:45:e7:b6:76: 44:77:20:90:15:e1:61:ce:a6:74:de:04:a7:75:d4:94:29:d0: 2e:42:52:2c:f2:b9:c5:63:dc:c7:41:66:d7:b0:52:10:3b:02: 28:db:31:33:ef:65:f4:e5:f4:ae:dd:61:53:f7:3c:e2:3f:5a: 31:a5:e7:a7:c8:ce:f6:59:4d:6b:9f:4a:86:95:de:b2:89:a8: 3d:48:a6:ea:cf:b3:f6:ed:a7:7c:cc:88:fe:ed:6d:7b:a0:33: ec:47:e7:b0:75:18:6c:29:61:5c:40:06:2f:9c:29:e6:a5:5d: 91:6a:79:91:d9:6f:13:53:5e:66:23:54:78:f4:16:71:83:9e: 0b:16:d3:bf:1d:0f:14:3b:42:22:5f:73:d2:7a:14:44:f5:41: d6:54:67:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI4N0MxMTAvBgNVBAUTKEVBQTk2RENBNzQzMERGQTQ3MUNBMjlCODQzODM2QzFD ODBFNTQzOUUwHhcNMjUwNDI0MTgxNDEwWhcNMjUwNTAxMTgxNDEwWjAYMRYwFAYD VQQDEw02ODBhN2Y3My0wOGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAse2CWZ8kSOt9A40vz5e8+28mBI340/Rd8UktO/B4U/IPBVswL1CJIv2xL2Q3 AxDXhamTOSjZ+uKDXgtQbxf4tmpJ1cOBa3mZF/OQ58yElCqGwzMk8e8vITSk8upt sv+/tH4Gx/VWi6Y5TAXt+Y9FnYSSkKWKbEYzYvLxbCws/CImk0iA4AWtw0ocKukc 45o8YWNmr3rKoG/T14lXacLGSbAMgvBuMDIdJfHpodi4l5OeS8X5x6YB9fzR9xJe 8kQjtNVAQUGseqzegSM1eiOxrAh9Ab0iy3i7r2q5/pxy5Z1nl3hJt9TuRGke07BZ GhEE6TlguAkgSqnXuotD0J1aHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD0hlJZJ jBgwobYHuzRl+pbNooszMB8GA1UdIwQYMBaAFOqpbcp0MN+kccopuEODbByA5UOe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjg3Qy82M0Q5MDMxMkZD MDIxMUU5QTQxOUYzNDBDNEY5QUUwMi82cWx0eW5RdzM2Unh5aW00UTROc0hJRGxR NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZxbHR5blF3MzZSeHlpbTRRNE5zSElEbFE1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qjg3Qy82M0Q5MDMxMkZDMDIxMUU5QTQxOUYzNDBDNEY5QUUwMi82cWx0eW5RdzM2 Unh5aW00UTROc0hJRGxRNTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCq2rEGtQFSl+oD7e7UX4H0gugG5Kfxo/DR6LQR9uuD2ynY46FcXA4R w4C+q9494szrLDYNZKrkvWqXIocg+WOMgomdhTuP6dvRGgLPBcLlcQkRiJuv8Lvx aqG6pWrQaoe2Fshn+whU10XntnZEdyCQFeFhzqZ03gSnddSUKdAuQlIs8rnFY9zH QWbXsFIQOwIo2zEz72X05fSu3WFT9zziP1oxpeenyM72WU1rn0qGld6yiag9SKbq z7P27ad8zIj+7W17oDPsR+ewdRhsKWFcQAYvnCnmpV2RanmR2W8TU15mI1R49BZx g54LFtO/HQ8UO0IiX3PSehRE9UHWVGdU -----END CERTIFICATE-----Generated at Sat Apr 26 17:22:01 2025 by rpki-client