$ rpki-client -vvf rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft File: 6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft (raw, json) Hash identifier: wWTfSAs+wS59yxx+sYdUGYm4Mv5Jp1VYa63qzSeBXtw= Subject key identifier: C8:79:B3:42:B3:8C:D1:18:87:D2:04:D8:F6:06:34:25:58:AD:AF:A7 Authority key identifier: E9:F2:CE:48:3F:1B:06:D2:9D:5E:A2:AB:E3:75:BD:1D:22:A9:E1:C4 Certificate issuer: /CN=A91C68AD/serialNumber=E9F2CE483F1B06D29D5EA2ABE375BD1D22A9E1C4 Certificate serial: 69 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft Manifest number: 68 Signing time: Fri 25 Apr 2025 05:56:03 +0000 Manifest this update: Fri 25 Apr 2025 05:56:02 +0000 Manifest next update: Fri 02 May 2025 05:56:02 +0000 Files and hashes: 1: 6fLOSD8bBtKdXqKr43W9HSKp4cQ.crl (hash: 1l6mw8Qsz/q5l+HgkKmmT8zAQwl3lF8WQx3aps+G8tA=) 2: FC3E29FC85E111EFB365E459C4F9AE02.roa (hash: 0DxgUjIqfTQVxs1j3QKSFbDtA+jK21POEd6C/CDA/hA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.crl rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:56:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 105 (0x69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C68AD, serialNumber=E9F2CE483F1B06D29D5EA2ABE375BD1D22A9E1C4 Validity Not Before: Apr 25 05:56:02 2025 GMT Not After : May 2 05:56:02 2025 GMT Subject: CN=680b23f2-5f57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e2:6f:1a:09:8d:15:29:23:7e:5b:0b:5c:19: 3a:24:de:3b:1d:97:e2:ec:e5:ad:66:23:9b:91:33: 1c:95:de:ea:1a:2c:d9:1f:de:ba:7b:aa:1a:a0:18: 51:56:73:fb:2b:5b:b6:0a:85:94:65:49:8d:90:0e: 3f:74:b6:16:43:4b:87:d8:e3:5f:49:e8:b5:b5:72: b2:75:ed:29:94:e7:1e:75:fe:65:18:2d:bc:bf:54: 4c:cc:db:4a:22:4b:07:79:dd:cf:8d:eb:d0:dd:81: f8:a7:e7:67:91:c0:28:70:83:48:5d:b9:82:b9:6c: 74:01:ff:25:60:d1:2e:df:62:79:92:08:0f:d2:e9: a1:f3:49:52:d0:73:92:ed:8e:76:77:a8:3c:17:c8: a8:03:e6:7e:e7:01:19:ca:9f:3a:8c:10:f8:e7:e6: f4:24:ec:91:23:e5:67:21:25:2f:58:9a:9a:79:4d: f6:46:d7:9a:d1:58:68:98:5f:c2:4d:70:ed:66:79: 58:e3:c9:4e:d6:a8:25:d6:34:90:9f:c1:12:cd:89: 50:09:5d:75:0b:3a:92:5b:5c:fc:22:26:ef:76:a2: 19:0a:6e:9a:f7:30:ee:c4:bd:53:ca:97:90:0b:2c: a3:e8:fa:7f:8c:4e:45:f1:8e:7f:aa:26:da:d6:d8: a3:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:79:B3:42:B3:8C:D1:18:87:D2:04:D8:F6:06:34:25:58:AD:AF:A7 X509v3 Authority Key Identifier: keyid:E9:F2:CE:48:3F:1B:06:D2:9D:5E:A2:AB:E3:75:BD:1D:22:A9:E1:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:13:cd:23:53:c3:a4:32:77:96:b6:bf:c4:08:73:b9:a6:84: 1d:9b:24:ac:a1:af:4b:85:43:47:bd:68:30:8a:ab:62:7c:7e: 7a:15:81:b7:ec:ae:65:1d:02:00:40:f2:3e:78:93:40:6e:5c: 99:c9:fe:ed:0a:6f:f8:85:47:7d:a3:e1:a5:57:84:9f:61:ef: 73:4f:12:00:58:e6:1b:9b:d5:a9:b2:3d:78:f9:63:71:5f:ca: e2:f9:01:97:05:48:41:e9:73:13:75:46:10:41:19:60:18:0c: be:3f:46:86:b0:a3:62:85:3b:28:ee:39:72:6f:23:0b:c7:7f: d4:11:e5:7b:bc:a8:22:30:4e:30:b9:9b:65:99:5c:51:f2:6b: 57:75:63:84:89:48:bc:cc:0e:ff:fe:6b:d1:7b:dd:57:cb:60: 04:58:56:90:a4:12:72:01:a0:f6:2c:49:9a:d0:e2:df:90:36: 50:d2:9b:6d:84:87:33:b4:a6:9c:79:42:16:07:84:81:97:78: c2:2c:28:ea:c4:59:3f:8c:0e:b4:07:fa:55:a4:50:de:59:d6: 1c:1d:c2:ad:eb:7a:95:79:21:a5:d7:64:67:f8:ff:e2:98:74: e2:fa:fc:0a:fc:55:a3:ba:64:38:61:07:a1:17:8e:89:5b:46: 4b:32:a7:87 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NjhBRDExMC8GA1UEBRMoRTlGMkNFNDgzRjFCMDZEMjlENUVBMkFCRTM3NUJEMUQy MkE5RTFDNDAeFw0yNTA0MjUwNTU2MDJaFw0yNTA1MDIwNTU2MDJaMBgxFjAUBgNV BAMTDTY4MGIyM2YyLTVmNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDE4m8aCY0VKSN+WwtcGTok3jsdl+Ls5a1mI5uRMxyV3uoaLNkf3rp7qhqgGFFW c/srW7YKhZRlSY2QDj90thZDS4fY419J6LW1crJ17SmU5x51/mUYLby/VEzM20oi Swd53c+N69Ddgfin52eRwChwg0hduYK5bHQB/yVg0S7fYnmSCA/S6aHzSVLQc5Lt jnZ3qDwXyKgD5n7nARnKnzqMEPjn5vQk7JEj5WchJS9Ympp5TfZG15rRWGiYX8JN cO1meVjjyU7WqCXWNJCfwRLNiVAJXXULOpJbXPwiJu92ohkKbpr3MO7EvVPKl5AL LKPo+n+MTkXxjn+qJtrW2KMjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyHmzQrOM 0RiH0gTY9gY0JVitr6cwHwYDVR0jBBgwFoAU6fLOSD8bBtKdXqKr43W9HSKp4cQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2OEFELzQ5REVFRTY0ODVF MDExRUZBNzU4NzY1NUM0RjlBRTAyLzZmTE9TRDhiQnRLZFhxS3I0M1c5SFNLcDRj US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNmZMT1NEOGJCdEtkWHFLcjQzVzlIU0twNGNRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2 OEFELzQ5REVFRTY0ODVFMDExRUZBNzU4NzY1NUM0RjlBRTAyLzZmTE9TRDhiQnRL ZFhxS3I0M1c5SFNLcDRjUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFUTzSNTw6Qyd5a2v8QIc7mmhB2bJKyhr0uFQ0e9aDCKq2J8fnoVgbfs rmUdAgBA8j54k0BuXJnJ/u0Kb/iFR32j4aVXhJ9h73NPEgBY5hub1amyPXj5Y3Ff yuL5AZcFSEHpcxN1RhBBGWAYDL4/Roawo2KFOyjuOXJvIwvHf9QR5Xu8qCIwTjC5 m2WZXFHya1d1Y4SJSLzMDv/+a9F73VfLYARYVpCkEnIBoPYsSZrQ4t+QNlDSm22E hzO0ppx5QhYHhIGXeMIsKOrEWT+MDrQH+lWkUN5Z1hwdwq3repV5IaXXZGf4/+KY dOL6/Ar8VaO6ZDhhB6EXjolbRksyp4c= -----END CERTIFICATE-----Generated at Sat Apr 26 17:02:48 2025 by rpki-client