$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.mft File: c9kAkk5wFUjm4yA4gPbAlypMKRo.mft (raw, json) Hash identifier: OvWVCMmX3kK9Wcux0V+3cXNmXC5HjiFI9fq5zIybUiQ= Subject key identifier: 00:EE:5B:BF:A7:67:B5:91:35:30:84:8E:7C:59:16:88:52:CA:4F:91 Authority key identifier: 73:D9:00:92:4E:70:15:48:E6:E3:20:38:80:F6:C0:97:2A:4C:29:1A Certificate issuer: /CN=A91C9E72/serialNumber=73D900924E701548E6E3203880F6C0972A4C291A Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c9kAkk5wFUjm4yA4gPbAlypMKRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.mft Manifest number: 6A Signing time: Fri 25 Apr 2025 05:55:05 +0000 Manifest this update: Fri 25 Apr 2025 05:55:05 +0000 Manifest next update: Fri 02 May 2025 05:55:05 +0000 Files and hashes: 1: c9kAkk5wFUjm4yA4gPbAlypMKRo.crl (hash: T903Yhvez1tRHLJYf8cgrO2V6UAe/TyjJhaL2R2NGTs=) 2: 5440C4C8848111EF9F3ECE34C4F9AE02.roa (hash: 3hnmn/EG7rhYM2a7/Cnm16lA4qC355sf3kWBw8CmIQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.crl rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c9kAkk5wFUjm4yA4gPbAlypMKRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:55:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9E72, serialNumber=73D900924E701548E6E3203880F6C0972A4C291A Validity Not Before: Apr 25 05:55:05 2025 GMT Not After : May 2 05:55:05 2025 GMT Subject: CN=680b23b9-ec46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a6:24:c4:e5:3f:03:43:e7:f9:5d:9a:47:15: 9e:a1:3e:32:18:55:17:5f:22:47:0d:7b:61:d6:3e: 81:93:50:0f:d7:3a:00:6c:e5:0d:63:19:d0:f6:b5: 8f:bc:6d:46:84:7e:d5:c1:31:c1:3a:09:1d:42:cb: 61:79:8f:cd:f4:73:16:a7:bc:81:b8:e1:dc:79:ae: d7:ee:86:d7:c4:2f:87:f3:28:c9:bf:bb:ab:67:8c: 6e:79:39:5d:e7:33:4b:ec:91:11:43:e5:b8:0d:a0: 6b:72:6c:ae:95:3a:da:9e:8f:40:ed:52:78:04:42: 81:aa:70:74:aa:a3:66:85:b8:1b:1e:92:b3:28:c5: 7c:16:43:b0:f4:20:c2:73:34:da:d5:0f:cc:6c:66: b3:a1:50:4c:66:6b:c5:76:2c:58:a8:80:3a:cd:fe: 75:55:65:27:b5:c5:2d:b0:06:b0:19:47:48:14:ea: 11:87:f8:63:84:cc:c1:07:76:1d:55:ad:41:f7:c1: 6a:db:f8:73:f4:a1:65:ce:17:12:11:bc:f0:e9:b9: 2b:f2:45:74:f2:ee:0b:15:e2:87:6c:39:e4:7e:05: 47:d7:37:fd:9c:aa:00:14:6f:7f:8b:79:3e:00:ed: f1:0c:3f:e3:98:2c:4c:3c:c1:d3:47:f6:db:44:e4: 48:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:EE:5B:BF:A7:67:B5:91:35:30:84:8E:7C:59:16:88:52:CA:4F:91 X509v3 Authority Key Identifier: keyid:73:D9:00:92:4E:70:15:48:E6:E3:20:38:80:F6:C0:97:2A:4C:29:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c9kAkk5wFUjm4yA4gPbAlypMKRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:b0:ee:20:42:6b:1e:fb:14:6d:bb:61:f1:f2:c0:95:74:82: 5c:19:cf:47:1d:e4:6e:df:30:6e:61:44:d6:1f:3c:06:54:11: e2:3f:87:01:33:2e:2f:70:5c:45:77:b5:44:3b:81:38:ea:28: a5:1a:84:ee:82:22:92:4a:bd:80:48:12:66:9a:2f:13:0d:59: 34:d6:05:21:e9:b7:b3:06:59:aa:63:90:5f:5c:d3:e2:27:af: b6:99:25:82:72:cf:1d:b4:0d:53:6d:33:da:61:db:0d:c8:15: 3f:3c:be:bf:1c:c8:8b:f7:e3:f8:8a:37:29:4e:4d:b0:42:e3: 9e:e7:c3:5f:50:01:87:ba:f2:ba:28:4a:d4:07:04:09:38:0b: 22:ec:c0:0b:f4:1b:28:b6:28:3c:b9:14:a2:51:06:11:55:05: bc:fb:68:da:04:27:f0:59:7e:cc:44:ff:62:1e:6f:6a:e0:6c: 03:b3:40:82:74:e8:a3:f0:b4:84:0e:76:9d:82:80:58:c7:00: 46:01:cf:61:55:93:bf:9d:1d:14:38:ff:e1:00:33:a7:45:7b: e9:ea:c5:08:34:94:e3:70:2d:cf:64:88:6b:67:65:bd:3f:a7: 55:0f:50:05:75:3f:47:ab:37:0f:b7:d0:ef:09:48:f3:0a:1f: 81:e6:a9:73 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OUU3MjExMC8GA1UEBRMoNzNEOTAwOTI0RTcwMTU0OEU2RTMyMDM4ODBGNkMwOTcy QTRDMjkxQTAeFw0yNTA0MjUwNTU1MDVaFw0yNTA1MDIwNTU1MDVaMBgxFjAUBgNV BAMTDTY4MGIyM2I5LWVjNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfpiTE5T8DQ+f5XZpHFZ6hPjIYVRdfIkcNe2HWPoGTUA/XOgBs5Q1jGdD2tY+8 bUaEftXBMcE6CR1Cy2F5j830cxanvIG44dx5rtfuhtfEL4fzKMm/u6tnjG55OV3n M0vskRFD5bgNoGtybK6VOtqej0DtUngEQoGqcHSqo2aFuBsekrMoxXwWQ7D0IMJz NNrVD8xsZrOhUExma8V2LFiogDrN/nVVZSe1xS2wBrAZR0gU6hGH+GOEzMEHdh1V rUH3wWrb+HP0oWXOFxIRvPDpuSvyRXTy7gsV4odsOeR+BUfXN/2cqgAUb3+LeT4A 7fEMP+OYLEw8wdNH9ttE5EijAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAO5bv6dn tZE1MISOfFkWiFLKT5EwHwYDVR0jBBgwFoAUc9kAkk5wFUjm4yA4gPbAlypMKRow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5RTcyL0U2QjQ0OTAyODQ4 MDExRUZBQUQ4RTIzM0M0RjlBRTAyL2M5a0FrazV3RlVqbTR5QTRnUGJBbHlwTUtS by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYzlrQWtrNXdGVWptNHlBNGdQYkFseXBNS1JvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5 RTcyL0U2QjQ0OTAyODQ4MDExRUZBQUQ4RTIzM0M0RjlBRTAyL2M5a0FrazV3RlVq bTR5QTRnUGJBbHlwTUtSby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGuw7iBCax77FG27YfHywJV0glwZz0cd5G7fMG5hRNYfPAZUEeI/hwEz Li9wXEV3tUQ7gTjqKKUahO6CIpJKvYBIEmaaLxMNWTTWBSHpt7MGWapjkF9c0+In r7aZJYJyzx20DVNtM9ph2w3IFT88vr8cyIv34/iKNylOTbBC457nw19QAYe68roo StQHBAk4CyLswAv0Gyi2KDy5FKJRBhFVBbz7aNoEJ/BZfsxE/2Ieb2rgbAOzQIJ0 6KPwtIQOdp2CgFjHAEYBz2FVk7+dHRQ4/+EAM6dFe+nqxQg0lONwLc9kiGtnZb0/ p1UPUAV1P0erNw+30O8JSPMKH4HmqXM= -----END CERTIFICATE-----Generated at Sat Apr 26 04:35:02 2025 by rpki-client