$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC7EA/B5C87D68B57311EE8F50896CC4F9AE02/J6IiDxq_zcps_VIjbsEKERKog0U.mft File: J6IiDxq_zcps_VIjbsEKERKog0U.mft (raw, json) Hash identifier: Z3Dp1OygS1qdgAn5vEzA8+UJhiUV4BsqOxBHZiBcf1I= Subject key identifier: 9F:DC:E2:AE:73:D3:D5:A8:17:AE:E2:E6:4D:F6:BF:6D:B1:D4:F8:8F Authority key identifier: 27:A2:22:0F:1A:BF:CD:CA:6C:FD:52:23:6E:C1:0A:11:12:A8:83:45 Certificate issuer: /CN=A91CC7EA/serialNumber=27A2220F1ABFCDCA6CFD52236EC10A1112A88345 Certificate serial: F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J6IiDxq_zcps_VIjbsEKERKog0U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC7EA/B5C87D68B57311EE8F50896CC4F9AE02/J6IiDxq_zcps_VIjbsEKERKog0U.mft Manifest number: F1 Signing time: Fri 25 Apr 2025 04:21:39 +0000 Manifest this update: Fri 25 Apr 2025 04:21:38 +0000 Manifest next update: Fri 02 May 2025 04:21:38 +0000 Files and hashes: 1: J6IiDxq_zcps_VIjbsEKERKog0U.crl (hash: 26twqCx0RESi+QEDT3VFcZmXabHgafEsi3HrITypNkU=) 2: 6734E4C4B57411EEBCB6B977C4F9AE02.roa (hash: FA7x6xVF2Cw2uJbqOHPR0PvfekjSEl4pesKDhFGadGE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC7EA/B5C87D68B57311EE8F50896CC4F9AE02/J6IiDxq_zcps_VIjbsEKERKog0U.crl rsync://rpki.apnic.net/member_repository/A91CC7EA/B5C87D68B57311EE8F50896CC4F9AE02/J6IiDxq_zcps_VIjbsEKERKog0U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J6IiDxq_zcps_VIjbsEKERKog0U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:21:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 244 (0xf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC7EA, serialNumber=27A2220F1ABFCDCA6CFD52236EC10A1112A88345 Validity Not Before: Apr 25 04:21:38 2025 GMT Not After : May 2 04:21:38 2025 GMT Subject: CN=680b0dd3-eca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d0:b7:2d:b5:34:46:30:36:f7:af:02:23:fe: 73:8c:52:29:02:43:c6:65:fe:48:fd:7e:34:60:42: 9e:50:af:4d:73:18:f6:a0:c9:8a:bf:10:cf:87:3f: 4e:bb:21:3a:93:e0:d4:b1:de:0f:ec:94:15:01:51: ea:9d:13:1d:74:cf:9b:89:37:1f:83:ef:08:8c:58: 07:e2:b1:85:9a:a4:e2:3a:1a:3b:23:d5:7d:59:e1: 0d:8a:db:3f:d3:92:7c:76:d5:66:47:52:5d:03:53: 61:8f:8f:06:a1:f0:ea:cf:12:17:5b:a7:df:c3:9c: e2:19:d2:c9:7f:a0:28:5e:a4:7d:d3:52:1e:52:48: e9:4d:ab:8f:f2:4b:a2:34:80:73:4f:a5:89:d3:ca: 9b:d5:f2:5d:a8:cd:e2:1e:ee:51:11:ea:72:c1:7e: 12:4c:28:50:15:53:12:31:31:98:17:6d:39:8b:9f: a5:35:b7:e5:d6:39:cf:19:78:92:a9:d6:cf:e9:37: 5f:18:35:28:39:95:74:53:b5:19:12:81:7b:a3:5c: 19:b6:c1:93:dd:9e:16:1a:30:30:29:af:18:e1:20: ad:37:4f:1e:5f:c9:e2:bb:f9:2f:29:fd:1a:b1:f7: c7:dc:70:f5:48:e7:0c:62:f7:8b:5a:01:ef:cd:10: 0f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:DC:E2:AE:73:D3:D5:A8:17:AE:E2:E6:4D:F6:BF:6D:B1:D4:F8:8F X509v3 Authority Key Identifier: keyid:27:A2:22:0F:1A:BF:CD:CA:6C:FD:52:23:6E:C1:0A:11:12:A8:83:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC7EA/B5C87D68B57311EE8F50896CC4F9AE02/J6IiDxq_zcps_VIjbsEKERKog0U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J6IiDxq_zcps_VIjbsEKERKog0U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC7EA/B5C87D68B57311EE8F50896CC4F9AE02/J6IiDxq_zcps_VIjbsEKERKog0U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:6d:32:50:83:12:da:2e:40:01:e4:1a:41:ed:b4:c2:21:80: ff:c0:ad:30:13:5c:af:f1:a0:78:3b:23:f2:8e:a3:cb:cf:7b: 41:5e:f5:44:ca:45:15:47:ad:6d:12:5b:db:de:73:35:7c:c5: e2:b9:18:09:a3:81:28:93:92:16:9e:6d:6f:b9:11:93:e2:b8: df:ba:05:59:8b:5e:83:a6:67:6d:27:26:c3:5a:37:10:c7:7b: b2:11:b6:0c:ca:83:c4:f7:41:59:ae:30:cb:71:da:87:a0:66: 0c:44:c2:17:f2:99:c0:71:13:13:47:9c:66:7f:d6:59:b1:84: 81:d7:0c:29:d3:61:8f:a0:70:4b:76:a2:53:5b:ce:e6:e8:44: 66:96:d6:4f:ed:7c:52:41:62:ad:2c:ac:88:86:1f:53:29:81: dd:c4:2e:1f:1d:ef:b5:34:46:4a:c1:f7:89:ee:8a:66:19:0f: 2c:75:79:ab:3f:29:fc:ac:9b:ef:42:a8:d7:c6:8c:86:a9:d8: 88:c9:82:19:51:61:20:95:4c:21:d1:96:bf:59:06:5f:7a:7d: 0c:54:52:2b:64:cd:2a:a4:69:fa:76:65:9b:f0:87:9e:ff:de: cb:14:10:c2:8a:79:a4:13:02:f4:22:83:3e:b1:d6:4b:2a:e8: 54:37:5d:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0M3RUExMTAvBgNVBAUTKDI3QTIyMjBGMUFCRkNEQ0E2Q0ZENTIyMzZFQzEwQTEx MTJBODgzNDUwHhcNMjUwNDI1MDQyMTM4WhcNMjUwNTAyMDQyMTM4WjAYMRYwFAYD VQQDEw02ODBiMGRkMy1lY2ExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt9C3LbU0RjA2968CI/5zjFIpAkPGZf5I/X40YEKeUK9Ncxj2oMmKvxDPhz9O uyE6k+DUsd4P7JQVAVHqnRMddM+biTcfg+8IjFgH4rGFmqTiOho7I9V9WeENits/ 05J8dtVmR1JdA1Nhj48GofDqzxIXW6ffw5ziGdLJf6AoXqR901IeUkjpTauP8kui NIBzT6WJ08qb1fJdqM3iHu5REepywX4STChQFVMSMTGYF205i5+lNbfl1jnPGXiS qdbP6TdfGDUoOZV0U7UZEoF7o1wZtsGT3Z4WGjAwKa8Y4SCtN08eX8niu/kvKf0a sffH3HD1SOcMYveLWgHvzRAPQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ/c4q5z 09WoF67i5k32v22x1PiPMB8GA1UdIwQYMBaAFCeiIg8av83KbP1SI27BChESqINF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzdFQS9CNUM4N0Q2OEI1 NzMxMUVFOEY1MDg5NkNDNEY5QUUwMi9KNklpRHhxX3pjcHNfVklqYnNFS0VSS29n MFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0o2SWlEeHFfemNwc19WSWpic0VLRVJLb2cwVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzdFQS9CNUM4N0Q2OEI1NzMxMUVFOEY1MDg5NkNDNEY5QUUwMi9KNklpRHhxX3pj cHNfVklqYnNFS0VSS29nMFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWbTJQgxLaLkAB5BpB7bTCIYD/wK0wE1yv8aB4OyPyjqPLz3tBXvVE ykUVR61tElvb3nM1fMXiuRgJo4Eok5IWnm1vuRGT4rjfugVZi16DpmdtJybDWjcQ x3uyEbYMyoPE90FZrjDLcdqHoGYMRMIX8pnAcRMTR5xmf9ZZsYSB1wwp02GPoHBL dqJTW87m6ERmltZP7XxSQWKtLKyIhh9TKYHdxC4fHe+1NEZKwfeJ7opmGQ8sdXmr Pyn8rJvvQqjXxoyGqdiIyYIZUWEglUwh0Za/WQZfen0MVFIrZM0qpGn6dmWb8Iee /97LFBDCinmkEwL0IoM+sdZLKuhUN13B -----END CERTIFICATE-----Generated at Sat Apr 26 17:05:23 2025 by rpki-client