$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B0E/44BCA632806911EF887B703CC4F9AE02/awKSxgJwici6idjGWhozDUiLCiw.mft File: awKSxgJwici6idjGWhozDUiLCiw.mft (raw, json) Hash identifier: A7n1IUJFSxTKxSmtWUtfidiWVMoCD5Ix26VPnlD5a50= Subject key identifier: 0C:9D:C2:97:E5:47:17:5C:57:E6:18:D0:CE:3C:BB:5E:07:AD:78:A6 Authority key identifier: 6B:02:92:C6:02:70:89:C8:BA:89:D8:C6:5A:1A:33:0D:48:8B:0A:2C Certificate issuer: /CN=A91D0B0E/serialNumber=6B0292C6027089C8BA89D8C65A1A330D488B0A2C Certificate serial: 72 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/awKSxgJwici6idjGWhozDUiLCiw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B0E/44BCA632806911EF887B703CC4F9AE02/awKSxgJwici6idjGWhozDUiLCiw.mft Manifest number: 6F Signing time: Fri 25 Apr 2025 05:53:13 +0000 Manifest this update: Fri 25 Apr 2025 05:53:13 +0000 Manifest next update: Fri 02 May 2025 05:53:13 +0000 Files and hashes: 1: awKSxgJwici6idjGWhozDUiLCiw.crl (hash: ZVyGTFyardkuv/nw0C+frhGE5TAa9qhW8f2Xs/R/+s8=) 2: 17782970808311EFBB9C2A46C4F9AE02.roa (hash: r6WIlbiy+lDO4CO1ktSRKcgbqSLB19B4thVbY1+vaPg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0B0E/44BCA632806911EF887B703CC4F9AE02/awKSxgJwici6idjGWhozDUiLCiw.crl rsync://rpki.apnic.net/member_repository/A91D0B0E/44BCA632806911EF887B703CC4F9AE02/awKSxgJwici6idjGWhozDUiLCiw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/awKSxgJwici6idjGWhozDUiLCiw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:53:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 114 (0x72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0B0E, serialNumber=6B0292C6027089C8BA89D8C65A1A330D488B0A2C Validity Not Before: Apr 25 05:53:13 2025 GMT Not After : May 2 05:53:13 2025 GMT Subject: CN=680b2349-4032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5b:3b:92:c9:bb:31:65:b7:7e:b0:ec:bd:77: 34:f2:ad:7f:07:1e:8e:1e:ab:1f:78:14:31:3a:31: ac:58:52:49:50:d8:25:57:79:20:a0:56:ea:81:70: 4a:15:2c:73:8e:30:17:53:bc:5e:47:52:68:14:79: 82:cc:a0:f2:81:fd:ba:3a:ea:dc:c1:d0:98:67:d6: 76:16:bb:41:10:8b:47:f5:fa:85:41:36:01:8e:53: c8:1d:45:29:70:3c:73:b2:c7:c6:1b:7e:83:78:c4: a4:ad:c5:72:d4:10:97:67:0d:14:83:ff:0d:47:7f: 5f:00:1d:ed:67:3f:32:7e:d9:cf:e4:e9:42:ce:d7: f4:d1:7d:cb:40:28:2c:34:c2:87:49:c4:91:a4:a1: 96:e7:e4:62:84:c6:b0:c0:4f:70:c2:b9:05:e0:1b: c1:e7:d3:81:07:d5:b4:db:f3:76:cd:97:62:8a:ba: a9:f3:cb:65:17:59:4a:3b:48:6d:63:ae:fe:d7:e0: 52:d5:d2:56:49:22:69:ce:0d:e7:35:4f:cf:ce:ec: ea:8e:d7:f1:97:8d:d6:5b:41:28:61:0d:69:50:60: b5:ea:1f:35:bb:5d:4f:09:59:9f:ba:ec:36:85:6b: 23:09:09:fb:4c:b6:7f:2f:52:ad:34:5f:9a:dd:ae: 3c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:9D:C2:97:E5:47:17:5C:57:E6:18:D0:CE:3C:BB:5E:07:AD:78:A6 X509v3 Authority Key Identifier: keyid:6B:02:92:C6:02:70:89:C8:BA:89:D8:C6:5A:1A:33:0D:48:8B:0A:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0B0E/44BCA632806911EF887B703CC4F9AE02/awKSxgJwici6idjGWhozDUiLCiw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/awKSxgJwici6idjGWhozDUiLCiw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B0E/44BCA632806911EF887B703CC4F9AE02/awKSxgJwici6idjGWhozDUiLCiw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:46:31:52:b5:00:7e:70:20:06:ee:31:0c:e0:c1:2d:88:9d: 5a:b2:4e:e1:37:98:f1:c2:1e:f5:2b:1e:ab:a4:24:38:11:21: 7a:c0:bc:57:6c:67:e9:32:ea:93:e0:6c:d6:2a:a3:10:b2:0a: 57:03:1a:d2:d3:10:2f:92:c5:80:0f:94:55:d9:c8:6f:5d:46: ce:be:59:e7:f5:6a:4f:71:5b:a2:a7:59:62:83:d3:8f:b9:e3: 65:94:69:43:88:62:68:ce:5e:d3:6f:d9:61:7b:b6:8c:47:60: 1b:69:21:92:d0:aa:ce:d4:b2:43:c5:ca:cd:e7:b0:6b:a6:20: 0b:b9:69:3e:c9:91:84:73:ea:7d:59:0c:06:66:22:f9:34:c7: 32:14:67:b4:81:1e:12:ca:03:8b:7d:ef:b5:8d:7c:9f:13:53: 4a:4f:20:d8:e5:9f:29:36:15:be:95:46:57:26:c0:be:34:39: 51:56:ba:72:15:1c:db:8c:66:b2:7e:ec:a9:69:ee:bb:78:87: e8:52:8b:1c:8e:12:73:65:91:f9:40:c4:a7:29:ea:87:a9:8f: 30:9f:91:58:f4:4e:c0:cf:bf:35:fe:d7:f8:e2:96:c1:04:c1: e8:2c:b3:4d:43:6a:47:97:d7:99:67:53:20:5e:6f:a5:ec:06: 1c:06:f8:96 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MEIwRTExMC8GA1UEBRMoNkIwMjkyQzYwMjcwODlDOEJBODlEOEM2NUExQTMzMEQ0 ODhCMEEyQzAeFw0yNTA0MjUwNTUzMTNaFw0yNTA1MDIwNTUzMTNaMBgxFjAUBgNV BAMTDTY4MGIyMzQ5LTQwMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzWzuSybsxZbd+sOy9dzTyrX8HHo4eqx94FDE6MaxYUklQ2CVXeSCgVuqBcEoV LHOOMBdTvF5HUmgUeYLMoPKB/bo66tzB0Jhn1nYWu0EQi0f1+oVBNgGOU8gdRSlw PHOyx8YbfoN4xKStxXLUEJdnDRSD/w1Hf18AHe1nPzJ+2c/k6ULO1/TRfctAKCw0 wodJxJGkoZbn5GKExrDAT3DCuQXgG8Hn04EH1bTb83bNl2KKuqnzy2UXWUo7SG1j rv7X4FLV0lZJImnODec1T8/O7OqO1/GXjdZbQShhDWlQYLXqHzW7XU8JWZ+67DaF ayMJCftMtn8vUq00X5rdrjzvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDJ3Cl+VH F1xX5hjQzjy7XgeteKYwHwYDVR0jBBgwFoAUawKSxgJwici6idjGWhozDUiLCiww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQwQjBFLzQ0QkNBNjMyODA2 OTExRUY4ODdCNzAzQ0M0RjlBRTAyL2F3S1N4Z0p3aWNpNmlkakdXaG96RFVpTENp dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYXdLU3hnSndpY2k2aWRqR1dob3pEVWlMQ2l3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQw QjBFLzQ0QkNBNjMyODA2OTExRUY4ODdCNzAzQ0M0RjlBRTAyL2F3S1N4Z0p3aWNp NmlkakdXaG96RFVpTENpdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH5GMVK1AH5wIAbuMQzgwS2InVqyTuE3mPHCHvUrHqukJDgRIXrAvFds Z+ky6pPgbNYqoxCyClcDGtLTEC+SxYAPlFXZyG9dRs6+Wef1ak9xW6KnWWKD04+5 42WUaUOIYmjOXtNv2WF7toxHYBtpIZLQqs7UskPFys3nsGumIAu5aT7JkYRz6n1Z DAZmIvk0xzIUZ7SBHhLKA4t977WNfJ8TU0pPINjlnyk2Fb6VRlcmwL40OVFWunIV HNuMZrJ+7Klp7rt4h+hSixyOEnNlkflAxKcp6oepjzCfkVj0TsDPvzX+1/jilsEE wegss01DakeX15lnUyBeb6XsBhwG+JY= -----END CERTIFICATE-----Generated at Sat Apr 26 14:21:02 2025 by rpki-client