$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft File: a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft (raw, json) Hash identifier: Fiv1sZDiuCGw2t3HjYGA0JwPTAJxvRYeuBoxXs8MUW4= Subject key identifier: 00:AD:F4:63:81:94:82:21:61:A3:2E:A5:B4:28:A3:93:AD:72:3B:01 Authority key identifier: 6B:C2:63:B5:1A:56:B5:17:40:77:74:59:79:62:27:ED:00:DF:4D:70 Certificate issuer: /CN=A91D2F93/serialNumber=6BC263B51A56B51740777459796227ED00DF4D70 Certificate serial: 06D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a8JjtRpWtRdAd3RZeWIn7QDfTXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft Manifest number: 06CA Signing time: Thu 24 Apr 2025 21:51:29 +0000 Manifest this update: Thu 24 Apr 2025 21:51:28 +0000 Manifest next update: Thu 01 May 2025 21:51:28 +0000 Files and hashes: 1: a8JjtRpWtRdAd3RZeWIn7QDfTXA.crl (hash: 5jqleYn/uyQht1kXWdbHkrsIQK9ox6civViNKryQ1Ew=) 2: B6FCD4F60CD111ECABD2264AC4F9AE02.roa (hash: bB+9hsPPapCcbcV407klYfK5DJTWT3wpVck7/MMMHXw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.crl rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a8JjtRpWtRdAd3RZeWIn7QDfTXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1744 (0x6d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2F93, serialNumber=6BC263B51A56B51740777459796227ED00DF4D70 Validity Not Before: Apr 24 21:51:28 2025 GMT Not After : May 1 21:51:28 2025 GMT Subject: CN=680ab260-5f87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:33:32:31:57:1d:5d:79:92:21:da:26:ce:fb: b5:87:da:34:fe:c0:b6:4f:9b:9e:7f:53:da:0e:9a: 7a:51:45:7e:42:02:9d:9b:c5:c2:c5:43:9a:c4:e4: e4:48:c2:33:5d:23:37:3b:31:dc:03:1c:8c:0c:c6: dd:25:a6:c9:f0:05:a4:47:08:a7:b7:38:c0:88:f2: 1d:30:3a:39:7a:5c:85:96:2a:03:39:08:ab:67:14: e9:ac:26:fb:26:1a:c7:53:80:3a:fa:a1:46:d4:72: 11:35:4c:43:ee:bd:5b:eb:e1:4b:bb:eb:e0:dc:90: 70:4f:bd:6d:74:32:17:79:b3:f8:87:23:cb:fb:34: c2:81:8c:9c:83:25:b9:d9:56:55:4e:35:11:74:69: be:bd:37:04:e2:24:95:be:c5:4f:d9:7a:e8:14:f3: c7:12:79:a2:d2:b4:6e:b8:42:e4:e4:56:2e:32:39: 3b:83:76:b2:ce:10:0d:68:74:b8:9a:2f:48:6e:05: 92:31:3a:16:88:b5:a7:09:d7:b8:fe:09:6a:d7:c1: 30:67:51:22:b1:2a:c2:2a:b1:e5:c9:27:e1:3a:69: 4b:30:17:f6:fb:5f:e5:28:b6:86:b5:5e:96:81:20: 54:70:a1:ed:75:f0:33:28:e5:e8:8d:09:58:66:c9: 9f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:AD:F4:63:81:94:82:21:61:A3:2E:A5:B4:28:A3:93:AD:72:3B:01 X509v3 Authority Key Identifier: keyid:6B:C2:63:B5:1A:56:B5:17:40:77:74:59:79:62:27:ED:00:DF:4D:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a8JjtRpWtRdAd3RZeWIn7QDfTXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:8d:61:09:dc:89:54:49:f5:54:c6:a7:53:05:86:bf:c1:6c: a2:86:4a:ed:54:7a:e2:5c:d1:ad:83:d4:82:9d:ef:52:6f:34: 2e:d8:22:c3:f3:99:00:34:3e:bd:85:75:2a:4c:eb:65:a0:18: ab:9c:89:e1:7c:34:c9:73:81:2c:fa:f3:c9:c9:56:b7:f5:2c: fd:34:5f:b3:35:ca:1a:a4:f1:34:22:b4:83:05:e9:c0:39:6c: d4:c7:ea:e1:1b:14:2a:52:6c:f2:f9:22:63:53:c9:29:dd:fe: b1:a7:fd:e6:ad:5a:32:b9:05:52:63:6f:ee:2e:eb:36:0e:06: 60:6c:84:6c:e1:7a:47:4f:70:2c:4b:92:c0:f5:7f:b2:03:4e: 66:9a:c2:39:a8:aa:bd:d2:b4:40:8d:1e:fd:0f:83:d4:ac:a7: 12:f9:5b:0c:26:10:ba:96:46:10:55:71:f0:22:40:10:40:4b: 02:c7:4b:c9:54:28:a4:9e:34:91:a4:1a:cb:e6:f5:a8:5a:8e: 6f:83:3d:f3:73:fa:26:9b:f9:01:62:ce:2b:6f:36:08:6e:3f: a4:4f:6f:78:0d:05:86:9e:c6:72:ed:37:bf:72:7a:aa:2e:4f: 13:08:cd:75:3b:2f:1d:b9:cf:0a:9a:22:42:07:d0:28:10:c7: 9a:5f:2e:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJGOTMxMTAvBgNVBAUTKDZCQzI2M0I1MUE1NkI1MTc0MDc3NzQ1OTc5NjIyN0VE MDBERjRENzAwHhcNMjUwNDI0MjE1MTI4WhcNMjUwNTAxMjE1MTI4WjAYMRYwFAYD VQQDEw02ODBhYjI2MC01Zjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0jMyMVcdXXmSIdomzvu1h9o0/sC2T5uef1PaDpp6UUV+QgKdm8XCxUOaxOTk SMIzXSM3OzHcAxyMDMbdJabJ8AWkRwintzjAiPIdMDo5elyFlioDOQirZxTprCb7 JhrHU4A6+qFG1HIRNUxD7r1b6+FLu+vg3JBwT71tdDIXebP4hyPL+zTCgYycgyW5 2VZVTjURdGm+vTcE4iSVvsVP2XroFPPHEnmi0rRuuELk5FYuMjk7g3ayzhANaHS4 mi9IbgWSMToWiLWnCde4/glq18EwZ1EisSrCKrHlySfhOmlLMBf2+1/lKLaGtV6W gSBUcKHtdfAzKOXojQlYZsmflQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFACt9GOB lIIhYaMupbQoo5OtcjsBMB8GA1UdIwQYMBaAFGvCY7UaVrUXQHd0WXliJ+0A301w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkY5My82OTk5Rjc4RTUy NDExMUVCQjNDNEE0MUVDNEY5QUUwMi9hOEpqdFJwV3RSZEFkM1JaZVdJbjdRRGZU WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E4Smp0UnBXdFJkQWQzUlplV0luN1FEZlRYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkY5My82OTk5Rjc4RTUyNDExMUVCQjNDNEE0MUVDNEY5QUUwMi9hOEpqdFJwV3RS ZEFkM1JaZVdJbjdRRGZUWEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUjWEJ3IlUSfVUxqdTBYa/wWyihkrtVHriXNGtg9SCne9SbzQu2CLD 85kAND69hXUqTOtloBirnInhfDTJc4Es+vPJyVa39Sz9NF+zNcoapPE0IrSDBenA OWzUx+rhGxQqUmzy+SJjU8kp3f6xp/3mrVoyuQVSY2/uLus2DgZgbIRs4XpHT3As S5LA9X+yA05mmsI5qKq90rRAjR79D4PUrKcS+VsMJhC6lkYQVXHwIkAQQEsCx0vJ VCiknjSRpBrL5vWoWo5vgz3zc/omm/kBYs4rbzYIbj+kT294DQWGnsZy7Te/cnqq Lk8TCM11Oy8duc8KmiJCB9AoEMeaXy6Y -----END CERTIFICATE-----Generated at Sat Apr 26 04:25:34 2025 by rpki-client