$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFFB0/D00C5F88B68F11EEA56BAE11C4F9AE02/F6Zubv3tEF6BIZCZBTal32A7qA4.mft File: F6Zubv3tEF6BIZCZBTal32A7qA4.mft (raw, json) Hash identifier: s/ye/mYGKDaUkgwBb5gRNEPTsFUl0OxcXdh4xdmMWrw= Subject key identifier: 79:72:FE:25:AB:0F:90:07:DB:E0:77:B9:7E:A0:3E:CE:27:A6:FB:60 Authority key identifier: 17:A6:6E:6E:FD:ED:10:5E:81:21:90:99:05:36:A5:DF:60:3B:A8:0E Certificate issuer: /CN=A91DFFB0/serialNumber=17A66E6EFDED105E812190990536A5DF603BA80E Certificate serial: F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6Zubv3tEF6BIZCZBTal32A7qA4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFFB0/D00C5F88B68F11EEA56BAE11C4F9AE02/F6Zubv3tEF6BIZCZBTal32A7qA4.mft Manifest number: EF Signing time: Fri 25 Apr 2025 04:22:37 +0000 Manifest this update: Fri 25 Apr 2025 04:22:37 +0000 Manifest next update: Fri 02 May 2025 04:22:37 +0000 Files and hashes: 1: F6Zubv3tEF6BIZCZBTal32A7qA4.crl (hash: BMTBeTV0dzV0YDlalVWy/vxKmZV2sv9B+Po57GtFnkU=) 2: BC75F7EEB69511EEA0196A79C4F9AE02.roa (hash: F5iN8kRUhVD5UcQHE+cdGbEF8nSM0rWOmllxV2NtDTQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFFB0/D00C5F88B68F11EEA56BAE11C4F9AE02/F6Zubv3tEF6BIZCZBTal32A7qA4.crl rsync://rpki.apnic.net/member_repository/A91DFFB0/D00C5F88B68F11EEA56BAE11C4F9AE02/F6Zubv3tEF6BIZCZBTal32A7qA4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6Zubv3tEF6BIZCZBTal32A7qA4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 242 (0xf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFFB0, serialNumber=17A66E6EFDED105E812190990536A5DF603BA80E Validity Not Before: Apr 25 04:22:37 2025 GMT Not After : May 2 04:22:37 2025 GMT Subject: CN=680b0e0d-ae2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:44:5f:ac:25:91:e2:52:f0:07:05:3d:6d:f1: 68:a3:02:1f:76:49:af:f7:58:35:40:8a:cd:19:f8: d0:31:d1:2f:b3:09:10:68:c8:a1:ae:b7:e3:60:d8: 64:ed:92:4d:e6:ab:f9:b0:90:7c:8a:32:7f:d7:3b: f1:d5:1e:98:ec:1b:24:44:44:37:bf:77:37:2d:3d: fe:12:17:83:72:76:e9:6d:d3:c3:67:ab:69:67:70: a1:96:1b:33:5f:3b:a4:76:5b:83:77:4f:dc:f8:df: 1a:a0:ed:82:d9:93:60:8d:38:2f:dd:29:4a:60:d0: 0b:23:13:79:32:c5:46:39:00:0d:c1:dd:aa:47:7b: 97:a0:3e:e5:0e:fa:74:8f:cd:f9:2b:15:89:2f:3d: b9:d9:92:15:b4:85:54:67:98:28:3b:f8:19:4d:04: 91:83:d2:07:6e:98:7b:96:56:1e:be:5e:52:33:d1: e0:04:77:92:48:c7:39:8e:29:06:ab:0b:9b:12:a1: 99:4a:2c:ec:d1:66:2e:5f:38:00:cd:ee:53:db:b1: 31:5f:66:02:63:da:07:00:2a:c2:ce:de:a2:36:15: 9d:8b:d0:ed:21:c4:ed:9a:29:90:4a:94:d4:66:56: 02:9c:c2:d8:04:1a:9c:cd:d5:7a:5e:87:d4:06:80: f4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:72:FE:25:AB:0F:90:07:DB:E0:77:B9:7E:A0:3E:CE:27:A6:FB:60 X509v3 Authority Key Identifier: keyid:17:A6:6E:6E:FD:ED:10:5E:81:21:90:99:05:36:A5:DF:60:3B:A8:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFFB0/D00C5F88B68F11EEA56BAE11C4F9AE02/F6Zubv3tEF6BIZCZBTal32A7qA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6Zubv3tEF6BIZCZBTal32A7qA4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFFB0/D00C5F88B68F11EEA56BAE11C4F9AE02/F6Zubv3tEF6BIZCZBTal32A7qA4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:d8:20:9f:5a:b2:3b:a5:24:56:2d:ae:8e:3e:07:aa:f4:4d: a1:f1:c9:ff:a5:57:b0:16:db:ce:0b:e2:24:2b:4d:13:ea:d1: b1:67:e6:0f:dc:ff:50:72:cc:52:6a:3f:7d:95:fb:7c:f4:c3: e1:d5:fc:dc:6f:a1:e0:81:b0:e0:f9:41:3d:de:e7:4b:3d:0e: 43:54:6f:e9:82:50:44:ce:69:52:4b:88:5b:11:38:ac:cb:ed: b5:07:af:f8:44:3e:0a:97:a5:e3:3a:d2:4d:c2:cb:4e:c1:fa: aa:82:36:c1:9c:e9:ca:f1:de:e0:66:64:56:5a:07:40:01:16: 35:74:96:2d:16:b9:7d:a3:a3:b6:16:f6:06:8f:0d:ae:b7:77: 7b:54:2a:aa:ce:78:d4:b1:12:33:4e:e5:92:28:70:8b:e6:03: ed:e2:22:2c:58:24:1c:18:04:a4:98:49:3d:a8:48:21:0b:37: aa:cc:02:54:d1:40:d9:23:ea:4f:15:a6:b5:50:6a:4c:e8:a9: 08:5c:42:ac:74:e7:f3:fb:6d:38:da:22:a2:7e:4e:6d:6b:dd: b0:1f:65:55:1b:a7:2c:29:7e:67:a1:46:5d:5a:0a:69:11:59: db:14:86:6b:99:7e:e2:0e:0e:e2:c8:7a:dc:1e:53:fa:a3:59: be:e3:12:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZGQjAxMTAvBgNVBAUTKDE3QTY2RTZFRkRFRDEwNUU4MTIxOTA5OTA1MzZBNURG NjAzQkE4MEUwHhcNMjUwNDI1MDQyMjM3WhcNMjUwNTAyMDQyMjM3WjAYMRYwFAYD VQQDEw02ODBiMGUwZC1hZTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwERfrCWR4lLwBwU9bfFoowIfdkmv91g1QIrNGfjQMdEvswkQaMihrrfjYNhk 7ZJN5qv5sJB8ijJ/1zvx1R6Y7BskREQ3v3c3LT3+EheDcnbpbdPDZ6tpZ3Chlhsz XzukdluDd0/c+N8aoO2C2ZNgjTgv3SlKYNALIxN5MsVGOQANwd2qR3uXoD7lDvp0 j835KxWJLz252ZIVtIVUZ5goO/gZTQSRg9IHbph7llYevl5SM9HgBHeSSMc5jikG qwubEqGZSizs0WYuXzgAze5T27ExX2YCY9oHACrCzt6iNhWdi9DtIcTtmimQSpTU ZlYCnMLYBBqczdV6XofUBoD0iwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHly/iWr D5AH2+B3uX6gPs4npvtgMB8GA1UdIwQYMBaAFBembm797RBegSGQmQU2pd9gO6gO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkZCMC9EMDBDNUY4OEI2 OEYxMUVFQTU2QkFFMTFDNEY5QUUwMi9GNlp1YnYzdEVGNkJJWkNaQlRhbDMyQTdx QTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Y2WnVidjN0RUY2QklaQ1pCVGFsMzJBN3FBNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RkZCMC9EMDBDNUY4OEI2OEYxMUVFQTU2QkFFMTFDNEY5QUUwMi9GNlp1YnYzdEVG NkJJWkNaQlRhbDMyQTdxQTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBc2CCfWrI7pSRWLa6OPgeq9E2h8cn/pVewFtvOC+IkK00T6tGxZ+YP 3P9QcsxSaj99lft89MPh1fzcb6HggbDg+UE93udLPQ5DVG/pglBEzmlSS4hbETis y+21B6/4RD4Kl6XjOtJNwstOwfqqgjbBnOnK8d7gZmRWWgdAARY1dJYtFrl9o6O2 FvYGjw2ut3d7VCqqznjUsRIzTuWSKHCL5gPt4iIsWCQcGASkmEk9qEghCzeqzAJU 0UDZI+pPFaa1UGpM6KkIXEKsdOfz+2042iKifk5ta92wH2VVG6csKX5noUZdWgpp EVnbFIZrmX7iDg7iyHrcHlP6o1m+4xKo -----END CERTIFICATE-----Generated at Sat Apr 26 17:08:35 2025 by rpki-client