$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6314/96FE3006E0D211E8A6313425C4F9AE02/6GwPcg6WodXwYNlgrkIiElVg3Eo.mft File: 6GwPcg6WodXwYNlgrkIiElVg3Eo.mft (raw, json) Hash identifier: jiRgjv4VXiPoymRrBDP1QrrAU/ztrxfpIHtcuYmZobs= Subject key identifier: 32:C1:BC:57:D4:B5:A6:01:5D:51:8B:B9:5D:1E:17:FE:D0:58:B7:BD Authority key identifier: E8:6C:0F:72:0E:96:A1:D5:F0:60:D9:60:AE:42:22:12:55:60:DC:4A Certificate issuer: /CN=A91E6314/serialNumber=E86C0F720E96A1D5F060D960AE4222125560DC4A Certificate serial: 1208 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GwPcg6WodXwYNlgrkIiElVg3Eo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6314/96FE3006E0D211E8A6313425C4F9AE02/6GwPcg6WodXwYNlgrkIiElVg3Eo.mft Manifest number: 11FD Signing time: Thu 24 Apr 2025 17:10:16 +0000 Manifest this update: Thu 24 Apr 2025 17:10:15 +0000 Manifest next update: Thu 01 May 2025 17:10:15 +0000 Files and hashes: 1: 6GwPcg6WodXwYNlgrkIiElVg3Eo.crl (hash: NGoQLjH4j9Q44k7DEiKVNArmW7XCfMkLI7NmRvtcgKE=) 2: E1A56FBAE0D311E88A46432AC4F9AE02.roa (hash: x0pbE7Ea3sKXTfydYa2BTBmjtzbK1GRSFoSpJkmD3Ks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6314/96FE3006E0D211E8A6313425C4F9AE02/6GwPcg6WodXwYNlgrkIiElVg3Eo.crl rsync://rpki.apnic.net/member_repository/A91E6314/96FE3006E0D211E8A6313425C4F9AE02/6GwPcg6WodXwYNlgrkIiElVg3Eo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GwPcg6WodXwYNlgrkIiElVg3Eo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:10:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4616 (0x1208) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6314, serialNumber=E86C0F720E96A1D5F060D960AE4222125560DC4A Validity Not Before: Apr 24 17:10:15 2025 GMT Not After : May 1 17:10:15 2025 GMT Subject: CN=680a7077-1671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:47:18:61:21:8f:76:17:bb:be:dc:f6:ad:f3: 81:d1:55:fe:dc:f3:d4:1b:52:c7:24:68:5e:86:6a: a5:36:34:ce:e2:31:4b:ad:9f:80:64:2c:cb:3d:95: ed:ca:27:94:4e:ef:44:77:a7:17:d4:88:e6:9a:2a: 00:24:0a:4e:08:2d:0a:32:31:12:8d:23:42:9a:8a: 85:23:c4:79:1a:00:19:72:69:da:b7:6c:bb:b4:b8: 82:27:ba:86:1b:ee:6d:fb:ec:a8:1e:04:22:ce:8b: 5d:e0:e1:1a:39:7b:70:86:21:71:74:d2:37:ca:8f: 9e:f3:44:b8:8e:ce:ef:21:31:27:fd:04:2a:3b:bb: f1:09:4a:57:cd:39:e1:4c:8d:4e:53:89:ee:15:61: 5b:de:15:f2:c7:32:c5:5b:cb:62:03:b5:4f:5f:bb: 20:78:f3:b4:47:14:79:f8:bb:dd:98:0d:22:ca:05: af:14:64:1a:fc:8d:ab:cb:16:91:c4:fd:79:e0:22: 9e:e7:aa:10:2f:06:72:2b:07:82:db:97:ce:57:fa: 44:51:ef:b6:19:be:e4:8e:5a:cb:a1:ae:7f:bd:79: 9e:8b:dd:d5:89:8a:7c:4d:70:41:df:13:ee:32:60: 5e:bc:86:03:07:59:78:08:98:d4:25:2e:3d:76:5d: 41:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:C1:BC:57:D4:B5:A6:01:5D:51:8B:B9:5D:1E:17:FE:D0:58:B7:BD X509v3 Authority Key Identifier: keyid:E8:6C:0F:72:0E:96:A1:D5:F0:60:D9:60:AE:42:22:12:55:60:DC:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6314/96FE3006E0D211E8A6313425C4F9AE02/6GwPcg6WodXwYNlgrkIiElVg3Eo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GwPcg6WodXwYNlgrkIiElVg3Eo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6314/96FE3006E0D211E8A6313425C4F9AE02/6GwPcg6WodXwYNlgrkIiElVg3Eo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:5e:fd:42:97:d9:d2:a8:13:95:b5:fa:cf:61:fa:aa:4b:cb: 61:47:ea:ad:a1:43:80:43:fa:0a:9f:1c:27:5c:b4:77:bc:39: 20:df:ea:b8:fd:86:0d:43:33:3b:44:79:13:13:f0:d7:15:01: 21:b5:08:c6:7a:68:29:ed:23:e5:bd:0e:ee:a2:91:44:99:a5: 13:79:9c:e0:b1:66:79:b5:e5:8a:24:60:df:51:06:22:cf:ac: 33:e1:7c:34:52:8a:ae:67:64:c5:7c:90:4a:b2:3c:7f:aa:c8: d2:b5:32:21:d9:0b:ab:2e:84:f0:0e:51:95:9b:3e:fb:42:ec: 74:dc:d3:66:f6:b0:70:6f:3c:20:3d:0e:8a:fd:2a:37:96:66: 45:4b:fd:04:cf:95:ed:8b:df:95:b3:77:21:8a:01:a3:82:a4: ee:3b:36:5f:39:a9:89:97:03:7d:a2:91:8b:95:0e:78:08:3c: 77:4d:20:d4:53:6d:e9:50:50:4c:bb:21:50:aa:6f:1c:ce:5c: ba:38:0e:c5:22:c2:43:32:d4:b0:49:d8:31:62:72:8b:6a:39: 9d:1f:15:28:7a:bd:d9:3f:3f:8a:4b:78:af:e0:fa:fe:34:c9: 39:57:f4:cd:27:aa:c0:5b:35:ff:66:e0:67:60:94:9b:93:8f: 0e:b3:78:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYzMTQxMTAvBgNVBAUTKEU4NkMwRjcyMEU5NkExRDVGMDYwRDk2MEFFNDIyMjEy NTU2MERDNEEwHhcNMjUwNDI0MTcxMDE1WhcNMjUwNTAxMTcxMDE1WjAYMRYwFAYD VQQDEw02ODBhNzA3Ny0xNjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvkcYYSGPdhe7vtz2rfOB0VX+3PPUG1LHJGhehmqlNjTO4jFLrZ+AZCzLPZXt yieUTu9Ed6cX1IjmmioAJApOCC0KMjESjSNCmoqFI8R5GgAZcmnat2y7tLiCJ7qG G+5t++yoHgQizotd4OEaOXtwhiFxdNI3yo+e80S4js7vITEn/QQqO7vxCUpXzTnh TI1OU4nuFWFb3hXyxzLFW8tiA7VPX7sgePO0RxR5+LvdmA0iygWvFGQa/I2ryxaR xP154CKe56oQLwZyKweC25fOV/pEUe+2Gb7kjlrLoa5/vXmei93ViYp8TXBB3xPu MmBevIYDB1l4CJjUJS49dl1BCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDLBvFfU taYBXVGLuV0eF/7QWLe9MB8GA1UdIwQYMBaAFOhsD3IOlqHV8GDZYK5CIhJVYNxK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjMxNC85NkZFMzAwNkUw RDIxMUU4QTYzMTM0MjVDNEY5QUUwMi82R3dQY2c2V29kWHdZTmxncmtJaUVsVmcz RW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZHd1BjZzZXb2RYd1lObGdya0lpRWxWZzNFby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjMxNC85NkZFMzAwNkUwRDIxMUU4QTYzMTM0MjVDNEY5QUUwMi82R3dQY2c2V29k WHdZTmxncmtJaUVsVmczRW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWXv1Cl9nSqBOVtfrPYfqqS8thR+qtoUOAQ/oKnxwnXLR3vDkg3+q4 /YYNQzM7RHkTE/DXFQEhtQjGemgp7SPlvQ7uopFEmaUTeZzgsWZ5teWKJGDfUQYi z6wz4Xw0UoquZ2TFfJBKsjx/qsjStTIh2QurLoTwDlGVmz77Qux03NNm9rBwbzwg PQ6K/So3lmZFS/0Ez5Xti9+Vs3chigGjgqTuOzZfOamJlwN9opGLlQ54CDx3TSDU U23pUFBMuyFQqm8czly6OA7FIsJDMtSwSdgxYnKLajmdHxUoer3ZPz+KS3iv4Pr+ NMk5V/TNJ6rAWzX/ZuBnYJSbk48Os3gH -----END CERTIFICATE-----Generated at Sat Apr 26 17:15:53 2025 by rpki-client