$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft File: r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft (raw, json) Hash identifier: TWHWxHtgaNwz4sUjCIb8bKBihtn4eENt2n1S7ngav9I= Subject key identifier: 57:C8:56:2A:F0:71:40:75:D6:B9:33:3A:20:10:D2:F2:34:DD:F6:4E Authority key identifier: AF:A6:D7:BD:C3:7B:64:C8:F1:46:EE:A6:17:36:D3:D4:51:78:FB:37 Certificate issuer: /CN=A91E8CB0/serialNumber=AFA6D7BDC37B64C8F146EEA61736D3D45178FB37 Certificate serial: 01CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft Manifest number: 01C9 Signing time: Fri 25 Apr 2025 02:07:47 +0000 Manifest this update: Fri 25 Apr 2025 02:07:46 +0000 Manifest next update: Fri 02 May 2025 02:07:46 +0000 Files and hashes: 1: r6bXvcN7ZMjxRu6mFzbT1FF4-zc.crl (hash: 6zkXBBQHnwboqaGnjpM6ISRnR3ISlRJhaDdcrq/zMCA=) 2: F11BA4EA75B811EDA34F9687C4F9AE02.roa (hash: ZxJWdKT+dhhJyfungVSpx3334JD5sGMO+S5A+zHFl74=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.crl rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:07:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 462 (0x1ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8CB0, serialNumber=AFA6D7BDC37B64C8F146EEA61736D3D45178FB37 Validity Not Before: Apr 25 02:07:46 2025 GMT Not After : May 2 02:07:46 2025 GMT Subject: CN=680aee73-1f30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bc:ed:5b:b0:4d:24:fb:30:ec:bc:27:76:d6: 23:b2:45:fc:0b:fa:ea:2f:e6:ae:0a:69:0b:4c:7b: 78:04:1a:77:c7:60:7b:97:a1:21:a6:38:01:fe:b1: f3:f7:17:f5:99:90:6e:b1:77:20:ff:16:6a:e0:d2: 0c:97:05:36:ce:fb:b8:8f:46:ce:ee:cc:75:5a:95: 74:c7:a1:7b:a1:e6:47:8d:41:71:ce:90:71:04:d0: 7b:30:00:8c:d6:16:0f:22:44:a8:6c:14:06:b7:3f: 06:3b:37:ae:e4:a7:83:44:93:e6:2d:d6:ad:2e:c5: d4:a8:05:5b:41:ba:68:61:d2:9b:00:57:1a:c5:39: e4:37:2b:73:cd:b0:49:5b:7a:98:bf:f7:e8:41:05: be:cb:40:8a:17:ed:4e:ba:21:54:50:09:45:d7:54: ff:b4:7e:21:b2:fb:c4:fd:ca:8a:fb:a5:6f:e9:e2: 1c:fd:c7:a3:52:26:a1:71:0a:a3:41:db:22:73:fc: 77:ba:89:4a:f5:f4:d3:e5:0c:35:91:31:7f:84:46: d3:14:a6:15:01:fb:36:ca:23:d8:ba:e2:3a:e0:c5: 80:d2:f8:7d:b9:c3:f6:d2:c0:ad:99:8c:52:18:a3: 59:63:50:01:06:38:f3:65:e8:54:9f:4f:ed:cb:44: 0a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:C8:56:2A:F0:71:40:75:D6:B9:33:3A:20:10:D2:F2:34:DD:F6:4E X509v3 Authority Key Identifier: keyid:AF:A6:D7:BD:C3:7B:64:C8:F1:46:EE:A6:17:36:D3:D4:51:78:FB:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:d1:79:94:a5:e2:af:12:db:b8:79:77:f7:b9:e8:9b:3a:76: fe:c3:93:d5:1e:06:25:1a:0c:03:e1:65:c3:08:d0:c0:9a:d0: 03:5f:50:a3:a5:2a:a7:5a:d2:82:5a:92:5d:d3:64:d2:49:61: 94:17:f8:b0:ba:6c:11:f5:20:fd:7a:55:44:f8:f6:78:de:e9: c2:ce:ba:77:c3:6f:3c:64:cd:16:f7:15:24:46:d3:13:ab:56: c1:1a:e2:c0:bb:51:bd:ea:e5:fa:15:b3:c9:8f:c8:ec:6a:92: 59:81:5c:63:6c:03:e2:ad:d1:15:56:ae:72:ed:a2:ea:3f:28: af:48:26:0b:4c:2d:e5:51:87:e9:75:21:8f:2f:15:d0:63:87: 88:43:32:39:45:38:a9:da:2f:35:bd:e7:e1:56:e8:67:49:8d: 33:58:79:ea:7e:50:e2:22:85:15:3d:34:1c:ca:d5:91:dc:06: 0b:0f:f5:f1:a3:33:0b:46:e0:c4:5d:3f:c4:84:81:3b:c4:e1: d9:e5:af:71:59:63:bb:14:63:db:e2:3a:e2:0b:67:6b:5e:74: 21:2b:cc:41:42:6e:1f:da:31:16:7f:fe:e6:31:c1:94:fe:4e: c8:c6:0a:7c:8c:a1:36:b2:7e:71:83:d6:a0:19:83:ef:e2:93: e9:19:75:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThDQjAxMTAvBgNVBAUTKEFGQTZEN0JEQzM3QjY0QzhGMTQ2RUVBNjE3MzZEM0Q0 NTE3OEZCMzcwHhcNMjUwNDI1MDIwNzQ2WhcNMjUwNTAyMDIwNzQ2WjAYMRYwFAYD VQQDEw02ODBhZWU3My0xZjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7ztW7BNJPsw7LwndtYjskX8C/rqL+auCmkLTHt4BBp3x2B7l6EhpjgB/rHz 9xf1mZBusXcg/xZq4NIMlwU2zvu4j0bO7sx1WpV0x6F7oeZHjUFxzpBxBNB7MACM 1hYPIkSobBQGtz8GOzeu5KeDRJPmLdatLsXUqAVbQbpoYdKbAFcaxTnkNytzzbBJ W3qYv/foQQW+y0CKF+1OuiFUUAlF11T/tH4hsvvE/cqK+6Vv6eIc/cejUiahcQqj Qdsic/x3uolK9fTT5Qw1kTF/hEbTFKYVAfs2yiPYuuI64MWA0vh9ucP20sCtmYxS GKNZY1ABBjjzZehUn0/ty0QK6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFfIVirw cUB11rkzOiAQ0vI03fZOMB8GA1UdIwQYMBaAFK+m173De2TI8Ubuphc209RRePs3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOENCMC8zNzcwMTI0RTZC QzUxMUVEODY2QTdENUVDNEY5QUUwMi9yNmJYdmNON1pNanhSdTZtRnpiVDFGRjQt emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I2Ylh2Y043Wk1qeFJ1Nm1GemJUMUZGNC16Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OENCMC8zNzcwMTI0RTZCQzUxMUVEODY2QTdENUVDNEY5QUUwMi9yNmJYdmNON1pN anhSdTZtRnpiVDFGRjQtemMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAk0XmUpeKvEtu4eXf3ueibOnb+w5PVHgYlGgwD4WXDCNDAmtADX1Cj pSqnWtKCWpJd02TSSWGUF/iwumwR9SD9elVE+PZ43unCzrp3w288ZM0W9xUkRtMT q1bBGuLAu1G96uX6FbPJj8jsapJZgVxjbAPirdEVVq5y7aLqPyivSCYLTC3lUYfp dSGPLxXQY4eIQzI5RTip2i81vefhVuhnSY0zWHnqflDiIoUVPTQcytWR3AYLD/Xx ozMLRuDEXT/EhIE7xOHZ5a9xWWO7FGPb4jriC2drXnQhK8xBQm4f2jEWf/7mMcGU /k7Ixgp8jKE2sn5xg9agGYPv4pPpGXV6 -----END CERTIFICATE-----Generated at Sat Apr 26 03:45:29 2025 by rpki-client