$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.mft File: KB6VPa5xcoChbkvFbkE1LoR2PLw.mft (raw, json) Hash identifier: I0sE5yiY/aMK6FMFo6NSRCAsuYr+va/7eDtYohyklts= Subject key identifier: AE:20:4E:08:D0:21:E8:EE:A6:BE:70:A4:C3:41:64:AE:80:CD:1F:29 Authority key identifier: 28:1E:95:3D:AE:71:72:80:A1:6E:4B:C5:6E:41:35:2E:84:76:3C:BC Certificate issuer: /CN=A91EEA4D/serialNumber=281E953DAE717280A16E4BC56E41352E84763CBC Certificate serial: 081D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB6VPa5xcoChbkvFbkE1LoR2PLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.mft Manifest number: 12ED Signing time: Thu 24 Apr 2025 19:18:39 +0000 Manifest this update: Thu 24 Apr 2025 19:18:38 +0000 Manifest next update: Thu 01 May 2025 19:18:38 +0000 Files and hashes: 1: KB6VPa5xcoChbkvFbkE1LoR2PLw.crl (hash: SM40WuC6mpam1e9DVQdzcpmGqGNkMsGIgQM6FF/z6ws=) 2: 08ADD496B19E11EC86ADF246C4F9AE02.roa (hash: 6mQI7tPzFyvqQ3noJg2+jNlZObqFlofmOKhY46d73Xo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.crl rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB6VPa5xcoChbkvFbkE1LoR2PLw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:18:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2077 (0x81d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEA4D, serialNumber=281E953DAE717280A16E4BC56E41352E84763CBC Validity Not Before: Apr 24 19:18:38 2025 GMT Not After : May 1 19:18:38 2025 GMT Subject: CN=680a8e8e-0056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:70:84:35:e3:f2:2e:3c:38:e2:65:0b:78:28: ee:70:f1:cf:ea:ab:87:92:8c:f7:17:53:ca:d2:16: a2:70:d8:57:64:cc:58:9c:60:fd:c4:4b:90:1c:dc: fb:de:d2:60:6d:7f:ea:53:b3:41:79:36:e4:ea:c1: 0a:8a:c4:26:81:d5:08:0b:c3:c6:f4:31:ec:56:96: a6:45:b2:05:b8:24:30:5e:6d:eb:ff:cc:bc:42:04: da:d9:45:30:b7:2a:39:a2:29:8c:91:89:ef:c8:19: eb:1c:ef:a4:51:10:79:63:5d:99:53:ff:65:e8:d5: 5e:1d:56:52:59:51:d4:65:37:ff:72:ff:76:c6:67: 3e:ee:4f:a8:fe:80:ef:f7:74:8e:9f:4b:60:35:c5: 88:42:e0:75:f0:18:e7:58:5f:20:21:61:9c:c2:29: 7b:5d:f8:8e:44:a3:f4:37:2b:e3:fa:9e:96:b8:95: b8:10:98:8d:61:18:82:9c:2b:e4:64:dd:80:85:6b: 19:de:c6:22:a1:42:c4:6d:de:16:eb:1b:fb:cc:ea: d3:a4:34:a7:fd:c0:66:f5:fb:89:c2:08:4f:0a:7e: c6:d3:f9:e3:cd:f4:3c:ec:8d:48:72:c8:41:3a:48: 56:21:ad:55:97:fd:cc:6d:cc:b2:f0:01:b2:73:5c: bb:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:20:4E:08:D0:21:E8:EE:A6:BE:70:A4:C3:41:64:AE:80:CD:1F:29 X509v3 Authority Key Identifier: keyid:28:1E:95:3D:AE:71:72:80:A1:6E:4B:C5:6E:41:35:2E:84:76:3C:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB6VPa5xcoChbkvFbkE1LoR2PLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:c0:ad:a3:fc:c1:98:17:f1:e8:89:58:04:b0:0d:6e:74:e0: 43:e7:46:2b:31:e5:37:01:da:29:4c:33:db:26:b8:bc:c2:6e: 87:45:37:81:72:56:7f:b5:86:63:01:47:46:3f:c2:40:88:1e: a9:41:46:eb:19:a7:f9:ce:b5:ee:80:fb:d6:b8:c4:f2:7c:f6: c3:4e:0d:3e:f6:b6:03:68:4d:84:04:14:e6:c1:ea:0d:8b:4d: 8c:1e:67:06:f4:bf:d7:98:b5:1b:19:9e:83:4c:1c:60:a1:ff: 45:70:e1:ac:54:19:0e:b3:02:97:08:30:35:b3:60:c8:35:ad: d7:f4:0f:be:88:e7:c5:78:f5:86:41:8d:d8:6b:be:2c:0b:2a: 53:92:28:97:34:54:1a:b8:25:fe:0e:63:e1:12:04:83:30:f9: df:01:5e:ba:db:69:ca:a9:72:a1:6b:ed:57:28:a6:d5:46:64: a0:3e:03:9b:b6:7d:92:1e:f3:f5:28:f5:86:59:f6:62:72:c0: 24:14:c7:37:7a:d9:d0:ee:33:b8:25:12:a9:87:f2:e0:27:70: 0d:23:49:e2:bc:e6:28:c9:69:f5:27:b6:d0:e2:6a:9f:db:6e: 10:4d:e2:27:1a:7d:18:a1:79:5e:9d:38:28:e3:44:95:b5:6c: c0:8c:66:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCB0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVBNEQxMTAvBgNVBAUTKDI4MUU5NTNEQUU3MTcyODBBMTZFNEJDNTZFNDEzNTJF ODQ3NjNDQkMwHhcNMjUwNDI0MTkxODM4WhcNMjUwNTAxMTkxODM4WjAYMRYwFAYD VQQDEw02ODBhOGU4ZS0wMDU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqnCENePyLjw44mULeCjucPHP6quHkoz3F1PK0haicNhXZMxYnGD9xEuQHNz7 3tJgbX/qU7NBeTbk6sEKisQmgdUIC8PG9DHsVpamRbIFuCQwXm3r/8y8QgTa2UUw tyo5oimMkYnvyBnrHO+kURB5Y12ZU/9l6NVeHVZSWVHUZTf/cv92xmc+7k+o/oDv 93SOn0tgNcWIQuB18BjnWF8gIWGcwil7XfiORKP0Nyvj+p6WuJW4EJiNYRiCnCvk ZN2AhWsZ3sYioULEbd4W6xv7zOrTpDSn/cBm9fuJwghPCn7G0/njzfQ87I1IcshB OkhWIa1Vl/3Mbcyy8AGyc1y7VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK4gTgjQ Iejupr5wpMNBZK6AzR8pMB8GA1UdIwQYMBaAFCgelT2ucXKAoW5LxW5BNS6Edjy8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUE0RC82NjFGNzNFQzQ3 MzcxMUVBQUIxNkJCNTBDNEY5QUUwMi9LQjZWUGE1eGNvQ2hia3ZGYmtFMUxvUjJQ THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tCNlZQYTV4Y29DaGJrdkZia0UxTG9SMlBMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUE0RC82NjFGNzNFQzQ3MzcxMUVBQUIxNkJCNTBDNEY5QUUwMi9LQjZWUGE1eGNv Q2hia3ZGYmtFMUxvUjJQTHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfwK2j/MGYF/HoiVgEsA1udOBD50YrMeU3AdopTDPbJri8wm6HRTeB clZ/tYZjAUdGP8JAiB6pQUbrGaf5zrXugPvWuMTyfPbDTg0+9rYDaE2EBBTmweoN i02MHmcG9L/XmLUbGZ6DTBxgof9FcOGsVBkOswKXCDA1s2DINa3X9A++iOfFePWG QY3Ya74sCypTkiiXNFQauCX+DmPhEgSDMPnfAV6622nKqXKha+1XKKbVRmSgPgOb tn2SHvP1KPWGWfZicsAkFMc3etnQ7jO4JRKph/LgJ3ANI0nivOYoyWn1J7bQ4mqf 224QTeInGn0YoXlenTgo40SVtWzAjGZd -----END CERTIFICATE-----Generated at Sat Apr 26 13:49:17 2025 by rpki-client