$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/s6HqYHo_df54qoQuuJCSWZEQ_cY.mft File: s6HqYHo_df54qoQuuJCSWZEQ_cY.mft (raw, json) Hash identifier: oILUwWYqgDVfXJOVaRooVl8dTx0AUhdlyRZQ0dqxGco= Subject key identifier: 63:29:1C:B2:26:88:8E:7F:A4:7A:B0:90:B5:F0:04:D2:61:98:E2:AB Authority key identifier: B3:A1:EA:60:7A:3F:75:FE:78:AA:84:2E:B8:90:92:59:91:10:FD:C6 Certificate issuer: /CN=A91F5BCC/serialNumber=B3A1EA607A3F75FE78AA842EB89092599110FDC6 Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s6HqYHo_df54qoQuuJCSWZEQ_cY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/s6HqYHo_df54qoQuuJCSWZEQ_cY.mft Manifest number: 3B Signing time: Fri 25 Apr 2025 06:32:23 +0000 Manifest this update: Fri 25 Apr 2025 06:32:22 +0000 Manifest next update: Fri 02 May 2025 06:32:22 +0000 Files and hashes: 1: s6HqYHo_df54qoQuuJCSWZEQ_cY.crl (hash: t5UnGRtQ/Sd4SCnsjsMZuac3IPEJlmCChW+26+zXzgE=) 2: 5FEB0DA8E90611EFA74B611DC4F9AE02.roa (hash: hwuul9zOvXSQLDdgabC6PgRyfpY9SzpmngkkmJxvu+k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/s6HqYHo_df54qoQuuJCSWZEQ_cY.crl rsync://rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/s6HqYHo_df54qoQuuJCSWZEQ_cY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s6HqYHo_df54qoQuuJCSWZEQ_cY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:32:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5BCC, serialNumber=B3A1EA607A3F75FE78AA842EB89092599110FDC6 Validity Not Before: Apr 25 06:32:22 2025 GMT Not After : May 2 06:32:22 2025 GMT Subject: CN=680b2c76-4eca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:04:93:6d:90:50:e1:22:b9:af:4d:07:39:db: 8d:8e:f3:7a:a3:a9:45:8a:ee:67:99:77:ae:e8:56: ac:8e:2c:77:05:42:41:f0:22:5a:7c:6f:e1:ff:f9: e5:fc:2f:8a:2c:e0:f5:8d:ad:fd:22:6d:5c:02:3c: c2:42:12:f6:f2:79:b8:e8:7c:a9:78:7a:b5:d0:28: b4:8d:01:d1:e5:26:25:07:82:52:d3:db:37:e1:52: 17:f7:0e:7e:60:7f:8a:57:44:2d:a5:e1:33:3e:25: cf:dc:16:29:b2:88:d7:a6:d3:8b:81:99:6a:9d:22: 08:5e:a4:af:77:cf:df:7c:51:e0:3d:6f:42:84:0e: 22:6e:02:8d:72:80:50:04:59:46:4e:d3:43:bb:bf: c3:0c:38:95:12:d9:66:53:49:9a:4d:58:aa:c0:db: c4:d3:bd:bb:34:59:82:6d:b6:b7:d8:0b:ab:b3:fa: 7e:15:ab:57:88:cc:b4:e7:09:33:fa:8a:d1:12:0d: 3e:22:06:2c:af:0a:0c:ee:51:89:68:c0:7f:6d:51: 1f:82:05:29:1e:bb:cb:a2:02:51:4f:24:bd:96:c4: 78:c7:dc:5c:bf:08:52:72:79:cd:f5:dc:e6:56:26: 1e:3d:df:f2:39:34:b1:f4:eb:d0:3d:fd:ad:13:85: d5:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:29:1C:B2:26:88:8E:7F:A4:7A:B0:90:B5:F0:04:D2:61:98:E2:AB X509v3 Authority Key Identifier: keyid:B3:A1:EA:60:7A:3F:75:FE:78:AA:84:2E:B8:90:92:59:91:10:FD:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/s6HqYHo_df54qoQuuJCSWZEQ_cY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s6HqYHo_df54qoQuuJCSWZEQ_cY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/s6HqYHo_df54qoQuuJCSWZEQ_cY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:16:f0:b8:99:87:54:25:64:44:78:d6:0d:5c:65:15:a9:db: 83:58:70:5d:79:ce:ad:a7:0b:25:6b:20:42:15:85:0c:ab:b9: 03:95:2b:e1:a0:af:1c:8c:59:74:33:52:ec:89:4e:dd:3a:65: f7:46:70:eb:4a:f5:b9:fe:22:8e:f6:2f:26:3c:d8:1f:e9:60: b1:e6:57:95:01:4b:d6:e9:7f:03:eb:37:6c:f5:e8:d0:33:31: 8c:fb:ca:bd:05:b8:e5:3b:f5:4d:0b:d1:e3:0c:d4:09:7b:40: 70:d4:87:24:ab:94:67:71:be:0d:e7:5e:07:54:d4:ae:ec:5e: a9:73:8d:21:71:d3:f1:ed:ba:6d:70:f9:7b:3c:ea:b2:21:cc: 2c:38:87:cb:f1:71:8d:82:fe:3c:ca:9d:f5:87:5f:41:7b:56: 90:e8:b1:b8:a3:2d:31:3c:f1:d8:2b:ec:f2:87:31:c9:68:fd: ce:2c:0c:be:87:cf:e6:64:5b:b2:1d:a9:84:01:be:39:af:80: ef:ca:74:c3:d5:61:84:69:b5:c0:1e:e2:0d:7a:0b:c7:64:bf: e8:b1:c2:a6:91:95:ae:8c:15:58:71:dc:46:fd:8d:e9:a3:23: 08:42:d5:af:be:86:90:46:62:08:22:62:18:05:70:39:90:6a: a7:b3:ae:96 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NUJDQzExMC8GA1UEBRMoQjNBMUVBNjA3QTNGNzVGRTc4QUE4NDJFQjg5MDkyNTk5 MTEwRkRDNjAeFw0yNTA0MjUwNjMyMjJaFw0yNTA1MDIwNjMyMjJaMBgxFjAUBgNV BAMTDTY4MGIyYzc2LTRlY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBBJNtkFDhIrmvTQc5242O83qjqUWK7meZd67oVqyOLHcFQkHwIlp8b+H/+eX8 L4os4PWNrf0ibVwCPMJCEvbyebjofKl4erXQKLSNAdHlJiUHglLT2zfhUhf3Dn5g f4pXRC2l4TM+Jc/cFimyiNem04uBmWqdIghepK93z998UeA9b0KEDiJuAo1ygFAE WUZO00O7v8MMOJUS2WZTSZpNWKrA28TTvbs0WYJttrfYC6uz+n4Vq1eIzLTnCTP6 itESDT4iBiyvCgzuUYlowH9tUR+CBSkeu8uiAlFPJL2WxHjH3Fy/CFJyec313OZW Jh493/I5NLH069A9/a0ThdVPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYykcsiaI jn+kerCQtfAE0mGY4qswHwYDVR0jBBgwFoAUs6HqYHo/df54qoQuuJCSWZEQ/cYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1QkNDL0IxMTgxQjEwQ0U3 ODExRUY4MEVGNEQ0NEM0RjlBRTAyL3M2SHFZSG9fZGY1NHFvUXV1SkNTV1pFUV9j WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvczZIcVlIb19kZjU0cW9RdXVKQ1NXWkVRX2NZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1 QkNDL0IxMTgxQjEwQ0U3ODExRUY4MEVGNEQ0NEM0RjlBRTAyL3M2SHFZSG9fZGY1 NHFvUXV1SkNTV1pFUV9jWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFUW8LiZh1QlZER41g1cZRWp24NYcF15zq2nCyVrIEIVhQyruQOVK+Gg rxyMWXQzUuyJTt06ZfdGcOtK9bn+Io72LyY82B/pYLHmV5UBS9bpfwPrN2z16NAz MYz7yr0FuOU79U0L0eMM1Al7QHDUhySrlGdxvg3nXgdU1K7sXqlzjSFx0/Htum1w +Xs86rIhzCw4h8vxcY2C/jzKnfWHX0F7VpDosbijLTE88dgr7PKHMclo/c4sDL6H z+ZkW7IdqYQBvjmvgO/KdMPVYYRptcAe4g16C8dkv+ixwqaRla6MFVhx3Eb9jemj IwhC1a++hpBGYggiYhgFcDmQaqezrpY= -----END CERTIFICATE-----Generated at Sat Apr 26 16:50:51 2025 by rpki-client