$ rpki-client -vvf rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.mft File: K6Guk7v1am9sllCE8EiBe7epjw8.mft (raw, json) Hash identifier: rjaAGb6BPD6GNvOzPNDu7SifNsVduY2BS2nRcsnuNQI= Subject key identifier: B9:23:45:D6:60:66:D9:21:15:BE:BC:BB:36:2B:99:DC:EB:B0:E2:A7 Authority key identifier: 2B:A1:AE:93:BB:F5:6A:6F:6C:96:50:84:F0:48:81:7B:B7:A9:8F:0F Certificate issuer: /CN=A91F65C7/serialNumber=2BA1AE93BBF56A6F6C965084F048817BB7A98F0F Certificate serial: E7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/K6Guk7v1am9sllCE8EiBe7epjw8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.mft Manifest number: E5 Signing time: Fri 25 Apr 2025 04:28:46 +0000 Manifest this update: Fri 25 Apr 2025 04:28:46 +0000 Manifest next update: Fri 02 May 2025 04:28:46 +0000 Files and hashes: 1: K6Guk7v1am9sllCE8EiBe7epjw8.crl (hash: uFQvJmrkRXjcGcd/uojZh8OMCAb3KCWOh2ZtzcqoUNA=) 2: 44673792C3E511EEA9660E85C4F9AE02.roa (hash: 9frZlnTUA25wzcLVRZfcMG1N4NRYNcJ6CAVrVhpGid0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.crl rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/K6Guk7v1am9sllCE8EiBe7epjw8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:28:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 231 (0xe7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F65C7, serialNumber=2BA1AE93BBF56A6F6C965084F048817BB7A98F0F Validity Not Before: Apr 25 04:28:46 2025 GMT Not After : May 2 04:28:46 2025 GMT Subject: CN=680b0f7e-092e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:de:93:e8:55:ca:bf:5b:05:d4:d1:ce:72:24: 83:99:4e:ea:92:61:c8:c0:72:9f:11:43:f8:09:ca: 0c:be:12:50:21:68:2f:7e:eb:1b:f3:c3:60:fb:c9: 73:74:ff:98:9d:9b:61:b6:e1:28:42:67:7f:9d:7a: 9f:e3:5b:35:27:e2:1d:52:92:36:2c:6b:d4:c5:1f: 1f:7f:89:79:ce:d7:25:06:73:bf:85:10:3f:ad:1e: 96:bc:2d:37:2f:03:18:7b:99:59:d7:db:82:dc:ad: c1:c6:ff:82:f4:06:c4:0a:b2:80:93:bf:a0:ea:39: a9:87:22:79:7d:e0:d3:9b:9f:3f:27:15:0b:c0:03: b9:56:ff:1b:f5:97:88:01:80:31:11:ef:e6:51:e9: 66:d3:3c:11:0c:ab:e3:2f:c7:d9:a1:f9:f9:a4:cd: 69:f7:3b:c8:03:bb:14:0c:40:be:aa:c4:ee:c0:a4: 88:a7:08:96:0d:6c:ff:22:b8:72:20:85:fa:7e:34: 2a:3c:d8:48:f5:26:3e:05:02:19:89:f8:47:3c:ec: e4:8c:94:7a:22:22:5f:72:2f:e7:e7:f9:4c:4b:0e: 09:e5:35:ff:a9:ef:4d:53:90:c7:63:75:80:e8:3f: c1:70:a3:9a:89:47:d7:9d:61:dc:0c:95:0d:3e:9f: da:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:23:45:D6:60:66:D9:21:15:BE:BC:BB:36:2B:99:DC:EB:B0:E2:A7 X509v3 Authority Key Identifier: keyid:2B:A1:AE:93:BB:F5:6A:6F:6C:96:50:84:F0:48:81:7B:B7:A9:8F:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/K6Guk7v1am9sllCE8EiBe7epjw8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:32:ce:b5:02:3a:6e:86:54:fb:e7:49:c5:60:24:50:d8:7e: 9b:13:14:26:c1:be:47:b8:2c:36:d1:4d:b4:b2:43:d9:1e:3e: ff:f3:9e:bd:da:ed:b7:72:70:3b:2f:9e:f8:40:50:2a:05:52: e2:9c:62:eb:3f:fd:67:ab:f2:02:38:cb:ec:eb:40:aa:f2:4e: 84:6d:81:7c:6e:7c:04:26:2e:00:78:07:ed:82:71:f2:b2:bb: 5a:5f:02:2e:04:54:f6:d6:a9:9a:30:2b:7e:ad:21:2d:34:b0: cb:54:d3:fe:a1:de:f5:ef:42:d3:aa:38:92:95:a1:bb:20:bf: bc:aa:34:a8:37:fa:5c:2c:dd:98:53:ae:68:66:65:b8:7d:fa: 13:f6:4e:91:39:91:a9:20:ee:29:74:9b:df:e9:b8:52:8e:e2: b4:61:f8:63:a4:03:69:d2:77:a9:92:74:59:70:0e:26:78:5a: 02:c2:c2:17:e1:1d:af:62:04:ff:ce:fa:71:9f:2d:cb:e8:f7: 59:9c:29:61:55:34:2e:52:d2:80:38:08:29:da:7d:3a:f9:9a: 69:ea:6d:5a:aa:0c:6a:85:77:ea:8e:d8:2e:cf:c3:bb:09:96: e9:e5:27:ce:9d:6f:ec:36:44:cf:3e:d9:1a:44:0e:d7:10:6b: 61:3b:d5:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY1QzcxMTAvBgNVBAUTKDJCQTFBRTkzQkJGNTZBNkY2Qzk2NTA4NEYwNDg4MTdC QjdBOThGMEYwHhcNMjUwNDI1MDQyODQ2WhcNMjUwNTAyMDQyODQ2WjAYMRYwFAYD VQQDEw02ODBiMGY3ZS0wOTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy96T6FXKv1sF1NHOciSDmU7qkmHIwHKfEUP4CcoMvhJQIWgvfusb88Ng+8lz dP+YnZthtuEoQmd/nXqf41s1J+IdUpI2LGvUxR8ff4l5ztclBnO/hRA/rR6WvC03 LwMYe5lZ19uC3K3Bxv+C9AbECrKAk7+g6jmphyJ5feDTm58/JxULwAO5Vv8b9ZeI AYAxEe/mUelm0zwRDKvjL8fZofn5pM1p9zvIA7sUDEC+qsTuwKSIpwiWDWz/Irhy IIX6fjQqPNhI9SY+BQIZifhHPOzkjJR6IiJfci/n5/lMSw4J5TX/qe9NU5DHY3WA 6D/BcKOaiUfXnWHcDJUNPp/a5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLkjRdZg ZtkhFb68uzYrmdzrsOKnMB8GA1UdIwQYMBaAFCuhrpO79WpvbJZQhPBIgXu3qY8P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjVDNy9FM0JFQTQ3QUMz RTQxMUVFOTYxM0Y1ODNDNEY5QUUwMi9LNkd1azd2MWFtOXNsbENFOEVpQmU3ZXBq dzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0s2R3VrN3YxYW05c2xsQ0U4RWlCZTdlcGp3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjVDNy9FM0JFQTQ3QUMzRTQxMUVFOTYxM0Y1ODNDNEY5QUUwMi9LNkd1azd2MWFt OXNsbENFOEVpQmU3ZXBqdzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSMs61AjpuhlT750nFYCRQ2H6bExQmwb5HuCw20U20skPZHj7/8569 2u23cnA7L574QFAqBVLinGLrP/1nq/ICOMvs60Cq8k6EbYF8bnwEJi4AeAftgnHy srtaXwIuBFT21qmaMCt+rSEtNLDLVNP+od7170LTqjiSlaG7IL+8qjSoN/pcLN2Y U65oZmW4ffoT9k6ROZGpIO4pdJvf6bhSjuK0YfhjpANp0nepknRZcA4meFoCwsIX 4R2vYgT/zvpxny3L6PdZnClhVTQuUtKAOAgp2n06+Zpp6m1aqgxqhXfqjtguz8O7 CZbp5SfOnW/sNkTPPtkaRA7XEGthO9Vn -----END CERTIFICATE-----Generated at Sat Apr 26 16:39:57 2025 by rpki-client