$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.mft File: 6o2GS70rsdeM2IkKFQThETZ_ehM.mft (raw, json) Hash identifier: 5d/h2DM8u03ePnXT4veyGAAiJ18+9Vk7FCis/aqwkgo= Subject key identifier: 4F:5B:BB:EB:B3:40:4B:F3:E2:F3:19:2E:67:1B:E5:F3:93:D3:AE:AC Authority key identifier: EA:8D:86:4B:BD:2B:B1:D7:8C:D8:89:0A:15:04:E1:11:36:7F:7A:13 Certificate issuer: /CN=A91F6E65/serialNumber=EA8D864BBD2BB1D78CD8890A1504E111367F7A13 Certificate serial: 122F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6o2GS70rsdeM2IkKFQThETZ_ehM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.mft Manifest number: 1228 Signing time: Thu 24 Apr 2025 17:09:12 +0000 Manifest this update: Thu 24 Apr 2025 17:09:12 +0000 Manifest next update: Thu 01 May 2025 17:09:12 +0000 Files and hashes: 1: 6o2GS70rsdeM2IkKFQThETZ_ehM.crl (hash: /b4nDyL2MeoT7gZqHo42vze2pjeOCzH7l+A00CzsTRE=) 2: F87DE4E2518011E98D519C48C4F9AE02.roa (hash: lNg/c5OqFouAW+fJH2dEOVDXDmJq4ytAeqadsiAMyGA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.crl rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6o2GS70rsdeM2IkKFQThETZ_ehM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:09:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4655 (0x122f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6E65, serialNumber=EA8D864BBD2BB1D78CD8890A1504E111367F7A13 Validity Not Before: Apr 24 17:09:12 2025 GMT Not After : May 1 17:09:12 2025 GMT Subject: CN=680a7038-5f1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c6:66:d2:a7:e0:bc:18:a9:88:a1:0d:3d:4c: 62:b7:87:57:f3:2c:1a:14:0a:68:74:0d:4e:b5:89: 2a:b8:0c:18:4a:b0:01:82:9c:c5:be:30:ab:12:f8: 60:53:dd:b6:51:af:34:93:bc:12:20:84:21:c0:e2: b3:8e:87:f7:26:2e:8c:91:15:80:c8:6b:fa:bf:5c: b0:91:1d:6a:49:d3:72:85:4b:99:ad:30:15:9c:8f: b2:ed:05:48:85:2b:00:67:ed:54:d7:33:a1:45:d0: 8d:99:c3:a1:36:bf:f1:91:c6:34:aa:93:f3:a1:38: 3f:9a:ba:8f:f5:6c:46:17:38:42:e7:b8:4a:1e:79: 3a:21:be:d8:09:96:25:21:71:31:fb:08:21:13:90: 55:56:98:98:53:f2:f5:8b:60:48:78:62:dd:9e:ad: c1:46:a3:24:3d:5e:28:6f:f2:e2:7a:1b:7a:b9:11: 44:45:78:b5:e2:7c:2e:9a:e3:8e:c1:7f:cc:33:b8: ef:4e:6e:ab:b6:91:a7:ca:84:59:01:e8:f1:85:98: 18:56:5d:a9:10:c8:19:5f:44:36:ff:db:9e:88:02: d7:d5:4b:d4:cf:47:47:ff:e2:86:6a:a5:24:9c:0e: bd:cd:91:2a:e7:e4:ba:ae:be:3b:78:fb:e7:0a:cd: 94:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:5B:BB:EB:B3:40:4B:F3:E2:F3:19:2E:67:1B:E5:F3:93:D3:AE:AC X509v3 Authority Key Identifier: keyid:EA:8D:86:4B:BD:2B:B1:D7:8C:D8:89:0A:15:04:E1:11:36:7F:7A:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6o2GS70rsdeM2IkKFQThETZ_ehM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:5a:c3:c0:d0:9c:79:fc:48:ce:39:93:fb:16:9a:62:44:0c: 67:34:0a:fa:1b:f4:95:33:2b:d3:cb:e2:84:7d:39:65:03:8b: df:de:3e:28:8c:aa:fc:a1:63:29:99:90:38:79:ab:60:90:0c: 48:35:c4:16:85:83:cb:9d:25:3a:07:ea:ef:47:81:04:94:a9: 4b:25:15:49:4a:59:3a:f5:c3:db:06:90:0e:90:0c:e7:92:80: 34:7b:00:b7:c8:95:ef:3d:43:fd:7e:56:23:91:22:ae:d5:1a: 24:72:8d:52:90:f6:a2:29:57:ad:0a:9a:fe:54:eb:a7:24:1c: 93:95:44:2a:62:4a:90:3c:06:48:ae:df:e7:74:fb:e4:c0:47: 5b:f8:dc:25:b5:9f:b5:70:6f:f9:6b:a2:28:0a:92:f8:9b:ad: 0a:23:15:eb:55:d4:3b:e2:bc:51:4c:10:2d:5e:38:1a:94:17: d2:94:3e:03:a4:ad:51:a0:93:f0:72:32:85:12:d2:6e:4e:3b: fc:12:4e:47:ae:7d:a5:1d:d2:9a:b7:e7:82:72:af:6f:3b:c0: 64:a0:5a:72:47:99:46:34:d5:9e:dd:c3:f1:02:a2:1a:ed:19: ae:48:c2:ed:3e:4d:29:e7:84:14:34:e5:2e:d2:f9:3b:85:91: cb:52:7b:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZFNjUxMTAvBgNVBAUTKEVBOEQ4NjRCQkQyQkIxRDc4Q0Q4ODkwQTE1MDRFMTEx MzY3RjdBMTMwHhcNMjUwNDI0MTcwOTEyWhcNMjUwNTAxMTcwOTEyWjAYMRYwFAYD VQQDEw02ODBhNzAzOC01ZjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzsZm0qfgvBipiKENPUxit4dX8ywaFApodA1OtYkquAwYSrABgpzFvjCrEvhg U922Ua80k7wSIIQhwOKzjof3Ji6MkRWAyGv6v1ywkR1qSdNyhUuZrTAVnI+y7QVI hSsAZ+1U1zOhRdCNmcOhNr/xkcY0qpPzoTg/mrqP9WxGFzhC57hKHnk6Ib7YCZYl IXEx+wghE5BVVpiYU/L1i2BIeGLdnq3BRqMkPV4ob/Lieht6uRFERXi14nwumuOO wX/MM7jvTm6rtpGnyoRZAejxhZgYVl2pEMgZX0Q2/9ueiALX1UvUz0dH/+KGaqUk nA69zZEq5+S6rr47ePvnCs2UtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE9bu+uz QEvz4vMZLmcb5fOT066sMB8GA1UdIwQYMBaAFOqNhku9K7HXjNiJChUE4RE2f3oT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkU2NS9GRUQ5M0E3Q0Q4 OEExMUU4QTNFQ0ZGNERDNEY5QUUwMi82bzJHUzcwcnNkZU0ySWtLRlFUaEVUWl9l aE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZvMkdTNzByc2RlTTJJa0tGUVRoRVRaX2VoTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkU2NS9GRUQ5M0E3Q0Q4OEExMUU4QTNFQ0ZGNERDNEY5QUUwMi82bzJHUzcwcnNk ZU0ySWtLRlFUaEVUWl9laE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFWsPA0Jx5/EjOOZP7FppiRAxnNAr6G/SVMyvTy+KEfTllA4vf3j4o jKr8oWMpmZA4eatgkAxINcQWhYPLnSU6B+rvR4EElKlLJRVJSlk69cPbBpAOkAzn koA0ewC3yJXvPUP9flYjkSKu1Rokco1SkPaiKVetCpr+VOunJByTlUQqYkqQPAZI rt/ndPvkwEdb+NwltZ+1cG/5a6IoCpL4m60KIxXrVdQ74rxRTBAtXjgalBfSlD4D pK1RoJPwcjKFEtJuTjv8Ek5Hrn2lHdKat+eCcq9vO8BkoFpyR5lGNNWe3cPxAqIa 7RmuSMLtPk0p54QUNOUu0vk7hZHLUnvX -----END CERTIFICATE-----Generated at Sat Apr 26 12:56:44 2025 by rpki-client