$ rpki-client -vvf rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft File: 6O2nHIlk0p8GwkorbRt3FTyo84k.mft (raw, json) Hash identifier: 9j02A+0Ls2L4Gx3Hh2yoiNoy4AeB9fBAellylEVTyrQ= Subject key identifier: 24:61:08:74:EA:3D:91:A1:31:75:62:34:85:C9:56:5D:08:2F:AE:88 Authority key identifier: E8:ED:A7:1C:89:64:D2:9F:06:C2:4A:2B:6D:1B:77:15:3C:A8:F3:89 Certificate issuer: /CN=A91F724B/serialNumber=E8EDA71C8964D29F06C24A2B6D1B77153CA8F389 Certificate serial: 206F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft Manifest number: 204A Signing time: Thu 24 Apr 2025 15:59:51 +0000 Manifest this update: Thu 24 Apr 2025 15:59:50 +0000 Manifest next update: Thu 01 May 2025 15:59:50 +0000 Files and hashes: 1: 6O2nHIlk0p8GwkorbRt3FTyo84k.crl (hash: fkaiBRw1EpAFcEv4bVc3Gk0d2IpEGo6KUycVbeVZG7E=) 2: D6702FB2C51411E7A0AC1A77C4F9AE02.roa (hash: dRYh9WAvcIumZjCZ5S62u32XoLkiqwXXygrg2DE1FBI=) 3: 36AB4096C51611E7AECA8B79C4F9AE02.roa (hash: 0oF1Qfg6/q63oXyqNiJvhv+IBvlt379syGArKmuw6+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.crl rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:59:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8303 (0x206f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F724B, serialNumber=E8EDA71C8964D29F06C24A2B6D1B77153CA8F389 Validity Not Before: Apr 24 15:59:50 2025 GMT Not After : May 1 15:59:50 2025 GMT Subject: CN=680a5ff6-46fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:df:9b:d4:0c:c8:5e:78:0b:7e:47:1c:28:8e: 54:35:7e:5a:10:7c:5b:15:b5:88:64:2c:39:92:89: a3:42:9a:d9:c8:7f:70:76:2c:c4:ea:24:25:81:ab: d9:49:a6:a9:c7:e7:cb:c5:01:f3:8f:a7:7f:c6:1f: d9:c2:24:dc:57:e9:23:d4:c7:c1:1f:19:b9:c9:51: 8b:ea:35:9f:eb:e8:4e:26:dc:cd:5d:1d:53:70:05: 82:0f:25:af:0a:14:0a:8c:21:a8:86:29:a5:8d:4a: 08:98:3d:ec:61:4b:f7:c7:cb:01:ed:7c:9e:4c:88: 41:53:79:5a:0b:be:39:25:4e:76:ee:c7:ae:12:41: 0d:ad:33:df:f9:ca:48:b1:17:da:64:b4:22:b7:b2: 95:28:7b:25:36:70:53:6d:50:07:50:d1:c1:84:c3: d7:77:65:d7:85:39:bf:77:c2:f9:0b:87:e1:1c:fa: 44:62:4e:ea:8e:16:1d:7c:16:06:18:c2:61:e5:ca: 91:ed:3d:5a:2f:98:3e:b4:8a:c9:3c:2f:6c:d1:5a: f6:f9:df:4e:5f:99:84:3d:29:1a:45:27:32:c5:27: ed:65:35:2f:91:1d:9f:91:e1:f2:c0:1e:04:f8:2a: 99:e8:80:95:f7:d4:f9:d5:9d:44:0e:81:c8:5f:30: 7d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:61:08:74:EA:3D:91:A1:31:75:62:34:85:C9:56:5D:08:2F:AE:88 X509v3 Authority Key Identifier: keyid:E8:ED:A7:1C:89:64:D2:9F:06:C2:4A:2B:6D:1B:77:15:3C:A8:F3:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:86:f5:b3:e7:52:9e:9b:d6:12:5c:c7:55:5c:58:4c:c9:45: 86:75:9f:7f:ac:c7:2c:e6:c2:20:31:46:fd:bc:ca:fc:c7:05: 81:b4:9b:1d:06:9d:2f:5d:9a:a0:bd:6b:36:56:13:84:39:09: 5a:23:b2:58:1a:1e:63:e6:9b:3c:d2:10:bf:0f:38:ca:3c:03: a6:90:71:21:7c:bd:e0:92:2f:77:9d:1c:b0:a8:8e:bf:a5:56: 6a:42:34:ff:30:23:0e:19:30:ea:b5:3d:bd:9e:8a:e0:e2:84: 84:23:ea:46:79:ca:27:0a:9b:30:0d:29:d5:9d:c4:82:f5:ce: 39:47:c8:9d:b0:b8:36:ab:51:68:f1:09:79:0e:26:92:69:0c: f1:7c:97:34:ab:89:9e:59:26:e4:13:0e:de:85:db:c7:68:56: 76:ea:c0:72:ba:b7:d9:ba:fa:19:ce:46:c9:75:13:c7:37:10: f3:9d:c3:07:7d:7d:29:6f:31:75:34:d7:ae:c6:1b:8f:ee:53: 78:07:5b:34:09:d5:31:87:a0:4c:cc:66:7f:ab:12:67:35:c5: d1:41:61:b6:a6:73:78:37:f9:f2:ca:9e:9c:17:d3:7b:58:dc: 8b:a5:6f:84:e6:53:a1:89:20:bb:6a:c1:94:ab:fc:43:d5:28: ae:a0:c7:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIG8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjcyNEIxMTAvBgNVBAUTKEU4RURBNzFDODk2NEQyOUYwNkMyNEEyQjZEMUI3NzE1 M0NBOEYzODkwHhcNMjUwNDI0MTU1OTUwWhcNMjUwNTAxMTU1OTUwWjAYMRYwFAYD VQQDEw02ODBhNWZmNi00NmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyN+b1AzIXngLfkccKI5UNX5aEHxbFbWIZCw5komjQprZyH9wdizE6iQlgavZ Saapx+fLxQHzj6d/xh/ZwiTcV+kj1MfBHxm5yVGL6jWf6+hOJtzNXR1TcAWCDyWv ChQKjCGohimljUoImD3sYUv3x8sB7XyeTIhBU3laC745JU527seuEkENrTPf+cpI sRfaZLQit7KVKHslNnBTbVAHUNHBhMPXd2XXhTm/d8L5C4fhHPpEYk7qjhYdfBYG GMJh5cqR7T1aL5g+tIrJPC9s0Vr2+d9OX5mEPSkaRScyxSftZTUvkR2fkeHywB4E +CqZ6ICV99T51Z1EDoHIXzB9tQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCRhCHTq PZGhMXViNIXJVl0IL66IMB8GA1UdIwQYMBaAFOjtpxyJZNKfBsJKK20bdxU8qPOJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzI0Qi8xQkM3MUE2MjE2 ODkxMUU2OEVFRkQ5N0JDNEY5QUUwMi82TzJuSElsazBwOEd3a29yYlJ0M0ZUeW84 NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZPMm5ISWxrMHA4R3drb3JiUnQzRlR5bzg0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzI0Qi8xQkM3MUE2MjE2ODkxMUU2OEVFRkQ5N0JDNEY5QUUwMi82TzJuSElsazBw OEd3a29yYlJ0M0ZUeW84NGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChhvWz51Kem9YSXMdVXFhMyUWGdZ9/rMcs5sIgMUb9vMr8xwWBtJsd Bp0vXZqgvWs2VhOEOQlaI7JYGh5j5ps80hC/DzjKPAOmkHEhfL3gki93nRywqI6/ pVZqQjT/MCMOGTDqtT29norg4oSEI+pGeconCpswDSnVncSC9c45R8idsLg2q1Fo 8Ql5DiaSaQzxfJc0q4meWSbkEw7ehdvHaFZ26sByurfZuvoZzkbJdRPHNxDzncMH fX0pbzF1NNeuxhuP7lN4B1s0CdUxh6BMzGZ/qxJnNcXRQWG2pnN4N/nyyp6cF9N7 WNyLpW+E5lOhiSC7asGUq/xD1SiuoMdh -----END CERTIFICATE-----Generated at Sat Apr 26 04:30:50 2025 by rpki-client