$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.mft File: 6wFhqozbHyTNf-E9XlzlIXulj4I.mft (raw, json) Hash identifier: EXBhYDG+A6PlCG5eZaA008nE6N8h13y6q5SuS8E0rCk= Subject key identifier: 19:3E:DE:DA:C8:9A:96:2C:C3:BB:BD:1F:25:FF:65:74:A0:2E:42:A1 Authority key identifier: EB:01:61:AA:8C:DB:1F:24:CD:7F:E1:3D:5E:5C:E5:21:7B:A5:8F:82 Certificate issuer: /CN=A91FC77C/serialNumber=EB0161AA8CDB1F24CD7FE13D5E5CE5217BA58F82 Certificate serial: 1704 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wFhqozbHyTNf-E9XlzlIXulj4I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.mft Manifest number: 16FA Signing time: Thu 24 Apr 2025 16:40:01 +0000 Manifest this update: Thu 24 Apr 2025 16:40:00 +0000 Manifest next update: Thu 01 May 2025 16:40:00 +0000 Files and hashes: 1: 6wFhqozbHyTNf-E9XlzlIXulj4I.crl (hash: E/OaHr/ycQLHn0AmZkkEkYJYyr+yjouug5BUv/BoB2I=) 2: AAAAE566E8AA11E78A615315C4F9AE02.roa (hash: IZm4bUn/JmIHtecsy8bw34L4o+Q1Xnkykngp8peDfE0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.crl rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wFhqozbHyTNf-E9XlzlIXulj4I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:40:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5892 (0x1704) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC77C, serialNumber=EB0161AA8CDB1F24CD7FE13D5E5CE5217BA58F82 Validity Not Before: Apr 24 16:40:00 2025 GMT Not After : May 1 16:40:00 2025 GMT Subject: CN=680a6960-4711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:32:9e:f9:2a:c6:66:68:4a:73:ba:dd:49:14: 45:84:80:b0:d2:3f:63:d6:8e:45:06:32:6f:22:0d: a0:05:50:86:81:4b:93:09:a6:6d:74:38:6b:45:4c: a6:0a:d8:8d:4a:61:a9:b0:10:5c:c5:06:32:16:41: 1d:24:f2:3d:2e:67:7d:62:8e:22:18:fd:da:df:9e: a5:8d:5e:3a:71:57:7c:74:10:b3:c7:60:09:f9:25: 08:5b:54:4c:d0:b9:49:83:d4:c9:3c:07:83:c1:95: 65:ac:69:ce:20:00:f8:84:2d:39:d4:b1:57:eb:a2: 32:61:07:7c:56:f9:6a:7a:a8:8c:87:bc:00:9a:49: 2b:04:48:bd:33:1e:99:cd:93:18:98:fd:5f:51:29: 37:51:34:f7:8c:7a:b9:d6:f8:c4:04:39:d1:26:fb: cd:c0:f9:54:83:97:e9:6f:09:77:4d:d8:9a:89:11: 9a:f6:d0:61:b1:e7:66:92:5c:5c:80:81:71:39:d6: dd:e5:e1:0b:45:8e:ef:95:48:73:c8:7d:44:37:92: 68:82:fe:a5:06:b7:e3:62:fc:01:f3:33:a7:15:12: 4a:51:55:23:7e:f4:90:dc:05:c4:ff:75:d6:cd:8c: 5b:f6:e3:96:14:26:15:a9:03:ca:05:78:df:26:7a: 9a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:3E:DE:DA:C8:9A:96:2C:C3:BB:BD:1F:25:FF:65:74:A0:2E:42:A1 X509v3 Authority Key Identifier: keyid:EB:01:61:AA:8C:DB:1F:24:CD:7F:E1:3D:5E:5C:E5:21:7B:A5:8F:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wFhqozbHyTNf-E9XlzlIXulj4I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:d4:d1:4d:d5:80:12:09:af:68:ff:4f:89:81:f1:18:98:1c: a4:d9:03:ed:04:01:02:7b:6b:6f:9f:b2:07:2e:f5:13:22:6f: 8e:f6:34:ed:73:60:50:3b:c5:ad:37:0d:fe:69:2f:62:64:77: 1e:d7:3e:1b:0f:b8:59:9d:5d:8b:f6:f4:72:2a:f1:51:5f:b0: 2b:2d:8a:77:12:5f:61:cc:af:cd:ea:74:9b:9a:77:55:60:63: 60:b4:96:21:4e:d1:9c:b8:c6:ae:84:30:ff:c5:c2:0c:69:2b: 77:f1:2e:f4:e7:92:80:e0:d9:c5:94:d8:20:44:af:bb:84:35: bf:57:f7:04:1b:b1:34:46:ef:29:92:2a:88:01:78:29:c7:53: 02:cd:36:ab:42:a0:5d:40:46:c1:1a:86:1a:21:85:9d:bd:39: d8:de:08:c7:1d:d3:23:23:c6:7d:bc:a1:87:49:25:88:b7:5b: 04:8f:5e:85:a4:ef:6a:14:de:85:db:d6:4c:30:5b:a1:4a:b3: a2:60:09:a1:99:e1:5f:df:e0:34:09:47:4b:8e:2e:3e:8b:77: f6:49:15:37:06:7c:14:cf:3c:43:1e:ab:b9:70:47:dd:bc:fc: c6:30:46:d7:5f:5f:65:b7:81:fb:d3:50:9e:50:be:8c:8e:53: 07:63:aa:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFwQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM3N0MxMTAvBgNVBAUTKEVCMDE2MUFBOENEQjFGMjRDRDdGRTEzRDVFNUNFNTIx N0JBNThGODIwHhcNMjUwNDI0MTY0MDAwWhcNMjUwNTAxMTY0MDAwWjAYMRYwFAYD VQQDEw02ODBhNjk2MC00NzExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmTKe+SrGZmhKc7rdSRRFhICw0j9j1o5FBjJvIg2gBVCGgUuTCaZtdDhrRUym CtiNSmGpsBBcxQYyFkEdJPI9Lmd9Yo4iGP3a356ljV46cVd8dBCzx2AJ+SUIW1RM 0LlJg9TJPAeDwZVlrGnOIAD4hC051LFX66IyYQd8VvlqeqiMh7wAmkkrBEi9Mx6Z zZMYmP1fUSk3UTT3jHq51vjEBDnRJvvNwPlUg5fpbwl3TdiaiRGa9tBhsedmklxc gIFxOdbd5eELRY7vlUhzyH1EN5Jogv6lBrfjYvwB8zOnFRJKUVUjfvSQ3AXE/3XW zYxb9uOWFCYVqQPKBXjfJnqa9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBk+3trI mpYsw7u9HyX/ZXSgLkKhMB8GA1UdIwQYMBaAFOsBYaqM2x8kzX/hPV5c5SF7pY+C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzc3Qy8xQzMyRDRCMEU4 QUExMUU3QTIzMERGMTRDNEY5QUUwMi82d0ZocW96Ykh5VE5mLUU5WGx6bElYdWxq NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ3Rmhxb3piSHlUTmYtRTlYbHpsSVh1bGo0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Qzc3Qy8xQzMyRDRCMEU4QUExMUU3QTIzMERGMTRDNEY5QUUwMi82d0ZocW96Ykh5 VE5mLUU5WGx6bElYdWxqNEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBl1NFN1YASCa9o/0+JgfEYmByk2QPtBAECe2tvn7IHLvUTIm+O9jTt c2BQO8WtNw3+aS9iZHce1z4bD7hZnV2L9vRyKvFRX7ArLYp3El9hzK/N6nSbmndV YGNgtJYhTtGcuMauhDD/xcIMaSt38S7055KA4NnFlNggRK+7hDW/V/cEG7E0Ru8p kiqIAXgpx1MCzTarQqBdQEbBGoYaIYWdvTnY3gjHHdMjI8Z9vKGHSSWIt1sEj16F pO9qFN6F29ZMMFuhSrOiYAmhmeFf3+A0CUdLji4+i3f2SRU3BnwUzzxDHqu5cEfd vPzGMEbXX19lt4H701CeUL6MjlMHY6qQ -----END CERTIFICATE-----Generated at Sat Apr 26 12:23:00 2025 by rpki-client