$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft File: M6AXSkpLAJwBFRWWkTbzAQidtbU.mft (raw, json) Hash identifier: NhilFp7kSI3ZwMTz0HoB4S7LFTqCS+jfKmjM3vf0q9I= Subject key identifier: 45:EA:4C:34:4F:E0:6D:C1:B1:72:1A:25:94:70:4F:06:86:DC:18:05 Authority key identifier: 33:A0:17:4A:4A:4B:00:9C:01:15:15:96:91:36:F3:01:08:9D:B5:B5 Certificate issuer: /CN=A91FF1CC/serialNumber=33A0174A4A4B009C011515969136F301089DB5B5 Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6AXSkpLAJwBFRWWkTbzAQidtbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft Manifest number: 23 Signing time: Fri 25 Apr 2025 06:48:49 +0000 Manifest this update: Fri 25 Apr 2025 06:48:48 +0000 Manifest next update: Fri 02 May 2025 06:48:48 +0000 Files and hashes: 1: M6AXSkpLAJwBFRWWkTbzAQidtbU.crl (hash: sANgwVKNHilSAh0j/JCBiLmIXRteDCck/vugQbk4hc8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.crl rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6AXSkpLAJwBFRWWkTbzAQidtbU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:48:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF1CC, serialNumber=33A0174A4A4B009C011515969136F301089DB5B5 Validity Not Before: Apr 25 06:48:48 2025 GMT Not After : May 2 06:48:48 2025 GMT Subject: CN=680b3051-5928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2b:9b:a6:2a:5c:42:3f:ad:e7:b8:8d:31:ce: d4:cb:3c:fd:86:2f:5d:61:c7:ce:9f:8c:d4:16:30: 70:da:82:68:db:ef:a7:60:dc:67:d6:17:fa:7b:de: b6:0f:39:08:3e:e0:8e:0c:29:17:09:cd:9f:20:8c: 37:10:c3:e2:cf:ba:3a:20:a2:a0:f7:8d:fd:82:e8: b4:74:0e:90:fb:df:b4:b4:fd:a6:15:a7:9d:dd:97: f5:3e:03:29:bc:90:17:3c:d4:49:6a:86:9b:4d:2e: 82:45:20:29:80:cc:9d:60:cf:30:c2:47:1a:30:65: 82:d4:90:cd:47:2c:34:cf:47:79:f2:26:c2:fd:cd: b7:32:67:b7:ca:fa:aa:0f:e0:03:ce:01:8d:10:96: c5:e8:a4:d8:94:b8:6e:81:be:f5:63:36:6e:1f:af: 2e:44:21:dd:91:a8:b5:4e:25:2f:e0:95:8f:0b:06: a8:78:97:d2:d4:a9:77:9c:4c:99:b3:19:4d:d6:2a: f7:26:62:ec:df:91:34:d5:30:f6:95:6d:3d:ce:3f: 68:b1:4a:de:f4:f8:ce:c5:06:73:68:00:a9:81:be: e8:3c:4f:fc:da:d6:ff:1f:d1:74:a6:7c:dc:03:96: 7f:6b:c7:a7:ff:13:a1:ca:2c:a3:bc:70:1a:22:e4: 10:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:EA:4C:34:4F:E0:6D:C1:B1:72:1A:25:94:70:4F:06:86:DC:18:05 X509v3 Authority Key Identifier: keyid:33:A0:17:4A:4A:4B:00:9C:01:15:15:96:91:36:F3:01:08:9D:B5:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6AXSkpLAJwBFRWWkTbzAQidtbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:77:6b:04:c7:ad:58:d6:65:99:56:c5:57:18:2c:38:c8:1a: 92:50:92:41:f7:f9:bf:1b:57:93:01:61:8e:21:7e:b7:68:b0: 65:0b:e4:5e:f5:60:8e:f9:a1:0b:cc:b8:a3:77:d3:f7:ca:0e: a9:01:85:d3:d6:7d:50:f1:74:94:6c:e4:26:91:ea:bd:09:f3: b1:25:b2:e9:c9:9e:62:5a:35:0c:96:83:db:84:bf:23:f6:cd: e5:52:6f:1d:52:52:8c:7c:f2:fe:c3:aa:3e:01:e2:c9:35:0a: 1d:ba:55:48:bb:70:39:82:e8:81:ef:ca:89:ec:8a:f6:aa:be: bc:a4:dc:b2:18:4c:86:61:d0:49:5e:00:98:71:27:e9:84:0a: 7a:c0:d4:e3:3c:ec:fe:15:cf:32:77:9d:e4:b7:b8:27:70:f5: a4:ed:1c:99:50:e3:e1:a1:5c:e7:ba:21:48:7d:ed:f5:c6:2c: 10:fe:4e:67:7e:66:97:c3:5b:17:73:e3:c1:7e:e1:62:da:6e: 82:64:c1:a5:ee:95:37:74:74:cd:2d:1b:11:3d:21:2f:ad:e0: 7e:1e:03:09:b0:c7:22:7d:20:66:8a:2e:5a:d5:ec:90:9f:ae: 86:1f:71:ab:f0:36:d4:99:8f:bc:78:6c:0b:d9:f6:4f:eb:52: 78:26:ce:25 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RjFDQzExMC8GA1UEBRMoMzNBMDE3NEE0QTRCMDA5QzAxMTUxNTk2OTEzNkYzMDEw ODlEQjVCNTAeFw0yNTA0MjUwNjQ4NDhaFw0yNTA1MDIwNjQ4NDhaMBgxFjAUBgNV BAMTDTY4MGIzMDUxLTU5MjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4K5umKlxCP63nuI0xztTLPP2GL11hx86fjNQWMHDagmjb76dg3GfWF/p73rYP OQg+4I4MKRcJzZ8gjDcQw+LPujogoqD3jf2C6LR0DpD737S0/aYVp53dl/U+Aym8 kBc81ElqhptNLoJFICmAzJ1gzzDCRxowZYLUkM1HLDTPR3nyJsL9zbcyZ7fK+qoP 4APOAY0QlsXopNiUuG6BvvVjNm4fry5EId2RqLVOJS/glY8LBqh4l9LUqXecTJmz GU3WKvcmYuzfkTTVMPaVbT3OP2ixSt70+M7FBnNoAKmBvug8T/za1v8f0XSmfNwD ln9rx6f/E6HKLKO8cBoi5BABAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURepMNE/g bcGxchollHBPBobcGAUwHwYDVR0jBBgwFoAUM6AXSkpLAJwBFRWWkTbzAQidtbUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZGMUNDLzQzRUE2QjE4RUY2 MzExRUZCRjY0QUI2QUM0RjlBRTAyL002QVhTa3BMQUp3QkZSV1drVGJ6QVFpZHRi VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTTZBWFNrcExBSndCRlJXV2tUYnpBUWlkdGJVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZG MUNDLzQzRUE2QjE4RUY2MzExRUZCRjY0QUI2QUM0RjlBRTAyL002QVhTa3BMQUp3 QkZSV1drVGJ6QVFpZHRiVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAER3awTHrVjWZZlWxVcYLDjIGpJQkkH3+b8bV5MBYY4hfrdosGUL5F71 YI75oQvMuKN30/fKDqkBhdPWfVDxdJRs5CaR6r0J87ElsunJnmJaNQyWg9uEvyP2 zeVSbx1SUox88v7Dqj4B4sk1Ch26VUi7cDmC6IHvyonsivaqvryk3LIYTIZh0Ele AJhxJ+mECnrA1OM87P4VzzJ3neS3uCdw9aTtHJlQ4+GhXOe6IUh97fXGLBD+Tmd+ ZpfDWxdz48F+4WLaboJkwaXulTd0dM0tGxE9IS+t4H4eAwmwxyJ9IGaKLlrV7JCf roYfcavwNtSZj7x4bAvZ9k/rUngmziU= -----END CERTIFICATE-----Generated at Sat Apr 26 17:04:43 2025 by rpki-client