$ rpki-client -vvf rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/6sqCrlKk_xgNM2F5-DlQpasLx7M.mft File: 6sqCrlKk_xgNM2F5-DlQpasLx7M.mft (raw, json) Hash identifier: ch7x0mv5nW52ReT4gEeSp0rA4FMTESIBdOVpnbcAYmQ= Subject key identifier: EE:04:9A:26:2F:2A:12:0C:9D:21:B8:60:F7:5D:34:81:1D:EB:9E:19 Authority key identifier: EA:CA:82:AE:52:A4:FF:18:0D:33:61:79:F8:39:50:A5:AB:0B:C7:B3 Certificate issuer: /CN=A91486D3/serialNumber=EACA82AE52A4FF180D336179F83950A5AB0BC7B3 Certificate serial: D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sqCrlKk_xgNM2F5-DlQpasLx7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/6sqCrlKk_xgNM2F5-DlQpasLx7M.mft Manifest number: D1 Signing time: Tue 13 May 2025 04:51:20 +0000 Manifest this update: Tue 13 May 2025 04:51:19 +0000 Manifest next update: Tue 20 May 2025 04:51:19 +0000 Files and hashes: 1: 6sqCrlKk_xgNM2F5-DlQpasLx7M.crl (hash: A5oH9Zk/U9AjsIIHzoO3PTMge6GD/XASWs6P15o1LCQ=) 2: C2A2E774EEC311EE8832C93AC4F9AE02.roa (hash: ms7snh2IzeS7RUyS63vDyik3Jw03vBKHQY1xlDWMLMg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/6sqCrlKk_xgNM2F5-DlQpasLx7M.crl rsync://rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/6sqCrlKk_xgNM2F5-DlQpasLx7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sqCrlKk_xgNM2F5-DlQpasLx7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 04:51:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 211 (0xd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91486D3, serialNumber=EACA82AE52A4FF180D336179F83950A5AB0BC7B3 Validity Not Before: May 13 04:51:19 2025 GMT Not After : May 20 04:51:19 2025 GMT Subject: CN=6822cfc7-dc5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d3:28:96:05:a0:c1:d9:fc:d4:b0:90:31:3f: f3:e7:a1:d2:b1:d7:c9:a9:6c:18:7e:0c:36:53:3a: 41:a4:a9:e6:fa:1b:bc:db:d1:75:40:7b:0e:2d:d8: 68:13:08:c2:73:f0:d1:54:37:c1:29:c9:95:40:00: b8:aa:30:30:15:de:12:b6:ec:31:0c:bd:15:3b:b2: 5a:ce:27:c8:83:42:d6:f2:6e:ba:24:96:a5:b2:2d: 69:79:22:63:da:3d:a7:35:c8:0a:24:bb:1f:a0:03: 46:c7:9b:73:e0:7f:77:33:45:63:ed:ec:09:9b:7c: 4e:ae:37:94:e3:95:b0:c5:1e:8e:a0:e1:e9:9f:38: b9:ab:52:63:2e:88:e0:c3:87:3b:bf:1c:52:79:a0: 0a:ac:dc:30:7b:3d:41:56:82:82:5e:c1:d0:70:53: c2:ef:95:3d:68:4d:ed:3d:25:65:20:00:4d:e1:4a: c5:1e:8b:2b:7d:95:7c:36:84:6d:42:77:d0:dc:3c: 35:4f:80:00:c5:ba:b6:d1:6a:07:a2:6b:02:53:77: 2b:34:a6:0b:fa:c5:d8:4a:1c:6e:84:1b:50:76:5c: bd:9a:7f:a6:57:14:1a:a5:07:3d:48:c1:4e:74:e6: d3:63:de:43:12:06:01:9b:bf:10:a8:f3:75:55:ea: 3a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:04:9A:26:2F:2A:12:0C:9D:21:B8:60:F7:5D:34:81:1D:EB:9E:19 X509v3 Authority Key Identifier: keyid:EA:CA:82:AE:52:A4:FF:18:0D:33:61:79:F8:39:50:A5:AB:0B:C7:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/6sqCrlKk_xgNM2F5-DlQpasLx7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sqCrlKk_xgNM2F5-DlQpasLx7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/6sqCrlKk_xgNM2F5-DlQpasLx7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:26:d7:c3:37:c6:d2:a4:72:0c:64:f6:5c:79:b8:42:34:38: e1:c7:b9:9d:d8:f0:ea:8f:4d:4a:80:9a:c3:4b:02:c6:20:3c: f8:43:6c:65:f0:0d:34:09:88:df:0b:a3:3b:40:b3:56:b1:c9: 3e:94:46:3c:31:7b:0e:3d:53:ad:21:c8:67:e3:4b:a2:b9:c5: 80:b1:8d:81:56:f0:92:75:c4:68:43:42:dd:b4:05:68:49:07: 02:33:bc:e1:f5:b3:2c:0f:ee:b7:98:5e:7b:55:45:34:ca:d9: 53:da:88:6c:33:93:c2:b0:6e:f3:5a:a4:4e:79:a9:66:e0:1b: fb:01:7e:f4:f7:cc:f3:db:eb:b6:c5:1a:78:35:a1:7c:17:9a: 6a:5a:db:5b:1d:f6:96:b3:d1:70:ee:ee:4d:07:18:f7:b9:5a: 0c:7d:ca:f3:6c:aa:57:42:61:8c:25:94:28:01:e0:41:0d:97: b1:06:a9:83:f1:b7:1e:83:13:53:ed:52:12:0f:59:79:8f:fd: e0:16:0d:49:07:1c:0e:97:d2:42:d2:e6:bb:82:4a:a5:f0:86: ce:05:80:86:c6:2f:35:31:43:f5:56:68:3e:9b:21:cc:03:df: 86:00:be:e1:4b:ea:a2:23:7d:17:b3:78:30:02:d2:d8:21:5c: c4:cc:a9:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg2RDMxMTAvBgNVBAUTKEVBQ0E4MkFFNTJBNEZGMTgwRDMzNjE3OUY4Mzk1MEE1 QUIwQkM3QjMwHhcNMjUwNTEzMDQ1MTE5WhcNMjUwNTIwMDQ1MTE5WjAYMRYwFAYD VQQDEw02ODIyY2ZjNy1kYzVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAttMolgWgwdn81LCQMT/z56HSsdfJqWwYfgw2UzpBpKnm+hu829F1QHsOLdho EwjCc/DRVDfBKcmVQAC4qjAwFd4StuwxDL0VO7JazifIg0LW8m66JJalsi1peSJj 2j2nNcgKJLsfoANGx5tz4H93M0Vj7ewJm3xOrjeU45WwxR6OoOHpnzi5q1JjLojg w4c7vxxSeaAKrNwwez1BVoKCXsHQcFPC75U9aE3tPSVlIABN4UrFHosrfZV8NoRt QnfQ3Dw1T4AAxbq20WoHomsCU3crNKYL+sXYShxuhBtQdly9mn+mVxQapQc9SMFO dObTY95DEgYBm78QqPN1Veo60wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO4EmiYv KhIMnSG4YPddNIEd654ZMB8GA1UdIwQYMBaAFOrKgq5SpP8YDTNhefg5UKWrC8ez MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODZEMy8xRkEyOTExNEVF QzMxMUVFQjJEQkZCMUJDNEY5QUUwMi82c3FDcmxLa194Z05NMkY1LURsUXBhc0x4 N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZzcUNybEtrX3hnTk0yRjUtRGxRcGFzTHg3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODZEMy8xRkEyOTExNEVFQzMxMUVFQjJEQkZCMUJDNEY5QUUwMi82c3FDcmxLa194 Z05NMkY1LURsUXBhc0x4N00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeJtfDN8bSpHIMZPZcebhCNDjhx7md2PDqj01KgJrDSwLGIDz4Q2xl 8A00CYjfC6M7QLNWsck+lEY8MXsOPVOtIchn40uiucWAsY2BVvCSdcRoQ0LdtAVo SQcCM7zh9bMsD+63mF57VUU0ytlT2ohsM5PCsG7zWqROealm4Bv7AX7098zz2+u2 xRp4NaF8F5pqWttbHfaWs9Fw7u5NBxj3uVoMfcrzbKpXQmGMJZQoAeBBDZexBqmD 8bcegxNT7VISD1l5j/3gFg1JBxwOl9JC0ua7gkql8IbOBYCGxi81MUP1Vmg+myHM A9+GAL7hS+qiI30Xs3gwAtLYIVzEzKnH -----END CERTIFICATE-----Generated at Wed May 14 16:37:18 2025 by rpki-client