$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB3E4/F69881DE69BA11EAA65DF764C4F9AE02/6qeS-WiGPD_7nr0WcaBsFFobIWQ.mft File: 6qeS-WiGPD_7nr0WcaBsFFobIWQ.mft (raw, json) Hash identifier: +P4/8B4igLOBOg4UgLtpf4AjQI+4wCPAsrUq4iz2yZM= Subject key identifier: E2:4C:0E:97:1E:19:6B:85:59:26:A5:F4:28:8F:76:1E:40:DC:3D:4E Authority key identifier: EA:A7:92:F9:68:86:3C:3F:FB:9E:BD:16:71:A0:6C:14:5A:1B:21:64 Certificate issuer: /CN=A91AB3E4/serialNumber=EAA792F968863C3FFB9EBD1671A06C145A1B2164 Certificate serial: 0A3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qeS-WiGPD_7nr0WcaBsFFobIWQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB3E4/F69881DE69BA11EAA65DF764C4F9AE02/6qeS-WiGPD_7nr0WcaBsFFobIWQ.mft Manifest number: 0A35 Signing time: Mon 12 May 2025 19:36:03 +0000 Manifest this update: Mon 12 May 2025 19:36:02 +0000 Manifest next update: Mon 19 May 2025 19:36:02 +0000 Files and hashes: 1: 6qeS-WiGPD_7nr0WcaBsFFobIWQ.crl (hash: zFeB6Wdj8X6BwZwwJnyUwKQyiKoOr0URBFx2IUaVhrk=) 2: 685E441A69BC11EA97D4FE67C4F9AE02.roa (hash: btvNkQxtxWOhr7BC1NN0JeTd0FhXrqBqWj4jtrNxyHI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB3E4/F69881DE69BA11EAA65DF764C4F9AE02/6qeS-WiGPD_7nr0WcaBsFFobIWQ.crl rsync://rpki.apnic.net/member_repository/A91AB3E4/F69881DE69BA11EAA65DF764C4F9AE02/6qeS-WiGPD_7nr0WcaBsFFobIWQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qeS-WiGPD_7nr0WcaBsFFobIWQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 19:36:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2619 (0xa3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB3E4, serialNumber=EAA792F968863C3FFB9EBD1671A06C145A1B2164 Validity Not Before: May 12 19:36:02 2025 GMT Not After : May 19 19:36:02 2025 GMT Subject: CN=68224da3-a383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:62:7f:2d:9d:a0:74:8c:fb:50:0a:33:3e:2a: 37:d7:90:56:1e:0c:35:bd:30:ab:c9:4f:7e:d9:81: 00:4b:c5:21:e2:9f:97:90:33:d4:31:8e:18:1a:63: 29:d2:93:57:9b:bc:f9:dc:11:9f:f2:4f:6b:c6:28: 60:70:f6:7a:94:4d:6a:d8:9e:a6:08:67:cc:69:36: 0c:76:f3:36:96:e7:dd:16:97:22:6d:53:5e:de:32: c3:ae:84:e9:57:57:97:5a:c2:bd:f4:ae:e8:96:f0: dd:5a:f5:1b:d4:59:99:a2:e7:23:a5:f8:ab:f9:26: 6f:6a:dc:ea:44:a1:a9:3a:9c:d1:e9:4a:09:32:dd: d6:14:83:ee:02:f6:29:9b:7e:04:b1:99:8a:fc:3f: cb:67:39:54:00:96:f3:c6:75:80:d6:66:2b:e0:c5: 77:0c:a4:9c:2d:40:06:b2:e1:1b:1b:60:3f:df:ee: a8:33:2b:e4:86:d3:81:2d:35:f5:33:e4:22:e8:cf: c6:c9:0f:6a:fc:a9:e8:8f:22:8f:2f:28:a1:24:d1: 30:1f:0f:8b:e3:93:61:c0:33:2d:72:23:28:54:35: 5e:b0:6d:2d:c8:6f:f9:c8:38:48:da:e8:7b:4e:bb: f9:31:a2:34:04:e2:75:eb:12:4b:d3:9a:74:f2:1d: 93:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:4C:0E:97:1E:19:6B:85:59:26:A5:F4:28:8F:76:1E:40:DC:3D:4E X509v3 Authority Key Identifier: keyid:EA:A7:92:F9:68:86:3C:3F:FB:9E:BD:16:71:A0:6C:14:5A:1B:21:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB3E4/F69881DE69BA11EAA65DF764C4F9AE02/6qeS-WiGPD_7nr0WcaBsFFobIWQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qeS-WiGPD_7nr0WcaBsFFobIWQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB3E4/F69881DE69BA11EAA65DF764C4F9AE02/6qeS-WiGPD_7nr0WcaBsFFobIWQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:a1:ca:67:31:09:68:94:b1:7f:f7:e9:e9:ee:5c:8c:25:23: 00:7d:d3:45:e4:2e:08:96:ed:4b:1f:b0:05:61:f8:44:91:cb: 7e:e2:c3:59:fa:cf:5d:be:df:10:2c:3d:ea:bc:ba:89:70:77: 0b:50:f4:ff:6b:14:a3:7c:78:e0:15:00:b9:1e:35:1b:e2:39: bc:95:d8:b3:1d:6c:f6:b8:f9:09:7a:03:07:22:13:e5:56:b9: 18:b3:cb:56:cd:27:f7:f9:db:74:56:2e:6b:41:cf:a6:bd:83: 2a:1c:37:9f:73:83:18:65:97:a6:7c:55:f9:32:66:c6:14:49: c1:85:cb:5d:28:13:3a:bf:79:b0:c2:f2:ff:cc:5e:5f:c3:9a: 45:94:c5:e8:ab:ce:99:6a:a5:4e:ba:85:a6:82:d4:b4:e6:1c: 98:f1:37:69:54:be:ee:d3:e6:d6:6a:b7:7c:18:84:f1:fb:7b: f9:4a:d6:2f:d4:10:f5:9e:98:a1:c5:8d:7d:5c:2b:d9:fd:30: 44:31:3b:fc:0b:8f:45:de:3d:8a:92:0b:8e:3d:3b:b1:07:1f: e6:c6:19:85:ff:87:01:a8:3e:60:64:bf:5b:aa:53:3b:04:a4: 32:b9:76:38:ac:a5:69:47:d6:a4:50:34:0f:6e:15:3b:a8:e6: ea:8c:21:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIzRTQxMTAvBgNVBAUTKEVBQTc5MkY5Njg4NjNDM0ZGQjlFQkQxNjcxQTA2QzE0 NUExQjIxNjQwHhcNMjUwNTEyMTkzNjAyWhcNMjUwNTE5MTkzNjAyWjAYMRYwFAYD VQQDEw02ODIyNGRhMy1hMzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0mJ/LZ2gdIz7UAozPio315BWHgw1vTCryU9+2YEAS8Uh4p+XkDPUMY4YGmMp 0pNXm7z53BGf8k9rxihgcPZ6lE1q2J6mCGfMaTYMdvM2lufdFpcibVNe3jLDroTp V1eXWsK99K7olvDdWvUb1FmZoucjpfir+SZvatzqRKGpOpzR6UoJMt3WFIPuAvYp m34EsZmK/D/LZzlUAJbzxnWA1mYr4MV3DKScLUAGsuEbG2A/3+6oMyvkhtOBLTX1 M+Qi6M/GyQ9q/KnojyKPLyihJNEwHw+L45NhwDMtciMoVDVesG0tyG/5yDhI2uh7 Trv5MaI0BOJ16xJL05p08h2T4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOJMDpce GWuFWSal9CiPdh5A3D1OMB8GA1UdIwQYMBaAFOqnkvlohjw/+569FnGgbBRaGyFk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjNFNC9GNjk4ODFERTY5 QkExMUVBQTY1REY3NjRDNEY5QUUwMi82cWVTLVdpR1BEXzducjBXY2FCc0ZGb2JJ V1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZxZVMtV2lHUERfN25yMFdjYUJzRkZvYklXUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjNFNC9GNjk4ODFERTY5QkExMUVBQTY1REY3NjRDNEY5QUUwMi82cWVTLVdpR1BE XzducjBXY2FCc0ZGb2JJV1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4ocpnMQlolLF/9+np7lyMJSMAfdNF5C4Ilu1LH7AFYfhEkct+4sNZ +s9dvt8QLD3qvLqJcHcLUPT/axSjfHjgFQC5HjUb4jm8ldizHWz2uPkJegMHIhPl VrkYs8tWzSf3+dt0Vi5rQc+mvYMqHDefc4MYZZemfFX5MmbGFEnBhctdKBM6v3mw wvL/zF5fw5pFlMXoq86ZaqVOuoWmgtS05hyY8TdpVL7u0+bWard8GITx+3v5StYv 1BD1npihxY19XCvZ/TBEMTv8C49F3j2KkguOPTuxBx/mxhmF/4cBqD5gZL9bqlM7 BKQyuXY4rKVpR9akUDQPbhU7qObqjCFT -----END CERTIFICATE-----Generated at Tue May 13 01:46:51 2025 by rpki-client