$ rpki-client -vvf rpki.apnic.net/member_repository/A91B517C/CD3763E6DCED11EEBDE00E30C4F9AE02/n6-DQWde9DiWQZk2JUJXLIkoVAw.mft File: n6-DQWde9DiWQZk2JUJXLIkoVAw.mft (raw, json) Hash identifier: 4aHjyPuqUyjpReJJCQfO4QkPn3bcvgVvS9AX+my8ECI= Subject key identifier: C0:AB:B2:39:0C:DA:88:EC:92:BA:01:A6:9F:EA:4D:B7:1A:87:94:CC Authority key identifier: 9F:AF:83:41:67:5E:F4:38:96:41:99:36:25:42:57:2C:89:28:54:0C Certificate issuer: /CN=A91B517C/serialNumber=9FAF8341675EF438964199362542572C8928540C Certificate serial: ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6-DQWde9DiWQZk2JUJXLIkoVAw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B517C/CD3763E6DCED11EEBDE00E30C4F9AE02/n6-DQWde9DiWQZk2JUJXLIkoVAw.mft Manifest number: E5 Signing time: Tue 13 May 2025 04:41:28 +0000 Manifest this update: Tue 13 May 2025 04:41:28 +0000 Manifest next update: Tue 20 May 2025 04:41:28 +0000 Files and hashes: 1: n6-DQWde9DiWQZk2JUJXLIkoVAw.crl (hash: B+s9Cv3hyQWOAolh2PzXIJbNVTDXploVdm7+kkbkbv0=) 2: 86019882E2A311EEA6A97425C4F9AE02.roa (hash: rY3nCJHEdvDis2cayySCk8QGqqZuPm71Ue/Jfr5Cod0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B517C/CD3763E6DCED11EEBDE00E30C4F9AE02/n6-DQWde9DiWQZk2JUJXLIkoVAw.crl rsync://rpki.apnic.net/member_repository/A91B517C/CD3763E6DCED11EEBDE00E30C4F9AE02/n6-DQWde9DiWQZk2JUJXLIkoVAw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6-DQWde9DiWQZk2JUJXLIkoVAw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 04:41:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 237 (0xed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B517C, serialNumber=9FAF8341675EF438964199362542572C8928540C Validity Not Before: May 13 04:41:28 2025 GMT Not After : May 20 04:41:28 2025 GMT Subject: CN=6822cd78-4baa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:43:77:93:ee:a6:93:18:d9:44:69:02:cf:59: 63:49:9b:80:41:33:cd:80:a1:11:f4:5c:58:4e:12: 24:05:ce:a1:38:47:13:23:75:56:fa:8d:09:ae:85: fb:ab:91:83:c5:d8:88:d6:c7:db:58:25:64:75:c2: 59:ed:81:24:d5:e3:c1:48:8e:01:8e:d6:53:5a:e5: 04:ea:e8:3b:c2:c3:55:88:db:27:f9:c6:26:2d:87: 11:67:4d:7d:b4:47:4e:6d:98:e4:01:8f:c9:8f:7f: aa:3d:4d:ed:bb:5d:7d:05:8f:4a:6f:4e:9a:1a:f3: bf:68:73:55:6b:a2:98:2a:8a:4e:6b:56:65:91:0a: f7:fb:60:45:29:de:86:ca:cb:09:93:b9:c6:6e:9a: b2:a9:e9:3a:1d:71:c1:69:36:1a:5e:65:d7:d2:58: 94:84:ac:b6:43:2e:8f:19:4b:b5:48:12:01:47:4b: c9:44:d7:6b:4b:70:0f:f2:1d:04:dd:01:fe:da:2f: e6:98:37:12:72:97:2e:37:11:11:c9:d9:7a:17:14: 2e:2b:92:ea:81:71:01:aa:ee:71:2a:8b:aa:4f:0f: cb:1b:b0:2c:28:ea:8e:a5:f4:b7:a2:9e:34:ff:40: e4:6b:5f:d0:ad:40:19:56:43:53:2f:92:63:73:19: c8:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:AB:B2:39:0C:DA:88:EC:92:BA:01:A6:9F:EA:4D:B7:1A:87:94:CC X509v3 Authority Key Identifier: keyid:9F:AF:83:41:67:5E:F4:38:96:41:99:36:25:42:57:2C:89:28:54:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B517C/CD3763E6DCED11EEBDE00E30C4F9AE02/n6-DQWde9DiWQZk2JUJXLIkoVAw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6-DQWde9DiWQZk2JUJXLIkoVAw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B517C/CD3763E6DCED11EEBDE00E30C4F9AE02/n6-DQWde9DiWQZk2JUJXLIkoVAw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:60:de:b0:26:a5:15:05:e5:39:09:69:2e:94:4d:b2:01:1d: 24:4d:fd:39:bc:22:50:ae:2d:a5:99:0d:ab:8c:5e:63:f3:f9: fb:7e:1e:4f:af:96:99:fa:c6:40:42:87:da:34:95:22:9a:66: eb:13:c0:9d:5d:dc:a4:21:d6:09:bc:15:c0:13:cc:8b:5f:11: 4d:f1:c7:2b:21:29:ed:46:41:4b:14:af:61:a2:30:68:81:2b: 5b:67:11:28:fb:46:9f:8d:68:7d:e8:63:2b:ae:3e:d0:af:65: de:61:88:95:6d:99:42:a7:58:ce:31:d5:4e:e4:10:74:72:b2: 3f:74:88:3c:7f:b8:c7:22:53:56:59:fa:05:68:7b:38:95:d5: ea:25:97:00:39:bb:26:dc:22:ba:a7:9a:2b:dd:fe:40:54:17: 63:d4:86:5a:25:2f:91:2a:2a:1a:9d:31:b6:7c:d8:db:df:41: f4:ff:a8:02:81:ad:34:8f:6b:ea:ff:51:5d:fd:75:72:b6:f1: 54:28:73:15:94:c3:7b:18:92:14:bb:91:87:72:3a:cb:bb:86: d4:7e:aa:fe:8e:7b:16:67:11:21:f0:b5:7e:e6:4a:be:65:21: 6a:30:7b:a8:b4:a2:13:66:0a:a6:7c:86:63:1f:82:3f:c6:e8: 3f:55:5e:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjUxN0MxMTAvBgNVBAUTKDlGQUY4MzQxNjc1RUY0Mzg5NjQxOTkzNjI1NDI1NzJD ODkyODU0MEMwHhcNMjUwNTEzMDQ0MTI4WhcNMjUwNTIwMDQ0MTI4WjAYMRYwFAYD VQQDEw02ODIyY2Q3OC00YmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwUN3k+6mkxjZRGkCz1ljSZuAQTPNgKER9FxYThIkBc6hOEcTI3VW+o0JroX7 q5GDxdiI1sfbWCVkdcJZ7YEk1ePBSI4BjtZTWuUE6ug7wsNViNsn+cYmLYcRZ019 tEdObZjkAY/Jj3+qPU3tu119BY9Kb06aGvO/aHNVa6KYKopOa1ZlkQr3+2BFKd6G yssJk7nGbpqyqek6HXHBaTYaXmXX0liUhKy2Qy6PGUu1SBIBR0vJRNdrS3AP8h0E 3QH+2i/mmDcScpcuNxERydl6FxQuK5LqgXEBqu5xKouqTw/LG7AsKOqOpfS3op40 /0Dka1/QrUAZVkNTL5JjcxnI3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMCrsjkM 2ojskroBpp/qTbcah5TMMB8GA1UdIwQYMBaAFJ+vg0FnXvQ4lkGZNiVCVyyJKFQM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTE3Qy9DRDM3NjNFNkRD RUQxMUVFQkRFMDBFMzBDNEY5QUUwMi9uNi1EUVdkZTlEaVdRWmsySlVKWExJa29W QXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL242LURRV2RlOURpV1FaazJKVUpYTElrb1ZBdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTE3Qy9DRDM3NjNFNkRDRUQxMUVFQkRFMDBFMzBDNEY5QUUwMi9uNi1EUVdkZTlE aVdRWmsySlVKWExJa29WQXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5YN6wJqUVBeU5CWkulE2yAR0kTf05vCJQri2lmQ2rjF5j8/n7fh5P r5aZ+sZAQofaNJUimmbrE8CdXdykIdYJvBXAE8yLXxFN8ccrISntRkFLFK9hojBo gStbZxEo+0afjWh96GMrrj7Qr2XeYYiVbZlCp1jOMdVO5BB0crI/dIg8f7jHIlNW WfoFaHs4ldXqJZcAObsm3CK6p5or3f5AVBdj1IZaJS+RKioanTG2fNjb30H0/6gC ga00j2vq/1Fd/XVytvFUKHMVlMN7GJIUu5GHcjrLu4bUfqr+jnsWZxEh8LV+5kq+ ZSFqMHuotKITZgqmfIZjH4I/xug/VV5+ -----END CERTIFICATE-----Generated at Wed May 14 11:52:21 2025 by rpki-client