$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA790/129B3D5C1DA811E2B94830A208B02CD2/6hMWJXP0YIe5C7dfdIJbMSjKF6c.mft File: 6hMWJXP0YIe5C7dfdIJbMSjKF6c.mft (raw, json) Hash identifier: 6fxNLPQV/mM9CGxgIfUORzSnQpnGPttg5pH4dgojA7o= Subject key identifier: CC:B3:1C:E1:46:E4:72:FE:9F:3F:4C:AF:52:EA:AC:9C:8C:FC:70:01 Authority key identifier: EA:13:16:25:73:F4:60:87:B9:0B:B7:5F:74:82:5B:31:28:CA:17:A7 Certificate issuer: /CN=A91BA790/serialNumber=EA13162573F46087B90BB75F74825B3128CA17A7 Certificate serial: 3479 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6hMWJXP0YIe5C7dfdIJbMSjKF6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA790/129B3D5C1DA811E2B94830A208B02CD2/6hMWJXP0YIe5C7dfdIJbMSjKF6c.mft Manifest number: 3479 Signing time: Mon 12 May 2025 15:12:34 +0000 Manifest this update: Mon 12 May 2025 15:12:34 +0000 Manifest next update: Mon 19 May 2025 15:12:34 +0000 Files and hashes: 1: 6hMWJXP0YIe5C7dfdIJbMSjKF6c.crl (hash: Aocx5UZZ932irzHGAtMh6CB/SI9o0ZFuzcZ0aYeqRs4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA790/129B3D5C1DA811E2B94830A208B02CD2/6hMWJXP0YIe5C7dfdIJbMSjKF6c.crl rsync://rpki.apnic.net/member_repository/A91BA790/129B3D5C1DA811E2B94830A208B02CD2/6hMWJXP0YIe5C7dfdIJbMSjKF6c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6hMWJXP0YIe5C7dfdIJbMSjKF6c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 15:12:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13433 (0x3479) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA790, serialNumber=EA13162573F46087B90BB75F74825B3128CA17A7 Validity Not Before: May 12 15:12:34 2025 GMT Not After : May 19 15:12:34 2025 GMT Subject: CN=68220fe2-6baf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e6:63:fc:aa:c5:7c:e4:42:a7:90:36:ef:9c: 69:23:ee:a6:30:94:4f:e4:e1:af:c8:35:7d:ce:53: 9b:89:a3:8a:7a:7b:60:5f:4f:d1:ae:b8:17:c3:fc: c6:59:81:09:89:30:ae:a1:31:dc:fc:50:d9:45:95: be:0a:22:97:23:d2:04:17:c4:cf:cd:7d:27:d5:42: f9:70:72:58:b3:f7:81:75:f8:29:4d:b6:d4:7b:9f: e5:fd:5d:76:ab:9b:b5:f7:39:bc:c5:69:5e:8c:db: ae:ff:97:bf:78:9d:cc:dd:07:26:9c:96:d8:83:2a: 37:e5:25:8f:94:95:a7:a5:80:82:e4:94:92:72:90: ce:7a:4f:a7:2b:2d:39:61:92:40:40:de:db:ae:6c: 68:a1:71:d9:73:90:99:f2:8f:47:71:b6:26:63:e2: 74:99:05:5b:0b:53:50:e3:30:a9:6f:c5:fa:86:4a: 56:5b:0b:22:95:20:53:26:ad:84:65:8a:a2:d0:ab: 62:37:0b:b3:c3:8b:a3:76:d1:69:f6:d4:f9:2e:ba: 1d:97:4b:3c:70:c0:99:4b:20:eb:be:3a:79:e9:f3: 6e:32:5b:55:33:56:26:4b:9d:4f:c4:fe:96:90:52: 9e:fe:df:85:44:66:72:6c:b9:54:b8:0c:f8:f9:38: 83:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:B3:1C:E1:46:E4:72:FE:9F:3F:4C:AF:52:EA:AC:9C:8C:FC:70:01 X509v3 Authority Key Identifier: keyid:EA:13:16:25:73:F4:60:87:B9:0B:B7:5F:74:82:5B:31:28:CA:17:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA790/129B3D5C1DA811E2B94830A208B02CD2/6hMWJXP0YIe5C7dfdIJbMSjKF6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6hMWJXP0YIe5C7dfdIJbMSjKF6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA790/129B3D5C1DA811E2B94830A208B02CD2/6hMWJXP0YIe5C7dfdIJbMSjKF6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:0f:cf:9e:61:6b:94:44:81:7f:91:4b:b2:88:08:e8:92:f1: b8:69:cc:80:ae:09:b1:1c:63:2d:fd:73:cb:6e:f3:8a:fa:b2: 85:20:97:18:6d:48:7b:cd:c0:18:ba:65:24:16:cd:4d:3b:72: 5e:a4:5e:78:b2:fb:eb:09:48:be:79:d9:cc:7d:42:d3:cf:27: 8c:c3:4f:ff:bb:ff:03:de:50:58:99:83:6e:af:fc:77:a6:26: ab:53:db:02:a0:f9:ce:3f:95:94:37:89:0f:44:94:09:d2:49: b5:e1:f3:11:80:f5:5f:2b:5b:f2:0e:46:c6:ff:7e:e3:3d:28: 09:15:72:0f:d0:36:de:3e:8e:a5:3e:39:05:a1:fe:17:88:aa: 65:49:b2:f9:cf:7e:f8:c4:0a:b7:6d:ad:82:36:45:f0:31:b8: 41:af:e6:28:ed:31:3e:dc:b9:6b:ff:40:06:e8:ea:ad:9d:6b: 6f:6c:0f:68:7f:3b:5a:61:dd:2a:65:b0:51:aa:56:a1:ec:a7: 31:00:f0:46:7e:f7:90:44:82:28:5c:46:a1:d4:d8:d6:5c:06: 86:99:d7:76:2c:ac:dd:24:0f:c6:e9:04:0c:fc:81:4a:70:db: 60:f0:c0:1c:1a:84:dd:80:84:68:fc:db:91:aa:cc:cf:91:bf: 63:cd:39:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE3OTAxMTAvBgNVBAUTKEVBMTMxNjI1NzNGNDYwODdCOTBCQjc1Rjc0ODI1QjMx MjhDQTE3QTcwHhcNMjUwNTEyMTUxMjM0WhcNMjUwNTE5MTUxMjM0WjAYMRYwFAYD VQQDEw02ODIyMGZlMi02YmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzuZj/KrFfORCp5A275xpI+6mMJRP5OGvyDV9zlObiaOKentgX0/RrrgXw/zG WYEJiTCuoTHc/FDZRZW+CiKXI9IEF8TPzX0n1UL5cHJYs/eBdfgpTbbUe5/l/V12 q5u19zm8xWlejNuu/5e/eJ3M3QcmnJbYgyo35SWPlJWnpYCC5JSScpDOek+nKy05 YZJAQN7brmxooXHZc5CZ8o9HcbYmY+J0mQVbC1NQ4zCpb8X6hkpWWwsilSBTJq2E ZYqi0KtiNwuzw4ujdtFp9tT5Lrodl0s8cMCZSyDrvjp56fNuMltVM1YmS51PxP6W kFKe/t+FRGZybLlUuAz4+TiD8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMyzHOFG 5HL+nz9Mr1LqrJyM/HABMB8GA1UdIwQYMBaAFOoTFiVz9GCHuQu3X3SCWzEoyhen MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTc5MC8xMjlCM0Q1QzFE QTgxMUUyQjk0ODMwQTIwOEIwMkNEMi82aE1XSlhQMFlJZTVDN2RmZElKYk1TaktG NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZoTVdKWFAwWUllNUM3ZGZkSUpiTVNqS0Y2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTc5MC8xMjlCM0Q1QzFEQTgxMUUyQjk0ODMwQTIwOEIwMkNEMi82aE1XSlhQMFlJ ZTVDN2RmZElKYk1TaktGNmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/D8+eYWuURIF/kUuyiAjokvG4acyArgmxHGMt/XPLbvOK+rKFIJcY bUh7zcAYumUkFs1NO3JepF54svvrCUi+ednMfULTzyeMw0//u/8D3lBYmYNur/x3 piarU9sCoPnOP5WUN4kPRJQJ0km14fMRgPVfK1vyDkbG/37jPSgJFXIP0DbePo6l PjkFof4XiKplSbL5z374xAq3ba2CNkXwMbhBr+Yo7TE+3Llr/0AG6OqtnWtvbA9o fztaYd0qZbBRqlah7KcxAPBGfveQRIIoXEah1NjWXAaGmdd2LKzdJA/G6QQM/IFK cNtg8MAcGoTdgIRo/NuRqszPkb9jzTku -----END CERTIFICATE-----Generated at Tue May 13 20:50:38 2025 by rpki-client