$ rpki-client -vvf rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft File: sK6GHB6-i61uZW1AH391BglAdKA.mft (raw, json) Hash identifier: bRMilyK7so8zn8vLR9+j46ZRZtXzkqbZPmkuzh8iNic= Subject key identifier: 1C:2E:74:77:61:04:0A:B1:A6:45:66:DE:C8:4A:89:E0:0E:82:4F:F6 Authority key identifier: B0:AE:86:1C:1E:BE:8B:AD:6E:65:6D:40:1F:7F:75:06:09:40:74:A0 Certificate issuer: /CN=A91D322A/serialNumber=B0AE861C1EBE8BAD6E656D401F7F7506094074A0 Certificate serial: 0D12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sK6GHB6-i61uZW1AH391BglAdKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft Manifest number: 0D0B Signing time: Thu 08 May 2025 18:05:25 +0000 Manifest this update: Thu 08 May 2025 18:05:25 +0000 Manifest next update: Thu 15 May 2025 18:05:24 +0000 Files and hashes: 1: sK6GHB6-i61uZW1AH391BglAdKA.crl (hash: MUlSsMCsCy//a+y4A20OTcTMTCsYpEXUoQA+8/uxCl4=) 2: 98B4FB32DB9011E996483B2BC4F9AE02.roa (hash: XXgLxgibvmpDaf+Wjs0zicx0P8XILsfLy/xTdFUHtdc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.crl rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sK6GHB6-i61uZW1AH391BglAdKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 18:05:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3346 (0xd12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D322A, serialNumber=B0AE861C1EBE8BAD6E656D401F7F7506094074A0 Validity Not Before: May 8 18:05:25 2025 GMT Not After : May 15 18:05:24 2025 GMT Subject: CN=681cf265-350b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2f:ed:87:d3:d7:ad:0f:ef:b5:48:4a:08:e7: 96:d7:82:64:30:42:de:45:05:fe:9b:19:15:5d:57: 0b:7b:9f:5c:8e:d4:d1:4c:04:0b:83:9c:8d:44:2e: 61:9f:9b:cf:fe:c0:f7:60:69:b5:00:c7:a6:bf:c7: fc:7c:82:c7:07:92:44:63:aa:42:51:75:35:9d:a0: a0:3c:fb:77:5d:f0:a8:f2:e3:3c:ea:c1:7b:4f:b0: bc:55:c7:fa:8c:d3:1b:4b:d5:0c:c6:bc:4d:ce:70: ba:5c:c5:2a:fb:14:76:fe:a1:d1:a5:17:ed:77:1f: 7b:4d:bc:cd:33:22:39:cd:91:bd:8b:c0:ba:27:f2: 9b:01:ab:21:a1:b7:1a:76:de:86:35:ab:24:7f:92: f2:20:3f:25:65:91:31:cd:b1:6b:83:b2:1e:25:9e: 77:14:76:a2:de:c7:75:9f:a7:a2:33:84:dd:8b:f9: 98:9d:bb:46:5f:83:be:51:2a:89:85:e2:1e:99:cc: e5:2c:06:9a:ce:f7:3e:d5:ad:50:6b:7f:82:ad:ee: e9:f8:f6:d0:fc:b4:45:a9:52:f0:a3:13:f5:f3:28: de:58:1e:90:89:75:9b:ce:fe:08:4a:47:5b:2b:39: 89:f4:32:3a:93:14:34:5d:89:dc:7a:1a:06:15:1d: 31:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:2E:74:77:61:04:0A:B1:A6:45:66:DE:C8:4A:89:E0:0E:82:4F:F6 X509v3 Authority Key Identifier: keyid:B0:AE:86:1C:1E:BE:8B:AD:6E:65:6D:40:1F:7F:75:06:09:40:74:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sK6GHB6-i61uZW1AH391BglAdKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:ae:5d:c9:73:2d:94:74:e0:67:15:28:6d:14:3d:fd:14:81: cd:ae:8f:b2:1a:07:9f:c3:01:78:9c:b5:8a:9d:ed:16:9d:b8: 60:ef:9f:1c:ed:60:ee:db:5a:77:7b:a9:6e:24:4a:c0:23:27: e0:53:e7:4c:a4:c7:d0:ad:57:b4:d5:61:1a:d9:28:5a:74:8c: 26:61:df:a5:fa:89:b6:32:d2:28:1e:47:8e:1a:a0:3b:75:18: 1d:d4:54:56:11:08:cc:22:01:a5:51:e2:3a:54:0f:9b:2c:04: e2:a0:04:b1:17:63:1f:88:b3:ac:38:19:1e:93:1e:6f:67:cc: 12:13:9e:73:22:54:20:e9:af:38:44:8d:4d:85:70:6d:04:fe: a5:91:8e:d3:81:9a:67:ca:2f:55:6e:fd:ba:df:6b:89:79:a8: 23:af:9b:34:47:a4:48:3f:78:74:5f:89:45:6c:0e:39:d2:24: 13:e0:bc:16:60:b9:43:4c:f1:3e:3d:1c:22:00:3f:57:3b:29: 0f:e4:12:c0:7e:5d:6e:49:f5:08:47:8d:32:63:19:0f:6b:6b: 9d:ce:32:84:34:99:36:84:d4:98:7b:ac:d2:f5:22:84:80:83: 71:d8:0c:cd:64:24:f8:2f:a4:2a:ce:71:c5:48:2a:9a:bd:0b: 8d:1f:3f:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDRIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMyMkExMTAvBgNVBAUTKEIwQUU4NjFDMUVCRThCQUQ2RTY1NkQ0MDFGN0Y3NTA2 MDk0MDc0QTAwHhcNMjUwNTA4MTgwNTI1WhcNMjUwNTE1MTgwNTI0WjAYMRYwFAYD VQQDEw02ODFjZjI2NS0zNTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvS/th9PXrQ/vtUhKCOeW14JkMELeRQX+mxkVXVcLe59cjtTRTAQLg5yNRC5h n5vP/sD3YGm1AMemv8f8fILHB5JEY6pCUXU1naCgPPt3XfCo8uM86sF7T7C8Vcf6 jNMbS9UMxrxNznC6XMUq+xR2/qHRpRftdx97TbzNMyI5zZG9i8C6J/KbAashobca dt6GNaskf5LyID8lZZExzbFrg7IeJZ53FHai3sd1n6eiM4Tdi/mYnbtGX4O+USqJ heIemczlLAaazvc+1a1Qa3+Cre7p+PbQ/LRFqVLwoxP18yjeWB6QiXWbzv4ISkdb KzmJ9DI6kxQ0XYncehoGFR0xywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBwudHdh BAqxpkVm3shKieAOgk/2MB8GA1UdIwQYMBaAFLCuhhwevoutbmVtQB9/dQYJQHSg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzIyQS8wREMxREY3Q0RC OTAxMUU5OUMyNUM1MkFDNEY5QUUwMi9zSzZHSEI2LWk2MXVaVzFBSDM5MUJnbEFk S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NLNkdIQjYtaTYxdVpXMUFIMzkxQmdsQWRLQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzIyQS8wREMxREY3Q0RCOTAxMUU5OUMyNUM1MkFDNEY5QUUwMi9zSzZHSEI2LWk2 MXVaVzFBSDM5MUJnbEFkS0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGrl3Jcy2UdOBnFShtFD39FIHNro+yGgefwwF4nLWKne0Wnbhg758c 7WDu21p3e6luJErAIyfgU+dMpMfQrVe01WEa2ShadIwmYd+l+om2MtIoHkeOGqA7 dRgd1FRWEQjMIgGlUeI6VA+bLATioASxF2MfiLOsOBkekx5vZ8wSE55zIlQg6a84 RI1NhXBtBP6lkY7TgZpnyi9Vbv2632uJeagjr5s0R6RIP3h0X4lFbA450iQT4LwW YLlDTPE+PRwiAD9XOykP5BLAfl1uSfUIR40yYxkPa2udzjKENJk2hNSYe6zS9SKE gINx2AzNZCT4L6QqznHFSCqavQuNHz9S -----END CERTIFICATE-----Generated at Fri May 9 18:09:15 2025 by rpki-client