$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft File: r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft (raw, json) Hash identifier: 2Aifd1T4OLSMBYQMJoSe4EhSH4pEz8J12skB358eGXY= Subject key identifier: 47:5C:AA:5F:68:61:7B:0B:32:16:7D:03:B4:39:B3:8A:F8:C7:D2:73 Authority key identifier: AF:A6:D7:BD:C3:7B:64:C8:F1:46:EE:A6:17:36:D3:D4:51:78:FB:37 Certificate issuer: /CN=A91E8CB0/serialNumber=AFA6D7BDC37B64C8F146EEA61736D3D45178FB37 Certificate serial: 01D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft Manifest number: 01CD Signing time: Sat 03 May 2025 02:25:20 +0000 Manifest this update: Sat 03 May 2025 02:25:20 +0000 Manifest next update: Sat 10 May 2025 02:25:20 +0000 Files and hashes: 1: r6bXvcN7ZMjxRu6mFzbT1FF4-zc.crl (hash: D1u2P2p+rAdxGb6aN2Eax1FwCgNZxh+horHF/gH4NXg=) 2: F11BA4EA75B811EDA34F9687C4F9AE02.roa (hash: ZxJWdKT+dhhJyfungVSpx3334JD5sGMO+S5A+zHFl74=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.crl rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 02:25:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 466 (0x1d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8CB0, serialNumber=AFA6D7BDC37B64C8F146EEA61736D3D45178FB37 Validity Not Before: May 3 02:25:20 2025 GMT Not After : May 10 02:25:20 2025 GMT Subject: CN=68157e90-49c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:67:26:de:2f:89:29:3f:5e:74:4d:ec:dd:1a: c6:86:48:d7:7c:a5:44:ea:0f:2e:af:26:49:f3:e4: 76:fe:f6:09:bf:f0:30:10:0b:ff:e4:18:ed:c3:67: 6c:14:65:37:dc:48:fd:75:0a:21:f9:dd:71:46:62: 95:f4:89:21:80:03:24:65:51:0d:36:10:c6:29:16: 44:92:34:3c:86:e9:c1:d9:dd:a1:2e:1a:98:9f:f8: 43:65:b8:66:32:be:10:d8:5e:9b:7c:88:05:b1:44: c3:33:30:42:53:5b:22:fa:49:cb:e4:2e:7f:db:ba: 6f:5c:9c:a7:53:0d:17:ed:7a:48:f9:d5:6f:ab:57: 99:fd:29:0b:33:f0:3c:31:9b:97:90:8a:fd:6e:53: 83:55:fb:b5:89:17:f7:96:1a:ed:dd:ad:d3:7f:77: 61:3d:fa:e2:47:b5:e8:59:8f:53:27:a6:82:08:b0: 36:e5:9f:61:ec:26:b7:f2:49:98:20:d3:7d:19:82: 6b:45:c1:7a:07:bb:a2:73:fd:d5:38:d5:92:06:91: b5:0e:66:c2:50:f2:36:db:24:f3:21:fb:e6:93:81: 23:91:b0:7a:03:e8:cc:b9:48:09:76:59:1f:89:33: 41:36:e5:2a:99:a8:68:e7:49:f3:20:73:13:77:bd: 8d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:5C:AA:5F:68:61:7B:0B:32:16:7D:03:B4:39:B3:8A:F8:C7:D2:73 X509v3 Authority Key Identifier: keyid:AF:A6:D7:BD:C3:7B:64:C8:F1:46:EE:A6:17:36:D3:D4:51:78:FB:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:58:d4:3c:61:e8:2a:e8:5c:20:67:e1:81:2a:1c:d4:92:c9: d3:55:7e:da:5b:41:6c:79:2a:8a:df:bf:a1:fe:20:7c:d2:d3: c5:20:0d:75:cb:2a:c0:bb:a9:74:c5:55:20:4d:b8:74:91:f2: 6a:c2:e0:a9:97:0f:82:ef:3b:ea:28:d1:ec:a9:90:4c:56:9f: d1:f5:ca:b3:2b:89:ee:62:92:3e:94:4d:8b:80:8c:d8:19:5e: 77:3e:d3:19:72:91:2f:77:1c:70:67:08:21:25:e6:03:52:98: 04:f0:af:2c:49:30:8b:b5:07:65:94:86:07:ec:e9:df:9e:0d: bc:94:8e:58:32:12:eb:04:f5:34:b6:da:f5:d9:42:24:1b:d8: 40:a6:55:13:08:63:f5:0d:64:5e:6a:b9:89:28:2a:f2:35:83: d6:e5:32:b4:21:ad:30:30:c1:08:70:19:16:79:c8:33:23:c4: 8b:9b:e1:69:0b:bd:68:38:18:d5:2b:2f:61:ab:31:c6:21:50: 63:75:77:52:84:ff:cb:65:2f:95:e7:8c:28:2c:5a:e7:91:71: d1:99:0b:04:8f:99:8d:7c:07:ce:ad:35:19:e0:0e:17:ad:c9: e3:34:92:f5:e3:9d:23:6d:c8:a3:44:80:41:88:52:8b:16:11: 8e:30:ed:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThDQjAxMTAvBgNVBAUTKEFGQTZEN0JEQzM3QjY0QzhGMTQ2RUVBNjE3MzZEM0Q0 NTE3OEZCMzcwHhcNMjUwNTAzMDIyNTIwWhcNMjUwNTEwMDIyNTIwWjAYMRYwFAYD VQQDEw02ODE1N2U5MC00OWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl2cm3i+JKT9edE3s3RrGhkjXfKVE6g8uryZJ8+R2/vYJv/AwEAv/5Bjtw2ds FGU33Ej9dQoh+d1xRmKV9IkhgAMkZVENNhDGKRZEkjQ8hunB2d2hLhqYn/hDZbhm Mr4Q2F6bfIgFsUTDMzBCU1si+knL5C5/27pvXJynUw0X7XpI+dVvq1eZ/SkLM/A8 MZuXkIr9blODVfu1iRf3lhrt3a3Tf3dhPfriR7XoWY9TJ6aCCLA25Z9h7Ca38kmY INN9GYJrRcF6B7uic/3VONWSBpG1DmbCUPI22yTzIfvmk4EjkbB6A+jMuUgJdlkf iTNBNuUqmaho50nzIHMTd72NmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEdcql9o YXsLMhZ9A7Q5s4r4x9JzMB8GA1UdIwQYMBaAFK+m173De2TI8Ubuphc209RRePs3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOENCMC8zNzcwMTI0RTZC QzUxMUVEODY2QTdENUVDNEY5QUUwMi9yNmJYdmNON1pNanhSdTZtRnpiVDFGRjQt emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I2Ylh2Y043Wk1qeFJ1Nm1GemJUMUZGNC16Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OENCMC8zNzcwMTI0RTZCQzUxMUVEODY2QTdENUVDNEY5QUUwMi9yNmJYdmNON1pN anhSdTZtRnpiVDFGRjQtemMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbWNQ8Yegq6FwgZ+GBKhzUksnTVX7aW0FseSqK37+h/iB80tPFIA11 yyrAu6l0xVUgTbh0kfJqwuCplw+C7zvqKNHsqZBMVp/R9cqzK4nuYpI+lE2LgIzY GV53PtMZcpEvdxxwZwghJeYDUpgE8K8sSTCLtQdllIYH7Onfng28lI5YMhLrBPU0 ttr12UIkG9hAplUTCGP1DWRearmJKCryNYPW5TK0Ia0wMMEIcBkWecgzI8SLm+Fp C71oOBjVKy9hqzHGIVBjdXdShP/LZS+V54woLFrnkXHRmQsEj5mNfAfOrTUZ4A4X rcnjNJL1450jbcijRIBBiFKLFhGOMO0U -----END CERTIFICATE-----Generated at Mon May 5 03:33:24 2025 by rpki-client