$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.mft File: 6o2GS70rsdeM2IkKFQThETZ_ehM.mft (raw, json) Hash identifier: pnfll5DKDcfFUIMhX/3H8sPRBm53P434QCNv0bcq7Ng= Subject key identifier: 4E:BD:93:D7:C1:FC:7F:4A:68:FE:85:86:11:A8:BE:18:24:70:D1:12 Authority key identifier: EA:8D:86:4B:BD:2B:B1:D7:8C:D8:89:0A:15:04:E1:11:36:7F:7A:13 Certificate issuer: /CN=A91F6E65/serialNumber=EA8D864BBD2BB1D78CD8890A1504E111367F7A13 Certificate serial: 1236 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6o2GS70rsdeM2IkKFQThETZ_ehM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.mft Manifest number: 122F Signing time: Thu 08 May 2025 17:12:47 +0000 Manifest this update: Thu 08 May 2025 17:12:47 +0000 Manifest next update: Thu 15 May 2025 17:12:47 +0000 Files and hashes: 1: 6o2GS70rsdeM2IkKFQThETZ_ehM.crl (hash: YDg0aC/s4ba9Ez3Y6DdkDzVcIOPW/kfBmsQDOQwAfhc=) 2: F87DE4E2518011E98D519C48C4F9AE02.roa (hash: lNg/c5OqFouAW+fJH2dEOVDXDmJq4ytAeqadsiAMyGA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.crl rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6o2GS70rsdeM2IkKFQThETZ_ehM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 17:12:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4662 (0x1236) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6E65, serialNumber=EA8D864BBD2BB1D78CD8890A1504E111367F7A13 Validity Not Before: May 8 17:12:47 2025 GMT Not After : May 15 17:12:47 2025 GMT Subject: CN=681ce60f-f3cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:df:ff:12:ea:6f:c2:ab:7a:ce:aa:c8:4e:fb: a5:07:fe:66:fd:09:6c:99:95:0f:e8:96:10:d2:5b: 8d:cb:57:73:a3:d3:51:3a:27:9b:7a:ef:86:ce:de: 8c:da:73:73:58:ea:a8:3f:b3:02:22:7b:10:8a:97: c0:53:ee:7d:c2:b0:00:da:47:33:20:d2:09:bd:7a: 87:2f:2a:2a:48:e9:1e:5b:d7:7e:df:f5:fa:92:31: 0f:0b:6e:42:2d:c2:cf:ec:de:00:00:94:e3:d9:07: 1f:ec:60:5d:de:78:d0:b0:5a:df:a5:94:93:a3:d0: 9f:44:8c:91:8d:dd:37:c5:d5:66:aa:7e:eb:fc:95: 00:4a:e4:91:a3:6d:0d:fb:7c:6e:33:f2:30:67:20: 10:8c:4e:06:b2:4c:f3:49:ef:12:d8:30:bc:dc:d0: 9b:68:80:c4:fb:91:a7:a6:50:7a:58:d9:72:06:e0: ae:ce:e4:93:ba:77:ee:32:20:b6:51:07:14:92:c7: 82:47:63:73:13:1c:2f:07:7d:25:22:58:3d:44:19: 96:a7:6e:7b:81:6b:70:cb:33:6a:96:91:cb:00:31: dd:dd:18:c3:e3:a9:1a:74:51:eb:d3:27:3a:b0:a5: 56:1b:98:54:04:89:17:da:f6:16:75:5c:d0:bf:5c: 0a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:BD:93:D7:C1:FC:7F:4A:68:FE:85:86:11:A8:BE:18:24:70:D1:12 X509v3 Authority Key Identifier: keyid:EA:8D:86:4B:BD:2B:B1:D7:8C:D8:89:0A:15:04:E1:11:36:7F:7A:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6o2GS70rsdeM2IkKFQThETZ_ehM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:61:67:13:84:8a:28:80:11:fa:a1:4b:b2:0a:1e:2d:5f:0e: 88:05:fa:41:4b:88:6c:2a:52:92:5d:b3:f4:0d:a3:2f:bd:1f: eb:a8:97:45:91:21:17:12:13:11:76:d7:7e:7e:fa:60:1a:ad: 51:83:84:a0:67:99:fd:3a:d9:ed:b6:13:c4:0a:c5:ca:f1:44: 7b:2d:94:71:f6:13:56:0a:2b:99:29:0e:1b:91:34:56:f4:fb: 2a:81:0b:c1:7b:df:b4:bc:c7:de:20:62:b7:df:8e:a2:db:8c: ae:77:ad:c7:51:07:4b:1b:7f:96:90:8b:64:f0:ae:e5:57:67: 0c:07:15:c9:a4:56:ee:57:2e:0f:21:14:7c:9f:ad:50:6f:39: 0d:f3:79:7f:fc:17:78:01:04:d2:eb:0f:66:5d:aa:b4:ac:07: 21:3d:bf:60:a0:ea:a6:5f:41:96:2f:3d:3b:27:d1:b5:b3:5c: a3:b3:85:9f:af:1c:4e:f9:c9:e4:3a:12:6e:5e:7b:83:a8:a5: 37:4e:1e:e1:a7:6b:2b:cf:ae:fd:41:9d:95:7e:69:cd:c5:4f: 14:6a:dc:17:ef:c4:3d:d0:fb:ca:e9:54:59:10:65:73:0c:8f: bf:ee:ca:93:e0:fb:3a:43:5a:d8:19:90:a6:15:c1:e8:80:69: c4:46:8f:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZFNjUxMTAvBgNVBAUTKEVBOEQ4NjRCQkQyQkIxRDc4Q0Q4ODkwQTE1MDRFMTEx MzY3RjdBMTMwHhcNMjUwNTA4MTcxMjQ3WhcNMjUwNTE1MTcxMjQ3WjAYMRYwFAYD VQQDEw02ODFjZTYwZi1mM2NkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo9//Eupvwqt6zqrITvulB/5m/QlsmZUP6JYQ0luNy1dzo9NROiebeu+Gzt6M 2nNzWOqoP7MCInsQipfAU+59wrAA2kczINIJvXqHLyoqSOkeW9d+3/X6kjEPC25C LcLP7N4AAJTj2Qcf7GBd3njQsFrfpZSTo9CfRIyRjd03xdVmqn7r/JUASuSRo20N +3xuM/IwZyAQjE4GskzzSe8S2DC83NCbaIDE+5GnplB6WNlyBuCuzuSTunfuMiC2 UQcUkseCR2NzExwvB30lIlg9RBmWp257gWtwyzNqlpHLADHd3RjD46kadFHr0yc6 sKVWG5hUBIkX2vYWdVzQv1wKVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE69k9fB /H9KaP6FhhGovhgkcNESMB8GA1UdIwQYMBaAFOqNhku9K7HXjNiJChUE4RE2f3oT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkU2NS9GRUQ5M0E3Q0Q4 OEExMUU4QTNFQ0ZGNERDNEY5QUUwMi82bzJHUzcwcnNkZU0ySWtLRlFUaEVUWl9l aE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZvMkdTNzByc2RlTTJJa0tGUVRoRVRaX2VoTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkU2NS9GRUQ5M0E3Q0Q4OEExMUU4QTNFQ0ZGNERDNEY5QUUwMi82bzJHUzcwcnNk ZU0ySWtLRlFUaEVUWl9laE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmYWcThIoogBH6oUuyCh4tXw6IBfpBS4hsKlKSXbP0DaMvvR/rqJdF kSEXEhMRdtd+fvpgGq1Rg4SgZ5n9OtntthPECsXK8UR7LZRx9hNWCiuZKQ4bkTRW 9PsqgQvBe9+0vMfeIGK3346i24yud63HUQdLG3+WkItk8K7lV2cMBxXJpFbuVy4P IRR8n61QbzkN83l//Bd4AQTS6w9mXaq0rAchPb9goOqmX0GWLz07J9G1s1yjs4Wf rxxO+cnkOhJuXnuDqKU3Th7hp2srz679QZ2VfmnNxU8UatwX78Q90PvK6VRZEGVz DI+/7sqT4Ps6Q1rYGZCmFcHogGnERo8u -----END CERTIFICATE-----Generated at Sat May 10 04:49:25 2025 by rpki-client