$ rpki-client -vvf rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft File: 6O2nHIlk0p8GwkorbRt3FTyo84k.mft (raw, json) Hash identifier: 70ApvQD1kaTMbxMGa9LDFmgi/98qw7NYgtwgpP95ztw= Subject key identifier: CD:95:78:C0:C4:1F:39:EE:2F:75:AC:3A:21:E7:31:3A:60:6B:4E:4C Authority key identifier: E8:ED:A7:1C:89:64:D2:9F:06:C2:4A:2B:6D:1B:77:15:3C:A8:F3:89 Certificate issuer: /CN=A91F724B/serialNumber=E8EDA71C8964D29F06C24A2B6D1B77153CA8F389 Certificate serial: 2078 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft Manifest number: 2053 Signing time: Mon 12 May 2025 15:56:31 +0000 Manifest this update: Mon 12 May 2025 15:56:30 +0000 Manifest next update: Mon 19 May 2025 15:56:30 +0000 Files and hashes: 1: 6O2nHIlk0p8GwkorbRt3FTyo84k.crl (hash: 6oWEIfnIG+ig5D8n46ET3F3GR/GC4IE8CmRfX37GUDc=) 2: D6702FB2C51411E7A0AC1A77C4F9AE02.roa (hash: dRYh9WAvcIumZjCZ5S62u32XoLkiqwXXygrg2DE1FBI=) 3: 36AB4096C51611E7AECA8B79C4F9AE02.roa (hash: 0oF1Qfg6/q63oXyqNiJvhv+IBvlt379syGArKmuw6+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.crl rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 15:56:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8312 (0x2078) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F724B, serialNumber=E8EDA71C8964D29F06C24A2B6D1B77153CA8F389 Validity Not Before: May 12 15:56:30 2025 GMT Not After : May 19 15:56:30 2025 GMT Subject: CN=68221a2e-0bc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:74:1c:fb:41:7d:a0:4a:fa:52:a5:93:e6:94: c1:eb:6e:31:e7:f1:c0:c4:e2:38:a9:10:8c:ef:85: 94:9b:f8:02:d3:4c:b5:b2:ac:46:de:6b:f7:6b:15: e1:8d:62:5f:95:a1:0b:f1:0d:c9:07:b1:a4:98:c2: 6b:fd:47:89:c8:4f:cf:ba:d4:ec:07:a8:09:a1:b0: 99:c1:4f:43:bd:6d:1f:12:bb:41:e6:87:e9:43:5e: e4:4b:43:00:e7:ef:e5:0a:fd:bb:d1:bf:df:85:93: 42:96:42:24:2d:8f:a0:36:a1:d9:cc:cf:71:12:c3: e8:fe:d6:8e:a0:6d:9c:a7:ab:04:32:26:18:84:66: 35:a3:70:dc:5d:79:f1:66:7e:44:94:46:a1:81:7b: 71:56:1c:37:3a:01:b1:39:36:d1:a1:34:08:79:d1: dd:fe:df:80:15:fd:3a:08:80:5e:02:54:ab:97:55: 73:9a:f2:00:de:e5:1d:e1:f4:bb:bb:e0:ce:cf:90: fc:fe:c9:e5:c2:74:4e:a1:7c:fb:b0:f2:5d:17:ed: a7:1d:4d:2f:43:46:b2:cf:9a:d3:80:0a:f3:83:6a: 8e:6a:09:36:13:c0:79:ac:21:6f:f1:67:ed:3f:8f: 9b:29:7c:2f:fb:aa:91:2b:cd:0f:d3:91:21:84:83: ad:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:95:78:C0:C4:1F:39:EE:2F:75:AC:3A:21:E7:31:3A:60:6B:4E:4C X509v3 Authority Key Identifier: keyid:E8:ED:A7:1C:89:64:D2:9F:06:C2:4A:2B:6D:1B:77:15:3C:A8:F3:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:ea:84:23:06:f4:bf:71:fd:a0:b4:0b:8b:51:17:56:38:64: 8f:9e:ee:6f:6e:71:32:93:71:4a:0c:18:be:17:18:22:e2:ee: 02:e5:ff:b3:76:59:73:f0:df:f9:0b:39:af:e9:15:82:32:ae: c5:71:f2:bd:63:bf:02:57:74:5a:d2:be:e8:c4:f9:45:0c:de: 80:85:b2:0d:f5:5c:0f:5e:ab:4f:31:4f:7e:71:18:f9:c5:7d: bc:78:8a:0f:08:a7:0d:cf:27:f5:34:15:7c:a6:14:3d:56:49: 8e:f5:e7:ef:30:d6:4a:2e:72:8d:1d:cb:a9:7b:f2:63:b1:47: 0c:08:1a:b2:7c:9a:f7:4c:0e:98:bb:4d:77:bc:e3:f3:89:b2: 27:7c:cc:74:2c:e5:01:d3:a0:7e:c7:a6:c8:f3:df:51:10:fd: 1e:c3:78:85:9d:73:d8:00:fb:4f:68:2b:c0:8e:b2:9e:e4:0b: 0d:93:65:ed:b0:4c:c7:4c:91:2c:63:91:95:c0:34:4b:94:6d: 34:b8:ba:66:48:ed:f8:b5:2a:a1:c4:06:67:57:4a:82:3e:5c: 22:6c:0c:68:e6:5d:29:3b:57:9a:b7:ef:fd:41:4e:41:b1:9f: 98:9c:94:c6:61:97:97:7c:bf:82:6a:e2:4c:c9:ea:0e:94:39: 28:83:18:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIHgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjcyNEIxMTAvBgNVBAUTKEU4RURBNzFDODk2NEQyOUYwNkMyNEEyQjZEMUI3NzE1 M0NBOEYzODkwHhcNMjUwNTEyMTU1NjMwWhcNMjUwNTE5MTU1NjMwWjAYMRYwFAYD VQQDEw02ODIyMWEyZS0wYmM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuHQc+0F9oEr6UqWT5pTB624x5/HAxOI4qRCM74WUm/gC00y1sqxG3mv3axXh jWJflaEL8Q3JB7GkmMJr/UeJyE/PutTsB6gJobCZwU9DvW0fErtB5ofpQ17kS0MA 5+/lCv270b/fhZNClkIkLY+gNqHZzM9xEsPo/taOoG2cp6sEMiYYhGY1o3DcXXnx Zn5ElEahgXtxVhw3OgGxOTbRoTQIedHd/t+AFf06CIBeAlSrl1VzmvIA3uUd4fS7 u+DOz5D8/snlwnROoXz7sPJdF+2nHU0vQ0ayz5rTgArzg2qOagk2E8B5rCFv8Wft P4+bKXwv+6qRK80P05EhhIOtrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM2VeMDE HznuL3WsOiHnMTpga05MMB8GA1UdIwQYMBaAFOjtpxyJZNKfBsJKK20bdxU8qPOJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzI0Qi8xQkM3MUE2MjE2 ODkxMUU2OEVFRkQ5N0JDNEY5QUUwMi82TzJuSElsazBwOEd3a29yYlJ0M0ZUeW84 NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZPMm5ISWxrMHA4R3drb3JiUnQzRlR5bzg0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzI0Qi8xQkM3MUE2MjE2ODkxMUU2OEVFRkQ5N0JDNEY5QUUwMi82TzJuSElsazBw OEd3a29yYlJ0M0ZUeW84NGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBk6oQjBvS/cf2gtAuLURdWOGSPnu5vbnEyk3FKDBi+Fxgi4u4C5f+z dllz8N/5Czmv6RWCMq7FcfK9Y78CV3Ra0r7oxPlFDN6AhbIN9VwPXqtPMU9+cRj5 xX28eIoPCKcNzyf1NBV8phQ9VkmO9efvMNZKLnKNHcupe/JjsUcMCBqyfJr3TA6Y u013vOPzibInfMx0LOUB06B+x6bI899REP0ew3iFnXPYAPtPaCvAjrKe5AsNk2Xt sEzHTJEsY5GVwDRLlG00uLpmSO34tSqhxAZnV0qCPlwibAxo5l0pO1eat+/9QU5B sZ+YnJTGYZeXfL+CauJMyeoOlDkogxh4 -----END CERTIFICATE-----Generated at Wed May 14 07:31:50 2025 by rpki-client