$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft File: 1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft (raw, json) Hash identifier: 801nk9uSl361RSOtcnDZqC85gNwPt/4QblhnEK45vM0= Subject key identifier: C3:46:76:A1:F4:F5:20:43:3A:22:7E:03:2D:AA:21:48:A6:D4:55:29 Authority key identifier: D6:F2:BA:AE:7A:52:0F:AA:46:82:CA:DC:36:93:66:0B:9E:1F:F1:04 Certificate issuer: /CN=A91FC8B6/serialNumber=D6F2BAAE7A520FAA4682CADC3693660B9E1FF104 Certificate serial: 0174 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vK6rnpSD6pGgsrcNpNmC54f8QQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft Manifest number: 0171 Signing time: Mon 05 May 2025 02:46:22 +0000 Manifest this update: Mon 05 May 2025 02:46:21 +0000 Manifest next update: Mon 12 May 2025 02:46:21 +0000 Files and hashes: 1: 1vK6rnpSD6pGgsrcNpNmC54f8QQ.crl (hash: 34Gf5Sh3J+bF6MWUwQOEk4gh/t6Qctg+KQOl42i2cvE=) 2: 37B81F7AF64511ED8C736D76C4F9AE02.roa (hash: ElQvBJV6B10UNvlVIlGas46V55/K9saRpZMoFdDMc0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.crl rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vK6rnpSD6pGgsrcNpNmC54f8QQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 02:46:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 372 (0x174) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC8B6, serialNumber=D6F2BAAE7A520FAA4682CADC3693660B9E1FF104 Validity Not Before: May 5 02:46:21 2025 GMT Not After : May 12 02:46:21 2025 GMT Subject: CN=6818267e-ae46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:81:51:7e:fe:75:87:8a:56:d1:87:ba:8f:ec: 87:26:59:39:c5:d0:b0:4e:23:af:d3:16:2c:9b:07: 75:bb:db:dc:7e:2e:d5:e8:6a:1a:a5:b4:00:0f:a5: 98:b3:bc:ae:c4:a6:11:a8:ee:40:c3:89:1a:dc:ca: 15:df:1f:3a:56:0d:19:2e:fb:a9:9a:1e:ef:c0:7c: ef:17:24:14:bd:2d:3c:8c:21:93:b1:a0:74:d2:bd: f1:0f:b6:47:b1:31:53:2c:57:72:97:4c:3c:b0:67: 3a:00:3b:8a:3c:a2:36:94:06:c3:df:5e:50:c0:16: 4d:72:d6:f7:72:fa:8a:ac:ea:69:e0:73:7b:3c:35: 3d:42:c6:30:6b:23:a5:2c:0f:8f:67:f2:d3:b2:6b: 70:8a:18:4b:a2:c4:47:f7:59:85:6b:82:36:83:57: fd:64:fe:22:05:96:4c:0e:44:40:8d:1b:bb:3a:63: 55:73:4b:d6:de:4e:e1:9e:4e:3f:80:44:34:83:24: 11:8a:d3:c1:d4:30:4d:1f:2d:9b:0c:3d:ab:4a:31: 7a:f7:db:9f:55:34:72:a7:a1:c3:16:43:9b:94:91: 36:31:1d:1a:7c:7d:2f:df:a2:dd:24:67:4e:60:1d: e0:cf:99:8d:3d:15:bd:30:49:69:3e:13:5a:d5:dd: e3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:46:76:A1:F4:F5:20:43:3A:22:7E:03:2D:AA:21:48:A6:D4:55:29 X509v3 Authority Key Identifier: keyid:D6:F2:BA:AE:7A:52:0F:AA:46:82:CA:DC:36:93:66:0B:9E:1F:F1:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vK6rnpSD6pGgsrcNpNmC54f8QQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:4c:da:d7:df:7e:2c:18:d2:ec:fd:82:a4:32:73:15:e8:92: 81:cf:dc:49:56:87:8f:ff:98:57:c4:c6:9e:e5:c1:66:61:2d: 60:e3:1f:80:88:af:9c:1f:c8:23:a5:6e:dc:6e:a3:a2:a3:c1: 75:db:b4:95:30:63:b4:a4:06:db:d8:4b:72:62:01:da:a2:0c: 5b:15:43:0c:e0:72:f4:84:e5:65:ae:db:05:37:bc:5f:d2:f4: 89:fd:c4:6a:d8:b4:f2:f5:05:e0:9f:17:b0:d2:88:71:03:a7: e0:48:72:33:9e:3c:c5:5a:1b:b3:aa:ea:97:11:33:8e:2a:c4: 8f:0e:f5:1d:3c:0c:58:b2:ee:2a:59:a9:61:4c:cf:59:8e:de: bc:60:13:fe:93:fc:16:b1:12:b0:7e:17:08:a6:48:e8:d5:e2: 1e:ab:fb:32:2d:9e:6b:64:99:87:ab:47:09:86:6e:e8:37:1c: e4:5b:c8:f9:9f:44:da:58:79:ea:ea:24:0d:b0:cc:46:a1:b9: a2:db:f9:9d:bb:7e:eb:7a:25:da:89:3d:2d:80:12:b6:2a:e2: ab:41:ae:3f:b2:f8:bf:e1:aa:89:a9:3f:37:bf:54:c6:38:d8: a3:a3:c7:fa:86:1c:38:77:d9:55:25:11:23:dc:4d:4d:5e:fe: 66:b6:18:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM4QjYxMTAvBgNVBAUTKEQ2RjJCQUFFN0E1MjBGQUE0NjgyQ0FEQzM2OTM2NjBC OUUxRkYxMDQwHhcNMjUwNTA1MDI0NjIxWhcNMjUwNTEyMDI0NjIxWjAYMRYwFAYD VQQDEw02ODE4MjY3ZS1hZTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA04FRfv51h4pW0Ye6j+yHJlk5xdCwTiOv0xYsmwd1u9vcfi7V6GoapbQAD6WY s7yuxKYRqO5Aw4ka3MoV3x86Vg0ZLvupmh7vwHzvFyQUvS08jCGTsaB00r3xD7ZH sTFTLFdyl0w8sGc6ADuKPKI2lAbD315QwBZNctb3cvqKrOpp4HN7PDU9QsYwayOl LA+PZ/LTsmtwihhLosRH91mFa4I2g1f9ZP4iBZZMDkRAjRu7OmNVc0vW3k7hnk4/ gEQ0gyQRitPB1DBNHy2bDD2rSjF699ufVTRyp6HDFkOblJE2MR0afH0v36LdJGdO YB3gz5mNPRW9MElpPhNa1d3jAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMNGdqH0 9SBDOiJ+Ay2qIUim1FUpMB8GA1UdIwQYMBaAFNbyuq56Ug+qRoLK3DaTZgueH/EE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzhCNi9FQzYyMkIwNkY2 M0YxMUVEOTc4ODJDNzJDNEY5QUUwMi8xdks2cm5wU0Q2cEdnc3JjTnBObUM1NGY4 UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF2SzZybnBTRDZwR2dzcmNOcE5tQzU0ZjhRUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzhCNi9FQzYyMkIwNkY2M0YxMUVEOTc4ODJDNzJDNEY5QUUwMi8xdks2cm5wU0Q2 cEdnc3JjTnBObUM1NGY4UVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1TNrX334sGNLs/YKkMnMV6JKBz9xJVoeP/5hXxMae5cFmYS1g4x+A iK+cH8gjpW7cbqOio8F127SVMGO0pAbb2EtyYgHaogxbFUMM4HL0hOVlrtsFN7xf 0vSJ/cRq2LTy9QXgnxew0ohxA6fgSHIznjzFWhuzquqXETOOKsSPDvUdPAxYsu4q WalhTM9Zjt68YBP+k/wWsRKwfhcIpkjo1eIeq/syLZ5rZJmHq0cJhm7oNxzkW8j5 n0TaWHnq6iQNsMxGobmi2/mdu37reiXaiT0tgBK2KuKrQa4/svi/4aqJqT83v1TG ONijo8f6hhw4d9lVJREj3E1NXv5mthhM -----END CERTIFICATE-----Generated at Tue May 6 09:46:34 2025 by rpki-client