$ rpki-client -vvf rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/6sqCrlKk_xgNM2F5-DlQpasLx7M.mft File: 6sqCrlKk_xgNM2F5-DlQpasLx7M.mft (raw, json) Hash identifier: cp+ZeSogmJfPrA9em9HRrZ66dK7X4JoaVD5m3qJfqcA= Subject key identifier: 71:6E:C5:79:F5:0B:58:7A:96:2F:C1:E4:AE:91:02:D0:8E:3E:6E:54 Authority key identifier: EA:CA:82:AE:52:A4:FF:18:0D:33:61:79:F8:39:50:A5:AB:0B:C7:B3 Certificate issuer: /CN=A91486D3/serialNumber=EACA82AE52A4FF180D336179F83950A5AB0BC7B3 Certificate serial: C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sqCrlKk_xgNM2F5-DlQpasLx7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/6sqCrlKk_xgNM2F5-DlQpasLx7M.mft Manifest number: C1 Signing time: Fri 11 Apr 2025 05:04:09 +0000 Manifest this update: Fri 11 Apr 2025 05:04:08 +0000 Manifest next update: Fri 18 Apr 2025 05:04:08 +0000 Files and hashes: 1: 6sqCrlKk_xgNM2F5-DlQpasLx7M.crl (hash: ghbzpnCVAHL7hFF3VQI1KsVX8K89emjIFixik7tUzFQ=) 2: C2A2E774EEC311EE8832C93AC4F9AE02.roa (hash: ms7snh2IzeS7RUyS63vDyik3Jw03vBKHQY1xlDWMLMg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/6sqCrlKk_xgNM2F5-DlQpasLx7M.crl rsync://rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/6sqCrlKk_xgNM2F5-DlQpasLx7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sqCrlKk_xgNM2F5-DlQpasLx7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 05:04:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 195 (0xc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91486D3, serialNumber=EACA82AE52A4FF180D336179F83950A5AB0BC7B3 Validity Not Before: Apr 11 05:04:08 2025 GMT Not After : Apr 18 05:04:08 2025 GMT Subject: CN=67f8a2c9-3615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:e3:1a:fa:f1:88:ed:56:93:90:3f:49:e8:45: af:e2:e0:99:d6:9e:58:bf:9a:23:e5:2a:6d:77:30: 0e:c0:19:74:88:f1:cc:58:d0:80:a6:53:df:52:d5: 0c:ec:97:30:f2:8c:8f:f4:c1:26:20:bc:85:79:6e: a2:cf:a1:c2:53:81:ca:93:a0:c3:13:1a:d7:68:f5: 26:92:7c:32:34:38:db:88:c7:0e:3c:2f:92:d8:49: cb:38:e3:60:c6:26:5d:6f:cb:85:be:9b:59:53:87: bd:c4:bc:ad:c1:55:f5:c6:3c:7f:c9:5f:55:88:fc: 69:45:5f:bf:ec:b1:ae:3b:50:00:4d:f4:fa:86:16: 7f:36:f3:13:27:4d:b4:04:4a:8d:b5:64:f7:45:2a: 90:ed:1e:f5:66:77:26:3e:7b:bc:be:80:0a:03:1b: 91:8c:ad:aa:23:03:26:73:ca:8b:97:0f:eb:65:61: a5:52:f9:a9:90:3e:a4:61:92:a5:90:27:46:8c:2c: 30:60:b0:e0:92:dc:12:74:50:43:9f:b8:e9:53:ae: 7d:ee:b5:79:9a:a5:8c:8e:67:6e:d4:9e:9b:33:ad: 46:f8:d3:22:69:a8:26:a4:34:3f:23:21:0f:20:3c: 89:2a:da:3a:71:05:6d:fc:73:e2:ff:7b:c5:50:74: fb:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:6E:C5:79:F5:0B:58:7A:96:2F:C1:E4:AE:91:02:D0:8E:3E:6E:54 X509v3 Authority Key Identifier: keyid:EA:CA:82:AE:52:A4:FF:18:0D:33:61:79:F8:39:50:A5:AB:0B:C7:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/6sqCrlKk_xgNM2F5-DlQpasLx7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sqCrlKk_xgNM2F5-DlQpasLx7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/6sqCrlKk_xgNM2F5-DlQpasLx7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:9c:c5:28:f7:c1:cc:8d:dc:24:19:71:7d:7f:fb:bd:82:bf: aa:27:de:29:1e:3d:2c:66:87:a0:2c:4a:9b:e7:05:33:59:a1: a3:f3:46:86:a9:77:60:e2:f7:31:cd:46:68:42:c7:8f:fa:31: 75:29:38:9e:dc:96:dd:8a:d7:2a:bd:1a:90:00:ff:cd:a1:aa: bf:35:31:b6:51:83:71:43:ac:5c:f8:64:54:9a:b7:ca:74:2c: bd:59:08:47:f4:06:11:12:60:cd:68:b4:30:b1:0c:ed:75:83: 4a:8f:94:27:25:d5:0e:53:29:e4:46:88:b6:71:37:a3:91:c9: 99:bb:61:cd:bd:99:5c:52:f5:9a:11:6f:76:3f:d8:3e:14:1e: ad:c3:9a:fa:57:61:aa:5c:af:9a:1e:e2:65:13:0b:54:af:e8: 1a:8f:32:57:66:fb:ff:38:a7:17:65:99:7c:6c:88:53:65:f8: 2b:ba:06:42:dc:a1:a8:03:b2:6e:2e:d0:56:66:27:ae:75:3a: 04:43:38:14:b8:fc:e0:e7:28:d9:c6:2a:d2:55:b8:a2:5d:a3: 7a:c9:d5:10:15:62:40:42:cc:7e:7b:4a:06:a6:49:b4:a0:8f: ca:ca:56:9c:e1:22:9c:bd:38:e4:75:77:84:92:b0:0b:3a:3a: 74:20:24:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg2RDMxMTAvBgNVBAUTKEVBQ0E4MkFFNTJBNEZGMTgwRDMzNjE3OUY4Mzk1MEE1 QUIwQkM3QjMwHhcNMjUwNDExMDUwNDA4WhcNMjUwNDE4MDUwNDA4WjAYMRYwFAYD VQQDEw02N2Y4YTJjOS0zNjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6+Ma+vGI7VaTkD9J6EWv4uCZ1p5Yv5oj5SptdzAOwBl0iPHMWNCAplPfUtUM 7Jcw8oyP9MEmILyFeW6iz6HCU4HKk6DDExrXaPUmknwyNDjbiMcOPC+S2EnLOONg xiZdb8uFvptZU4e9xLytwVX1xjx/yV9ViPxpRV+/7LGuO1AATfT6hhZ/NvMTJ020 BEqNtWT3RSqQ7R71ZncmPnu8voAKAxuRjK2qIwMmc8qLlw/rZWGlUvmpkD6kYZKl kCdGjCwwYLDgktwSdFBDn7jpU6597rV5mqWMjmdu1J6bM61G+NMiaagmpDQ/IyEP IDyJKto6cQVt/HPi/3vFUHT7zQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHFuxXn1 C1h6li/B5K6RAtCOPm5UMB8GA1UdIwQYMBaAFOrKgq5SpP8YDTNhefg5UKWrC8ez MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODZEMy8xRkEyOTExNEVF QzMxMUVFQjJEQkZCMUJDNEY5QUUwMi82c3FDcmxLa194Z05NMkY1LURsUXBhc0x4 N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZzcUNybEtrX3hnTk0yRjUtRGxRcGFzTHg3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODZEMy8xRkEyOTExNEVFQzMxMUVFQjJEQkZCMUJDNEY5QUUwMi82c3FDcmxLa194 Z05NMkY1LURsUXBhc0x4N00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPnMUo98HMjdwkGXF9f/u9gr+qJ94pHj0sZoegLEqb5wUzWaGj80aG qXdg4vcxzUZoQseP+jF1KTie3JbditcqvRqQAP/Noaq/NTG2UYNxQ6xc+GRUmrfK dCy9WQhH9AYREmDNaLQwsQztdYNKj5QnJdUOUynkRoi2cTejkcmZu2HNvZlcUvWa EW92P9g+FB6tw5r6V2GqXK+aHuJlEwtUr+gajzJXZvv/OKcXZZl8bIhTZfgrugZC 3KGoA7JuLtBWZieudToEQzgUuPzg5yjZxirSVbiiXaN6ydUQFWJAQsx+e0oGpkm0 oI/Kylac4SKcvTjkdXeEkrALOjp0ICRL -----END CERTIFICATE-----Generated at Sun Apr 13 02:19:08 2025 by rpki-client