$ rpki-client -vvf rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft File: 6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft (raw, json) Hash identifier: vvvdm37QUWcRgQVxZ+/jLCcHmDu2gd7Ao4B9fFVCGUQ= Subject key identifier: C3:D5:D4:EF:19:16:EB:09:3C:0E:92:6B:92:5F:69:9E:14:AC:7E:91 Authority key identifier: E9:36:74:B1:F3:B6:91:6B:2B:63:63:B8:61:D6:B7:7B:39:05:DD:D8 Certificate issuer: /CN=A91889B6/serialNumber=E93674B1F3B6916B2B6363B861D6B77B3905DDD8 Certificate serial: 3473 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft Manifest number: 346F Signing time: Sun 06 Apr 2025 14:49:28 +0000 Manifest this update: Sun 06 Apr 2025 14:49:27 +0000 Manifest next update: Sun 13 Apr 2025 14:49:27 +0000 Files and hashes: 1: 6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl (hash: BHlOGLEf0bLkt5Y1DUc9XnPBMfWpiXYjrUukOu3IYy0=) 2: 8D57E1664D0911EEA9837D4AC4F9AE02.roa (hash: ANRth1hLqzWtOuNRps1oUpwLuw2TshWbOFj4QYFgW9U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13427 (0x3473) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91889B6 Validity Not Before: Apr 6 14:49:27 2025 GMT Not After : Apr 13 14:49:27 2025 GMT Subject: CN=67f29478-d1f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:23:3b:48:4a:34:af:90:c9:15:dd:75:03:9f: e1:04:33:11:9e:8c:bb:fc:16:0e:a0:94:3e:3e:36: 6b:e3:89:5b:96:d7:a5:b0:0b:58:5e:41:04:d3:e4: a7:9a:8a:91:c2:e5:fa:1b:e8:5a:29:86:5e:bf:a2: 7e:ea:af:11:61:75:1a:1e:d9:80:27:ad:f6:bb:f2: 4e:c3:ea:6b:a9:c7:d3:36:51:40:bf:d2:0e:21:99: 34:fa:61:50:68:8f:2e:f8:5c:5a:d4:fe:30:37:d8: ea:87:d2:b5:d4:92:89:a0:6d:a1:78:51:6b:13:8a: 52:9c:83:ce:cd:88:1a:c7:87:c4:10:e4:dd:72:bd: d4:9b:68:46:10:dd:ac:0e:b5:83:9d:c0:a7:34:ce: 01:ac:62:8c:ba:57:9d:0b:f9:5c:99:ef:10:6b:47: 1a:bc:1d:8c:14:e2:77:d9:de:52:9d:6e:b0:29:a6: d0:4c:90:78:2d:81:05:a0:dc:77:4a:49:10:32:59: ed:ed:e5:d5:aa:f5:2e:95:36:93:dd:b5:93:88:82: 5f:e4:9d:df:0f:f5:8c:63:43:e2:a7:30:18:bd:66: 6a:c0:47:fe:3c:56:da:b6:da:ff:d0:09:17:f6:48: f3:e4:c8:fe:fb:ca:17:40:23:c0:d9:a8:43:a1:bc: 90:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:D5:D4:EF:19:16:EB:09:3C:0E:92:6B:92:5F:69:9E:14:AC:7E:91 X509v3 Authority Key Identifier: keyid:E9:36:74:B1:F3:B6:91:6B:2B:63:63:B8:61:D6:B7:7B:39:05:DD:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:25:40:27:67:dd:2b:aa:f3:83:41:97:68:96:30:62:ea:64: 14:b2:b7:a9:4a:24:d9:20:9c:a3:c4:58:1f:22:a9:ba:66:3a: 2a:54:8a:43:03:49:b7:0b:66:8e:02:27:53:09:15:cc:05:7f: ce:1e:14:fd:d3:4e:6d:b9:ae:b3:6c:9b:f0:b4:5c:fd:c3:81: e2:09:94:a6:bf:5c:52:0a:e9:ed:71:af:2d:13:19:1d:c8:dd: 32:aa:50:e2:60:0f:e2:c3:ac:12:2f:5b:d6:4b:04:63:77:01: 16:52:29:5b:cf:8f:e8:b4:1f:c6:c7:78:aa:eb:9d:32:12:3b: b9:9b:43:30:a3:85:6a:7e:16:98:0f:e1:2d:67:a0:a3:30:a6: c2:fc:dd:6a:77:63:67:2f:be:46:f8:15:31:05:b6:e1:d6:13: f7:0b:d3:6c:4a:2d:d6:14:87:2d:7e:b7:6f:02:de:a5:ba:79: f8:45:7d:01:d6:3c:98:d9:9d:0a:32:d3:da:c8:01:c0:c1:d9: e7:55:dc:bc:4f:8e:bc:65:66:dc:d0:8e:ea:c5:47:02:08:9a: 3a:5b:60:45:07:e5:90:41:5c:e1:9f:1e:df:55:af:a6:1a:d4: 73:fc:b0:0a:7b:12:04:9d:30:fb:fa:44:f2:e6:5e:ea:f4:58: f0:fb:54:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5QjYxMTAvBgNVBAUTKEU5MzY3NEIxRjNCNjkxNkIyQjYzNjNCODYxRDZCNzdC MzkwNURERDgwHhcNMjUwNDA2MTQ0OTI3WhcNMjUwNDEzMTQ0OTI3WjAYMRYwFAYD VQQDEw02N2YyOTQ3OC1kMWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqSM7SEo0r5DJFd11A5/hBDMRnoy7/BYOoJQ+PjZr44lbltelsAtYXkEE0+Sn moqRwuX6G+haKYZev6J+6q8RYXUaHtmAJ632u/JOw+prqcfTNlFAv9IOIZk0+mFQ aI8u+Fxa1P4wN9jqh9K11JKJoG2heFFrE4pSnIPOzYgax4fEEOTdcr3Um2hGEN2s DrWDncCnNM4BrGKMuledC/lcme8Qa0cavB2MFOJ32d5SnW6wKabQTJB4LYEFoNx3 SkkQMlnt7eXVqvUulTaT3bWTiIJf5J3fD/WMY0PipzAYvWZqwEf+PFbattr/0AkX 9kjz5Mj++8oXQCPA2ahDobyQpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMPV1O8Z FusJPA6Sa5JfaZ4UrH6RMB8GA1UdIwQYMBaAFOk2dLHztpFrK2NjuGHWt3s5Bd3Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODlCNi8yQzRFRjk3NjFE OTYxMUUyQTY1NDhFN0UwOEIwMkNEMi82VFowc2ZPMmtXc3JZMk80WWRhM2V6a0Yz ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZUWjBzZk8ya1dzclkyTzRZZGEzZXprRjNkZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODlCNi8yQzRFRjk3NjFEOTYxMUUyQTY1NDhFN0UwOEIwMkNEMi82VFowc2ZPMmtX c3JZMk80WWRhM2V6a0YzZGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYJUAnZ90rqvODQZdoljBi6mQUsrepSiTZIJyjxFgfIqm6ZjoqVIpD A0m3C2aOAidTCRXMBX/OHhT9005tua6zbJvwtFz9w4HiCZSmv1xSCuntca8tExkd yN0yqlDiYA/iw6wSL1vWSwRjdwEWUilbz4/otB/Gx3iq650yEju5m0Mwo4VqfhaY D+EtZ6CjMKbC/N1qd2NnL75G+BUxBbbh1hP3C9NsSi3WFIctfrdvAt6lunn4RX0B 1jyY2Z0KMtPayAHAwdnnVdy8T468ZWbc0I7qxUcCCJo6W2BFB+WQQVzhnx7fVa+m GtRz/LAKexIEnTD7+kTy5l7q9Fjw+1Ss -----END CERTIFICATE-----Generated at Sun Apr 6 23:41:24 2025 by rpki-client