$ rpki-client -vvf rpki.apnic.net/member_repository/A918BFA2/137678201D9611E2B3FB577E08B02CD2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.mft File: 6wSl6qrVHVvys-1-Z1_U1Ka2QFk.mft (raw, json) Hash identifier: mxkYWyYVT2HK2F4tkP4UlR/gXwYeDh+/dqgY8JPnO6M= Subject key identifier: B6:93:3A:6A:2D:2A:AB:2E:3A:D1:0D:D1:D0:39:D6:15:1C:49:44:A3 Authority key identifier: EB:04:A5:EA:AA:D5:1D:5B:F2:B3:ED:7E:67:5F:D4:D4:A6:B6:40:59 Certificate issuer: /CN=A918BFA2/serialNumber=EB04A5EAAAD51D5BF2B3ED7E675FD4D4A6B64059 Certificate serial: 3468 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BFA2/137678201D9611E2B3FB577E08B02CD2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.mft Manifest number: 3468 Signing time: Fri 04 Apr 2025 14:50:06 +0000 Manifest this update: Fri 04 Apr 2025 14:50:06 +0000 Manifest next update: Fri 11 Apr 2025 14:50:06 +0000 Files and hashes: 1: 6wSl6qrVHVvys-1-Z1_U1Ka2QFk.crl (hash: eAjzAheaPJrzmqPmEsoI6Wh1eDbeYTuhFilClflxNM0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BFA2/137678201D9611E2B3FB577E08B02CD2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.crl rsync://rpki.apnic.net/member_repository/A918BFA2/137678201D9611E2B3FB577E08B02CD2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 14:50:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13416 (0x3468) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BFA2 Validity Not Before: Apr 4 14:50:06 2025 GMT Not After : Apr 11 14:50:06 2025 GMT Subject: CN=67eff19e-b968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b9:8f:17:c2:1b:14:1d:6d:89:e3:ec:b9:46: 3b:70:22:c1:5d:68:91:e9:f1:ab:50:f5:c9:2f:f9: 83:96:18:8c:32:ed:af:84:59:45:6a:20:0c:57:51: 97:f0:cd:91:d6:bd:94:7f:89:56:f2:fe:7a:9a:5d: c3:e6:69:71:35:46:e2:69:80:4e:a7:18:ef:ef:3b: 8f:79:99:12:08:60:61:05:b2:0e:39:51:46:53:e2: 96:57:11:94:28:17:68:0b:72:99:d0:5a:f1:e4:39: 1f:85:ee:60:75:2e:08:ae:40:a5:35:dc:f0:30:93: 8f:d7:74:ba:de:1f:0e:cc:63:61:b2:e9:e7:66:9c: 1f:9a:a1:11:93:e0:a0:36:30:60:18:b9:a1:04:9b: c2:3f:b0:2c:05:37:cb:e5:70:9e:89:53:16:14:68: 94:da:93:35:52:94:0e:42:da:81:31:2c:d4:ef:e3: 4b:17:5b:d0:b8:5f:ec:a3:e5:e3:ec:d0:f7:b9:5d: 89:36:ea:4a:30:4d:db:47:80:0d:4c:25:99:c3:a8: e4:1c:f1:6d:0e:40:61:5b:98:33:9e:7b:22:90:ac: f2:c0:4e:d6:20:b6:3b:e7:e3:fe:fe:07:92:b1:86: 2f:0f:15:6f:54:f2:6f:6c:1c:ab:d9:05:61:2a:62: 93:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:93:3A:6A:2D:2A:AB:2E:3A:D1:0D:D1:D0:39:D6:15:1C:49:44:A3 X509v3 Authority Key Identifier: keyid:EB:04:A5:EA:AA:D5:1D:5B:F2:B3:ED:7E:67:5F:D4:D4:A6:B6:40:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BFA2/137678201D9611E2B3FB577E08B02CD2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BFA2/137678201D9611E2B3FB577E08B02CD2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:19:ff:f2:d1:75:b8:fc:49:6f:a5:c0:4b:68:2e:94:e2:38: e5:ee:50:b0:37:8a:cf:2e:f9:04:c1:23:f4:bd:dc:ba:fd:2f: ba:35:45:64:02:9d:ea:45:e3:c8:3e:6b:f5:bb:06:de:52:83: ce:af:eb:3d:c0:64:63:1f:62:3a:14:40:5e:d4:9d:46:fd:a4: cc:45:6f:cd:6e:9d:7a:9b:25:d3:02:7a:a9:94:38:6c:95:63: 8b:26:87:5d:f0:fd:ae:da:fe:ff:b2:e0:6f:47:00:70:47:ec: 1b:42:ea:c7:cc:46:76:f2:1d:c8:bf:91:a8:38:1f:bf:f8:c4: 3d:69:ea:70:8b:0e:f4:26:2c:cb:d4:ac:f9:38:87:a7:90:cd: 74:8c:35:a3:54:dc:cb:f3:85:c1:7e:38:3e:4e:5a:38:e0:50: b0:8b:ba:6b:f6:2d:d4:30:c3:21:79:f8:a4:97:86:17:06:c9: e3:60:fb:47:c1:aa:26:f1:57:bc:04:fe:85:f7:ef:d8:68:ba: e6:c8:ae:a3:77:bc:06:82:e1:4b:95:2e:06:37:01:83:8f:42: 94:f7:87:8c:1c:c2:c1:b8:78:dd:58:59:77:e5:d9:66:3c:95: fc:58:9a:fe:46:ed:65:2b:3a:29:f8:e1:95:5f:94:54:b9:bf: 7d:18:d2:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNGgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJGQTIxMTAvBgNVBAUTKEVCMDRBNUVBQUFENTFENUJGMkIzRUQ3RTY3NUZENEQ0 QTZCNjQwNTkwHhcNMjUwNDA0MTQ1MDA2WhcNMjUwNDExMTQ1MDA2WjAYMRYwFAYD VQQDEw02N2VmZjE5ZS1iOTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAormPF8IbFB1tiePsuUY7cCLBXWiR6fGrUPXJL/mDlhiMMu2vhFlFaiAMV1GX 8M2R1r2Uf4lW8v56ml3D5mlxNUbiaYBOpxjv7zuPeZkSCGBhBbIOOVFGU+KWVxGU KBdoC3KZ0Frx5Dkfhe5gdS4IrkClNdzwMJOP13S63h8OzGNhsunnZpwfmqERk+Cg NjBgGLmhBJvCP7AsBTfL5XCeiVMWFGiU2pM1UpQOQtqBMSzU7+NLF1vQuF/so+Xj 7ND3uV2JNupKME3bR4ANTCWZw6jkHPFtDkBhW5gznnsikKzywE7WILY75+P+/geS sYYvDxVvVPJvbByr2QVhKmKT/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLaTOmot KqsuOtEN0dA51hUcSUSjMB8GA1UdIwQYMBaAFOsEpeqq1R1b8rPtfmdf1NSmtkBZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkZBMi8xMzc2NzgyMDFE OTYxMUUyQjNGQjU3N0UwOEIwMkNEMi82d1NsNnFyVkhWdnlzLTEtWjFfVTFLYTJR RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ3U2w2cXJWSFZ2eXMtMS1aMV9VMUthMlFGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkZBMi8xMzc2NzgyMDFEOTYxMUUyQjNGQjU3N0UwOEIwMkNEMi82d1NsNnFyVkhW dnlzLTEtWjFfVTFLYTJRRmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtGf/y0XW4/ElvpcBLaC6U4jjl7lCwN4rPLvkEwSP0vdy6/S+6NUVk Ap3qRePIPmv1uwbeUoPOr+s9wGRjH2I6FEBe1J1G/aTMRW/Nbp16myXTAnqplDhs lWOLJodd8P2u2v7/suBvRwBwR+wbQurHzEZ28h3Iv5GoOB+/+MQ9aepwiw70JizL 1Kz5OIenkM10jDWjVNzL84XBfjg+Tlo44FCwi7pr9i3UMMMhefikl4YXBsnjYPtH waom8Ve8BP6F9+/YaLrmyK6jd7wGguFLlS4GNwGDj0KU94eMHMLBuHjdWFl35dlm PJX8WJr+Ru1lKzop+OGVX5RUub99GNLx -----END CERTIFICATE-----Generated at Fri Apr 4 22:10:48 2025 by rpki-client