$ rpki-client -vvf rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.mft File: 6ysMa5yLfwlHcYJnRq99Rg7cR6o.mft (raw, json) Hash identifier: KQK6weuPLlj6DLQNJWmNSgG3WSEWQfAgRvbT7t1BJSY= Subject key identifier: 89:05:9D:5F:00:E8:6C:A0:F4:59:F7:32:E3:CF:F7:51:A3:32:05:3A Authority key identifier: EB:2B:0C:6B:9C:8B:7F:09:47:71:82:67:46:AF:7D:46:0E:DC:47:AA Certificate issuer: /CN=A91A13C2/serialNumber=EB2B0C6B9C8B7F094771826746AF7D460EDC47AA Certificate serial: 04A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ysMa5yLfwlHcYJnRq99Rg7cR6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.mft Manifest number: 049B Signing time: Sat 05 Apr 2025 00:04:26 +0000 Manifest this update: Sat 05 Apr 2025 00:04:26 +0000 Manifest next update: Sat 12 Apr 2025 00:04:26 +0000 Files and hashes: 1: 6ysMa5yLfwlHcYJnRq99Rg7cR6o.crl (hash: oNmY8BqrXqRVTcJzC4wuleTuA4na4jhaIBqcOw+kkr4=) 2: A231B9362CEA11EC8F99F486C4F9AE02.roa (hash: 8LKcnydJB5oW4TBJzLAGx/1DAq+7TANc8tWAErbpeDg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.crl rsync://rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ysMa5yLfwlHcYJnRq99Rg7cR6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 00:04:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1184 (0x4a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A13C2 Validity Not Before: Apr 5 00:04:26 2025 GMT Not After : Apr 12 00:04:26 2025 GMT Subject: CN=67f0738a-309e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e6:e9:c2:c9:c7:66:db:70:2e:e8:44:59:b2: 63:1b:b4:9d:3f:36:71:d0:26:a5:47:0b:eb:c5:07: d1:20:75:88:ad:3b:8c:61:89:31:d0:16:7a:53:ec: 08:3d:3e:43:f1:57:31:dd:88:f6:c6:5e:9a:2e:9c: 6c:9f:c2:5e:34:15:f6:17:77:a5:69:cd:f0:2a:ea: c9:3c:00:41:b0:ec:74:52:ca:e8:7e:1f:8f:e7:ad: 2d:8c:6c:49:da:82:44:e1:8a:6c:2f:ef:e5:7d:bb: 6e:a0:68:7c:1b:b8:62:af:75:c9:70:fc:40:47:e4: 7b:f9:8c:8e:10:62:75:5b:5d:65:a8:c5:87:db:be: 89:66:1b:93:98:bd:20:91:fc:f5:11:64:ec:bd:59: b1:4b:ac:91:05:cc:af:63:c9:a9:b7:c7:05:75:1f: f9:76:d8:f4:57:a4:68:cc:5b:bf:ba:27:8a:cc:8b: cf:36:e5:c5:45:1f:1d:ea:ae:52:30:5d:b9:34:d2: f2:9e:1e:c1:34:6c:f8:0a:e0:fe:1c:01:2f:e1:86: b5:b4:00:64:62:6d:48:12:a7:2c:c4:09:34:c4:bf: 8e:74:29:a8:83:7e:ad:c2:91:16:45:ed:68:c3:39: 14:98:cf:68:03:da:f4:82:da:74:31:26:96:36:81: 3d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:05:9D:5F:00:E8:6C:A0:F4:59:F7:32:E3:CF:F7:51:A3:32:05:3A X509v3 Authority Key Identifier: keyid:EB:2B:0C:6B:9C:8B:7F:09:47:71:82:67:46:AF:7D:46:0E:DC:47:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ysMa5yLfwlHcYJnRq99Rg7cR6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:5c:a0:91:2c:81:b3:94:9d:b9:86:a8:f2:26:d3:66:bc:c1: 4d:07:eb:22:d4:41:99:85:a5:24:49:88:fe:9c:d0:8f:9c:d6: bb:05:b9:bd:26:bf:89:7c:bc:3f:ea:ad:ad:65:6a:c1:a4:95: 0d:24:7c:aa:f2:36:1b:2f:dc:62:22:14:c6:3b:b8:33:e5:c2: b4:70:5f:d6:b6:0d:2d:5f:ab:78:ed:8d:24:62:27:6a:fa:24: 17:ab:ce:06:20:3c:92:ca:18:31:78:c0:66:a1:05:2d:f9:8c: 2c:eb:9a:e4:7f:9c:f7:77:78:00:a0:33:fc:71:9c:ae:b3:ed: 9c:a0:00:33:d2:ca:ce:28:60:ae:ad:9b:0e:db:1f:81:a3:c5: a0:4f:ed:45:95:ff:5d:26:bd:53:8e:01:ea:10:bb:8b:9b:eb: 91:4f:65:dc:62:a4:79:08:01:d9:d3:5d:55:2f:43:65:cf:0e: 14:2c:b6:29:f2:22:6a:c7:9c:9f:09:ab:e0:89:92:c9:cf:41: d7:54:a1:f5:47:11:94:2a:60:28:e0:01:d4:3e:b5:de:36:f8: a1:06:76:aa:65:90:5a:b5:7d:ed:02:af:8f:94:af:48:c3:d6: 91:70:7c:d8:5c:2e:f3:b6:5c:19:68:75:70:0f:a0:de:ac:e8: 5f:d3:88:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTEzQzIxMTAvBgNVBAUTKEVCMkIwQzZCOUM4QjdGMDk0NzcxODI2NzQ2QUY3RDQ2 MEVEQzQ3QUEwHhcNMjUwNDA1MDAwNDI2WhcNMjUwNDEyMDAwNDI2WjAYMRYwFAYD VQQDEw02N2YwNzM4YS0zMDllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzObpwsnHZttwLuhEWbJjG7SdPzZx0CalRwvrxQfRIHWIrTuMYYkx0BZ6U+wI PT5D8Vcx3Yj2xl6aLpxsn8JeNBX2F3elac3wKurJPABBsOx0Usrofh+P560tjGxJ 2oJE4YpsL+/lfbtuoGh8G7hir3XJcPxAR+R7+YyOEGJ1W11lqMWH276JZhuTmL0g kfz1EWTsvVmxS6yRBcyvY8mpt8cFdR/5dtj0V6RozFu/uieKzIvPNuXFRR8d6q5S MF25NNLynh7BNGz4CuD+HAEv4Ya1tABkYm1IEqcsxAk0xL+OdCmog36twpEWRe1o wzkUmM9oA9r0gtp0MSaWNoE91wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIkFnV8A 6Gyg9Fn3MuPP91GjMgU6MB8GA1UdIwQYMBaAFOsrDGuci38JR3GCZ0avfUYO3Eeq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTNDMi81QUY3RkQ3NjJD RTcxMUVDODcxQTA2NjBDNEY5QUUwMi82eXNNYTV5TGZ3bEhjWUpuUnE5OVJnN2NS Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ5c01hNXlMZndsSGNZSm5ScTk5Umc3Y1I2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTNDMi81QUY3RkQ3NjJDRTcxMUVDODcxQTA2NjBDNEY5QUUwMi82eXNNYTV5TGZ3 bEhjWUpuUnE5OVJnN2NSNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUXKCRLIGzlJ25hqjyJtNmvMFNB+si1EGZhaUkSYj+nNCPnNa7Bbm9 Jr+JfLw/6q2tZWrBpJUNJHyq8jYbL9xiIhTGO7gz5cK0cF/Wtg0tX6t47Y0kYidq +iQXq84GIDySyhgxeMBmoQUt+Yws65rkf5z3d3gAoDP8cZyus+2coAAz0srOKGCu rZsO2x+Bo8WgT+1Flf9dJr1TjgHqELuLm+uRT2XcYqR5CAHZ011VL0Nlzw4ULLYp 8iJqx5yfCavgiZLJz0HXVKH1RxGUKmAo4AHUPrXeNvihBnaqZZBatX3tAq+PlK9I w9aRcHzYXC7ztlwZaHVwD6DerOhf04hx -----END CERTIFICATE-----Generated at Sat Apr 5 13:22:32 2025 by rpki-client