$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.mft File: 6qltynQw36Rxyim4Q4NsHIDlQ54.mft (raw, json) Hash identifier: By7cJzj+6EPWNwbbwLMls7qM8TxC6NDYnpnrP1fkKas= Subject key identifier: 8A:5C:EA:34:35:EC:49:3C:D9:EA:D5:56:9C:40:0A:62:F1:7F:7D:A2 Authority key identifier: EA:A9:6D:CA:74:30:DF:A4:71:CA:29:B8:43:83:6C:1C:80:E5:43:9E Certificate issuer: /CN=A91BB87C/serialNumber=EAA96DCA7430DFA471CA29B843836C1C80E5439E Certificate serial: 0C7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qltynQw36Rxyim4Q4NsHIDlQ54.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.mft Manifest number: 0C6C Signing time: Mon 14 Apr 2025 18:12:04 +0000 Manifest this update: Mon 14 Apr 2025 18:12:03 +0000 Manifest next update: Mon 21 Apr 2025 18:12:03 +0000 Files and hashes: 1: 6qltynQw36Rxyim4Q4NsHIDlQ54.crl (hash: ZmjxnLlqSbNBDqqIr15hDZH7VHnzDd93dar0aWWSxoE=) 2: 5B01916AD15911EE8B8BB151C4F9AE02.roa (hash: exEpVAv7OmSBv6nfn1Ng6Vrt5eD/dXr6N+PdK8CnaV0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.crl rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qltynQw36Rxyim4Q4NsHIDlQ54.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 18:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3199 (0xc7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB87C, serialNumber=EAA96DCA7430DFA471CA29B843836C1C80E5439E Validity Not Before: Apr 14 18:12:03 2025 GMT Not After : Apr 21 18:12:03 2025 GMT Subject: CN=67fd4ff3-fdb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c6:3d:b3:0a:f9:9d:85:7e:b6:f9:e7:c0:e8: a7:5c:6f:93:84:2e:e4:5b:3b:10:69:1b:42:62:47: 94:79:27:da:cc:8e:b3:88:54:d9:b7:c7:12:9a:1a: 1f:2c:0a:3b:22:6b:a9:52:66:7b:a6:f2:31:02:57: a4:97:dd:a6:02:5b:1d:7b:3a:f0:a4:e6:01:80:b7: 63:f4:a0:31:76:8b:13:1d:2e:66:0d:c7:e7:3d:3d: 90:42:b1:37:5f:23:7b:24:10:f2:8d:70:92:bc:f6: 8d:6d:5e:40:40:9d:77:85:19:dc:ae:6c:d5:e3:4d: 45:fc:aa:1a:2d:7c:d0:4a:a5:ab:f5:2a:1b:fb:85: 52:a4:13:06:a3:84:25:f1:99:c3:f0:f8:36:a3:85: e0:98:be:cf:62:ce:d5:6d:26:64:b7:db:12:c9:7b: d8:45:b2:1b:e9:f5:92:f1:c8:fe:c0:db:15:e0:58: e5:59:90:be:64:6d:64:d7:bb:95:ff:c8:f7:10:6d: 5e:47:1e:d3:0e:41:46:0e:76:83:4f:a7:d2:45:bd: 61:04:9f:ab:71:36:13:ce:99:6a:a5:a6:13:af:c6: b9:35:d0:c8:5a:c0:b1:b8:74:72:a8:f0:fb:30:84: 9e:0f:ee:b1:b6:f3:36:d3:d6:fe:71:92:a3:be:a2: 2b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:5C:EA:34:35:EC:49:3C:D9:EA:D5:56:9C:40:0A:62:F1:7F:7D:A2 X509v3 Authority Key Identifier: keyid:EA:A9:6D:CA:74:30:DF:A4:71:CA:29:B8:43:83:6C:1C:80:E5:43:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qltynQw36Rxyim4Q4NsHIDlQ54.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:ef:cf:a4:b1:64:0f:03:3a:c5:b2:22:ef:4e:29:44:c3:75: 1a:34:8f:e8:ba:cc:b3:ff:87:b7:af:dd:96:58:a0:5a:c0:ad: 6a:96:56:87:b9:be:39:70:93:b2:bd:c9:34:ae:07:d9:f2:e1: 06:fa:47:83:c2:2b:60:bf:c9:03:70:db:57:3d:26:38:6e:2b: a6:cc:17:91:2f:ec:3d:9b:7e:7e:c8:e7:8a:80:f9:1a:86:82: 36:40:dd:29:4a:f7:23:20:b4:a6:53:b7:19:df:11:f1:e1:ba: 0c:9e:3b:f7:bb:ad:8b:2b:64:2c:db:ec:4c:d4:8f:03:ef:4f: 9a:65:b4:43:18:94:09:0f:7f:a7:65:5f:4c:41:7e:b6:eb:cc: 61:93:9c:0a:cb:9e:6d:97:ee:3f:8a:fa:d6:bb:f4:50:24:fd: 68:c7:fa:d4:03:a0:1a:3a:c1:51:3e:10:bb:c4:a0:b8:25:0e: 14:51:9e:97:ee:41:e7:b8:01:8f:f2:98:53:e5:7c:c4:ca:3d: ac:10:29:43:fa:33:6f:d8:a0:15:17:79:02:f7:d8:17:54:81: bd:f2:c0:ad:57:34:f1:58:f7:76:e6:15:08:60:2c:ff:25:34: 43:55:d8:c6:37:af:1c:3a:7d:f0:98:29:67:c5:b0:d4:8d:11: dc:f1:ea:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDH8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI4N0MxMTAvBgNVBAUTKEVBQTk2RENBNzQzMERGQTQ3MUNBMjlCODQzODM2QzFD ODBFNTQzOUUwHhcNMjUwNDE0MTgxMjAzWhcNMjUwNDIxMTgxMjAzWjAYMRYwFAYD VQQDEw02N2ZkNGZmMy1mZGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzcY9swr5nYV+tvnnwOinXG+ThC7kWzsQaRtCYkeUeSfazI6ziFTZt8cSmhof LAo7ImupUmZ7pvIxAlekl92mAlsdezrwpOYBgLdj9KAxdosTHS5mDcfnPT2QQrE3 XyN7JBDyjXCSvPaNbV5AQJ13hRncrmzV401F/KoaLXzQSqWr9Sob+4VSpBMGo4Ql 8ZnD8Pg2o4XgmL7PYs7VbSZkt9sSyXvYRbIb6fWS8cj+wNsV4FjlWZC+ZG1k17uV /8j3EG1eRx7TDkFGDnaDT6fSRb1hBJ+rcTYTzplqpaYTr8a5NdDIWsCxuHRyqPD7 MISeD+6xtvM209b+cZKjvqIrowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIpc6jQ1 7Ek82erVVpxACmLxf32iMB8GA1UdIwQYMBaAFOqpbcp0MN+kccopuEODbByA5UOe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjg3Qy82M0Q5MDMxMkZD MDIxMUU5QTQxOUYzNDBDNEY5QUUwMi82cWx0eW5RdzM2Unh5aW00UTROc0hJRGxR NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZxbHR5blF3MzZSeHlpbTRRNE5zSElEbFE1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qjg3Qy82M0Q5MDMxMkZDMDIxMUU5QTQxOUYzNDBDNEY5QUUwMi82cWx0eW5RdzM2 Unh5aW00UTROc0hJRGxRNTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAo78+ksWQPAzrFsiLvTilEw3UaNI/ousyz/4e3r92WWKBawK1qllaH ub45cJOyvck0rgfZ8uEG+keDwitgv8kDcNtXPSY4biumzBeRL+w9m35+yOeKgPka hoI2QN0pSvcjILSmU7cZ3xHx4boMnjv3u62LK2Qs2+xM1I8D70+aZbRDGJQJD3+n ZV9MQX6268xhk5wKy55tl+4/ivrWu/RQJP1ox/rUA6AaOsFRPhC7xKC4JQ4UUZ6X 7kHnuAGP8phT5XzEyj2sEClD+jNv2KAVF3kC99gXVIG98sCtVzTxWPd25hUIYCz/ JTRDVdjGN68cOn3wmClnxbDUjRHc8epe -----END CERTIFICATE-----Generated at Tue Apr 15 08:32:05 2025 by rpki-client