$ rpki-client -vvf rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft File: R6cRTih-sdyDXQfpgEXvRvU-fFc.mft (raw, json) Hash identifier: IZ5q7THOK7TbsAuI9jF+gzE9lAOPJaqpAzOHL7v0Ve4= Subject key identifier: B9:A0:A6:91:73:8D:77:B0:02:E0:1E:91:69:E5:A6:B4:D3:4B:5A:7D Authority key identifier: 47:A7:11:4E:28:7E:B1:DC:83:5D:07:E9:80:45:EF:46:F5:3E:7C:57 Certificate issuer: /CN=A91C16B5/serialNumber=47A7114E287EB1DC835D07E98045EF46F53E7C57 Certificate serial: 1D55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft Manifest number: 1D46 Signing time: Fri 04 Apr 2025 16:11:07 +0000 Manifest this update: Fri 04 Apr 2025 16:11:07 +0000 Manifest next update: Fri 11 Apr 2025 16:11:07 +0000 Files and hashes: 1: R6cRTih-sdyDXQfpgEXvRvU-fFc.crl (hash: rYzzttv7BG5Mn6FKEbmteqDK6RCvBoqICQdPb9ZG6YY=) 2: A264F35C8BAC11E7AFBAB71AC4F9AE02.roa (hash: WHJrUmFRBeAq4NFz6Ka5YRkE6nvBwbgHOetasLuBtuE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.crl rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 16:11:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7509 (0x1d55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C16B5 Validity Not Before: Apr 4 16:11:07 2025 GMT Not After : Apr 11 16:11:07 2025 GMT Subject: CN=67f0049b-0be6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f9:47:9e:90:f5:44:84:f9:0d:63:6b:85:2d: 82:43:ed:96:f6:85:e4:8a:41:c7:e5:db:be:ce:7e: 36:7f:eb:0d:b2:d5:a7:4d:6e:eb:cf:50:1b:22:09: d7:14:62:93:c7:46:fa:8e:86:55:e5:7e:91:7d:9c: a7:02:95:03:45:43:9a:4c:47:dc:d8:54:a5:7c:b1: df:56:45:a8:2d:e5:45:cc:ae:2f:f1:0b:f9:a4:59: f3:a9:9e:5f:dc:a0:f4:c4:52:c2:9b:c3:bb:37:b8: 69:b4:19:e2:40:a6:21:79:83:45:b5:f1:66:97:75: 79:76:68:94:5a:bc:b1:3a:8f:ea:83:76:61:99:6c: df:5c:3f:e3:45:68:49:b5:6d:d0:ab:db:a3:6a:c6: 94:61:09:97:6b:59:56:8d:4a:64:69:f2:c4:3b:b1: ee:88:d9:a7:e7:db:e7:74:94:79:93:89:6f:95:d3: 43:b7:d1:8e:fd:41:fb:ff:7b:4e:38:a2:2b:00:5d: b2:cd:c4:8d:3f:a1:dd:b9:78:42:79:60:94:44:27: 2b:f5:9e:b2:4f:0f:7e:56:2b:d5:b5:8e:b0:44:df: 20:0c:ef:ca:48:87:1d:75:b0:b8:4f:52:5b:7f:19: 0c:dc:ad:9b:e1:bc:30:ca:00:17:b6:f6:b3:68:65: 49:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:A0:A6:91:73:8D:77:B0:02:E0:1E:91:69:E5:A6:B4:D3:4B:5A:7D X509v3 Authority Key Identifier: keyid:47:A7:11:4E:28:7E:B1:DC:83:5D:07:E9:80:45:EF:46:F5:3E:7C:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:c6:05:2c:f3:65:8c:91:e9:b2:93:57:5f:d4:c5:37:33:41: 9e:b5:ec:6a:ae:be:e2:91:7a:ab:cb:9d:49:01:eb:00:5b:ae: 58:bc:29:3a:6d:c5:47:89:c1:cd:1d:9f:8e:69:4c:70:9a:f8: 04:e6:bb:b2:88:01:91:dc:df:bf:46:c3:1a:56:2c:b0:06:b1: bb:55:b8:98:a0:aa:e4:d2:ad:e2:8f:b4:e0:4e:06:28:e2:20: 64:d0:d6:bb:28:01:c3:0d:9b:c3:c3:2a:3b:7e:a3:b5:73:81: c4:6a:62:90:0d:92:61:7d:c8:70:15:bd:c4:5d:41:da:af:a4: 5a:58:ce:87:97:f3:1b:2e:37:fc:53:20:ce:df:54:d7:0b:40: 4a:9a:5a:32:6e:6a:8b:cb:56:10:da:f2:ac:f7:68:20:d5:44: f2:10:c7:ae:ae:72:33:26:1b:1c:58:47:17:9b:e5:de:3e:17: 31:1a:7f:f4:c0:c5:42:f5:38:9d:b0:21:f0:31:7c:35:f0:90: f4:c9:0b:a8:ae:ca:df:29:83:9b:a8:4a:68:f9:fe:db:a5:70: 1e:e1:42:b0:8e:7b:ab:bd:d6:37:f4:95:ad:1d:90:ac:a1:47: b1:29:8a:be:49:74:d3:84:a6:7b:68:79:e2:13:72:0e:b2:e3: fc:1e:fc:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE2QjUxMTAvBgNVBAUTKDQ3QTcxMTRFMjg3RUIxREM4MzVEMDdFOTgwNDVFRjQ2 RjUzRTdDNTcwHhcNMjUwNDA0MTYxMTA3WhcNMjUwNDExMTYxMTA3WjAYMRYwFAYD VQQDEw02N2YwMDQ5Yi0wYmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvvlHnpD1RIT5DWNrhS2CQ+2W9oXkikHH5du+zn42f+sNstWnTW7rz1AbIgnX FGKTx0b6joZV5X6RfZynApUDRUOaTEfc2FSlfLHfVkWoLeVFzK4v8Qv5pFnzqZ5f 3KD0xFLCm8O7N7hptBniQKYheYNFtfFml3V5dmiUWryxOo/qg3ZhmWzfXD/jRWhJ tW3Qq9ujasaUYQmXa1lWjUpkafLEO7HuiNmn59vndJR5k4lvldNDt9GO/UH7/3tO OKIrAF2yzcSNP6HduXhCeWCURCcr9Z6yTw9+VivVtY6wRN8gDO/KSIcddbC4T1Jb fxkM3K2b4bwwygAXtvazaGVJCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLmgppFz jXewAuAekWnlprTTS1p9MB8GA1UdIwQYMBaAFEenEU4ofrHcg10H6YBF70b1PnxX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTZCNS9DQTZBNTVFQ0FB NUExMUU2QkRDNkI3N0ZDNEY5QUUwMi9SNmNSVGloLXNkeURYUWZwZ0VYdlJ2VS1m RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1I2Y1JUaWgtc2R5RFhRZnBnRVh2UnZVLWZGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTZCNS9DQTZBNTVFQ0FBNUExMUU2QkRDNkI3N0ZDNEY5QUUwMi9SNmNSVGloLXNk eURYUWZwZ0VYdlJ2VS1mRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+xgUs82WMkemyk1df1MU3M0Getexqrr7ikXqry51JAesAW65YvCk6 bcVHicHNHZ+OaUxwmvgE5ruyiAGR3N+/RsMaViywBrG7VbiYoKrk0q3ij7TgTgYo 4iBk0Na7KAHDDZvDwyo7fqO1c4HEamKQDZJhfchwFb3EXUHar6RaWM6Hl/MbLjf8 UyDO31TXC0BKmloybmqLy1YQ2vKs92gg1UTyEMeurnIzJhscWEcXm+XePhcxGn/0 wMVC9TidsCHwMXw18JD0yQuorsrfKYObqEpo+f7bpXAe4UKwjnurvdY39JWtHZCs oUexKYq+SXTThKZ7aHniE3IOsuP8Hvzh -----END CERTIFICATE-----Generated at Sat Apr 5 03:43:57 2025 by rpki-client