$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft File: 6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft (raw, json) Hash identifier: 83jbluzFm1sNQXE0rH5I8vvsdKL3kVIc5U7MxASLN/8= Subject key identifier: 1F:23:43:D2:46:C2:5A:66:B0:19:7F:AB:69:B2:34:8A:F1:0B:65:A4 Authority key identifier: E8:68:21:E9:F2:3D:42:F3:62:E4:2A:E2:AF:B5:BD:98:E0:B1:11:93 Certificate issuer: /CN=A91C6FD6/serialNumber=E86821E9F23D42F362E42AE2AFB5BD98E0B11193 Certificate serial: 91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ggh6fI9QvNi5Crir7W9mOCxEZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft Manifest number: 8F Signing time: Thu 03 Apr 2025 05:42:28 +0000 Manifest this update: Thu 03 Apr 2025 05:42:28 +0000 Manifest next update: Thu 10 Apr 2025 05:42:28 +0000 Files and hashes: 1: 6Ggh6fI9QvNi5Crir7W9mOCxEZM.crl (hash: 8PkWP82fnEL+/bpqewJWJ9LfjfS88pqCRPSygRilcuA=) 2: 70F3668238F711EFB4132D26C4F9AE02.roa (hash: 6q2HJGghYczmtOW7uCV2DY5B1dnxfLxnRSXR0JIpe1c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.crl rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ggh6fI9QvNi5Crir7W9mOCxEZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 05:42:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 145 (0x91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6FD6 Validity Not Before: Apr 3 05:42:28 2025 GMT Not After : Apr 10 05:42:28 2025 GMT Subject: CN=67ee1fc4-9d64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6e:13:cb:46:7a:70:5e:7d:ff:5b:30:68:3f: b2:a8:a1:63:a6:99:9b:49:52:5b:88:14:6e:b4:34: 0a:15:90:b8:71:77:cf:43:0b:33:47:b0:23:35:ff: 10:95:10:d1:13:c7:cf:64:62:db:7e:de:ee:83:f0: e8:fb:aa:a8:82:92:f9:53:2b:41:a5:66:00:39:ad: a4:cf:fb:58:a3:36:1b:b8:a6:c2:f5:65:4e:3c:e1: d1:eb:ed:84:ae:f1:f2:d0:08:d4:60:9e:d0:5f:a8: 2f:5d:e2:80:eb:a1:df:ee:97:de:e9:98:2e:55:6f: d6:a4:f7:74:a3:39:b2:1d:35:9d:f4:8e:fd:68:04: 7c:22:07:64:29:aa:d2:58:2b:9e:57:00:6b:a3:f1: d0:11:af:08:de:4b:e5:6d:23:21:29:bb:35:3e:6b: 34:37:21:6d:e3:a5:90:cd:74:47:df:64:8b:0c:35: 73:6a:93:77:ba:91:44:39:da:f9:c7:39:ae:7c:2d: 3b:dd:e0:bf:bb:f0:f0:e2:47:6e:14:40:2f:2f:27: c8:9c:85:49:43:52:10:68:34:97:b6:7a:18:d2:3b: b5:00:a7:5a:9d:03:3e:30:3b:8a:3e:0d:a2:c8:9a: b1:9d:b9:fd:44:7e:08:32:00:36:33:54:79:0d:85: 95:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:23:43:D2:46:C2:5A:66:B0:19:7F:AB:69:B2:34:8A:F1:0B:65:A4 X509v3 Authority Key Identifier: keyid:E8:68:21:E9:F2:3D:42:F3:62:E4:2A:E2:AF:B5:BD:98:E0:B1:11:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ggh6fI9QvNi5Crir7W9mOCxEZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:34:77:41:51:a3:0b:bf:3c:36:1e:09:9a:9b:e2:e5:43:e0: 77:e1:d9:58:61:60:e3:38:e5:d6:1c:49:cb:a7:05:86:49:7b: 6a:ec:d7:9a:ed:92:cd:71:5c:44:c3:82:a4:cc:f5:fe:5b:cd: d0:06:88:c9:ef:48:10:41:e2:d1:66:64:41:ed:f4:13:47:c1: a9:26:c0:e0:55:74:5d:42:b5:11:35:a3:96:81:06:5d:e6:64: bb:42:fa:fe:85:bd:2f:71:3a:af:c3:8d:b7:77:81:3b:64:14: d5:50:e9:eb:43:07:08:6f:c4:25:9a:b2:e6:6d:01:d4:1c:5b: ab:04:ba:e2:8f:a2:6e:e7:d0:69:0d:2a:86:3d:5c:7d:88:5c: 39:28:a8:bf:ef:26:82:b7:4f:59:86:b6:1a:d7:79:32:6d:c5: 86:21:b8:02:00:52:a5:0c:15:ee:cb:ba:e0:e6:83:44:48:7c: b0:e0:12:53:55:22:4b:76:67:da:f3:fb:b5:ec:aa:66:a2:5b: d2:c0:23:60:e3:52:06:39:8f:69:10:c1:ca:b7:f5:9a:d2:fa: 8e:e5:89:9e:48:95:e4:a6:e9:0c:87:7d:fd:34:f8:5e:87:5c: 1b:3a:23:0b:f1:61:5e:07:15:ed:98:96:12:6e:e3:55:e2:bd: b4:74:0b:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZGRDYxMTAvBgNVBAUTKEU4NjgyMUU5RjIzRDQyRjM2MkU0MkFFMkFGQjVCRDk4 RTBCMTExOTMwHhcNMjUwNDAzMDU0MjI4WhcNMjUwNDEwMDU0MjI4WjAYMRYwFAYD VQQDEw02N2VlMWZjNC05ZDY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyG4Ty0Z6cF59/1swaD+yqKFjppmbSVJbiBRutDQKFZC4cXfPQwszR7AjNf8Q lRDRE8fPZGLbft7ug/Do+6qogpL5UytBpWYAOa2kz/tYozYbuKbC9WVOPOHR6+2E rvHy0AjUYJ7QX6gvXeKA66Hf7pfe6ZguVW/WpPd0ozmyHTWd9I79aAR8IgdkKarS WCueVwBro/HQEa8I3kvlbSMhKbs1Pms0NyFt46WQzXRH32SLDDVzapN3upFEOdr5 xzmufC073eC/u/Dw4kduFEAvLyfInIVJQ1IQaDSXtnoY0ju1AKdanQM+MDuKPg2i yJqxnbn9RH4IMgA2M1R5DYWV3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB8jQ9JG wlpmsBl/q2myNIrxC2WkMB8GA1UdIwQYMBaAFOhoIenyPULzYuQq4q+1vZjgsRGT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkZENi82OERBNEI2QTM4 RjYxMUVGQjEzMTg0MjNDNEY5QUUwMi82R2doNmZJOVF2Tmk1Q3JpcjdXOW1PQ3hF Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZHZ2g2Zkk5UXZOaTVDcmlyN1c5bU9DeEVaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkZENi82OERBNEI2QTM4RjYxMUVGQjEzMTg0MjNDNEY5QUUwMi82R2doNmZJOVF2 Tmk1Q3JpcjdXOW1PQ3hFWk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKNHdBUaMLvzw2Hgmam+LlQ+B34dlYYWDjOOXWHEnLpwWGSXtq7Nea 7ZLNcVxEw4KkzPX+W83QBojJ70gQQeLRZmRB7fQTR8GpJsDgVXRdQrURNaOWgQZd 5mS7Qvr+hb0vcTqvw423d4E7ZBTVUOnrQwcIb8QlmrLmbQHUHFurBLrij6Ju59Bp DSqGPVx9iFw5KKi/7yaCt09ZhrYa13kybcWGIbgCAFKlDBXuy7rg5oNESHyw4BJT VSJLdmfa8/u17KpmolvSwCNg41IGOY9pEMHKt/Wa0vqO5YmeSJXkpukMh339NPhe h1wbOiML8WFeBxXtmJYSbuNV4r20dAsT -----END CERTIFICATE-----Generated at Fri Apr 4 22:10:39 2025 by rpki-client