$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC7EA/B5C87D68B57311EE8F50896CC4F9AE02/J6IiDxq_zcps_VIjbsEKERKog0U.mft File: J6IiDxq_zcps_VIjbsEKERKog0U.mft (raw, json) Hash identifier: 93J2EW7XBhbDPIW/IwyY7irsu9DKKTIaCoz7kwirZlw= Subject key identifier: 05:A4:17:F1:88:8B:2D:A0:AD:91:D1:AD:85:68:4C:E6:A5:FC:48:37 Authority key identifier: 27:A2:22:0F:1A:BF:CD:CA:6C:FD:52:23:6E:C1:0A:11:12:A8:83:45 Certificate issuer: /CN=A91CC7EA/serialNumber=27A2220F1ABFCDCA6CFD52236EC10A1112A88345 Certificate serial: F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J6IiDxq_zcps_VIjbsEKERKog0U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC7EA/B5C87D68B57311EE8F50896CC4F9AE02/J6IiDxq_zcps_VIjbsEKERKog0U.mft Manifest number: EE Signing time: Sat 19 Apr 2025 04:29:00 +0000 Manifest this update: Sat 19 Apr 2025 04:29:00 +0000 Manifest next update: Sat 26 Apr 2025 04:29:00 +0000 Files and hashes: 1: J6IiDxq_zcps_VIjbsEKERKog0U.crl (hash: eko6mKENdRXMKJW6tXdqc+cx0LTUo20jmrZb4t/XFkM=) 2: 6734E4C4B57411EEBCB6B977C4F9AE02.roa (hash: FA7x6xVF2Cw2uJbqOHPR0PvfekjSEl4pesKDhFGadGE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC7EA/B5C87D68B57311EE8F50896CC4F9AE02/J6IiDxq_zcps_VIjbsEKERKog0U.crl rsync://rpki.apnic.net/member_repository/A91CC7EA/B5C87D68B57311EE8F50896CC4F9AE02/J6IiDxq_zcps_VIjbsEKERKog0U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J6IiDxq_zcps_VIjbsEKERKog0U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 241 (0xf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC7EA, serialNumber=27A2220F1ABFCDCA6CFD52236EC10A1112A88345 Validity Not Before: Apr 19 04:29:00 2025 GMT Not After : Apr 26 04:29:00 2025 GMT Subject: CN=6803268c-7fd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:72:39:9c:d7:d5:a5:8f:46:4b:49:d6:da:60: d0:31:2a:a2:55:0a:3f:b1:25:30:6c:80:48:f2:ad: 0a:fd:57:7b:4f:39:48:61:b6:19:93:e1:ca:ce:a9: af:ee:3b:03:ae:ae:ef:1f:10:57:af:7d:28:f9:bb: 18:ea:f0:ca:c3:27:ea:11:bc:d0:a5:3f:93:55:2e: d8:e7:01:c9:19:a5:1a:c6:41:57:e7:0f:ff:33:c0: 12:76:c7:b1:b9:be:e4:ec:e1:e1:92:c4:36:c8:df: 9a:a6:a7:01:50:b5:7c:21:89:8b:74:f0:18:26:04: da:b8:7f:2d:71:6b:d1:38:5d:17:52:87:c8:b0:17: b7:16:9f:c2:dc:c3:8c:02:b7:3c:55:fa:51:fe:8b: 50:86:99:65:43:97:b4:26:f1:fe:14:9b:cd:84:69: 90:5a:07:c1:16:fa:bb:cf:ec:2c:83:82:80:87:8d: 25:cc:4a:b1:14:76:00:65:3a:25:95:98:b6:db:3b: c2:da:05:57:f8:68:8f:ce:49:41:7a:08:d7:25:bd: 1d:eb:62:20:88:e8:28:8b:78:3d:5a:2d:3b:1b:a1: 57:68:32:cf:5b:ab:ae:49:a2:c5:f1:92:d2:d5:8c: 6e:25:c9:d2:83:24:db:fb:a7:e0:58:ae:77:39:a1: b0:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:A4:17:F1:88:8B:2D:A0:AD:91:D1:AD:85:68:4C:E6:A5:FC:48:37 X509v3 Authority Key Identifier: keyid:27:A2:22:0F:1A:BF:CD:CA:6C:FD:52:23:6E:C1:0A:11:12:A8:83:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC7EA/B5C87D68B57311EE8F50896CC4F9AE02/J6IiDxq_zcps_VIjbsEKERKog0U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J6IiDxq_zcps_VIjbsEKERKog0U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC7EA/B5C87D68B57311EE8F50896CC4F9AE02/J6IiDxq_zcps_VIjbsEKERKog0U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:48:7c:3b:cb:5f:07:4a:f7:43:5e:4d:cb:e8:5b:e4:1d:c7: f7:c1:7f:0d:c2:3b:48:02:5e:dc:07:11:3f:72:c3:4f:f1:fd: cd:db:2e:3a:9a:93:ba:ca:16:05:42:30:6f:84:d0:16:87:c9: 6a:e7:56:05:c5:b6:ca:0b:f3:14:24:c0:cd:fe:42:5d:d9:85: 07:f1:d4:27:28:8f:55:06:d9:d5:9b:1b:fa:33:24:dc:d5:bd: e6:95:bb:c9:b6:82:9d:58:51:01:b5:42:c8:5f:a7:52:1e:da: ee:4c:d5:1f:77:63:d9:2e:f1:cf:e1:47:b2:f0:52:2a:ad:c0: 5a:84:46:ed:29:ca:87:a2:4d:eb:4a:a4:e0:92:c6:4e:0d:3a: 25:b5:4a:64:3f:04:e4:34:5b:7e:d4:79:f9:4c:51:57:9d:5f: b5:28:46:6e:55:39:40:45:6c:bd:11:f4:ec:46:41:5a:a4:18: 19:1e:8d:c9:a5:98:89:86:44:26:98:a1:6c:c4:de:15:69:37: 4f:53:e1:55:95:b4:7c:af:3e:b3:49:3e:a7:84:78:b0:c1:19: 65:f1:e0:ce:c2:57:5d:d0:27:07:ee:ea:14:8e:59:97:79:d1: 8c:53:a6:3e:e2:a1:45:59:6b:8d:17:d9:57:ca:77:49:ab:77: 97:98:7a:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0M3RUExMTAvBgNVBAUTKDI3QTIyMjBGMUFCRkNEQ0E2Q0ZENTIyMzZFQzEwQTEx MTJBODgzNDUwHhcNMjUwNDE5MDQyOTAwWhcNMjUwNDI2MDQyOTAwWjAYMRYwFAYD VQQDEw02ODAzMjY4Yy03ZmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunI5nNfVpY9GS0nW2mDQMSqiVQo/sSUwbIBI8q0K/Vd7TzlIYbYZk+HKzqmv 7jsDrq7vHxBXr30o+bsY6vDKwyfqEbzQpT+TVS7Y5wHJGaUaxkFX5w//M8ASdsex ub7k7OHhksQ2yN+apqcBULV8IYmLdPAYJgTauH8tcWvROF0XUofIsBe3Fp/C3MOM Arc8VfpR/otQhpllQ5e0JvH+FJvNhGmQWgfBFvq7z+wsg4KAh40lzEqxFHYAZTol lZi22zvC2gVX+GiPzklBegjXJb0d62IgiOgoi3g9Wi07G6FXaDLPW6uuSaLF8ZLS 1YxuJcnSgyTb+6fgWK53OaGwwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAWkF/GI iy2grZHRrYVoTOal/Eg3MB8GA1UdIwQYMBaAFCeiIg8av83KbP1SI27BChESqINF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzdFQS9CNUM4N0Q2OEI1 NzMxMUVFOEY1MDg5NkNDNEY5QUUwMi9KNklpRHhxX3pjcHNfVklqYnNFS0VSS29n MFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0o2SWlEeHFfemNwc19WSWpic0VLRVJLb2cwVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzdFQS9CNUM4N0Q2OEI1NzMxMUVFOEY1MDg5NkNDNEY5QUUwMi9KNklpRHhxX3pj cHNfVklqYnNFS0VSS29nMFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRSHw7y18HSvdDXk3L6FvkHcf3wX8NwjtIAl7cBxE/csNP8f3N2y46 mpO6yhYFQjBvhNAWh8lq51YFxbbKC/MUJMDN/kJd2YUH8dQnKI9VBtnVmxv6MyTc 1b3mlbvJtoKdWFEBtULIX6dSHtruTNUfd2PZLvHP4Uey8FIqrcBahEbtKcqHok3r SqTgksZODToltUpkPwTkNFt+1Hn5TFFXnV+1KEZuVTlARWy9EfTsRkFapBgZHo3J pZiJhkQmmKFsxN4VaTdPU+FVlbR8rz6zST6nhHiwwRll8eDOwldd0CcH7uoUjlmX edGMU6Y+4qFFWWuNF9lXyndJq3eXmHrJ -----END CERTIFICATE-----Generated at Sat Apr 19 08:28:32 2025 by rpki-client