$ rpki-client -vvf rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft File: sK6GHB6-i61uZW1AH391BglAdKA.mft (raw, json) Hash identifier: dVOtB9EO9ZEMs6Hn4S8Xz+cQmKQVstFg0Wv7EsLEiE4= Subject key identifier: 41:68:AE:E3:FE:41:68:85:AF:67:F4:B2:8A:46:03:B0:A4:B9:E1:42 Authority key identifier: B0:AE:86:1C:1E:BE:8B:AD:6E:65:6D:40:1F:7F:75:06:09:40:74:A0 Certificate issuer: /CN=A91D322A/serialNumber=B0AE861C1EBE8BAD6E656D401F7F7506094074A0 Certificate serial: 0D05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sK6GHB6-i61uZW1AH391BglAdKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft Manifest number: 0CFE Signing time: Sat 12 Apr 2025 17:58:08 +0000 Manifest this update: Sat 12 Apr 2025 17:58:08 +0000 Manifest next update: Sat 19 Apr 2025 17:58:08 +0000 Files and hashes: 1: sK6GHB6-i61uZW1AH391BglAdKA.crl (hash: ysxZgw/27916Fh3NtmQurv3cIWPlb8iLBhwSn/KQ/W0=) 2: 98B4FB32DB9011E996483B2BC4F9AE02.roa (hash: XXgLxgibvmpDaf+Wjs0zicx0P8XILsfLy/xTdFUHtdc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.crl rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sK6GHB6-i61uZW1AH391BglAdKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 17:58:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3333 (0xd05) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D322A, serialNumber=B0AE861C1EBE8BAD6E656D401F7F7506094074A0 Validity Not Before: Apr 12 17:58:08 2025 GMT Not After : Apr 19 17:58:08 2025 GMT Subject: CN=67faa9b0-6fa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:b9:66:ce:68:e3:74:7e:05:72:78:43:52:f7: e5:97:68:bc:74:71:b1:68:42:43:88:80:8b:48:a2: 4b:e8:3d:81:fd:33:ce:8f:a5:c6:14:9b:0a:f7:94: d2:5c:1d:78:9a:6e:3d:2d:52:75:d5:a0:17:e0:bb: 1e:5d:5d:1c:fd:8d:2a:ad:53:07:b6:c1:03:a1:82: 61:ea:0b:6d:55:60:cd:95:1a:a0:8f:8f:0f:e1:41: 08:86:05:62:60:db:0e:2c:e6:95:0b:5d:70:c5:96: 1d:db:e6:f1:3f:67:cb:d1:ac:ab:69:ff:26:cb:7e: e2:98:3a:56:38:27:7f:d0:ba:12:21:c1:90:d2:50: f1:e3:91:89:d6:d6:de:05:f6:46:a2:3e:26:47:79: 39:ef:bf:45:c9:5e:29:64:04:9d:f9:c8:2c:c2:f3: a4:6e:f5:3c:93:5f:0f:d1:c5:3a:37:dc:65:35:db: de:2a:e0:f4:1c:8e:28:35:7b:e3:9b:50:67:25:82: 1c:75:8f:8e:5d:21:02:22:2d:11:78:3e:85:d1:58: 32:c7:23:18:31:3c:a1:2d:f3:2c:07:80:1f:74:a3: 37:cf:e5:8c:e2:41:c6:98:1b:9d:1a:33:69:b0:cf: 58:b2:1c:64:1b:99:8e:29:c0:c4:0f:e6:a2:2f:05: 48:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:68:AE:E3:FE:41:68:85:AF:67:F4:B2:8A:46:03:B0:A4:B9:E1:42 X509v3 Authority Key Identifier: keyid:B0:AE:86:1C:1E:BE:8B:AD:6E:65:6D:40:1F:7F:75:06:09:40:74:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sK6GHB6-i61uZW1AH391BglAdKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:c7:26:7b:51:13:cb:df:16:59:de:07:88:ce:46:d0:6b:d1: 48:d2:31:7f:f4:9d:a0:16:bb:9b:cb:cc:6b:99:ff:60:1a:ce: 54:01:12:60:a6:ac:07:a7:d8:0e:67:15:c6:35:cc:85:61:14: 2b:86:63:7d:0f:f5:13:9a:9d:bb:a3:a4:ab:ce:2b:13:4d:54: 55:ce:e8:70:9b:7f:8b:b8:2d:56:e9:d6:19:a9:26:07:22:9d: 0b:78:72:61:19:17:67:8d:85:56:be:22:82:ba:76:a1:c6:8e: bf:51:4e:d1:95:11:22:50:a4:5a:28:39:30:b5:61:82:14:d8: f1:ce:5e:ff:9e:c9:bf:86:35:8d:0e:a4:1e:97:bf:53:78:b0: c7:ef:f1:0e:98:db:0e:d2:42:89:97:9f:d9:19:dd:e1:5b:28: 29:98:b8:d0:7e:ae:94:8d:3e:40:81:26:0a:39:0d:36:e9:b9: 8f:df:ef:ce:a9:6f:77:b8:55:12:70:a6:15:53:eb:b8:b2:73: 19:08:31:ad:5e:ed:f8:8b:90:e4:f1:72:45:45:17:47:1c:29: d8:c9:1e:08:f2:1c:43:05:12:66:99:9f:7e:db:0c:e3:88:d1: d2:20:f3:c0:26:ab:81:ad:03:f2:44:46:7d:6a:8b:49:aa:6d: 54:41:84:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMyMkExMTAvBgNVBAUTKEIwQUU4NjFDMUVCRThCQUQ2RTY1NkQ0MDFGN0Y3NTA2 MDk0MDc0QTAwHhcNMjUwNDEyMTc1ODA4WhcNMjUwNDE5MTc1ODA4WjAYMRYwFAYD VQQDEw02N2ZhYTliMC02ZmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5blmzmjjdH4FcnhDUvfll2i8dHGxaEJDiICLSKJL6D2B/TPOj6XGFJsK95TS XB14mm49LVJ11aAX4LseXV0c/Y0qrVMHtsEDoYJh6gttVWDNlRqgj48P4UEIhgVi YNsOLOaVC11wxZYd2+bxP2fL0ayraf8my37imDpWOCd/0LoSIcGQ0lDx45GJ1tbe BfZGoj4mR3k5779FyV4pZASd+cgswvOkbvU8k18P0cU6N9xlNdveKuD0HI4oNXvj m1BnJYIcdY+OXSECIi0ReD6F0VgyxyMYMTyhLfMsB4AfdKM3z+WM4kHGmBudGjNp sM9YshxkG5mOKcDED+aiLwVIsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEForuP+ QWiFr2f0sopGA7CkueFCMB8GA1UdIwQYMBaAFLCuhhwevoutbmVtQB9/dQYJQHSg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzIyQS8wREMxREY3Q0RC OTAxMUU5OUMyNUM1MkFDNEY5QUUwMi9zSzZHSEI2LWk2MXVaVzFBSDM5MUJnbEFk S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NLNkdIQjYtaTYxdVpXMUFIMzkxQmdsQWRLQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzIyQS8wREMxREY3Q0RCOTAxMUU5OUMyNUM1MkFDNEY5QUUwMi9zSzZHSEI2LWk2 MXVaVzFBSDM5MUJnbEFkS0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArxyZ7URPL3xZZ3geIzkbQa9FI0jF/9J2gFruby8xrmf9gGs5UARJg pqwHp9gOZxXGNcyFYRQrhmN9D/UTmp27o6SrzisTTVRVzuhwm3+LuC1W6dYZqSYH Ip0LeHJhGRdnjYVWviKCunahxo6/UU7RlREiUKRaKDkwtWGCFNjxzl7/nsm/hjWN DqQel79TeLDH7/EOmNsO0kKJl5/ZGd3hWygpmLjQfq6UjT5AgSYKOQ026bmP3+/O qW93uFUScKYVU+u4snMZCDGtXu34i5Dk8XJFRRdHHCnYyR4I8hxDBRJmmZ9+2wzj iNHSIPPAJquBrQPyREZ9aotJqm1UQYTk -----END CERTIFICATE-----Generated at Sun Apr 13 03:58:31 2025 by rpki-client