$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA522/88692ABA534211EC8CD2D722C4F9AE02/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.mft File: 6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.mft (raw, json) Hash identifier: xdClIdJf7MyArSLMvcDv+U2rIvAcL6FJeoBMKR4lIhM= Subject key identifier: A6:A6:3B:4C:1E:D1:95:F1:04:74:BE:16:F3:31:B5:1B:67:35:96:28 Authority key identifier: EA:CB:95:FF:05:7D:64:14:00:CA:30:94:2B:56:2B:D2:56:3C:AE:B4 Certificate issuer: /CN=A91EA522/serialNumber=EACB95FF057D641400CA30942B562BD2563CAEB4 Certificate serial: 043A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA522/88692ABA534211EC8CD2D722C4F9AE02/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.mft Manifest number: 0435 Signing time: Sat 29 Mar 2025 00:33:48 +0000 Manifest this update: Sat 29 Mar 2025 00:33:48 +0000 Manifest next update: Sat 05 Apr 2025 00:33:48 +0000 Files and hashes: 1: 6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.crl (hash: 5A6Sc7arKps6pbBsLgBHNavbA/pnq5jFoEA2D1SYKhc=) 2: DA61635E534811EC8FFBDB7CC4F9AE02.roa (hash: AOutgFSUBMqWQGx4DgG/UBpJCMAy0gQBVCPTBfdT3pk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA522/88692ABA534211EC8CD2D722C4F9AE02/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.crl rsync://rpki.apnic.net/member_repository/A91EA522/88692ABA534211EC8CD2D722C4F9AE02/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 00:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1082 (0x43a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA522 Validity Not Before: Mar 29 00:33:48 2025 GMT Not After : Apr 5 00:33:48 2025 GMT Subject: CN=67e73fec-9723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f0:52:10:29:7d:07:9f:7f:52:23:ae:a0:64: 0b:d6:00:be:5f:93:ad:e0:98:33:71:78:dd:41:4c: 28:33:68:0b:26:1a:bf:25:ef:96:c9:c3:0b:bd:ba: 0c:d2:62:1a:71:70:11:cf:d0:6d:b6:ed:a1:4f:a3: bb:0b:53:68:94:2f:38:4f:dc:a4:2b:4f:11:95:a9: 91:2c:d1:fb:83:ad:cd:53:9d:6b:93:d9:d6:23:08: ee:c0:30:2e:2a:c1:98:6f:e8:b3:26:21:fd:51:45: db:45:5f:be:00:f4:8b:3c:6d:63:08:6c:80:2d:2e: 96:18:d0:b3:d7:05:61:43:4d:e2:bb:3b:7c:be:ab: b1:72:80:c2:a3:9d:07:e3:88:e6:6e:73:56:75:d0: 27:48:29:84:40:4e:31:f9:77:e9:12:93:f5:81:51: 97:43:57:05:3f:96:fd:8a:be:2d:67:9e:46:b6:b3: 88:f3:56:ec:1b:1d:e7:62:c9:59:9a:58:4a:47:f8: f1:ee:fc:4c:9a:48:b9:57:ef:19:2e:f3:81:f2:ae: af:97:55:ae:b5:2e:7d:91:5c:8f:7d:a9:fc:d5:14: 79:1f:45:a9:99:e2:c9:4d:2d:6e:63:6a:30:d4:1a: df:10:52:cc:6b:79:9f:a3:ae:19:a3:fe:84:1d:9e: 16:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:A6:3B:4C:1E:D1:95:F1:04:74:BE:16:F3:31:B5:1B:67:35:96:28 X509v3 Authority Key Identifier: keyid:EA:CB:95:FF:05:7D:64:14:00:CA:30:94:2B:56:2B:D2:56:3C:AE:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA522/88692ABA534211EC8CD2D722C4F9AE02/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA522/88692ABA534211EC8CD2D722C4F9AE02/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:f9:d7:b2:89:04:44:cf:eb:61:e1:c9:b7:6c:6f:8d:9b:48: 4b:9c:c6:07:9c:20:f4:e5:78:d9:a5:0b:6c:5b:49:be:55:f9: 53:fd:c2:0b:26:e3:78:c1:ec:91:e7:f8:5e:f0:63:86:2a:f9: 72:ee:93:db:6a:11:ef:de:4a:78:78:95:af:05:ea:67:bc:b5: 67:c2:44:a3:92:5d:24:48:e2:93:dd:ba:6b:e6:ec:82:5e:cc: 5d:24:38:d4:b1:e9:f1:f1:ab:63:3c:4e:7b:f5:98:fd:af:bb: fc:b3:a5:81:70:c2:48:9f:89:d2:d9:78:52:77:2d:38:31:ef: 16:fc:40:27:8a:9d:76:df:9b:a9:6f:4a:19:9c:ae:1d:8c:9b: 29:cb:96:90:98:ee:fd:45:88:1e:a5:9a:19:cd:bd:ba:5b:f6: 06:47:98:b1:6c:81:1b:69:34:11:41:28:eb:c5:0b:58:18:69: c5:6b:eb:f2:e4:0e:7b:f2:4f:a3:4a:b9:b1:25:99:35:8c:04: a3:cb:a9:ff:00:d7:a5:e2:d2:e5:77:26:da:2d:2d:9c:c0:5c: b2:95:3c:3f:23:01:ca:29:0b:fb:c5:b4:4d:cb:b1:0c:68:fa: 27:26:43:7b:f4:39:15:f9:02:14:27:15:7a:2f:af:18:0f:a4: 7a:e6:c4:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE1MjIxMTAvBgNVBAUTKEVBQ0I5NUZGMDU3RDY0MTQwMENBMzA5NDJCNTYyQkQy NTYzQ0FFQjQwHhcNMjUwMzI5MDAzMzQ4WhcNMjUwNDA1MDAzMzQ4WjAYMRYwFAYD VQQDEw02N2U3M2ZlYy05NzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0PBSECl9B59/UiOuoGQL1gC+X5Ot4JgzcXjdQUwoM2gLJhq/Je+WycMLvboM 0mIacXARz9Bttu2hT6O7C1NolC84T9ykK08RlamRLNH7g63NU51rk9nWIwjuwDAu KsGYb+izJiH9UUXbRV++APSLPG1jCGyALS6WGNCz1wVhQ03iuzt8vquxcoDCo50H 44jmbnNWddAnSCmEQE4x+XfpEpP1gVGXQ1cFP5b9ir4tZ55GtrOI81bsGx3nYslZ mlhKR/jx7vxMmki5V+8ZLvOB8q6vl1WutS59kVyPfan81RR5H0WpmeLJTS1uY2ow 1BrfEFLMa3mfo64Zo/6EHZ4WfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKamO0we 0ZXxBHS+FvMxtRtnNZYoMB8GA1UdIwQYMBaAFOrLlf8FfWQUAMowlCtWK9JWPK60 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTUyMi84ODY5MkFCQTUz NDIxMUVDOENEMkQ3MjJDNEY5QUUwMi82c3VWX3dWOVpCUUF5akNVSzFZcjBsWThy clEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZzdVZfd1Y5WkJRQXlqQ1VLMVlyMGxZOHJyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTUyMi84ODY5MkFCQTUzNDIxMUVDOENEMkQ3MjJDNEY5QUUwMi82c3VWX3dWOVpC UUF5akNVSzFZcjBsWThyclEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAK+deyiQREz+th4cm3bG+Nm0hLnMYHnCD05XjZpQtsW0m+VflT/cIL JuN4weyR5/he8GOGKvly7pPbahHv3kp4eJWvBepnvLVnwkSjkl0kSOKT3bpr5uyC XsxdJDjUsenx8atjPE579Zj9r7v8s6WBcMJIn4nS2XhSdy04Me8W/EAnip1235up b0oZnK4djJspy5aQmO79RYgepZoZzb26W/YGR5ixbIEbaTQRQSjrxQtYGGnFa+vy 5A578k+jSrmxJZk1jASjy6n/ANel4tLldybaLS2cwFyylTw/IwHKKQv7xbRNy7EM aPonJkN79DkV+QIUJxV6L68YD6R65sQE -----END CERTIFICATE-----Generated at Fri Apr 4 22:24:51 2025 by rpki-client