$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft File: i6wN0-SRhYlP2uKChO3IBHILRhQ.mft (raw, json) Hash identifier: Z0orI+f1Yam1Ym4IaJMaWRvciptAEO70TvfcJrCGtL0= Subject key identifier: 70:2C:4B:67:78:79:D2:34:33:B2:C2:C7:79:DB:B4:4B:15:77:AB:D3 Authority key identifier: 8B:AC:0D:D3:E4:91:85:89:4F:DA:E2:82:84:ED:C8:04:72:0B:46:14 Certificate issuer: /CN=A91EBFAE/serialNumber=8BAC0DD3E49185894FDAE28284EDC804720B4614 Certificate serial: 3470 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft Manifest number: 3470 Signing time: Thu 10 Apr 2025 14:34:15 +0000 Manifest this update: Thu 10 Apr 2025 14:34:14 +0000 Manifest next update: Thu 17 Apr 2025 14:34:14 +0000 Files and hashes: 1: i6wN0-SRhYlP2uKChO3IBHILRhQ.crl (hash: TEdyUHfZVeJ6nsGLeol+2lUonew3l0NW5faMnGZlJ8g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.crl rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 14:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13424 (0x3470) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBFAE Validity Not Before: Apr 10 14:34:14 2025 GMT Not After : Apr 17 14:34:14 2025 GMT Subject: CN=67f7d6e6-1909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:1f:ed:87:2e:02:f6:1e:69:27:51:b3:6b:a6: 8e:ea:31:a2:f3:ea:48:d8:16:10:e3:75:f4:56:f8: e4:1b:7f:d1:a7:0d:f8:d1:a8:1b:22:cf:56:8b:38: 3f:15:0d:bb:f8:aa:8b:e9:53:eb:80:02:35:9a:d6: ad:b2:57:57:5d:c4:f1:20:6e:51:56:1a:25:c3:6b: 10:16:29:e1:78:4b:fa:d2:52:a7:b9:32:fc:75:9c: c7:f1:1a:5a:50:17:48:fb:11:eb:7f:fc:8d:f9:33: a4:9c:cc:61:f6:d3:1c:cf:e5:3a:91:f1:2f:59:93: b0:cb:93:5e:71:38:cd:e5:c8:1f:f4:58:48:75:f6: c8:8e:87:34:6b:88:04:56:3d:d4:3b:11:e6:38:4c: 1c:ae:34:d8:ab:52:f0:01:25:8d:93:fe:11:f1:a5: 15:df:b7:52:7b:4c:2c:a2:64:0e:30:82:0c:2b:47: 40:d7:1d:86:f8:cd:9d:d4:41:1c:aa:c5:cd:a2:4b: 85:eb:06:a5:fe:c3:79:b5:7d:37:31:0d:36:5a:56: 7b:ce:11:12:a2:83:55:53:5b:6b:97:14:1e:6d:eb: 50:4f:24:66:a0:d2:1d:b3:73:16:a7:f9:99:23:03: 12:6d:ab:9f:40:a7:0d:89:5d:ed:36:f4:2c:27:08: 27:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:2C:4B:67:78:79:D2:34:33:B2:C2:C7:79:DB:B4:4B:15:77:AB:D3 X509v3 Authority Key Identifier: keyid:8B:AC:0D:D3:E4:91:85:89:4F:DA:E2:82:84:ED:C8:04:72:0B:46:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:77:62:76:20:29:18:a0:f4:b2:c1:de:c1:ff:52:a4:f5:91: 27:40:61:68:3b:4a:27:56:74:37:90:69:d7:f3:cc:de:f3:3a: 62:93:0a:7b:75:52:d1:05:7f:3b:2d:41:a1:d4:ea:c6:b0:5f: 32:c5:f0:96:7e:51:5d:b0:82:df:46:d3:0b:d0:41:6a:06:22: d3:86:af:d8:70:0b:26:75:a1:b3:4c:c4:31:58:9c:55:59:a8: 6d:2b:e0:c9:0a:88:fa:de:87:e4:97:5a:04:d4:d5:81:00:c1: 1b:bb:53:b4:bb:ad:4c:bd:c6:62:76:64:89:a7:c1:c5:ec:fd: c7:b2:e7:82:29:4b:c5:cb:cb:07:a2:bd:cc:55:18:8c:3f:56: 87:27:fe:1d:d6:a7:f4:41:72:9d:cd:51:e7:74:39:15:d8:fe: 6b:ab:96:c1:e2:f1:06:1e:16:45:48:6c:20:e4:60:1a:88:7e: f1:56:b7:8e:ae:bd:d6:c6:92:de:99:7d:3f:02:f9:ae:fb:5e: 6a:60:45:1e:c6:8a:cd:7f:f7:ac:60:c7:d8:df:fb:02:91:a2: 3c:ed:31:aa:6e:a7:a5:88:a4:93:10:39:59:2b:5a:47:ba:b6: 8a:5a:61:15:ba:4f:1f:49:c3:28:09:1f:93:2c:49:ae:e1:5f: bb:96:f1:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJGQUUxMTAvBgNVBAUTKDhCQUMwREQzRTQ5MTg1ODk0RkRBRTI4Mjg0RURDODA0 NzIwQjQ2MTQwHhcNMjUwNDEwMTQzNDE0WhcNMjUwNDE3MTQzNDE0WjAYMRYwFAYD VQQDEw02N2Y3ZDZlNi0xOTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlB/thy4C9h5pJ1Gza6aO6jGi8+pI2BYQ43X0VvjkG3/Rpw340agbIs9Wizg/ FQ27+KqL6VPrgAI1mtatsldXXcTxIG5RVholw2sQFinheEv60lKnuTL8dZzH8Rpa UBdI+xHrf/yN+TOknMxh9tMcz+U6kfEvWZOwy5NecTjN5cgf9FhIdfbIjoc0a4gE Vj3UOxHmOEwcrjTYq1LwASWNk/4R8aUV37dSe0wsomQOMIIMK0dA1x2G+M2d1EEc qsXNokuF6wal/sN5tX03MQ02WlZ7zhESooNVU1trlxQebetQTyRmoNIds3MWp/mZ IwMSbaufQKcNiV3tNvQsJwgnWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHAsS2d4 edI0M7LCx3nbtEsVd6vTMB8GA1UdIwQYMBaAFIusDdPkkYWJT9rigoTtyARyC0YU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkZBRS8xNjhGRkQ2QzFE OEExMUUyOTBEMERFRTMwOEIwMkNEMi9pNndOMC1TUmhZbFAydUtDaE8zSUJISUxS aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2k2d04wLVNSaFlsUDJ1S0NoTzNJQkhJTFJoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkZBRS8xNjhGRkQ2QzFEOEExMUUyOTBEMERFRTMwOEIwMkNEMi9pNndOMC1TUmhZ bFAydUtDaE8zSUJISUxSaFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMd2J2ICkYoPSywd7B/1Kk9ZEnQGFoO0onVnQ3kGnX88ze8zpikwp7 dVLRBX87LUGh1OrGsF8yxfCWflFdsILfRtML0EFqBiLThq/YcAsmdaGzTMQxWJxV WahtK+DJCoj63ofkl1oE1NWBAMEbu1O0u61MvcZidmSJp8HF7P3HsueCKUvFy8sH or3MVRiMP1aHJ/4d1qf0QXKdzVHndDkV2P5rq5bB4vEGHhZFSGwg5GAaiH7xVreO rr3WxpLemX0/Avmu+15qYEUexorNf/esYMfY3/sCkaI87TGqbqeliKSTEDlZK1pH uraKWmEVuk8fScMoCR+TLEmu4V+7lvGO -----END CERTIFICATE-----Generated at Thu Apr 10 18:40:21 2025 by rpki-client