$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC9A5/0E82C2ECC4F011EA91DCDF77C4F9AE02/6D_PTG_I1087arQlYG4rx3RtZkA.mft File: 6D_PTG_I1087arQlYG4rx3RtZkA.mft (raw, json) Hash identifier: UcvnLUlxtJ27Omgm0DaqlJfP+cqYuVl5T5qqpUr9wBk= Subject key identifier: 75:CF:CC:71:75:B8:56:17:BA:76:11:62:12:2D:46:6E:7A:9C:30:46 Authority key identifier: E8:3F:CF:4C:6F:C8:D7:4F:3B:6A:B4:25:60:6E:2B:C7:74:6D:66:40 Certificate issuer: /CN=A91EC9A5/serialNumber=E83FCF4C6FC8D74F3B6AB425606E2BC7746D6640 Certificate serial: 0886 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6D_PTG_I1087arQlYG4rx3RtZkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC9A5/0E82C2ECC4F011EA91DCDF77C4F9AE02/6D_PTG_I1087arQlYG4rx3RtZkA.mft Manifest number: 0871 Signing time: Mon 14 Apr 2025 20:33:34 +0000 Manifest this update: Mon 14 Apr 2025 20:33:33 +0000 Manifest next update: Mon 21 Apr 2025 20:33:33 +0000 Files and hashes: 1: 6D_PTG_I1087arQlYG4rx3RtZkA.crl (hash: PjTh+i6sNUeY6AX7UiS+EHBSEieHCpnViP9xz8PjAZY=) 2: 92154C46E3A511EF975A3E75C4F9AE02.roa (hash: R4XkJZ6yKJaD7Jsy2Ux5dYzpABd70UuwWtVPRKn1YjY=) 3: 7ABC3AE8E3DF11EF83DCFB09C4F9AE02.roa (hash: gVQKifnCnYrJCXwjiQ6wAan+E1SDbIkqSVrqLa2fv58=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC9A5/0E82C2ECC4F011EA91DCDF77C4F9AE02/6D_PTG_I1087arQlYG4rx3RtZkA.crl rsync://rpki.apnic.net/member_repository/A91EC9A5/0E82C2ECC4F011EA91DCDF77C4F9AE02/6D_PTG_I1087arQlYG4rx3RtZkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6D_PTG_I1087arQlYG4rx3RtZkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 20:33:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2182 (0x886) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC9A5, serialNumber=E83FCF4C6FC8D74F3B6AB425606E2BC7746D6640 Validity Not Before: Apr 14 20:33:33 2025 GMT Not After : Apr 21 20:33:33 2025 GMT Subject: CN=67fd711e-d3c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:7c:92:71:40:d7:d9:b6:b2:92:f6:bf:01:7e: 10:7e:7b:d7:e4:d4:c0:af:e6:d7:8c:43:56:19:6c: 71:e3:69:7e:56:11:c0:e9:91:77:98:ec:73:19:c2: af:95:5a:85:bd:37:86:c7:b7:9e:30:d8:14:f9:20: 01:46:90:46:91:84:31:a5:c7:90:19:60:6f:a5:7c: 1b:ef:14:bf:27:c5:4e:b1:7b:18:4c:84:a2:02:ad: 18:59:c6:b4:94:7d:33:ab:f0:4c:bf:52:62:c2:64: b9:00:13:f1:4c:bf:3d:cc:6e:81:23:73:94:f7:e3: 85:b9:c3:7a:67:12:5a:62:35:37:41:96:73:e7:f9: b2:ba:cc:44:4b:9f:5c:e1:4e:30:a6:68:25:51:48: b9:07:16:74:0e:7b:5e:3f:d2:4b:57:62:6d:35:42: 73:e9:c7:52:fc:ef:7f:f6:86:bc:94:c8:9a:59:c9: 92:7f:7b:79:2c:db:27:6a:ac:49:bc:9a:21:00:ad: a1:2f:cc:46:91:8c:0c:c0:04:ef:33:a8:e6:53:4c: 58:14:fd:99:dc:89:14:22:8c:80:a6:e4:b9:d4:c3: 1f:b3:c6:c0:be:fd:2a:b4:9a:31:87:60:f4:d2:b5: d9:18:2b:3b:3d:bb:40:e0:69:e9:62:73:3a:ca:6d: 9a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:CF:CC:71:75:B8:56:17:BA:76:11:62:12:2D:46:6E:7A:9C:30:46 X509v3 Authority Key Identifier: keyid:E8:3F:CF:4C:6F:C8:D7:4F:3B:6A:B4:25:60:6E:2B:C7:74:6D:66:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC9A5/0E82C2ECC4F011EA91DCDF77C4F9AE02/6D_PTG_I1087arQlYG4rx3RtZkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6D_PTG_I1087arQlYG4rx3RtZkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC9A5/0E82C2ECC4F011EA91DCDF77C4F9AE02/6D_PTG_I1087arQlYG4rx3RtZkA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:4f:ad:47:e9:bf:20:0a:c0:8b:1f:bd:61:f6:77:a9:4a:de: 4b:d8:de:ad:02:13:e1:ef:d3:44:ee:8b:f6:06:5b:46:22:d5: 58:f7:0f:c4:4a:9e:51:ca:1c:32:7f:cb:d2:cd:1d:a4:45:89: 21:88:b2:76:eb:33:86:e4:a8:00:f8:74:f3:b8:e8:8c:42:9c: 30:26:6f:0a:6a:db:b6:09:9b:be:2c:1a:63:5c:4a:65:c1:42: 38:c2:b2:c7:45:8c:4e:76:16:22:be:10:7e:32:fe:d6:7d:e5: 3e:78:27:a3:cb:d9:6e:90:57:d4:80:6c:24:b1:c4:35:06:10: e6:f3:8b:93:07:f2:37:49:20:c1:a2:1d:90:52:03:ff:72:de: b1:65:a3:f9:65:86:29:c3:29:80:58:ce:da:f8:d8:aa:dc:40: 12:7c:17:81:f9:3c:59:d6:7e:c6:35:ab:69:3f:2a:8d:fe:16: 35:12:58:73:f2:e8:b0:22:17:f6:c1:7d:ed:58:97:ca:6f:8c: c6:f6:71:36:31:ef:aa:86:f0:2f:b2:a9:21:03:51:29:0a:f5: 0c:de:e9:f6:1a:e2:c7:70:1e:6b:47:32:94:83:2c:73:07:6a: 81:96:d1:2c:64:f8:58:68:aa:e1:e1:7d:24:45:0c:3a:9d:8b: c5:63:17:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM5QTUxMTAvBgNVBAUTKEU4M0ZDRjRDNkZDOEQ3NEYzQjZBQjQyNTYwNkUyQkM3 NzQ2RDY2NDAwHhcNMjUwNDE0MjAzMzMzWhcNMjUwNDIxMjAzMzMzWjAYMRYwFAYD VQQDEw02N2ZkNzExZS1kM2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0XyScUDX2baykva/AX4QfnvX5NTAr+bXjENWGWxx42l+VhHA6ZF3mOxzGcKv lVqFvTeGx7eeMNgU+SABRpBGkYQxpceQGWBvpXwb7xS/J8VOsXsYTISiAq0YWca0 lH0zq/BMv1JiwmS5ABPxTL89zG6BI3OU9+OFucN6ZxJaYjU3QZZz5/myusxES59c 4U4wpmglUUi5BxZ0DnteP9JLV2JtNUJz6cdS/O9/9oa8lMiaWcmSf3t5LNsnaqxJ vJohAK2hL8xGkYwMwATvM6jmU0xYFP2Z3IkUIoyApuS51MMfs8bAvv0qtJoxh2D0 0rXZGCs7PbtA4GnpYnM6ym2aIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHXPzHF1 uFYXunYRYhItRm56nDBGMB8GA1UdIwQYMBaAFOg/z0xvyNdPO2q0JWBuK8d0bWZA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzlBNS8wRTgyQzJFQ0M0 RjAxMUVBOTFEQ0RGNzdDNEY5QUUwMi82RF9QVEdfSTEwODdhclFsWUc0cngzUnRa a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZEX1BUR19JMTA4N2FyUWxZRzRyeDNSdFprQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzlBNS8wRTgyQzJFQ0M0RjAxMUVBOTFEQ0RGNzdDNEY5QUUwMi82RF9QVEdfSTEw ODdhclFsWUc0cngzUnRaa0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3T61H6b8gCsCLH71h9nepSt5L2N6tAhPh79NE7ov2BltGItVY9w/E Sp5Ryhwyf8vSzR2kRYkhiLJ26zOG5KgA+HTzuOiMQpwwJm8Katu2CZu+LBpjXEpl wUI4wrLHRYxOdhYivhB+Mv7WfeU+eCejy9lukFfUgGwkscQ1BhDm84uTB/I3SSDB oh2QUgP/ct6xZaP5ZYYpwymAWM7a+Niq3EASfBeB+TxZ1n7GNatpPyqN/hY1Elhz 8uiwIhf2wX3tWJfKb4zG9nE2Me+qhvAvsqkhA1EpCvUM3un2GuLHcB5rRzKUgyxz B2qBltEsZPhYaKrh4X0kRQw6nYvFYxdc -----END CERTIFICATE-----Generated at Wed Apr 16 17:09:13 2025 by rpki-client