$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.mft File: 4deDfrzHqaTRdRZXhgR2OivQQnI.mft (raw, json) Hash identifier: DNlhq6JgGfNJJZ68HdQwg6oZ5l9oGJhDp6Cx3USQgkA= Subject key identifier: 24:20:8C:88:8A:33:D5:C4:20:9A:D7:0A:19:E0:5F:08:BC:70:BD:5B Authority key identifier: E1:D7:83:7E:BC:C7:A9:A4:D1:75:16:57:86:04:76:3A:2B:D0:42:72 Certificate issuer: /CN=A91EE92F/serialNumber=E1D7837EBCC7A9A4D17516578604763A2BD04272 Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4deDfrzHqaTRdRZXhgR2OivQQnI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.mft Manifest number: 6A Signing time: Thu 03 Apr 2025 06:11:37 +0000 Manifest this update: Thu 03 Apr 2025 06:11:36 +0000 Manifest next update: Thu 10 Apr 2025 06:11:36 +0000 Files and hashes: 1: 4deDfrzHqaTRdRZXhgR2OivQQnI.crl (hash: E7J56J42xFSnwgOTBsfygObqX3NLUZ9NMRq5CyQTGWM=) 2: 2EC0897A740C11EFB881CE37C4F9AE02.roa (hash: jK7WeiMtYEjncK+3WbHQbUVCOX5jz02RAdo98TCxxKk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.crl rsync://rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4deDfrzHqaTRdRZXhgR2OivQQnI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 06:11:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE92F Validity Not Before: Apr 3 06:11:36 2025 GMT Not After : Apr 10 06:11:36 2025 GMT Subject: CN=67ee2699-b49e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:28:c1:2b:74:f5:65:05:c6:d2:50:64:fd:90: 54:41:4a:8b:fd:0d:07:e7:ed:ef:7f:6e:30:17:e2: 3f:89:49:04:60:92:c9:d8:cd:3e:c6:68:bf:1c:80: 7c:cf:79:04:a6:da:d2:e6:5f:09:0c:55:26:56:bf: c9:49:af:7e:2f:5e:02:83:e7:a6:82:fb:7f:ff:e7: f1:29:69:0f:dd:b1:af:5c:51:c1:24:60:46:e3:96: 17:59:af:9b:ea:d3:65:f3:32:c0:d7:6a:28:14:06: 3c:d9:c1:61:20:5f:0c:7a:92:11:8b:61:5c:3e:1d: ee:19:58:8d:dc:d4:23:4a:8a:12:03:4a:94:45:cd: 66:95:5b:8a:32:ba:0c:9f:74:e0:12:ef:99:a2:fb: d1:2a:7c:f5:c6:14:da:8e:10:45:19:72:6e:f7:2c: 2d:81:86:ff:20:3d:7c:d7:c5:d0:12:bd:1f:02:5f: 66:6a:4b:35:58:1a:6a:97:31:e8:96:51:2a:43:54: 85:1d:95:7d:3c:14:15:b1:7b:66:74:39:3a:ed:78: 4b:32:19:a2:4c:0d:3c:0a:96:17:09:68:1b:bc:e3: 9a:79:0a:7a:f2:f5:ad:ca:3c:5f:29:55:20:c1:ea: f4:8f:11:b8:df:2b:02:11:ee:12:2f:ae:f8:ec:8e: f3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:20:8C:88:8A:33:D5:C4:20:9A:D7:0A:19:E0:5F:08:BC:70:BD:5B X509v3 Authority Key Identifier: keyid:E1:D7:83:7E:BC:C7:A9:A4:D1:75:16:57:86:04:76:3A:2B:D0:42:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4deDfrzHqaTRdRZXhgR2OivQQnI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:9e:fc:36:19:7f:53:31:5c:0e:66:d3:bc:5e:60:ac:b8:e9: ab:3a:63:02:db:6a:c0:20:2d:b6:7d:9a:38:97:85:00:58:24: 2e:a0:81:29:fa:c9:8e:dd:e7:0b:03:26:8f:c3:c7:8b:2c:2f: 14:16:8c:ec:e3:4f:d2:b2:01:98:4a:bd:67:d7:6b:37:27:bd: 0f:09:f2:a9:35:45:6d:3e:93:44:3f:65:24:62:dc:57:bd:97: d7:a0:69:a5:ae:d1:83:4c:bf:b9:f2:49:ad:c9:4c:da:d8:11: c7:1d:e0:17:6f:56:5f:72:14:40:85:14:bb:18:f6:5f:f0:94: e2:ed:f5:ae:50:c4:e9:d4:58:84:e2:79:51:03:9b:cb:aa:d0: e7:44:fc:64:95:c0:42:17:1d:6e:40:a9:40:f6:15:5f:94:0a: ad:08:0c:46:9f:7a:66:13:27:f5:75:0d:fb:54:76:5d:34:5a: 66:c6:68:80:71:f7:0a:76:78:e2:65:18:88:aa:9d:26:90:16: 5a:9f:7c:a4:92:f2:8a:88:75:33:ba:ed:84:a5:3c:40:b4:ac: b1:31:fd:b2:93:e9:12:58:97:10:d7:ae:60:21:6e:cd:27:d5: 00:a9:87:cd:30:4f:9d:42:4f:b8:91:4e:fd:fa:33:73:30:d9: 89:7f:4a:04 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RTkyRjExMC8GA1UEBRMoRTFENzgzN0VCQ0M3QTlBNEQxNzUxNjU3ODYwNDc2M0Ey QkQwNDI3MjAeFw0yNTA0MDMwNjExMzZaFw0yNTA0MTAwNjExMzZaMBgxFjAUBgNV BAMTDTY3ZWUyNjk5LWI0OWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCdKMErdPVlBcbSUGT9kFRBSov9DQfn7e9/bjAX4j+JSQRgksnYzT7GaL8cgHzP eQSm2tLmXwkMVSZWv8lJr34vXgKD56aC+3//5/EpaQ/dsa9cUcEkYEbjlhdZr5vq 02XzMsDXaigUBjzZwWEgXwx6khGLYVw+He4ZWI3c1CNKihIDSpRFzWaVW4oyugyf dOAS75mi+9EqfPXGFNqOEEUZcm73LC2Bhv8gPXzXxdASvR8CX2ZqSzVYGmqXMeiW USpDVIUdlX08FBWxe2Z0OTrteEsyGaJMDTwKlhcJaBu845p5Cnry9a3KPF8pVSDB 6vSPEbjfKwIR7hIvrvjsjvOXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJCCMiIoz 1cQgmtcKGeBfCLxwvVswHwYDVR0jBBgwFoAU4deDfrzHqaTRdRZXhgR2OivQQnIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVFOTJGLzFCMjkwQjVFNzQw QjExRUY5RTlDMDMzNkM0RjlBRTAyLzRkZURmcnpIcWFUUmRSWlhoZ1IyT2l2UVFu SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNGRlRGZyekhxYVRSZFJaWGhnUjJPaXZRUW5JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVF OTJGLzFCMjkwQjVFNzQwQjExRUY5RTlDMDMzNkM0RjlBRTAyLzRkZURmcnpIcWFU UmRSWlhoZ1IyT2l2UVFuSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHee/DYZf1MxXA5m07xeYKy46as6YwLbasAgLbZ9mjiXhQBYJC6ggSn6 yY7d5wsDJo/Dx4ssLxQWjOzjT9KyAZhKvWfXazcnvQ8J8qk1RW0+k0Q/ZSRi3Fe9 l9egaaWu0YNMv7nySa3JTNrYEccd4BdvVl9yFECFFLsY9l/wlOLt9a5QxOnUWITi eVEDm8uq0OdE/GSVwEIXHW5AqUD2FV+UCq0IDEafemYTJ/V1DftUdl00WmbGaIBx 9wp2eOJlGIiqnSaQFlqffKSS8oqIdTO67YSlPEC0rLEx/bKT6RJYlxDXrmAhbs0n 1QCph80wT51CT7iRTv36M3Mw2Yl/SgQ= -----END CERTIFICATE-----Generated at Sat Apr 5 05:15:16 2025 by rpki-client