$ rpki-client -vvf rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.mft File: K6Guk7v1am9sllCE8EiBe7epjw8.mft (raw, json) Hash identifier: J+qvKq9TXKfqVAqQg7AiezLe3JTreElfJRR5Dz/vEGE= Subject key identifier: 19:32:0E:F2:0F:A5:01:7C:5B:81:5A:B3:C1:0E:92:44:69:38:20:AC Authority key identifier: 2B:A1:AE:93:BB:F5:6A:6F:6C:96:50:84:F0:48:81:7B:B7:A9:8F:0F Certificate issuer: /CN=A91F65C7/serialNumber=2BA1AE93BBF56A6F6C965084F048817BB7A98F0F Certificate serial: E3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/K6Guk7v1am9sllCE8EiBe7epjw8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.mft Manifest number: E1 Signing time: Thu 17 Apr 2025 04:20:20 +0000 Manifest this update: Thu 17 Apr 2025 04:20:20 +0000 Manifest next update: Thu 24 Apr 2025 04:20:20 +0000 Files and hashes: 1: K6Guk7v1am9sllCE8EiBe7epjw8.crl (hash: fY5xcAbTHcHkOrP62utLug+YCfAO1JT6w8FEFiptIhc=) 2: 44673792C3E511EEA9660E85C4F9AE02.roa (hash: 9frZlnTUA25wzcLVRZfcMG1N4NRYNcJ6CAVrVhpGid0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.crl rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/K6Guk7v1am9sllCE8EiBe7epjw8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 04:20:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F65C7, serialNumber=2BA1AE93BBF56A6F6C965084F048817BB7A98F0F Validity Not Before: Apr 17 04:20:20 2025 GMT Not After : Apr 24 04:20:20 2025 GMT Subject: CN=68008184-5cf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ea:de:c0:32:eb:5f:d8:37:12:c4:60:89:03: c8:f6:62:10:28:d6:25:6d:e7:20:ae:ec:4e:dc:8b: d3:08:de:91:25:a9:e9:30:e1:06:04:5f:90:41:77: fa:4c:70:57:ef:db:78:d0:0e:0e:b3:db:30:05:91: 92:3d:ce:b1:3a:41:eb:77:3e:e7:a7:e4:2f:48:26: 73:dc:ef:ef:d5:4d:4c:93:58:14:a6:c1:9c:38:29: 3e:8e:92:12:ba:05:ea:3c:40:9d:bf:7e:11:a5:d5: e2:5f:80:4f:4f:07:2d:28:e2:1c:1f:bb:d8:21:c8: 7d:43:65:5f:9c:d0:1a:20:5b:0e:cf:6a:13:e2:b9: bd:fc:80:8b:23:8d:95:46:1e:98:bb:bd:d3:ed:2d: 66:d3:10:0a:cd:01:d4:a1:1b:5a:d4:2b:c0:80:3b: c3:ac:31:5a:ea:b9:13:7a:26:34:aa:66:69:89:77: 0c:2b:f2:c9:69:e1:9a:0a:48:5f:c3:7a:5e:39:2f: d5:f3:e9:9c:af:14:7f:9a:34:3f:9b:4d:97:62:f1: 6f:b0:c6:bb:66:a3:e8:f3:fe:b2:3c:24:6d:bb:34: 0b:26:01:37:5b:a4:75:1e:19:24:cb:ce:7b:2f:22: 93:e9:e5:f9:55:db:03:f0:68:fd:d4:00:6e:83:e2: e7:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:32:0E:F2:0F:A5:01:7C:5B:81:5A:B3:C1:0E:92:44:69:38:20:AC X509v3 Authority Key Identifier: keyid:2B:A1:AE:93:BB:F5:6A:6F:6C:96:50:84:F0:48:81:7B:B7:A9:8F:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/K6Guk7v1am9sllCE8EiBe7epjw8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:59:58:8c:05:e1:f5:95:aa:48:1d:4e:21:b7:73:11:f4:20: da:7b:02:98:fe:21:9f:d8:b1:fb:e4:3e:4a:8e:ae:a3:c9:79: 74:75:39:f5:69:74:4f:34:cf:0c:97:56:26:5a:57:04:c3:bd: a1:c9:0d:bc:ec:5c:04:b9:20:7e:b4:f5:1a:71:e6:e4:5a:65: 44:f4:d2:cc:50:49:ed:d0:95:15:65:43:b9:dc:c7:fb:3c:17: 16:50:07:2e:1c:09:35:65:8e:14:36:6c:50:0f:ee:be:6a:6c: 60:3d:c9:46:aa:4b:67:41:8c:f5:6d:94:8b:e8:02:da:01:24: 33:93:35:5c:45:19:65:11:88:b7:24:15:46:c8:6d:57:2b:36: f1:6b:ff:c5:f8:44:f2:34:d2:24:c8:a4:00:3c:af:b1:f0:ed: 21:e9:32:4e:f6:a9:2f:04:d7:10:bb:68:f1:10:b9:74:3c:9f: 5d:5a:3c:97:54:ab:19:e2:85:49:84:e0:ae:d2:33:4e:5f:fa: 98:be:cf:00:f5:7a:cd:7b:50:c2:e2:6a:b0:5e:fb:09:d7:95: 66:40:c4:b5:ec:06:68:6a:ef:54:21:a6:29:d4:49:a6:2a:fa: 30:e6:3a:dd:e7:76:1c:a1:16:04:e6:c4:20:95:31:d2:e1:04: 35:91:e6:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY1QzcxMTAvBgNVBAUTKDJCQTFBRTkzQkJGNTZBNkY2Qzk2NTA4NEYwNDg4MTdC QjdBOThGMEYwHhcNMjUwNDE3MDQyMDIwWhcNMjUwNDI0MDQyMDIwWjAYMRYwFAYD VQQDEw02ODAwODE4NC01Y2Y2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnurewDLrX9g3EsRgiQPI9mIQKNYlbecgruxO3IvTCN6RJanpMOEGBF+QQXf6 THBX79t40A4Os9swBZGSPc6xOkHrdz7np+QvSCZz3O/v1U1Mk1gUpsGcOCk+jpIS ugXqPECdv34RpdXiX4BPTwctKOIcH7vYIch9Q2VfnNAaIFsOz2oT4rm9/ICLI42V Rh6Yu73T7S1m0xAKzQHUoRta1CvAgDvDrDFa6rkTeiY0qmZpiXcMK/LJaeGaCkhf w3peOS/V8+mcrxR/mjQ/m02XYvFvsMa7ZqPo8/6yPCRtuzQLJgE3W6R1Hhkky857 LyKT6eX5VdsD8Gj91ABug+LnWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBkyDvIP pQF8W4Fas8EOkkRpOCCsMB8GA1UdIwQYMBaAFCuhrpO79WpvbJZQhPBIgXu3qY8P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjVDNy9FM0JFQTQ3QUMz RTQxMUVFOTYxM0Y1ODNDNEY5QUUwMi9LNkd1azd2MWFtOXNsbENFOEVpQmU3ZXBq dzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0s2R3VrN3YxYW05c2xsQ0U4RWlCZTdlcGp3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjVDNy9FM0JFQTQ3QUMzRTQxMUVFOTYxM0Y1ODNDNEY5QUUwMi9LNkd1azd2MWFt OXNsbENFOEVpQmU3ZXBqdzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnWViMBeH1lapIHU4ht3MR9CDaewKY/iGf2LH75D5Kjq6jyXl0dTn1 aXRPNM8Ml1YmWlcEw72hyQ287FwEuSB+tPUacebkWmVE9NLMUEnt0JUVZUO53Mf7 PBcWUAcuHAk1ZY4UNmxQD+6+amxgPclGqktnQYz1bZSL6ALaASQzkzVcRRllEYi3 JBVGyG1XKzbxa//F+ETyNNIkyKQAPK+x8O0h6TJO9qkvBNcQu2jxELl0PJ9dWjyX VKsZ4oVJhOCu0jNOX/qYvs8A9XrNe1DC4mqwXvsJ15VmQMS17AZoau9UIaYp1Emm Kvow5jrd53YcoRYE5sQglTHS4QQ1keZg -----END CERTIFICATE-----Generated at Fri Apr 18 11:03:52 2025 by rpki-client