$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.mft File: djUTLn1AWlRkWzst-y4KA9_0VsM.mft (raw, json) Hash identifier: MTOz0tcbcXCtC+cE4dD/VlKSaWsT1rjlGdb1bE1lLLs= Subject key identifier: 69:F2:BE:B4:17:E6:B0:F0:4C:44:52:29:3A:C6:B6:65:4D:26:C5:5C Authority key identifier: 76:35:13:2E:7D:40:5A:54:64:5B:3B:2D:FB:2E:0A:03:DF:F4:56:C3 Certificate issuer: /CN=A91F6799/serialNumber=7635132E7D405A54645B3B2DFB2E0A03DFF456C3 Certificate serial: 6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djUTLn1AWlRkWzst-y4KA9_0VsM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.mft Manifest number: 6D Signing time: Sat 05 Apr 2025 06:11:50 +0000 Manifest this update: Sat 05 Apr 2025 06:11:50 +0000 Manifest next update: Sat 12 Apr 2025 06:11:50 +0000 Files and hashes: 1: djUTLn1AWlRkWzst-y4KA9_0VsM.crl (hash: 45PTHaAXmlrRYwA/qrd2BAVZwKLkGwfl/6vtxbtHZ3I=) 2: F13B6A3C70A711EFBA8AFF10C4F9AE02.roa (hash: Q9yPm3gs8BRfJ5g6BfqBpNgsQGDHcY41Tws1eH6Cg1w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.crl rsync://rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djUTLn1AWlRkWzst-y4KA9_0VsM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 06:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 111 (0x6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6799 Validity Not Before: Apr 5 06:11:50 2025 GMT Not After : Apr 12 06:11:50 2025 GMT Subject: CN=67f0c9a6-bc5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b7:ed:2f:e6:41:37:42:62:19:87:8e:eb:71: 53:67:3d:f8:96:42:ee:98:46:b7:6c:2d:23:8e:32: be:ff:61:e5:63:e8:78:2d:86:15:74:a4:92:3c:2d: 3f:7d:2f:b8:1f:ff:5e:ed:56:66:aa:19:86:52:93: df:3e:8c:2a:d0:e2:e3:b7:31:7d:98:f2:7d:f0:3b: 13:1b:24:93:06:b1:92:33:89:c2:a8:ff:3c:14:02: 8d:93:16:e3:47:a2:aa:ea:58:43:9b:aa:f7:53:65: 76:96:f5:fc:4f:ef:1e:59:dd:c8:55:f5:0d:31:14: f3:54:3e:15:f2:3c:8c:d4:b6:d5:4c:b1:67:aa:c9: 8d:b7:9c:09:83:0e:ef:7a:79:ca:4c:28:86:f6:1e: a5:9b:36:93:31:f8:6a:86:d4:50:4d:25:c6:cc:dc: 74:af:9f:64:6b:ab:9c:0d:12:b2:20:02:ed:ed:6e: bd:d1:de:ca:c8:0c:5f:55:ca:93:fa:94:69:6b:a6: 07:78:8e:c7:be:67:4d:d7:ec:6d:c4:70:64:a6:41: 56:ea:99:cb:d1:6c:6e:fd:6b:7a:e7:5c:6e:c3:a2: d0:6c:27:7a:24:19:cf:a1:6b:6b:cb:f4:f5:89:d0: 15:34:2f:2d:d7:45:3d:3a:e9:83:fe:6d:c1:a0:85: 67:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:F2:BE:B4:17:E6:B0:F0:4C:44:52:29:3A:C6:B6:65:4D:26:C5:5C X509v3 Authority Key Identifier: keyid:76:35:13:2E:7D:40:5A:54:64:5B:3B:2D:FB:2E:0A:03:DF:F4:56:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djUTLn1AWlRkWzst-y4KA9_0VsM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:85:e2:f0:5c:66:d1:ac:bb:33:c3:36:c6:0e:c4:89:49:f8: 1d:fa:f1:ca:1e:da:de:8e:fb:89:e8:21:d2:f2:da:e8:68:7e: be:9c:8a:92:8b:a8:86:9b:79:5c:a8:46:24:fa:75:42:d9:d5: 5a:46:7a:67:73:47:f7:c9:bd:a3:05:ff:db:0c:b0:f7:1f:58: 46:4e:5e:d3:a4:e2:0a:e7:f4:93:fb:ee:f6:2f:d2:97:71:ef: 41:8a:4b:04:7b:ec:0d:e8:ba:03:02:5d:d9:1a:f1:6f:d0:72: 9f:09:fd:ed:01:24:31:5b:10:73:41:85:79:05:a6:5f:43:25: 65:50:09:ea:30:56:f3:17:2a:e8:2d:e1:af:2a:86:2d:95:7c: d4:bc:e4:58:be:18:7f:cd:13:6a:d1:ad:04:bc:89:10:f4:de: 28:42:c4:e2:89:5d:e8:cd:41:57:20:70:2d:df:84:3c:cf:1e: 3b:60:de:7d:c1:fd:e2:6b:8c:4d:88:2b:8b:01:82:35:25:b1: fa:a8:c3:ae:7f:b0:d4:ff:5d:61:48:d6:1b:78:36:90:e5:cb: 2f:cd:a3:c0:eb:03:8b:1f:2a:75:03:e4:69:97:38:77:25:83: 5f:9e:ad:85:1f:9b:d3:76:a2:f1:83:e6:02:a9:5f:b1:42:dd: 6d:63:f2:7e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG Njc5OTExMC8GA1UEBRMoNzYzNTEzMkU3RDQwNUE1NDY0NUIzQjJERkIyRTBBMDNE RkY0NTZDMzAeFw0yNTA0MDUwNjExNTBaFw0yNTA0MTIwNjExNTBaMBgxFjAUBgNV BAMTDTY3ZjBjOWE2LWJjNWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGt+0v5kE3QmIZh47rcVNnPfiWQu6YRrdsLSOOMr7/YeVj6HgthhV0pJI8LT99 L7gf/17tVmaqGYZSk98+jCrQ4uO3MX2Y8n3wOxMbJJMGsZIzicKo/zwUAo2TFuNH oqrqWEObqvdTZXaW9fxP7x5Z3chV9Q0xFPNUPhXyPIzUttVMsWeqyY23nAmDDu96 ecpMKIb2HqWbNpMx+GqG1FBNJcbM3HSvn2Rrq5wNErIgAu3tbr3R3srIDF9VypP6 lGlrpgd4jse+Z03X7G3EcGSmQVbqmcvRbG79a3rnXG7DotBsJ3okGc+ha2vL9PWJ 0BU0Ly3XRT066YP+bcGghWdnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUafK+tBfm sPBMRFIpOsa2ZU0mxVwwHwYDVR0jBBgwFoAUdjUTLn1AWlRkWzst+y4KA9/0VsMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY2Nzk5L0VEOUU2MEIyNzA5 RjExRUZBNTcwQkU0REM0RjlBRTAyL2RqVVRMbjFBV2xSa1d6c3QteTRLQTlfMFZz TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZGpVVExuMUFXbFJrV3pzdC15NEtBOV8wVnNNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY2 Nzk5L0VEOUU2MEIyNzA5RjExRUZBNTcwQkU0REM0RjlBRTAyL2RqVVRMbjFBV2xS a1d6c3QteTRLQTlfMFZzTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC6F4vBcZtGsuzPDNsYOxIlJ+B368coe2t6O+4noIdLy2uhofr6cipKL qIabeVyoRiT6dULZ1VpGemdzR/fJvaMF/9sMsPcfWEZOXtOk4grn9JP77vYv0pdx 70GKSwR77A3ougMCXdka8W/Qcp8J/e0BJDFbEHNBhXkFpl9DJWVQCeowVvMXKugt 4a8qhi2VfNS85Fi+GH/NE2rRrQS8iRD03ihCxOKJXejNQVcgcC3fhDzPHjtg3n3B /eJrjE2IK4sBgjUlsfqow65/sNT/XWFI1ht4NpDlyy/No8DrA4sfKnUD5GmXOHcl g1+erYUfm9N2ovGD5gKpX7FC3W1j8n4= -----END CERTIFICATE-----Generated at Sun Apr 6 10:08:48 2025 by rpki-client