$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC1E4/2FD0CA98061911EFA926A723C4F9AE02/K6eL_tnBR-_-yIHZxzb2j1hVNMs.mft File: K6eL_tnBR-_-yIHZxzb2j1hVNMs.mft (raw, json) Hash identifier: mk6qyH+3WY5aC2323GKQ5ODk4qW6bxM3QqY+9IokI18= Subject key identifier: C1:EE:0A:8E:5B:01:90:8B:30:E9:6C:7C:1E:23:E1:1C:D8:F1:03:4A Authority key identifier: 2B:A7:8B:FE:D9:C1:47:EF:FE:C8:81:D9:C7:36:F6:8F:58:55:34:CB Certificate issuer: /CN=A91FC1E4/serialNumber=2BA78BFED9C147EFFEC881D9C736F68F585534CB Certificate serial: B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6eL_tnBR-_-yIHZxzb2j1hVNMs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC1E4/2FD0CA98061911EFA926A723C4F9AE02/K6eL_tnBR-_-yIHZxzb2j1hVNMs.mft Manifest number: B3 Signing time: Thu 03 Apr 2025 05:20:28 +0000 Manifest this update: Thu 03 Apr 2025 05:20:28 +0000 Manifest next update: Thu 10 Apr 2025 05:20:28 +0000 Files and hashes: 1: K6eL_tnBR-_-yIHZxzb2j1hVNMs.crl (hash: ZoMnXvQbSWHSflrzPl1WTpD314qvtDrRZ8HFbjfHAPI=) 2: C820C000061E11EFA13A0F4AC4F9AE02.roa (hash: 0DUWhAlOmYMH58y7cT6IWqOSq8FJJK/e/LROrKNRNG4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC1E4/2FD0CA98061911EFA926A723C4F9AE02/K6eL_tnBR-_-yIHZxzb2j1hVNMs.crl rsync://rpki.apnic.net/member_repository/A91FC1E4/2FD0CA98061911EFA926A723C4F9AE02/K6eL_tnBR-_-yIHZxzb2j1hVNMs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6eL_tnBR-_-yIHZxzb2j1hVNMs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 05:20:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 182 (0xb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC1E4 Validity Not Before: Apr 3 05:20:28 2025 GMT Not After : Apr 10 05:20:28 2025 GMT Subject: CN=67ee1a9c-7292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:98:bc:ec:c7:40:b7:81:d0:83:b1:d2:45:4f: cd:2c:34:80:2d:58:67:e6:6e:8f:59:85:60:2c:4b: 43:55:85:49:31:40:71:49:ee:42:20:28:6a:65:c1: 2c:4f:f1:d3:f0:69:93:ad:bc:b3:34:7f:53:e1:b3: 51:3f:b8:68:21:83:63:a1:a3:dd:9f:13:7c:f4:18: 1b:52:00:19:31:b1:8e:fc:76:8c:05:61:0a:db:61: 31:90:09:f9:f7:25:5d:f1:09:ba:3d:f4:75:6a:47: 5b:3b:cd:27:c3:81:2a:e7:77:24:34:3f:27:29:b9: 98:4f:31:df:7e:c0:db:bb:5b:d8:06:fa:3b:98:45: 8a:62:ef:e6:35:60:bb:f7:d1:80:52:a8:b8:28:17: eb:8b:e1:8f:94:6f:10:2d:26:53:76:2a:a9:31:df: 57:76:3a:b8:9a:7c:87:1b:20:73:1c:25:ca:57:8b: b2:69:be:49:37:c2:7d:90:fb:ff:fa:3f:72:35:cf: 15:09:ee:cd:e0:e6:35:c6:96:01:d5:a5:bb:6e:be: 62:48:f8:a7:21:8f:39:91:b3:2d:9f:6a:be:9a:a2: 3d:26:26:26:99:97:d6:4a:f6:dd:5f:e5:51:5a:57: bc:16:75:4e:ef:dd:30:cb:30:88:e3:26:37:b0:f0: 59:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:EE:0A:8E:5B:01:90:8B:30:E9:6C:7C:1E:23:E1:1C:D8:F1:03:4A X509v3 Authority Key Identifier: keyid:2B:A7:8B:FE:D9:C1:47:EF:FE:C8:81:D9:C7:36:F6:8F:58:55:34:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC1E4/2FD0CA98061911EFA926A723C4F9AE02/K6eL_tnBR-_-yIHZxzb2j1hVNMs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6eL_tnBR-_-yIHZxzb2j1hVNMs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC1E4/2FD0CA98061911EFA926A723C4F9AE02/K6eL_tnBR-_-yIHZxzb2j1hVNMs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:cc:60:07:47:fc:e4:05:57:95:ea:dd:46:72:54:a1:6c:23: 90:e9:23:5c:0e:50:bd:ce:5f:67:83:1c:36:5a:b7:d1:03:68: f0:42:33:b4:05:b6:26:3b:9a:12:f7:cf:d7:83:47:0f:94:07: b5:5d:55:7a:8d:ca:f0:9d:04:8a:97:2d:91:0d:e1:72:8f:c6: af:a8:cd:2d:45:11:60:ce:6d:9d:51:a1:aa:be:76:6b:39:25: 9f:d6:34:65:a6:3f:dc:88:c4:4a:f4:f1:4b:2f:e0:d8:71:2e: 9a:a5:40:ca:45:59:32:6c:07:fc:74:58:f0:ce:a5:e7:8f:1a: b6:3e:4a:20:d9:1e:58:bd:53:29:a3:df:de:ce:45:1c:3e:82: 88:5c:5a:86:95:96:9a:f8:0c:ed:30:15:ef:04:3c:5b:93:c2: 20:47:9a:04:76:ff:ee:d5:a2:38:19:c3:7c:42:87:1d:1b:40: e6:f6:12:52:af:16:56:3a:5f:1d:b6:14:73:a4:ef:aa:3e:f2: 7e:7c:dc:d4:db:57:e5:1e:ee:0a:a4:f6:79:34:9b:11:80:c9: 3b:1c:12:b8:c0:bb:a2:78:22:78:a1:12:2c:c8:fc:f9:9d:74: 09:b0:61:40:ec:dc:3d:db:e0:23:88:4f:0e:a9:b6:53:7c:3e: 4c:51:63:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkMxRTQxMTAvBgNVBAUTKDJCQTc4QkZFRDlDMTQ3RUZGRUM4ODFEOUM3MzZGNjhG NTg1NTM0Q0IwHhcNMjUwNDAzMDUyMDI4WhcNMjUwNDEwMDUyMDI4WjAYMRYwFAYD VQQDEw02N2VlMWE5Yy03MjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz5i87MdAt4HQg7HSRU/NLDSALVhn5m6PWYVgLEtDVYVJMUBxSe5CIChqZcEs T/HT8GmTrbyzNH9T4bNRP7hoIYNjoaPdnxN89BgbUgAZMbGO/HaMBWEK22ExkAn5 9yVd8Qm6PfR1akdbO80nw4Eq53ckND8nKbmYTzHffsDbu1vYBvo7mEWKYu/mNWC7 99GAUqi4KBfri+GPlG8QLSZTdiqpMd9Xdjq4mnyHGyBzHCXKV4uyab5JN8J9kPv/ +j9yNc8VCe7N4OY1xpYB1aW7br5iSPinIY85kbMtn2q+mqI9JiYmmZfWSvbdX+VR Wle8FnVO790wyzCI4yY3sPBZgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMHuCo5b AZCLMOlsfB4j4RzY8QNKMB8GA1UdIwQYMBaAFCuni/7ZwUfv/siB2cc29o9YVTTL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzFFNC8yRkQwQ0E5ODA2 MTkxMUVGQTkyNkE3MjNDNEY5QUUwMi9LNmVMX3RuQlItXy15SUhaeHpiMmoxaFZO TXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s2ZUxfdG5CUi1fLXlJSFp4emIyajFoVk5Ncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzFFNC8yRkQwQ0E5ODA2MTkxMUVGQTkyNkE3MjNDNEY5QUUwMi9LNmVMX3RuQlIt Xy15SUhaeHpiMmoxaFZOTXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnzGAHR/zkBVeV6t1GclShbCOQ6SNcDlC9zl9ngxw2WrfRA2jwQjO0 BbYmO5oS98/Xg0cPlAe1XVV6jcrwnQSKly2RDeFyj8avqM0tRRFgzm2dUaGqvnZr OSWf1jRlpj/ciMRK9PFLL+DYcS6apUDKRVkybAf8dFjwzqXnjxq2Pkog2R5YvVMp o9/ezkUcPoKIXFqGlZaa+AztMBXvBDxbk8IgR5oEdv/u1aI4GcN8QocdG0Dm9hJS rxZWOl8dthRzpO+qPvJ+fNzU21flHu4KpPZ5NJsRgMk7HBK4wLuieCJ4oRIsyPz5 nXQJsGFA7Nw92+AjiE8OqbZTfD5MUWOM -----END CERTIFICATE-----Generated at Fri Apr 4 22:22:06 2025 by rpki-client