$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft File: 1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft (raw, json) Hash identifier: VNehdT5M2BnnOMgB1dk57Ya+RtBPpK/ZnFzHwoAwuh0= Subject key identifier: BE:4A:23:F7:33:6E:4F:B4:33:0E:23:33:7F:8A:0C:3A:2D:C2:6D:90 Authority key identifier: D6:F2:BA:AE:7A:52:0F:AA:46:82:CA:DC:36:93:66:0B:9E:1F:F1:04 Certificate issuer: /CN=A91FC8B6/serialNumber=D6F2BAAE7A520FAA4682CADC3693660B9E1FF104 Certificate serial: 0165 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vK6rnpSD6pGgsrcNpNmC54f8QQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft Manifest number: 0162 Signing time: Sat 05 Apr 2025 03:23:15 +0000 Manifest this update: Sat 05 Apr 2025 03:23:15 +0000 Manifest next update: Sat 12 Apr 2025 03:23:15 +0000 Files and hashes: 1: 1vK6rnpSD6pGgsrcNpNmC54f8QQ.crl (hash: oavWD5KEWWwFHfNUE8sdR7MAfY7ZnQ93cM3ISsiNXrM=) 2: 37B81F7AF64511ED8C736D76C4F9AE02.roa (hash: ElQvBJV6B10UNvlVIlGas46V55/K9saRpZMoFdDMc0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.crl rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vK6rnpSD6pGgsrcNpNmC54f8QQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 03:23:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 357 (0x165) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC8B6 Validity Not Before: Apr 5 03:23:15 2025 GMT Not After : Apr 12 03:23:15 2025 GMT Subject: CN=67f0a223-c835 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:a9:6d:0a:e2:6a:79:a8:6b:b5:3b:f2:94:a1: 32:a2:df:3b:c4:61:50:ce:e2:e3:e2:c8:07:ce:37: b7:3e:32:0b:93:3c:c6:ec:9e:d8:61:f9:1e:11:ef: 40:b7:90:d1:b9:25:3f:43:89:91:1a:1a:cb:b9:1c: 20:16:8f:76:b8:08:05:4c:a0:38:f8:48:27:19:4a: 64:4e:62:49:18:4b:38:72:70:e6:ad:2f:b4:a0:29: 6c:1d:06:0d:c8:68:63:27:6c:b0:b4:b2:88:e3:a6: 49:95:71:f2:63:d4:a4:bb:ba:13:2b:64:a0:7f:75: 93:43:f1:0e:28:7d:dd:6b:5d:c2:92:93:6f:62:1f: 57:89:3c:8b:15:e6:26:03:22:21:a6:be:b6:36:18: dd:4a:d4:c5:e1:20:7c:62:88:85:74:d8:1d:1e:14: a5:37:5c:25:26:fe:d9:84:26:65:b6:1f:ca:1b:52: 55:e9:f7:33:d3:67:87:21:3f:7a:a9:0a:66:82:7f: 68:72:51:b4:a6:69:06:54:92:46:7a:fc:7d:ef:71: aa:ca:fe:80:91:9d:f2:3a:cd:8f:51:ee:10:ac:83: 1d:dd:23:d1:42:92:cf:04:ce:bf:f1:d1:bb:ac:c2: 90:ed:a3:d6:9d:dd:28:08:16:82:de:f5:ec:1d:f3: a6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:4A:23:F7:33:6E:4F:B4:33:0E:23:33:7F:8A:0C:3A:2D:C2:6D:90 X509v3 Authority Key Identifier: keyid:D6:F2:BA:AE:7A:52:0F:AA:46:82:CA:DC:36:93:66:0B:9E:1F:F1:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vK6rnpSD6pGgsrcNpNmC54f8QQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:90:cd:42:46:74:87:00:47:aa:0f:04:9a:6a:14:98:78:f8: 10:58:eb:0f:58:58:cf:00:ba:d8:a8:f8:66:62:bd:32:bf:3a: d4:a3:f9:27:b8:72:57:df:44:17:34:9e:1f:d9:60:7e:e8:77: 42:cb:db:7d:55:63:0b:0e:78:ca:ab:22:1e:46:85:f6:7b:e2: 99:a2:d9:f2:13:9f:ce:4a:56:63:d1:10:23:84:6b:c2:e8:01: c4:bf:5f:74:a7:5a:d3:c4:b6:e6:b3:be:a0:a0:ee:a5:2f:87: 39:6a:f3:64:c9:1e:15:40:56:4a:4e:06:c8:4f:b7:e2:20:6a: 39:5e:74:b5:95:f9:e3:27:83:46:3e:0e:18:1d:6d:32:40:8d: e9:9c:db:1f:a2:e0:57:3e:dd:ab:89:42:37:44:03:3f:82:ff: 4c:c8:ce:c8:9f:f4:14:62:0c:88:e5:60:d8:a0:66:62:cb:f5: f8:81:bf:54:73:2f:ff:d5:31:01:ac:9a:9d:d3:aa:2a:70:57: ef:45:1a:f2:df:2b:26:dc:c9:5e:19:00:da:8c:4c:dc:76:10: 70:55:33:ce:9c:c8:45:9d:d5:7c:4d:b9:ad:b9:79:73:29:9c: 3a:36:11:07:01:dc:b4:ef:75:f6:3b:d2:3b:ca:ca:17:c1:6b: 6a:85:9d:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM4QjYxMTAvBgNVBAUTKEQ2RjJCQUFFN0E1MjBGQUE0NjgyQ0FEQzM2OTM2NjBC OUUxRkYxMDQwHhcNMjUwNDA1MDMyMzE1WhcNMjUwNDEyMDMyMzE1WjAYMRYwFAYD VQQDEw02N2YwYTIyMy1jODM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9KltCuJqeahrtTvylKEyot87xGFQzuLj4sgHzje3PjILkzzG7J7YYfkeEe9A t5DRuSU/Q4mRGhrLuRwgFo92uAgFTKA4+EgnGUpkTmJJGEs4cnDmrS+0oClsHQYN yGhjJ2ywtLKI46ZJlXHyY9Sku7oTK2Sgf3WTQ/EOKH3da13CkpNvYh9XiTyLFeYm AyIhpr62NhjdStTF4SB8YoiFdNgdHhSlN1wlJv7ZhCZlth/KG1JV6fcz02eHIT96 qQpmgn9oclG0pmkGVJJGevx973Gqyv6AkZ3yOs2PUe4QrIMd3SPRQpLPBM6/8dG7 rMKQ7aPWnd0oCBaC3vXsHfOmuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL5KI/cz bk+0Mw4jM3+KDDotwm2QMB8GA1UdIwQYMBaAFNbyuq56Ug+qRoLK3DaTZgueH/EE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzhCNi9FQzYyMkIwNkY2 M0YxMUVEOTc4ODJDNzJDNEY5QUUwMi8xdks2cm5wU0Q2cEdnc3JjTnBObUM1NGY4 UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF2SzZybnBTRDZwR2dzcmNOcE5tQzU0ZjhRUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzhCNi9FQzYyMkIwNkY2M0YxMUVEOTc4ODJDNzJDNEY5QUUwMi8xdks2cm5wU0Q2 cEdnc3JjTnBObUM1NGY4UVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnkM1CRnSHAEeqDwSaahSYePgQWOsPWFjPALrYqPhmYr0yvzrUo/kn uHJX30QXNJ4f2WB+6HdCy9t9VWMLDnjKqyIeRoX2e+KZotnyE5/OSlZj0RAjhGvC 6AHEv190p1rTxLbms76goO6lL4c5avNkyR4VQFZKTgbIT7fiIGo5XnS1lfnjJ4NG Pg4YHW0yQI3pnNsfouBXPt2riUI3RAM/gv9MyM7In/QUYgyI5WDYoGZiy/X4gb9U cy//1TEBrJqd06oqcFfvRRry3ysm3MleGQDajEzcdhBwVTPOnMhFndV8TbmtuXlz KZw6NhEHAdy073X2O9I7ysoXwWtqhZ06 -----END CERTIFICATE-----Generated at Sun Apr 6 15:49:32 2025 by rpki-client