$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft File: M6AXSkpLAJwBFRWWkTbzAQidtbU.mft (raw, json) Hash identifier: ZsRln+7Lazxwv5tOT0pCmCyIsOSmb+VzlUhzROxhQ9I= Subject key identifier: FF:BE:B2:8A:6B:C5:CD:6A:A0:37:C8:19:E8:68:67:4A:7A:E5:38:E1 Authority key identifier: 33:A0:17:4A:4A:4B:00:9C:01:15:15:96:91:36:F3:01:08:9D:B5:B5 Certificate issuer: /CN=A91FF1CC/serialNumber=33A0174A4A4B009C011515969136F301089DB5B5 Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6AXSkpLAJwBFRWWkTbzAQidtbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft Manifest number: 18 Signing time: Thu 03 Apr 2025 07:14:02 +0000 Manifest this update: Thu 03 Apr 2025 07:14:02 +0000 Manifest next update: Thu 10 Apr 2025 07:14:02 +0000 Files and hashes: 1: M6AXSkpLAJwBFRWWkTbzAQidtbU.crl (hash: riwgplf5/bxODXmT+/6qkaSXlqSjZnFf7ieHGTjsEOo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.crl rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6AXSkpLAJwBFRWWkTbzAQidtbU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 07:14:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF1CC Validity Not Before: Apr 3 07:14:02 2025 GMT Not After : Apr 10 07:14:02 2025 GMT Subject: CN=67ee353a-45c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2e:25:16:e2:e6:ab:e8:b1:8e:f2:25:5e:a2: 8d:50:91:94:5a:2b:46:c2:fe:7c:4d:45:a1:6e:29: 4a:23:38:b8:ee:0f:47:e2:50:7e:e1:0c:9a:e4:66: cc:d6:56:de:37:97:1c:05:87:7b:f5:6e:a4:56:7e: 75:2b:8d:1b:59:a7:2a:35:9e:64:a4:53:1b:fa:96: 9c:57:c8:b6:58:c2:1f:d4:01:11:52:a6:f3:dc:da: 36:42:1c:00:11:d2:33:01:54:0e:06:8c:d3:91:e0: de:12:cf:47:e8:10:0b:4f:9d:fc:73:71:90:77:90: 0b:1e:e6:4d:6c:1e:0c:1f:ed:0a:9c:a4:c6:8d:24: 1d:72:d0:1b:5a:ad:35:0c:d3:dc:07:66:0f:92:a5: bc:82:92:73:40:4b:42:cc:89:81:fb:ed:1d:29:f4: 88:31:ec:4b:75:3f:8e:9f:b7:10:1e:26:8b:3f:32: 22:96:0d:90:50:b4:29:60:57:d1:44:4f:90:4b:0b: 92:ed:2c:a3:b3:75:3d:2b:15:01:a4:6c:59:aa:99: eb:9f:67:ab:e1:ad:16:93:f7:b9:3d:ec:7d:23:6a: 6a:2f:ef:77:7e:37:50:74:a4:38:f5:f6:85:a8:c1: 5b:9d:b1:a6:89:9a:9f:2a:28:20:b7:1c:70:43:76: 19:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:BE:B2:8A:6B:C5:CD:6A:A0:37:C8:19:E8:68:67:4A:7A:E5:38:E1 X509v3 Authority Key Identifier: keyid:33:A0:17:4A:4A:4B:00:9C:01:15:15:96:91:36:F3:01:08:9D:B5:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6AXSkpLAJwBFRWWkTbzAQidtbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:a3:d3:d1:a9:2c:97:57:2d:74:7d:79:60:de:a6:13:97:95: ca:49:85:d7:b1:26:7e:30:d5:26:f5:82:95:02:bc:32:3a:db: bb:a6:50:d4:0c:5b:7e:ff:85:ef:b0:77:22:bd:05:9f:af:f4: c1:a8:4e:60:45:a2:8b:b6:e4:c0:1a:e5:bf:f8:15:bc:81:32: 08:58:b3:96:80:92:27:a4:3b:1c:6c:f5:2d:4a:e8:6d:31:a5: b3:b8:18:18:b9:d8:59:79:36:ac:f6:fb:b5:6e:5b:13:2c:a1: f4:ef:c6:74:69:ce:3e:7e:11:97:52:77:13:84:ee:79:cf:b0: b9:b0:14:2b:8f:c4:5d:a1:a0:4f:0e:c1:25:2a:ac:68:02:e7: cd:00:78:d1:0b:52:b2:38:8a:b8:29:3e:f5:18:32:ad:d1:a8: 85:20:49:99:34:a4:85:ad:b5:94:8b:54:15:65:60:82:74:86: e3:a3:7a:d9:ab:6c:b6:6d:54:91:c9:2d:f9:1c:58:2e:5d:d3: 5f:8c:3d:ae:0f:c7:e5:a1:a7:6b:bf:e7:22:12:f5:35:20:b1: 70:69:9c:c1:15:a3:17:89:85:2e:cb:c3:26:85:8d:b5:f8:50: f6:95:9e:f7:9f:13:41:d5:c0:3a:30:f7:76:11:ca:b6:82:2e: 2f:19:64:ee -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RjFDQzExMC8GA1UEBRMoMzNBMDE3NEE0QTRCMDA5QzAxMTUxNTk2OTEzNkYzMDEw ODlEQjVCNTAeFw0yNTA0MDMwNzE0MDJaFw0yNTA0MTAwNzE0MDJaMBgxFjAUBgNV BAMTDTY3ZWUzNTNhLTQ1YzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2LiUW4uar6LGO8iVeoo1QkZRaK0bC/nxNRaFuKUojOLjuD0fiUH7hDJrkZszW Vt43lxwFh3v1bqRWfnUrjRtZpyo1nmSkUxv6lpxXyLZYwh/UARFSpvPc2jZCHAAR 0jMBVA4GjNOR4N4Sz0foEAtPnfxzcZB3kAse5k1sHgwf7QqcpMaNJB1y0BtarTUM 09wHZg+SpbyCknNAS0LMiYH77R0p9Igx7Et1P46ftxAeJos/MiKWDZBQtClgV9FE T5BLC5LtLKOzdT0rFQGkbFmqmeufZ6vhrRaT97k97H0jamov73d+N1B0pDj19oWo wVudsaaJmp8qKCC3HHBDdhn9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/76yimvF zWqgN8gZ6GhnSnrlOOEwHwYDVR0jBBgwFoAUM6AXSkpLAJwBFRWWkTbzAQidtbUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZGMUNDLzQzRUE2QjE4RUY2 MzExRUZCRjY0QUI2QUM0RjlBRTAyL002QVhTa3BMQUp3QkZSV1drVGJ6QVFpZHRi VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTTZBWFNrcExBSndCRlJXV2tUYnpBUWlkdGJVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZG MUNDLzQzRUE2QjE4RUY2MzExRUZCRjY0QUI2QUM0RjlBRTAyL002QVhTa3BMQUp3 QkZSV1drVGJ6QVFpZHRiVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKij09GpLJdXLXR9eWDephOXlcpJhdexJn4w1Sb1gpUCvDI627umUNQM W37/he+wdyK9BZ+v9MGoTmBFoou25MAa5b/4FbyBMghYs5aAkiekOxxs9S1K6G0x pbO4GBi52Fl5Nqz2+7VuWxMsofTvxnRpzj5+EZdSdxOE7nnPsLmwFCuPxF2hoE8O wSUqrGgC580AeNELUrI4irgpPvUYMq3RqIUgSZk0pIWttZSLVBVlYIJ0huOjetmr bLZtVJHJLfkcWC5d01+MPa4Px+Whp2u/5yIS9TUgsXBpnMEVoxeJhS7LwyaFjbX4 UPaVnvefE0HVwDow93YRyraCLi8ZZO4= -----END CERTIFICATE-----Generated at Fri Apr 4 22:19:39 2025 by rpki-client