$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.mft File: 6t6GhZIRcEQyqBm4GJm2DF093os.mft (raw, json) Hash identifier: 21mintAITpcEAfEo7OGX8L3HHAyqjYa16TwevOrn2hE= Subject key identifier: C8:1D:89:D3:00:F1:08:05:3A:2A:1C:81:98:D3:C5:16:F2:C8:4E:CE Authority key identifier: EA:DE:86:85:92:11:70:44:32:A8:19:B8:18:99:B6:0C:5D:3D:DE:8B Certificate issuer: /CN=A91A0432/serialNumber=EADE86859211704432A819B81899B60C5D3DDE8B Certificate serial: 0368 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6t6GhZIRcEQyqBm4GJm2DF093os.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.mft Manifest number: 0366 Signing time: Thu 03 Apr 2025 00:58:11 +0000 Manifest this update: Thu 03 Apr 2025 00:58:11 +0000 Manifest next update: Thu 10 Apr 2025 00:58:11 +0000 Files and hashes: 1: 6t6GhZIRcEQyqBm4GJm2DF093os.crl (hash: GxDA4gmXbb+JpaNYKZqjojy0VhDTPMSv9s8aXMqfUR0=) 2: 7185135A61AE11EEA6D61C37C4F9AE02.roa (hash: UHVSesVCfWDMX6Rqc2a1Y5ozgn2h4LiLzFeoFn9E+ys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.crl rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6t6GhZIRcEQyqBm4GJm2DF093os.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 00:58:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 872 (0x368) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0432 Validity Not Before: Apr 3 00:58:11 2025 GMT Not After : Apr 10 00:58:11 2025 GMT Subject: CN=67eddd23-cc10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:48:5a:1a:cd:8b:dd:85:d4:01:9f:77:40:f1: dc:2a:66:e2:08:9f:21:ce:09:9b:79:82:de:4e:79: a9:df:05:bd:ff:a3:a0:a6:80:f0:5a:9c:02:bc:b2: 24:9b:b6:db:a5:48:73:f0:8d:2f:db:fc:22:20:cb: 6e:6b:63:69:e5:a8:d7:c3:8c:5f:61:88:19:8c:4a: 36:a1:40:67:32:63:44:92:14:75:61:35:c0:27:a9: 10:16:78:fb:40:c3:ea:65:da:3b:49:d5:bc:40:3b: 5f:a2:c2:15:4e:f2:d0:f6:cb:8f:52:af:9e:03:93: ce:ef:bc:f6:96:da:48:a2:76:02:e0:bc:47:69:13: 05:99:84:dd:fe:c0:ed:1d:25:c3:e4:fd:ee:4e:bf: b6:7c:e1:c0:d9:86:b9:9e:f5:25:f1:8b:77:11:8c: f1:26:9b:85:03:3a:39:c5:76:b3:8e:c9:f3:5e:a3: b3:8c:6e:d2:ef:2d:a9:97:cc:5c:4a:a7:89:c5:ed: 4b:f8:5d:9b:a8:e7:a7:1f:3a:2d:bf:d9:8c:bf:50: 02:80:23:2b:8f:e6:33:3c:63:f7:ab:b6:60:ab:f4: 84:9a:2b:6f:b2:24:11:66:5b:cb:53:00:f2:25:80: 7a:22:4a:0c:f8:8c:6d:a5:7b:4f:94:38:a0:ce:3e: f7:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:1D:89:D3:00:F1:08:05:3A:2A:1C:81:98:D3:C5:16:F2:C8:4E:CE X509v3 Authority Key Identifier: keyid:EA:DE:86:85:92:11:70:44:32:A8:19:B8:18:99:B6:0C:5D:3D:DE:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6t6GhZIRcEQyqBm4GJm2DF093os.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:4f:05:a9:ec:1c:a8:00:b8:3f:c6:69:f3:7b:f2:f9:24:d0: 13:05:4e:fa:d4:e9:b0:8b:c6:1e:a5:b9:7b:4c:aa:de:02:d7: 8d:10:d2:71:c9:04:31:22:71:9e:2e:1b:0b:36:cb:6b:3f:05: 6d:87:17:74:79:8f:22:c5:dd:a3:00:a0:9a:1c:a1:5a:de:7a: ff:a1:26:cf:4b:dd:6b:cb:d2:4d:1b:c0:be:43:a7:59:59:6c: cc:c6:e8:e3:5e:52:8d:ac:e4:5d:d7:db:9d:4a:c3:ed:41:7f: fa:69:62:f9:a4:e9:b3:9b:8a:e5:a5:96:c1:13:b7:b5:54:da: 56:3e:3b:f8:e7:dc:22:cf:0d:a6:5e:f4:c2:0e:32:9a:48:1f: fd:94:57:3b:d2:a6:da:3f:f4:88:fa:d0:d5:2e:1c:a3:90:d0: b8:53:88:f6:7d:65:cb:1d:41:52:63:d0:81:08:44:20:5b:f4: 9f:b7:59:0f:67:3f:fa:b1:b6:a2:5d:50:88:1d:e7:a7:cd:31: b5:00:51:90:26:8d:f8:c8:ae:32:fe:18:88:ee:ee:ef:b4:de: 4c:51:aa:31:1a:fc:e4:ea:65:41:0f:9b:1d:1b:a2:79:c9:c7: 5b:bb:17:1b:ac:7f:d1:6e:31:46:4a:a1:90:06:68:03:15:36: 0d:d5:2c:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA0MzIxMTAvBgNVBAUTKEVBREU4Njg1OTIxMTcwNDQzMkE4MTlCODE4OTlCNjBD NUQzRERFOEIwHhcNMjUwNDAzMDA1ODExWhcNMjUwNDEwMDA1ODExWjAYMRYwFAYD VQQDEw02N2VkZGQyMy1jYzEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3UhaGs2L3YXUAZ93QPHcKmbiCJ8hzgmbeYLeTnmp3wW9/6OgpoDwWpwCvLIk m7bbpUhz8I0v2/wiIMtua2Np5ajXw4xfYYgZjEo2oUBnMmNEkhR1YTXAJ6kQFnj7 QMPqZdo7SdW8QDtfosIVTvLQ9suPUq+eA5PO77z2ltpIonYC4LxHaRMFmYTd/sDt HSXD5P3uTr+2fOHA2Ya5nvUl8Yt3EYzxJpuFAzo5xXazjsnzXqOzjG7S7y2pl8xc SqeJxe1L+F2bqOenHzotv9mMv1ACgCMrj+YzPGP3q7Zgq/SEmitvsiQRZlvLUwDy JYB6IkoM+IxtpXtPlDigzj73owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMgdidMA 8QgFOiocgZjTxRbyyE7OMB8GA1UdIwQYMBaAFOrehoWSEXBEMqgZuBiZtgxdPd6L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDQzMi9FQzY5MkYwNEE0 Q0ExMUVDQUM0RTU3NDRDNEY5QUUwMi82dDZHaFpJUmNFUXlxQm00R0ptMkRGMDkz b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzZ0NkdoWklSY0VReXFCbTRHSm0yREYwOTNvcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDQzMi9FQzY5MkYwNEE0Q0ExMUVDQUM0RTU3NDRDNEY5QUUwMi82dDZHaFpJUmNF UXlxQm00R0ptMkRGMDkzb3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSTwWp7ByoALg/xmnze/L5JNATBU761Omwi8Yepbl7TKreAteNENJx yQQxInGeLhsLNstrPwVthxd0eY8ixd2jAKCaHKFa3nr/oSbPS91ry9JNG8C+Q6dZ WWzMxujjXlKNrORd19udSsPtQX/6aWL5pOmzm4rlpZbBE7e1VNpWPjv459wizw2m XvTCDjKaSB/9lFc70qbaP/SI+tDVLhyjkNC4U4j2fWXLHUFSY9CBCEQgW/Sft1kP Zz/6sbaiXVCIHeenzTG1AFGQJo34yK4y/hiI7u7vtN5MUaoxGvzk6mVBD5sdG6J5 ycdbuxcbrH/RbjFGSqGQBmgDFTYN1Sy5 -----END CERTIFICATE-----Generated at Fri Apr 4 23:50:11 2025 by rpki-client