$ rpki-client -vvf rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft File: 3obmXuoeCzDk_Y2SRYft9XI9UH0.mft (raw, json) Hash identifier: YFmIFgZLv/RSQdd4cycf4itxbbwBd/09qeGf3/Jhg6I= Subject key identifier: BD:05:E9:49:F4:41:25:67:87:62:DD:B6:42:5D:1E:85:D9:2E:C2:07 Authority key identifier: DE:86:E6:5E:EA:1E:0B:30:E4:FD:8D:92:45:87:ED:F5:72:3D:50:7D Certificate issuer: /CN=A91E00A5/serialNumber=DE86E65EEA1E0B30E4FD8D924587EDF5723D507D Certificate serial: 6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft Manifest number: 6B Signing time: Tue 15 Apr 2025 05:40:49 +0000 Manifest this update: Tue 15 Apr 2025 05:40:48 +0000 Manifest next update: Tue 22 Apr 2025 05:40:48 +0000 Files and hashes: 1: 3obmXuoeCzDk_Y2SRYft9XI9UH0.crl (hash: Fph+COfZ30+pSp5ld4E81EIDZ59sDh/tYw4tDQL/KCg=) 2: 1F63E4347ABC11EF9E53E753C4F9AE02.roa (hash: HKA4VosuvqKj93QksjNsBERDuKRgYc9/Nd6hWkYBCUw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.crl rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 05:40:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E00A5, serialNumber=DE86E65EEA1E0B30E4FD8D924587EDF5723D507D Validity Not Before: Apr 15 05:40:48 2025 GMT Not After : Apr 22 05:40:48 2025 GMT Subject: CN=67fdf160-e3b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f2:4d:a0:31:94:fc:01:42:cf:41:12:c1:b8: 8f:28:e4:18:72:99:49:50:1f:e4:b9:1f:0d:c0:77: 12:50:4e:a4:f2:53:93:f2:00:ae:cc:c2:3a:7d:b9: 61:75:b4:39:c3:4a:70:e6:af:e6:e7:ca:da:a4:44: cb:4a:f1:23:86:2c:94:ed:14:90:53:4f:34:0c:58: 9a:1f:07:ca:2f:d0:53:aa:7a:f7:24:fb:54:a0:63: 54:85:d3:22:18:5b:62:7e:f3:43:45:fc:7d:29:3d: ab:47:66:0f:fb:db:45:cc:0d:73:c1:b9:fa:c6:53: 9a:4d:82:89:91:35:9d:5f:06:d3:52:d4:ef:ae:6f: d9:2d:c1:6e:f8:ee:38:d4:a0:e7:c9:a7:bb:ac:ce: 58:5e:42:70:cf:ac:01:38:d4:d9:60:3c:c2:dc:7f: de:20:43:34:05:25:e9:48:38:88:3f:78:b3:f7:b8: c8:f9:cb:94:77:5c:4a:a7:ed:f7:b9:80:14:a0:a4: 6f:c0:52:9a:ca:f3:1b:77:b2:62:72:ac:f5:00:c6: 66:83:cd:e9:c0:90:9f:2a:60:5d:56:96:5d:f2:af: 02:a7:af:d8:f7:e0:0b:a0:8a:f9:f6:f2:9f:e5:cb: f6:9f:78:0f:fc:fc:81:b5:da:e0:3f:5e:f4:de:b5: 21:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:05:E9:49:F4:41:25:67:87:62:DD:B6:42:5D:1E:85:D9:2E:C2:07 X509v3 Authority Key Identifier: keyid:DE:86:E6:5E:EA:1E:0B:30:E4:FD:8D:92:45:87:ED:F5:72:3D:50:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:68:5c:fd:bd:ba:cb:82:3f:d7:73:55:54:69:9e:e5:40:bb: 95:73:d1:7a:44:3a:0d:3d:3c:a9:07:72:e4:de:5d:d1:c8:44: 99:4a:bc:87:cb:d0:b8:0d:cc:58:ee:bc:80:62:ea:8b:a7:ca: 05:98:9c:74:db:7b:af:fa:9c:eb:b1:c2:77:10:f9:30:e4:46: d3:ed:27:6e:2a:30:ab:d0:af:c2:e7:9d:b6:5f:cb:60:1a:cd: 83:fd:a6:ff:79:d5:d4:8c:ff:3d:6a:ce:01:7f:87:07:f7:47: df:e8:9a:98:c9:5d:90:43:fd:6c:e7:c3:59:cc:85:60:f9:70: 20:84:ae:db:df:3c:d0:ca:b3:21:12:c1:30:08:c1:16:83:45: 94:b5:d2:37:3a:8a:c9:98:26:43:10:f5:54:4c:8f:f0:3e:bc: c2:c2:bb:e2:e0:a4:7a:f7:d6:c6:94:cc:9d:e3:fb:56:3d:a9: 20:be:c3:93:21:2c:f8:67:da:ca:af:f6:3d:eb:57:d9:f3:d0: 1b:db:a8:1f:01:11:d8:ad:9e:fb:8c:2f:b9:5c:87:64:67:d2: 57:25:d3:e8:af:48:1c:f8:4a:85:bb:51:9b:d9:f4:89:23:94: a5:5f:01:ea:d8:15:87:5c:b5:b5:13:ef:f1:cc:d6:45:05:93: ee:9e:a6:9f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MDBBNTExMC8GA1UEBRMoREU4NkU2NUVFQTFFMEIzMEU0RkQ4RDkyNDU4N0VERjU3 MjNENTA3RDAeFw0yNTA0MTUwNTQwNDhaFw0yNTA0MjIwNTQwNDhaMBgxFjAUBgNV BAMTDTY3ZmRmMTYwLWUzYjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC58k2gMZT8AULPQRLBuI8o5BhymUlQH+S5Hw3AdxJQTqTyU5PyAK7Mwjp9uWF1 tDnDSnDmr+bnytqkRMtK8SOGLJTtFJBTTzQMWJofB8ov0FOqevck+1SgY1SF0yIY W2J+80NF/H0pPatHZg/720XMDXPBufrGU5pNgomRNZ1fBtNS1O+ub9ktwW747jjU oOfJp7uszlheQnDPrAE41NlgPMLcf94gQzQFJelIOIg/eLP3uMj5y5R3XEqn7fe5 gBSgpG/AUprK8xt3smJyrPUAxmaDzenAkJ8qYF1Wll3yrwKnr9j34Augivn28p/l y/afeA/8/IG12uA/XvTetSHXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvQXpSfRB JWeHYt22Ql0ehdkuwgcwHwYDVR0jBBgwFoAU3obmXuoeCzDk/Y2SRYft9XI9UH0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUwMEE1L0E2NDgzQTNDN0FC QjExRUY5Mzc5QUU1MkM0RjlBRTAyLzNvYm1YdW9lQ3pEa19ZMlNSWWZ0OVhJOVVI MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM29ibVh1b2VDekRrX1kyU1JZZnQ5WEk5VUgwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUw MEE1L0E2NDgzQTNDN0FCQjExRUY5Mzc5QUU1MkM0RjlBRTAyLzNvYm1YdW9lQ3pE a19ZMlNSWWZ0OVhJOVVIMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADVoXP29usuCP9dzVVRpnuVAu5Vz0XpEOg09PKkHcuTeXdHIRJlKvIfL 0LgNzFjuvIBi6ounygWYnHTbe6/6nOuxwncQ+TDkRtPtJ24qMKvQr8LnnbZfy2Aa zYP9pv951dSM/z1qzgF/hwf3R9/ompjJXZBD/Wznw1nMhWD5cCCErtvfPNDKsyES wTAIwRaDRZS10jc6ismYJkMQ9VRMj/A+vMLCu+LgpHr31saUzJ3j+1Y9qSC+w5Mh LPhn2sqv9j3rV9nz0BvbqB8BEditnvuML7lch2Rn0lcl0+ivSBz4SoW7UZvZ9Ikj lKVfAerYFYdctbUT7/HM1kUFk+6epp8= -----END CERTIFICATE-----Generated at Tue Apr 15 10:19:04 2025 by rpki-client