$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.mft File: K6PqbAvX8YRghmD5ogTlEYZaAN0.mft (raw, json) Hash identifier: zMx7jSDCoIws7yGpa+GrMMY29A33hTzL3jnk6gcfmW4= Subject key identifier: D0:29:E5:D6:87:63:FC:35:1C:5A:8E:AE:EC:28:AD:15:65:1D:1F:3F Authority key identifier: 2B:A3:EA:6C:0B:D7:F1:84:60:86:60:F9:A2:04:E5:11:86:5A:00:DD Certificate issuer: /CN=A91F1E8B/serialNumber=2BA3EA6C0BD7F184608660F9A204E511865A00DD Certificate serial: 0913 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6PqbAvX8YRghmD5ogTlEYZaAN0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.mft Manifest number: 090C Signing time: Sat 10 May 2025 20:02:23 +0000 Manifest this update: Sat 10 May 2025 20:02:22 +0000 Manifest next update: Sat 17 May 2025 20:02:22 +0000 Files and hashes: 1: K6PqbAvX8YRghmD5ogTlEYZaAN0.crl (hash: vomwfwBYGInhjWUa5E3KjMCwjrpthat+HQH3CNozfnE=) 2: 33F713A8A3CF11EAA31D8C20C4F9AE02.roa (hash: U+2Kae/qqfcPAGDUNj2rc7ly1La28a/4nOUamtVuvAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.crl rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6PqbAvX8YRghmD5ogTlEYZaAN0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 20:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2323 (0x913) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1E8B, serialNumber=2BA3EA6C0BD7F184608660F9A204E511865A00DD Validity Not Before: May 10 20:02:22 2025 GMT Not After : May 17 20:02:22 2025 GMT Subject: CN=681fb0ce-c675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bb:56:90:25:0e:37:c5:0a:b0:c4:af:64:c1: 88:bf:ba:a6:e2:5c:dc:ec:7a:26:12:bd:2b:f5:73: 62:eb:b6:47:d1:f1:99:89:6a:4d:1b:49:d3:6f:13: 73:e7:1f:a0:7e:40:84:e0:3b:15:84:e9:6f:25:38: fb:d2:9c:db:02:9d:d1:21:bc:6e:e7:ce:31:6b:32: 31:50:5d:8c:d3:bd:cb:5f:f0:0e:bd:0f:08:61:51: 0c:1b:3a:0b:5f:f4:d0:47:b1:76:5f:8d:de:61:79: e8:60:1d:48:99:12:c9:f6:01:ef:f0:df:79:d7:76: 63:2a:a5:e0:2f:6c:9c:bf:52:97:a0:36:3a:89:18: 46:6c:66:99:7c:bd:6d:e4:37:f9:1a:c7:e1:b9:bc: 65:69:af:8f:9b:cd:c2:e2:28:93:38:f8:d5:d4:59: db:40:b7:9f:36:12:87:19:8b:54:7f:68:94:06:46: 6a:09:7b:58:bf:72:ba:0a:45:22:c7:80:34:86:cd: 64:8a:dc:08:49:79:9a:cb:43:39:4c:f7:42:ba:85: 22:82:d2:2d:d7:c6:df:d4:81:32:6e:e5:21:f3:af: 9e:80:81:ab:b8:aa:cf:37:61:e6:7c:2d:70:ce:4b: 54:f9:3f:cd:63:21:81:1d:23:70:80:b6:53:d7:38: 1d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:29:E5:D6:87:63:FC:35:1C:5A:8E:AE:EC:28:AD:15:65:1D:1F:3F X509v3 Authority Key Identifier: keyid:2B:A3:EA:6C:0B:D7:F1:84:60:86:60:F9:A2:04:E5:11:86:5A:00:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6PqbAvX8YRghmD5ogTlEYZaAN0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:c3:8a:c4:16:c4:b7:7a:8e:cb:5f:ee:a0:52:0e:05:b6:26: 5b:4e:94:8e:5d:4a:08:9a:aa:e1:49:6a:ac:81:f0:37:b8:15: 84:f9:29:24:a1:3e:d7:ab:28:ac:04:45:65:b2:5b:06:bd:46: 90:27:59:58:0a:19:d8:54:d3:a5:12:bd:c6:2d:f7:0e:26:8c: 74:ec:97:8f:08:b2:4c:f9:ad:22:d2:9c:57:eb:21:62:87:bc: e7:b4:5e:6c:d9:0d:a8:b0:ff:03:05:ef:14:3e:e2:9f:fe:a4: 54:79:8e:5d:48:bd:e9:f2:da:e0:79:f2:63:06:8d:37:02:be: ca:16:13:b6:30:e3:29:db:71:b5:f8:ed:da:dc:7a:02:14:aa: de:d6:9b:3e:ed:e4:33:40:e9:aa:af:66:4e:99:cd:a4:7f:58: a2:96:f2:bb:38:87:ce:6d:08:f3:0e:f9:45:43:bd:b7:61:8f: c7:81:db:78:55:cc:c5:0e:30:3a:a3:20:40:19:e5:81:5a:a3: af:f9:39:fc:9a:e1:de:cf:12:78:34:ac:6d:c7:89:06:9b:4c: 13:39:e5:d6:76:5a:18:e9:2e:bf:ce:d6:7c:0b:c7:da:00:c9: c0:53:42:93:a9:04:66:d7:ff:1a:c8:e9:8c:e0:c4:ea:83:f7: 7f:c3:b9:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCRMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjFFOEIxMTAvBgNVBAUTKDJCQTNFQTZDMEJEN0YxODQ2MDg2NjBGOUEyMDRFNTEx ODY1QTAwREQwHhcNMjUwNTEwMjAwMjIyWhcNMjUwNTE3MjAwMjIyWjAYMRYwFAYD VQQDEw02ODFmYjBjZS1jNjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAybtWkCUON8UKsMSvZMGIv7qm4lzc7HomEr0r9XNi67ZH0fGZiWpNG0nTbxNz 5x+gfkCE4DsVhOlvJTj70pzbAp3RIbxu584xazIxUF2M073LX/AOvQ8IYVEMGzoL X/TQR7F2X43eYXnoYB1ImRLJ9gHv8N9513ZjKqXgL2ycv1KXoDY6iRhGbGaZfL1t 5Df5Gsfhubxlaa+Pm83C4iiTOPjV1FnbQLefNhKHGYtUf2iUBkZqCXtYv3K6CkUi x4A0hs1kitwISXmay0M5TPdCuoUigtIt18bf1IEybuUh86+egIGruKrPN2HmfC1w zktU+T/NYyGBHSNwgLZT1zgdhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNAp5daH Y/w1HFqOruworRVlHR8/MB8GA1UdIwQYMBaAFCuj6mwL1/GEYIZg+aIE5RGGWgDd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUU4Qi84MDdERkRBMEEz Q0UxMUVBOEJBRTY1MjBDNEY5QUUwMi9LNlBxYkF2WDhZUmdobUQ1b2dUbEVZWmFB TjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s2UHFiQXZYOFlSZ2htRDVvZ1RsRVlaYUFOMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MUU4Qi84MDdERkRBMEEzQ0UxMUVBOEJBRTY1MjBDNEY5QUUwMi9LNlBxYkF2WDhZ UmdobUQ1b2dUbEVZWmFBTjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJw4rEFsS3eo7LX+6gUg4FtiZbTpSOXUoImqrhSWqsgfA3uBWE+Skk oT7XqyisBEVlslsGvUaQJ1lYChnYVNOlEr3GLfcOJox07JePCLJM+a0i0pxX6yFi h7zntF5s2Q2osP8DBe8UPuKf/qRUeY5dSL3p8trgefJjBo03Ar7KFhO2MOMp23G1 +O3a3HoCFKre1ps+7eQzQOmqr2ZOmc2kf1iilvK7OIfObQjzDvlFQ723YY/Hgdt4 VczFDjA6oyBAGeWBWqOv+Tn8muHezxJ4NKxtx4kGm0wTOeXWdloY6S6/ztZ8C8fa AMnAU0KTqQRm1/8ayOmM4MTqg/d/w7nv -----END CERTIFICATE-----Generated at Mon May 12 03:49:14 2025 by rpki-client