$ rpki-client -vvf rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.mft File: q6TDlMi5vRUbOziWObjG_4BwSfI.mft (raw, json) Hash identifier: DGJPj3z1zruArV+1fp+5FHNbHLHKh63gz9nty5RTb8U= Subject key identifier: B7:3F:98:05:65:FB:BC:45:27:A4:6A:43:8E:AB:01:53:D9:FD:85:BB Authority key identifier: AB:A4:C3:94:C8:B9:BD:15:1B:3B:38:96:39:B8:C6:FF:80:70:49:F2 Certificate issuer: /CN=A91F77FC/serialNumber=ABA4C394C8B9BD151B3B389639B8C6FF807049F2 Certificate serial: 0DFD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6TDlMi5vRUbOziWObjG_4BwSfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.mft Manifest number: 0DF5 Signing time: Fri 30 May 2025 18:02:01 +0000 Manifest this update: Fri 30 May 2025 18:02:00 +0000 Manifest next update: Fri 06 Jun 2025 18:02:00 +0000 Files and hashes: 1: q6TDlMi5vRUbOziWObjG_4BwSfI.crl (hash: ojXe6lALSjBskvJb/UPVOPwdoQSodRxnHOzgsRPYEdk=) 2: 70783ACCAF3411E99DF2F83EC4F9AE02.roa (hash: T9i0DKwHASY+s6SnXICLRaNhTKqbk+FbtGkLEMvl4c4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.crl rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6TDlMi5vRUbOziWObjG_4BwSfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3581 (0xdfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F77FC, serialNumber=ABA4C394C8B9BD151B3B389639B8C6FF807049F2 Validity Not Before: May 30 18:02:00 2025 GMT Not After : Jun 6 18:02:00 2025 GMT Subject: CN=6839f298-3d43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a2:ba:60:ec:0d:28:30:1a:ed:13:57:9e:82: ce:a6:fa:0f:51:37:df:ea:a1:a1:a4:dd:6e:88:12: 85:e8:d0:0f:7e:cb:66:58:80:7a:7d:de:38:bf:af: 34:76:95:4b:9c:d1:10:ad:58:2c:37:eb:a1:c8:03: 09:58:2e:bb:81:ca:5d:29:3c:3d:31:4c:e8:54:64: 8b:1d:16:6e:85:b3:60:9b:4e:90:26:6a:30:f4:db: b6:ba:b3:5c:3c:7a:31:90:a3:9e:30:26:d7:02:28: e6:1a:d6:66:e9:4f:cc:6c:45:ab:ea:9e:89:a5:a7: 91:9a:82:ba:b8:35:c1:87:b1:e8:76:f4:72:a1:5b: 72:c4:ab:cc:17:a0:86:61:75:18:8c:a8:f5:be:28: 1f:d6:1a:37:80:a4:74:28:13:42:9d:c4:4e:af:ee: b5:d9:95:3b:66:37:6e:72:f5:25:0d:57:a4:29:75: b1:14:c2:9f:60:80:58:1b:91:92:d2:82:e7:e6:c4: b0:b8:a6:99:e4:db:9d:f8:37:c4:d8:69:8e:5f:da: 12:f2:f7:67:3c:b9:9f:cc:64:2e:d7:79:61:94:3d: 66:71:2d:eb:7f:dd:16:47:6f:c7:68:40:a3:3b:3c: 7b:4b:18:f8:42:ac:53:9b:67:a3:eb:00:74:b4:5c: 51:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:3F:98:05:65:FB:BC:45:27:A4:6A:43:8E:AB:01:53:D9:FD:85:BB X509v3 Authority Key Identifier: keyid:AB:A4:C3:94:C8:B9:BD:15:1B:3B:38:96:39:B8:C6:FF:80:70:49:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6TDlMi5vRUbOziWObjG_4BwSfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:ab:fb:13:9f:50:19:bf:2a:04:bd:dc:4e:07:ed:6f:10:31: 5d:83:b5:22:c2:23:ae:3c:a0:ff:1d:7a:fa:07:ef:0f:c6:4f: f3:ce:99:b8:7a:62:c5:fc:2a:2e:dc:33:65:34:39:dd:c3:d9: 6e:81:5c:f4:1d:57:b3:c6:e2:d3:a8:15:93:b8:ce:f8:c3:2c: aa:95:5b:6a:ba:1e:72:42:34:76:5e:10:61:85:9d:a4:5d:bb: 70:d5:4d:b0:5a:1b:05:17:c4:fa:ea:a2:80:6f:22:fb:dd:31: 0d:43:b1:c0:d5:c3:9f:eb:10:9b:3c:d4:58:3f:16:4f:1d:53: 7f:6c:2f:34:b1:12:d7:29:5b:62:c9:fe:61:66:be:aa:c5:69: a5:16:09:d1:e0:df:85:d8:f5:a8:9a:d4:9f:40:18:54:80:f2: e2:58:f6:5d:ad:b5:a0:66:7e:7e:66:a0:aa:c7:19:5a:e4:79: 33:1c:db:4f:72:65:e2:14:fc:1a:aa:d7:07:57:5e:33:c5:f1: 75:6c:19:a2:7b:9a:6e:80:a4:00:a9:08:dc:2a:01:2a:50:5b: 9b:18:2a:eb:86:95:3f:20:2e:ef:50:24:c4:8e:04:56:75:e3: af:67:16:16:9d:53:d3:12:7a:5c:c0:27:ce:8a:d2:4f:82:ab: 4f:c7:1b:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc3RkMxMTAvBgNVBAUTKEFCQTRDMzk0QzhCOUJEMTUxQjNCMzg5NjM5QjhDNkZG ODA3MDQ5RjIwHhcNMjUwNTMwMTgwMjAwWhcNMjUwNjA2MTgwMjAwWjAYMRYwFAYD VQQDEw02ODM5ZjI5OC0zZDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzKK6YOwNKDAa7RNXnoLOpvoPUTff6qGhpN1uiBKF6NAPfstmWIB6fd44v680 dpVLnNEQrVgsN+uhyAMJWC67gcpdKTw9MUzoVGSLHRZuhbNgm06QJmow9Nu2urNc PHoxkKOeMCbXAijmGtZm6U/MbEWr6p6JpaeRmoK6uDXBh7HodvRyoVtyxKvMF6CG YXUYjKj1vigf1ho3gKR0KBNCncROr+612ZU7ZjducvUlDVekKXWxFMKfYIBYG5GS 0oLn5sSwuKaZ5Nud+DfE2GmOX9oS8vdnPLmfzGQu13lhlD1mcS3rf90WR2/HaECj Ozx7Sxj4QqxTm2ej6wB0tFxRdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLc/mAVl +7xFJ6RqQ46rAVPZ/YW7MB8GA1UdIwQYMBaAFKukw5TIub0VGzs4ljm4xv+AcEny MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzdGQy9GRUQ5MDE1NkFG MzAxMUU5QUVFMTNFMzRDNEY5QUUwMi9xNlREbE1pNXZSVWJPemlXT2JqR180QndT ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3E2VERsTWk1dlJVYk96aVdPYmpHXzRCd1NmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzdGQy9GRUQ5MDE1NkFGMzAxMUU5QUVFMTNFMzRDNEY5QUUwMi9xNlREbE1pNXZS VWJPemlXT2JqR180QndTZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrq/sTn1AZvyoEvdxOB+1vEDFdg7UiwiOuPKD/HXr6B+8Pxk/zzpm4 emLF/Cou3DNlNDndw9lugVz0HVezxuLTqBWTuM74wyyqlVtquh5yQjR2XhBhhZ2k Xbtw1U2wWhsFF8T66qKAbyL73TENQ7HA1cOf6xCbPNRYPxZPHVN/bC80sRLXKVti yf5hZr6qxWmlFgnR4N+F2PWomtSfQBhUgPLiWPZdrbWgZn5+ZqCqxxla5HkzHNtP cmXiFPwaqtcHV14zxfF1bBmie5pugKQAqQjcKgEqUFubGCrrhpU/IC7vUCTEjgRW deOvZxYWnVPTEnpcwCfOitJPgqtPxxsj -----END CERTIFICATE-----Generated at Sat May 31 17:17:29 2025 by rpki-client