$ rpki-client -vvf rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.mft File: 6GcXUDRPGMKvdH_68lWFDrx50B8.mft (raw, json) Hash identifier: /U/n28G87AC0NW2FgTUuy5SyeLg2EJftaIK3BLOtrrM= Subject key identifier: 0A:9C:F2:62:A9:67:91:49:28:7A:18:57:94:15:99:26:89:FC:99:AE Authority key identifier: E8:67:17:50:34:4F:18:C2:AF:74:7F:FA:F2:55:85:0E:BC:79:D0:1F Certificate issuer: /CN=A9114DDF/serialNumber=E8671750344F18C2AF747FFAF255850EBC79D01F Certificate serial: 0378 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GcXUDRPGMKvdH_68lWFDrx50B8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.mft Manifest number: 0370 Signing time: Fri 25 Apr 2025 00:42:14 +0000 Manifest this update: Fri 25 Apr 2025 00:42:14 +0000 Manifest next update: Fri 02 May 2025 00:42:14 +0000 Files and hashes: 1: 6GcXUDRPGMKvdH_68lWFDrx50B8.crl (hash: Y/GDcKJrKvq9uArENjbJRtKKYlnOTgvDTP5sf/rMajc=) 2: FFFC26F0A51C11EC8394365BC4F9AE02.roa (hash: lo57P9VBB46ycGdmIW/WQMt7Bnu1G5Vu55lF8eOkAJo=) 3: FF46137EA51C11EC8394365BC4F9AE02.roa (hash: pjuKTxitr3okr7uU46xmlWjTNZ4Ce4fMa5LiHSn7lO8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.crl rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GcXUDRPGMKvdH_68lWFDrx50B8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:42:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 888 (0x378) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114DDF, serialNumber=E8671750344F18C2AF747FFAF255850EBC79D01F Validity Not Before: Apr 25 00:42:14 2025 GMT Not After : May 2 00:42:14 2025 GMT Subject: CN=680ada66-20c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:59:a5:68:6d:ae:93:01:e6:df:3d:08:f2:12: 7b:c5:7a:32:62:08:0f:0d:6e:f1:cf:a9:c0:f1:ed: 4d:96:e3:fb:b6:6b:e9:14:d0:4a:7e:b9:f9:05:63: e7:25:00:3b:51:63:4f:ae:07:b9:ee:40:14:f9:23: 9e:76:1d:3b:40:1c:86:11:3a:49:88:bf:e1:04:f9: 0f:11:1e:f2:1a:b4:58:50:66:07:66:ae:d6:43:37: 1c:ae:27:44:11:36:2f:c1:a4:8e:29:00:d1:bf:cf: 21:be:c5:83:ef:27:fe:e6:14:71:e7:65:cc:f5:1b: f6:0f:03:f3:2e:4f:9a:77:12:4a:9c:61:d4:b6:e4: 9c:0d:96:7f:25:3d:cb:0c:70:fc:9e:2c:fc:ec:e9: be:02:c8:89:bb:b6:1c:ab:c8:0c:21:03:a7:a4:2d: b3:4e:4f:34:1b:cb:72:42:df:f2:4a:01:6c:dc:b1: 04:32:6a:41:93:e9:f9:2e:98:7e:03:c5:8a:40:39: 29:b1:a1:ef:63:fa:ba:7b:38:7a:1d:f5:a0:ea:55: 8b:c9:09:53:2d:5c:7c:90:26:1c:00:41:3c:69:a5: 70:c7:c6:d6:e0:75:21:fe:69:e7:32:4f:60:cb:28: 57:4c:59:1a:66:21:97:75:50:a9:f1:ce:77:1c:cd: 2d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:9C:F2:62:A9:67:91:49:28:7A:18:57:94:15:99:26:89:FC:99:AE X509v3 Authority Key Identifier: keyid:E8:67:17:50:34:4F:18:C2:AF:74:7F:FA:F2:55:85:0E:BC:79:D0:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GcXUDRPGMKvdH_68lWFDrx50B8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:6e:99:32:9d:5d:45:89:11:d6:c3:a9:2e:22:c4:5f:6c:46: 05:41:5f:50:6a:03:a4:4b:37:f2:fd:2e:2a:97:a4:f8:77:1d: 2b:20:32:66:ce:5d:3d:66:9d:e9:15:eb:cd:5a:fc:a6:10:16: df:e9:01:cb:76:1c:29:0d:f7:38:25:ff:60:da:52:6f:ff:b6: 30:5e:f7:36:e2:fe:2d:1d:7f:2a:07:dc:1d:fc:55:67:ce:00: ba:16:f7:81:f1:a0:1c:5d:39:40:f3:fe:5d:ba:0c:81:d1:56: 3e:fc:99:52:c6:ea:79:58:d7:e9:32:bd:94:63:d4:79:d3:56: 75:89:74:85:f8:ed:fd:dd:61:b2:6c:06:55:04:fe:6d:43:3c: d6:03:65:03:40:19:ae:2b:4d:55:6f:f8:4e:a4:fd:53:45:ae: f2:7e:a1:f3:06:fc:1d:fb:9b:fb:16:c6:16:2d:0f:11:84:4b: 16:2e:90:2e:ec:c7:ef:78:7e:b8:b4:49:05:9e:1e:de:5e:33: 9c:35:41:fd:87:6c:0f:37:7c:d2:29:f2:b9:1d:50:82:50:09: 1d:ae:aa:07:ec:ce:2c:85:00:e7:1e:02:cb:07:ff:9b:82:b5: be:38:bc:05:66:a8:4f:3b:8f:18:39:2e:0f:c0:eb:23:64:f6: 48:bf:ed:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTREREYxMTAvBgNVBAUTKEU4NjcxNzUwMzQ0RjE4QzJBRjc0N0ZGQUYyNTU4NTBF QkM3OUQwMUYwHhcNMjUwNDI1MDA0MjE0WhcNMjUwNTAyMDA0MjE0WjAYMRYwFAYD VQQDEw02ODBhZGE2Ni0yMGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo1mlaG2ukwHm3z0I8hJ7xXoyYggPDW7xz6nA8e1NluP7tmvpFNBKfrn5BWPn JQA7UWNPrge57kAU+SOedh07QByGETpJiL/hBPkPER7yGrRYUGYHZq7WQzccridE ETYvwaSOKQDRv88hvsWD7yf+5hRx52XM9Rv2DwPzLk+adxJKnGHUtuScDZZ/JT3L DHD8niz87Om+AsiJu7Ycq8gMIQOnpC2zTk80G8tyQt/ySgFs3LEEMmpBk+n5Lph+ A8WKQDkpsaHvY/q6ezh6HfWg6lWLyQlTLVx8kCYcAEE8aaVwx8bW4HUh/mnnMk9g yyhXTFkaZiGXdVCp8c53HM0tKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAqc8mKp Z5FJKHoYV5QVmSaJ/JmuMB8GA1UdIwQYMBaAFOhnF1A0TxjCr3R/+vJVhQ68edAf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNERERi81QjA2RkVGMkE1 MEExMUVDQjI3NzhENUNDNEY5QUUwMi82R2NYVURSUEdNS3ZkSF82OGxXRkRyeDUw QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZHY1hVRFJQR01LdmRIXzY4bFdGRHJ4NTBCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NERERi81QjA2RkVGMkE1MEExMUVDQjI3NzhENUNDNEY5QUUwMi82R2NYVURSUEdN S3ZkSF82OGxXRkRyeDUwQjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnbpkynV1FiRHWw6kuIsRfbEYFQV9QagOkSzfy/S4ql6T4dx0rIDJm zl09Zp3pFevNWvymEBbf6QHLdhwpDfc4Jf9g2lJv/7YwXvc24v4tHX8qB9wd/FVn zgC6FveB8aAcXTlA8/5dugyB0VY+/JlSxup5WNfpMr2UY9R501Z1iXSF+O393WGy bAZVBP5tQzzWA2UDQBmuK01Vb/hOpP1TRa7yfqHzBvwd+5v7FsYWLQ8RhEsWLpAu 7MfveH64tEkFnh7eXjOcNUH9h2wPN3zSKfK5HVCCUAkdrqoH7M4shQDnHgLLB/+b grW+OLwFZqhPO48YOS4PwOsjZPZIv+0s -----END CERTIFICATE-----Generated at Sat Apr 26 04:34:56 2025 by rpki-client