$ rpki-client -vvf rpki.apnic.net/member_repository/A9115854/36380FAAACC711E982890253C4F9AE02/m6OVHMtdg6nz3Ep1vqAf9a_XH_8.mft File: m6OVHMtdg6nz3Ep1vqAf9a_XH_8.mft (raw, json) Hash identifier: nu1VD3MOlXlLNZ4oDxt2PBbJeIUxsOezDmJJA6b/fXE= Subject key identifier: EB:56:E3:CB:F1:1B:27:5C:21:93:D4:BA:0E:F2:A9:D7:54:40:C7:C3 Authority key identifier: 9B:A3:95:1C:CB:5D:83:A9:F3:DC:4A:75:BE:A0:1F:F5:AF:D7:1F:FF Certificate issuer: /CN=A9115854/serialNumber=9BA3951CCB5D83A9F3DC4A75BEA01FF5AFD71FFF Certificate serial: 0E0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m6OVHMtdg6nz3Ep1vqAf9a_XH_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115854/36380FAAACC711E982890253C4F9AE02/m6OVHMtdg6nz3Ep1vqAf9a_XH_8.mft Manifest number: 0DFA Signing time: Thu 24 Apr 2025 17:48:38 +0000 Manifest this update: Thu 24 Apr 2025 17:48:37 +0000 Manifest next update: Thu 01 May 2025 17:48:37 +0000 Files and hashes: 1: m6OVHMtdg6nz3Ep1vqAf9a_XH_8.crl (hash: GZAPgQ3gsML3lhUtDofFgw/nzkkziSETGAXOFCQwh2o=) 2: 80C4CAC6AE5311E983E98A4FC4F9AE02.roa (hash: zo9mu3CIKHxn5JBCXZx0YbgatQ9CRvKR2Y0tN2tuG84=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115854/36380FAAACC711E982890253C4F9AE02/m6OVHMtdg6nz3Ep1vqAf9a_XH_8.crl rsync://rpki.apnic.net/member_repository/A9115854/36380FAAACC711E982890253C4F9AE02/m6OVHMtdg6nz3Ep1vqAf9a_XH_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m6OVHMtdg6nz3Ep1vqAf9a_XH_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:48:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3594 (0xe0a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115854, serialNumber=9BA3951CCB5D83A9F3DC4A75BEA01FF5AFD71FFF Validity Not Before: Apr 24 17:48:37 2025 GMT Not After : May 1 17:48:37 2025 GMT Subject: CN=680a7975-e9e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6a:0e:76:24:c1:46:53:8f:ec:b4:7c:a9:ac: ce:a6:fb:92:e2:b3:9e:e4:2f:f7:37:d8:50:95:54: 4d:fa:93:6b:7a:f4:77:66:63:4b:d7:21:74:a2:30: e3:1b:5e:b0:8b:99:b3:78:88:39:53:2b:4f:11:11: 97:a4:78:9b:e8:ca:b0:97:fd:a1:fd:6b:70:a1:ad: 5b:93:f1:2f:38:5c:01:0c:f0:cb:57:c8:4c:0c:06: 91:c0:97:57:fb:56:eb:01:d4:3d:1d:7f:15:0a:8a: e7:7b:da:6c:75:18:da:4d:49:0a:e2:c7:24:ca:86: d3:c3:fd:ca:56:b7:f3:72:61:52:5d:da:52:f5:49: 36:83:13:b8:24:b1:b8:a6:3a:f5:17:b3:41:1c:16: 2b:ce:d5:44:a6:ca:6b:77:02:e4:31:b6:03:a8:a5: 27:04:60:ea:70:9b:39:87:33:12:76:21:8c:79:db: f6:7c:57:4c:3a:90:75:82:f4:a0:e6:ea:8f:eb:0e: 9c:94:3c:84:ab:13:5f:8d:21:71:bb:af:13:32:1f: 1e:ec:0c:f9:61:79:9b:0e:e9:f4:b6:a4:46:4b:f7: dc:cd:33:53:28:58:42:b9:b6:c2:e0:06:de:c0:c8: 0b:bd:5d:b9:98:39:de:83:64:45:b6:30:28:a8:d7: 00:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:56:E3:CB:F1:1B:27:5C:21:93:D4:BA:0E:F2:A9:D7:54:40:C7:C3 X509v3 Authority Key Identifier: keyid:9B:A3:95:1C:CB:5D:83:A9:F3:DC:4A:75:BE:A0:1F:F5:AF:D7:1F:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115854/36380FAAACC711E982890253C4F9AE02/m6OVHMtdg6nz3Ep1vqAf9a_XH_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m6OVHMtdg6nz3Ep1vqAf9a_XH_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115854/36380FAAACC711E982890253C4F9AE02/m6OVHMtdg6nz3Ep1vqAf9a_XH_8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:86:50:17:1c:0e:24:52:52:06:7c:ee:fd:c9:4c:b6:28:52: 14:ac:0a:4d:1d:8a:5e:a8:6f:7e:ba:ce:90:58:73:2f:bc:3a: ec:07:39:b0:fc:b4:96:6d:a3:bc:99:5e:92:7e:66:0e:f2:fa: 3a:14:59:00:07:98:dc:0d:4e:f4:17:f9:cf:42:0e:1b:6c:ea: 14:9d:0c:19:d3:0b:65:e7:9f:24:92:0e:6a:57:78:92:03:f1: 5d:fe:d1:0c:b5:36:5f:fc:28:2b:9e:60:b0:dc:79:f5:5f:31: d3:20:93:8b:43:0b:ea:d5:46:9e:5f:e7:5b:1b:f5:f8:cd:1d: be:4c:cd:3c:87:b8:4a:d3:cc:a9:b5:09:71:cb:b2:32:85:20: 4b:62:68:d9:63:47:ff:b2:2d:ff:fd:90:b6:2b:cd:a8:60:b3: f2:62:40:f9:a1:c7:ae:b8:37:d0:38:be:5e:3a:ca:dd:59:d4: 51:8d:e0:f5:94:51:fa:da:59:87:01:b3:eb:ad:8c:14:27:9d: ca:c8:76:3a:c3:a2:73:96:ab:4c:83:ee:67:ba:d5:66:bb:bf: 85:ef:ac:d0:e1:2d:55:40:90:54:44:6d:ce:31:fa:5b:11:07: 99:77:97:6f:90:2b:d1:d1:ae:90:f1:df:9c:c5:74:ea:5a:35: f0:86:41:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTU4NTQxMTAvBgNVBAUTKDlCQTM5NTFDQ0I1RDgzQTlGM0RDNEE3NUJFQTAxRkY1 QUZENzFGRkYwHhcNMjUwNDI0MTc0ODM3WhcNMjUwNTAxMTc0ODM3WjAYMRYwFAYD VQQDEw02ODBhNzk3NS1lOWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx2oOdiTBRlOP7LR8qazOpvuS4rOe5C/3N9hQlVRN+pNrevR3ZmNL1yF0ojDj G16wi5mzeIg5UytPERGXpHib6Mqwl/2h/Wtwoa1bk/EvOFwBDPDLV8hMDAaRwJdX +1brAdQ9HX8VCorne9psdRjaTUkK4sckyobTw/3KVrfzcmFSXdpS9Uk2gxO4JLG4 pjr1F7NBHBYrztVEpsprdwLkMbYDqKUnBGDqcJs5hzMSdiGMedv2fFdMOpB1gvSg 5uqP6w6clDyEqxNfjSFxu68TMh8e7Az5YXmbDun0tqRGS/fczTNTKFhCubbC4Abe wMgLvV25mDneg2RFtjAoqNcAFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOtW48vx GydcIZPUug7yqddUQMfDMB8GA1UdIwQYMBaAFJujlRzLXYOp89xKdb6gH/Wv1x// MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTg1NC8zNjM4MEZBQUFD QzcxMUU5ODI4OTAyNTNDNEY5QUUwMi9tNk9WSE10ZGc2bnozRXAxdnFBZjlhX1hI XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL202T1ZITXRkZzZuejNFcDF2cUFmOWFfWEhfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTg1NC8zNjM4MEZBQUFDQzcxMUU5ODI4OTAyNTNDNEY5QUUwMi9tNk9WSE10ZGc2 bnozRXAxdnFBZjlhX1hIXzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYhlAXHA4kUlIGfO79yUy2KFIUrApNHYpeqG9+us6QWHMvvDrsBzmw /LSWbaO8mV6SfmYO8vo6FFkAB5jcDU70F/nPQg4bbOoUnQwZ0wtl558kkg5qV3iS A/Fd/tEMtTZf/CgrnmCw3Hn1XzHTIJOLQwvq1UaeX+dbG/X4zR2+TM08h7hK08yp tQlxy7IyhSBLYmjZY0f/si3//ZC2K82oYLPyYkD5oceuuDfQOL5eOsrdWdRRjeD1 lFH62lmHAbPrrYwUJ53KyHY6w6JzlqtMg+5nutVmu7+F76zQ4S1VQJBURG3OMfpb EQeZd5dvkCvR0a6Q8d+cxXTqWjXwhkFh -----END CERTIFICATE-----Generated at Sat Apr 26 12:54:38 2025 by rpki-client