$ rpki-client -vvf rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.mft File: 6tgeRb5BR2cpw1YqNG-29i_IH70.mft (raw, json) Hash identifier: pW7MQ5WpBymmYeVmzYFvhN/yYziRR4zk2SdLmsJhZks= Subject key identifier: 12:F6:F0:81:61:06:26:1B:FB:DB:D3:35:1F:45:4F:9A:33:51:2A:07 Authority key identifier: EA:D8:1E:45:BE:41:47:67:29:C3:56:2A:34:6F:B6:F6:2F:C8:1F:BD Certificate issuer: /CN=A9119624/serialNumber=EAD81E45BE41476729C3562A346FB6F62FC81FBD Certificate serial: 0D38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tgeRb5BR2cpw1YqNG-29i_IH70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.mft Manifest number: 0D2F Signing time: Thu 24 Apr 2025 17:58:41 +0000 Manifest this update: Thu 24 Apr 2025 17:58:41 +0000 Manifest next update: Thu 01 May 2025 17:58:41 +0000 Files and hashes: 1: 6tgeRb5BR2cpw1YqNG-29i_IH70.crl (hash: Th0QmS88iDvwswpTIpS4+kcl58vMhvb8is5ig6XTq6E=) 2: 0FA62A50214011EA90EFFE63C4F9AE02.roa (hash: b2eeZFRX3Cfrh2KgUNSH2XUFjtsQ8yv94mtfUkRiNmk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.crl rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tgeRb5BR2cpw1YqNG-29i_IH70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:58:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3384 (0xd38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119624, serialNumber=EAD81E45BE41476729C3562A346FB6F62FC81FBD Validity Not Before: Apr 24 17:58:41 2025 GMT Not After : May 1 17:58:41 2025 GMT Subject: CN=680a7bd1-ed11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:f9:9c:b5:4b:b8:7b:ac:4e:87:56:0c:1f:e4: e3:53:18:0d:70:9a:b0:27:03:33:57:1f:ad:a8:e4: a6:57:d8:d1:60:66:ea:0a:79:eb:07:b5:01:61:0a: 07:5b:85:2b:ea:52:98:56:c9:9e:c0:0b:e9:f2:d3: 47:1f:a5:2a:89:1d:b8:e9:e7:a5:69:1e:40:d1:2b: 88:40:9c:36:05:bb:5b:63:f4:32:8c:50:bc:fb:30: 4d:70:2b:d1:c5:9e:e2:88:c8:24:6e:eb:ba:63:af: f5:c7:62:f8:e5:46:2a:90:d5:18:f8:64:36:66:fd: 90:94:82:59:18:1a:c8:75:43:c9:74:9a:3d:7e:ed: cc:51:f8:f1:5c:0b:a8:0a:b6:2f:e9:d5:14:06:c3: f9:46:45:94:be:f6:12:61:93:aa:91:07:9c:c1:4f: 15:92:3d:78:1e:9f:ff:9e:d6:3a:49:d2:b9:a7:56: b7:3f:6a:6b:d3:ad:6c:f5:8a:95:27:98:11:20:29: 88:f4:03:ca:63:5a:52:86:8d:7d:e9:dc:4a:71:4b: 52:de:29:c3:da:a6:4c:69:52:c9:2c:57:cd:72:bc: b0:74:73:f2:36:65:6c:d0:02:ac:39:bc:9c:07:c1: 7a:ad:59:c2:d1:fb:c4:89:55:e1:cb:2f:3e:93:b2: 23:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:F6:F0:81:61:06:26:1B:FB:DB:D3:35:1F:45:4F:9A:33:51:2A:07 X509v3 Authority Key Identifier: keyid:EA:D8:1E:45:BE:41:47:67:29:C3:56:2A:34:6F:B6:F6:2F:C8:1F:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tgeRb5BR2cpw1YqNG-29i_IH70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:45:d6:8e:aa:0c:ef:c4:09:1a:fd:5a:53:c8:5b:d6:59:df: 30:ca:fe:0f:26:59:fb:5a:42:b0:2e:ab:75:0d:e5:6d:97:9f: 80:0f:63:19:45:a1:95:fa:f2:4c:39:2d:84:ae:74:65:70:38: e7:76:fa:79:71:f1:95:b8:22:09:00:56:4a:76:4d:1c:36:80: a7:34:e1:a3:e7:b7:f4:0c:20:5a:f5:4e:4e:ca:a5:72:c8:57: ae:d3:61:df:c4:4b:93:61:23:48:7c:b9:96:8a:db:87:31:52: ed:49:80:21:63:b5:e3:a5:dc:19:f3:bc:f6:1c:78:7c:82:ec: cb:c8:b4:b6:6a:86:bc:23:6a:a6:e2:9d:6f:cd:94:f1:f5:55: 28:85:cf:10:60:49:da:82:93:1b:47:ff:a0:0e:3a:d1:b9:7a: 9b:2b:9d:ca:fd:42:2f:83:73:6e:3b:0a:03:4f:75:a9:07:8d: 8d:e8:c8:f5:48:07:03:d0:21:a2:28:27:65:de:ca:13:f5:53: bc:8a:83:a8:37:03:cd:44:f7:1a:49:ce:a5:7e:da:b3:ed:2a: 60:28:20:2a:6d:3a:39:ec:3a:15:c9:71:82:76:1a:64:5f:c7: e6:5f:9d:e9:0d:a1:97:b3:47:9d:3e:28:f0:30:76:9d:85:5c: 19:08:97:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDTgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk2MjQxMTAvBgNVBAUTKEVBRDgxRTQ1QkU0MTQ3NjcyOUMzNTYyQTM0NkZCNkY2 MkZDODFGQkQwHhcNMjUwNDI0MTc1ODQxWhcNMjUwNTAxMTc1ODQxWjAYMRYwFAYD VQQDEw02ODBhN2JkMS1lZDExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7vmctUu4e6xOh1YMH+TjUxgNcJqwJwMzVx+tqOSmV9jRYGbqCnnrB7UBYQoH W4Ur6lKYVsmewAvp8tNHH6UqiR246eelaR5A0SuIQJw2BbtbY/QyjFC8+zBNcCvR xZ7iiMgkbuu6Y6/1x2L45UYqkNUY+GQ2Zv2QlIJZGBrIdUPJdJo9fu3MUfjxXAuo CrYv6dUUBsP5RkWUvvYSYZOqkQecwU8Vkj14Hp//ntY6SdK5p1a3P2pr061s9YqV J5gRICmI9APKY1pSho196dxKcUtS3inD2qZMaVLJLFfNcrywdHPyNmVs0AKsObyc B8F6rVnC0fvEiVXhyy8+k7IjQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBL28IFh BiYb+9vTNR9FT5ozUSoHMB8GA1UdIwQYMBaAFOrYHkW+QUdnKcNWKjRvtvYvyB+9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTYyNC8zRDRBNUE4NEQ0 NEQxMUU5QTM4M0EzNUJDNEY5QUUwMi82dGdlUmI1QlIyY3B3MVlxTkctMjlpX0lI NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ0Z2VSYjVCUjJjcHcxWXFORy0yOWlfSUg3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTYyNC8zRDRBNUE4NEQ0NEQxMUU5QTM4M0EzNUJDNEY5QUUwMi82dGdlUmI1QlIy Y3B3MVlxTkctMjlpX0lINzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjRdaOqgzvxAka/VpTyFvWWd8wyv4PJln7WkKwLqt1DeVtl5+AD2MZ RaGV+vJMOS2ErnRlcDjndvp5cfGVuCIJAFZKdk0cNoCnNOGj57f0DCBa9U5OyqVy yFeu02HfxEuTYSNIfLmWituHMVLtSYAhY7XjpdwZ87z2HHh8guzLyLS2aoa8I2qm 4p1vzZTx9VUohc8QYEnagpMbR/+gDjrRuXqbK53K/UIvg3NuOwoDT3WpB42N6Mj1 SAcD0CGiKCdl3soT9VO8ioOoNwPNRPcaSc6lftqz7SpgKCAqbTo57DoVyXGCdhpk X8fmX53pDaGXs0edPijwMHadhVwZCJeJ -----END CERTIFICATE-----Generated at Sat Apr 26 13:49:19 2025 by rpki-client