$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.mft File: 6f6DqUwBuxPVNX83DHZZc-mX9NA.mft (raw, json) Hash identifier: SulQB3hLOqMmuVLX/VQhIngosSIbm0v+gVrzevM7VZo= Subject key identifier: F9:46:35:82:62:1E:69:BA:64:DB:FB:2A:94:D7:6D:D3:49:FC:8D:E0 Authority key identifier: E9:FE:83:A9:4C:01:BB:13:D5:35:7F:37:0C:76:59:73:E9:97:F4:D0 Certificate issuer: /CN=A911BDAE/serialNumber=E9FE83A94C01BB13D5357F370C765973E997F4D0 Certificate serial: 026F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f6DqUwBuxPVNX83DHZZc-mX9NA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.mft Manifest number: 026A Signing time: Fri 25 Apr 2025 01:29:48 +0000 Manifest this update: Fri 25 Apr 2025 01:29:48 +0000 Manifest next update: Fri 02 May 2025 01:29:48 +0000 Files and hashes: 1: 6f6DqUwBuxPVNX83DHZZc-mX9NA.crl (hash: qNWuPMyPBYTGL5YzCWaa6BSXRYMp7uiwNyzOv8+CsVA=) 2: 23803F800C9C11ED82C8955BC4F9AE02.roa (hash: Ny3HF6QiqyIBzWklmUHinHzimYgWUBmeHFmleIQ1/IQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.crl rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f6DqUwBuxPVNX83DHZZc-mX9NA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:29:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 623 (0x26f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BDAE, serialNumber=E9FE83A94C01BB13D5357F370C765973E997F4D0 Validity Not Before: Apr 25 01:29:48 2025 GMT Not After : May 2 01:29:48 2025 GMT Subject: CN=680ae58c-ab78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ee:0c:7c:7d:f2:cc:1c:26:3a:93:71:5f:b2: 9a:47:9a:36:d0:68:5f:e0:62:9e:05:5a:bd:23:71: 29:7e:49:2b:eb:ac:32:4b:d8:6c:84:c3:84:ce:e7: 47:b0:09:0a:cd:f6:c8:b7:4f:eb:06:51:5c:13:d3: 74:95:e7:f3:b9:29:84:1e:58:62:c8:b2:a7:4a:76: 8d:c8:fe:bd:a8:8a:71:55:97:26:e4:1d:25:78:52: 58:c5:f3:27:27:fa:99:ee:dd:f6:f1:ca:e1:2c:21: a1:ba:eb:6c:be:ea:11:9f:3c:30:05:43:53:9f:35: 22:aa:4b:82:c7:9f:1f:20:3c:94:c0:f5:ef:1a:9d: ee:da:8e:2b:1f:f5:b7:4d:8d:dd:a0:b4:6d:ca:d2: 7d:85:9a:b5:86:62:01:ba:70:90:d8:77:1a:09:37: 58:63:a5:78:d4:56:2d:48:7a:37:76:5d:f5:7e:17: d0:74:2a:5c:a1:06:72:8b:c0:25:d3:f9:90:56:0f: d0:d5:90:2c:39:2d:ef:05:d4:d4:d5:d2:7a:0a:6f: 82:9c:8b:20:c8:c6:b8:fd:17:c7:17:55:44:3f:f0: b7:0d:15:50:04:f2:a0:4a:57:96:6c:4d:85:5f:07: 64:fd:21:76:a7:a7:f5:4b:50:60:7e:89:5f:90:a7: 1b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:46:35:82:62:1E:69:BA:64:DB:FB:2A:94:D7:6D:D3:49:FC:8D:E0 X509v3 Authority Key Identifier: keyid:E9:FE:83:A9:4C:01:BB:13:D5:35:7F:37:0C:76:59:73:E9:97:F4:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f6DqUwBuxPVNX83DHZZc-mX9NA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:c9:d1:b9:05:62:78:7d:5a:d7:58:e4:03:61:0c:7d:14:2b: e9:b7:fb:7f:ec:70:59:75:29:4a:4e:db:72:f7:3a:7f:90:80: 4e:27:e9:6a:3f:f1:78:fd:b8:14:38:56:ff:f9:d4:1a:9f:71: a5:12:ce:00:16:2f:c1:70:ab:b0:64:41:5b:1c:d0:d8:18:c8: 50:bc:73:04:ce:be:91:68:8c:e0:40:79:96:b7:34:6a:fc:aa: 78:bc:cc:5b:42:52:3b:73:9a:e4:9b:c2:91:86:a3:ca:a7:d4: f1:ca:f8:41:9b:3e:47:2f:7a:47:60:c6:1d:9f:4c:5d:0c:a9: b8:a1:10:54:dc:54:e7:5a:ff:5e:0c:0d:d7:e0:4d:86:93:c5: 25:8f:75:0a:12:8f:97:42:6b:8c:75:50:c4:c6:ad:48:d2:0c: 09:99:81:a2:88:65:f5:fd:c7:e7:2c:fa:86:34:17:47:8c:d7: 38:52:8f:36:3d:65:de:7a:f6:01:e0:c6:22:3a:ed:f3:b0:d0: 61:27:b1:f0:6e:5c:ea:79:d0:d4:fc:77:28:4d:42:c4:c2:7e: 8f:0f:b7:b6:ab:c5:48:85:73:e5:70:b8:c2:b4:32:01:e9:d3: a2:00:ff:cd:10:5e:e6:08:5c:92:05:94:cd:bc:dd:c3:fe:ee: bf:09:0b:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJEQUUxMTAvBgNVBAUTKEU5RkU4M0E5NEMwMUJCMTNENTM1N0YzNzBDNzY1OTcz RTk5N0Y0RDAwHhcNMjUwNDI1MDEyOTQ4WhcNMjUwNTAyMDEyOTQ4WjAYMRYwFAYD VQQDEw02ODBhZTU4Yy1hYjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1+4MfH3yzBwmOpNxX7KaR5o20Ghf4GKeBVq9I3Epfkkr66wyS9hshMOEzudH sAkKzfbIt0/rBlFcE9N0lefzuSmEHlhiyLKnSnaNyP69qIpxVZcm5B0leFJYxfMn J/qZ7t328crhLCGhuutsvuoRnzwwBUNTnzUiqkuCx58fIDyUwPXvGp3u2o4rH/W3 TY3doLRtytJ9hZq1hmIBunCQ2HcaCTdYY6V41FYtSHo3dl31fhfQdCpcoQZyi8Al 0/mQVg/Q1ZAsOS3vBdTU1dJ6Cm+CnIsgyMa4/RfHF1VEP/C3DRVQBPKgSleWbE2F Xwdk/SF2p6f1S1BgfolfkKcbyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPlGNYJi Hmm6ZNv7KpTXbdNJ/I3gMB8GA1UdIwQYMBaAFOn+g6lMAbsT1TV/Nwx2WXPpl/TQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkRBRS9FOEYxMjk5ODBD OTUxMUVEODg2MjU2MzRDNEY5QUUwMi82ZjZEcVV3QnV4UFZOWDgzREhaWmMtbVg5 TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZmNkRxVXdCdXhQVk5YODNESFpaYy1tWDlOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkRBRS9FOEYxMjk5ODBDOTUxMUVEODg2MjU2MzRDNEY5QUUwMi82ZjZEcVV3QnV4 UFZOWDgzREhaWmMtbVg5TkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwydG5BWJ4fVrXWOQDYQx9FCvpt/t/7HBZdSlKTtty9zp/kIBOJ+lq P/F4/bgUOFb/+dQan3GlEs4AFi/BcKuwZEFbHNDYGMhQvHMEzr6RaIzgQHmWtzRq /Kp4vMxbQlI7c5rkm8KRhqPKp9TxyvhBmz5HL3pHYMYdn0xdDKm4oRBU3FTnWv9e DA3X4E2Gk8Ulj3UKEo+XQmuMdVDExq1I0gwJmYGiiGX1/cfnLPqGNBdHjNc4Uo82 PWXeevYB4MYiOu3zsNBhJ7HwblzqedDU/HcoTULEwn6PD7e2q8VIhXPlcLjCtDIB 6dOiAP/NEF7mCFySBZTNvN3D/u6/CQvd -----END CERTIFICATE-----Generated at Sat Apr 26 14:58:43 2025 by rpki-client