$ rpki-client -vvf rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.mft File: 6XH_tEATQSECHGJem3DrGuWij2A.mft (raw, json) Hash identifier: EH8iGxkAu96n1QV8jCMtnzSTC5FN+pN6YLhJE2IXOoU= Subject key identifier: FE:DF:13:A8:4D:06:04:12:1D:FC:1A:84:F7:77:CC:CF:E9:EF:E5:77 Authority key identifier: E9:71:FF:B4:40:13:41:21:02:1C:62:5E:9B:70:EB:1A:E5:A2:8F:60 Certificate issuer: /CN=A911EDE5/serialNumber=E971FFB440134121021C625E9B70EB1AE5A28F60 Certificate serial: 0D31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XH_tEATQSECHGJem3DrGuWij2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.mft Manifest number: 0D28 Signing time: Thu 24 Apr 2025 17:59:37 +0000 Manifest this update: Thu 24 Apr 2025 17:59:37 +0000 Manifest next update: Thu 01 May 2025 17:59:37 +0000 Files and hashes: 1: 6XH_tEATQSECHGJem3DrGuWij2A.crl (hash: hQbtfMowhZQ15aC74dfeXAr2+wBZpIrp7/1G9/11Ptk=) 2: 89D124B6D51311E98A41293BC4F9AE02.roa (hash: mbBxOC4AR4Py/kqSr6p/HUSw4E4voxLVh0FwxIMWx+Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.crl rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XH_tEATQSECHGJem3DrGuWij2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:59:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3377 (0xd31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911EDE5, serialNumber=E971FFB440134121021C625E9B70EB1AE5A28F60 Validity Not Before: Apr 24 17:59:37 2025 GMT Not After : May 1 17:59:37 2025 GMT Subject: CN=680a7c09-6d1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a7:03:7b:e4:f0:ab:92:9f:f4:bb:ec:eb:c5: 6f:e4:5b:e9:83:a4:b2:65:37:71:c2:ae:22:5b:00: 34:58:79:0e:dd:ce:1d:0e:12:99:48:e0:d8:fc:ec: 4e:82:ab:14:5d:82:0b:73:b3:40:e9:9f:45:ae:12: 78:9f:85:bc:69:24:a4:6c:03:5b:b1:8a:0b:f8:57: e7:8d:fa:7b:59:52:5d:73:d6:ad:aa:e5:01:7d:5b: 93:1c:ff:c3:ff:00:f8:48:66:11:fd:51:1f:d8:e5: b2:04:94:eb:32:a3:2a:77:82:dd:69:b3:a6:99:c6: 7c:30:52:d4:b5:aa:29:d2:2e:d2:f9:ed:32:dc:76: 88:6a:d2:13:82:41:77:1a:6a:a0:5b:66:6b:97:e9: 57:53:5f:eb:e1:35:af:05:98:01:2a:16:96:a1:6f: a4:6e:4f:f0:3b:bd:40:dc:d6:88:8f:fc:52:06:25: 27:ff:1d:d2:37:3c:ec:3f:03:b7:cb:10:e2:ae:8a: 3d:78:9a:fc:ab:4e:27:00:70:16:35:2b:f0:dd:1e: 26:c5:11:10:cb:30:be:f2:cd:4a:38:40:1e:34:b6: 4c:a9:47:67:ce:27:cf:8f:78:61:6f:8d:3b:8a:9a: e8:e7:37:b5:08:bc:b0:e8:cc:b7:43:bc:41:0a:d0: 90:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:DF:13:A8:4D:06:04:12:1D:FC:1A:84:F7:77:CC:CF:E9:EF:E5:77 X509v3 Authority Key Identifier: keyid:E9:71:FF:B4:40:13:41:21:02:1C:62:5E:9B:70:EB:1A:E5:A2:8F:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XH_tEATQSECHGJem3DrGuWij2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:19:18:c2:73:5d:88:d6:5d:79:3c:aa:0a:d6:1f:45:cc:15: 9f:13:f8:b4:08:db:e4:48:c0:60:1a:29:b2:5a:28:a6:f6:f5: 99:23:22:71:d3:4e:84:b5:3e:5e:d0:0f:ec:d9:3d:cb:36:b1: c5:1d:be:51:1d:63:96:2b:ae:ce:db:b2:e6:bd:fe:bf:81:c4: 7c:ed:85:74:31:4f:62:bd:29:df:2b:54:18:11:a1:64:15:49: 3a:3c:ed:98:28:d5:69:04:df:cb:99:a9:a6:b7:3d:92:50:50: af:bc:5a:58:df:ad:8a:c6:70:7e:5a:99:88:d6:c5:36:21:af: 49:14:96:60:df:5b:d5:39:e7:cd:55:70:c3:09:aa:01:e0:4a: 43:5f:8e:fa:7c:56:ff:b8:9a:36:85:ca:75:bf:12:c8:14:ab: bc:8f:7c:fc:7e:df:3a:a1:e1:dd:6e:5a:c4:86:9b:9a:bf:6a: 03:54:ba:63:38:0d:9b:17:58:36:7a:d5:32:2d:6b:f1:bd:44: ee:0c:57:1f:44:26:23:de:99:ee:dd:05:3a:e1:ca:22:9d:cc: b6:e4:55:40:d3:c5:3c:61:2c:b0:7b:cf:cc:95:f3:70:bd:e7: 62:0c:25:bd:87:2f:c2:1a:b1:8b:56:40:b3:d8:46:35:16:ac: 91:f9:ee:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDTEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVERTUxMTAvBgNVBAUTKEU5NzFGRkI0NDAxMzQxMjEwMjFDNjI1RTlCNzBFQjFB RTVBMjhGNjAwHhcNMjUwNDI0MTc1OTM3WhcNMjUwNTAxMTc1OTM3WjAYMRYwFAYD VQQDEw02ODBhN2MwOS02ZDFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwqcDe+Twq5Kf9Lvs68Vv5Fvpg6SyZTdxwq4iWwA0WHkO3c4dDhKZSODY/OxO gqsUXYILc7NA6Z9FrhJ4n4W8aSSkbANbsYoL+Ffnjfp7WVJdc9atquUBfVuTHP/D /wD4SGYR/VEf2OWyBJTrMqMqd4LdabOmmcZ8MFLUtaop0i7S+e0y3HaIatITgkF3 GmqgW2Zrl+lXU1/r4TWvBZgBKhaWoW+kbk/wO71A3NaIj/xSBiUn/x3SNzzsPwO3 yxDiroo9eJr8q04nAHAWNSvw3R4mxREQyzC+8s1KOEAeNLZMqUdnzifPj3hhb407 ipro5ze1CLyw6My3Q7xBCtCQKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP7fE6hN BgQSHfwahPd3zM/p7+V3MB8GA1UdIwQYMBaAFOlx/7RAE0EhAhxiXptw6xrloo9g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRURFNS9CM0JGNzU4QUQ1 MTIxMUU5QjY0M0VEMzlDNEY5QUUwMi82WEhfdEVBVFFTRUNIR0plbTNEckd1V2lq MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZYSF90RUFUUVNFQ0hHSmVtM0RyR3VXaWoyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RURFNS9CM0JGNzU4QUQ1MTIxMUU5QjY0M0VEMzlDNEY5QUUwMi82WEhfdEVBVFFT RUNIR0plbTNEckd1V2lqMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMGRjCc12I1l15PKoK1h9FzBWfE/i0CNvkSMBgGimyWiim9vWZIyJx 006EtT5e0A/s2T3LNrHFHb5RHWOWK67O27Lmvf6/gcR87YV0MU9ivSnfK1QYEaFk FUk6PO2YKNVpBN/Lmammtz2SUFCvvFpY362KxnB+WpmI1sU2Ia9JFJZg31vVOefN VXDDCaoB4EpDX476fFb/uJo2hcp1vxLIFKu8j3z8ft86oeHdblrEhpuav2oDVLpj OA2bF1g2etUyLWvxvUTuDFcfRCYj3pnu3QU64coincy25FVA08U8YSywe8/MlfNw vediDCW9hy/CGrGLVkCz2EY1FqyR+e5b -----END CERTIFICATE-----Generated at Sat Apr 26 05:24:47 2025 by rpki-client