$ rpki-client -vvf rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft File: A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft (raw, json) Hash identifier: jGmyDeL3hh/zr6jm2rfi+o5Nsze2TFvINrBpux9IhKE= Subject key identifier: 8C:5D:1C:2F:6D:63:36:2C:A4:E9:CB:EF:E6:20:46:92:F1:45:D9:F1 Authority key identifier: 03:A8:56:6C:80:31:F5:62:19:9D:F9:9D:9B:99:B9:C7:E7:19:F8:90 Certificate issuer: /CN=A911FA99/serialNumber=03A8566C8031F562199DF99D9B99B9C7E719F890 Certificate serial: 0B32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft Manifest number: 0B2B Signing time: Thu 24 Apr 2025 19:05:28 +0000 Manifest this update: Thu 24 Apr 2025 19:05:28 +0000 Manifest next update: Thu 01 May 2025 19:05:28 +0000 Files and hashes: 1: A6hWbIAx9WIZnfmdm5m5x-cZ-JA.crl (hash: mrF/JEdmO1Q6Y6jU0tHQditPdZnHa/1WE3gTw8Xe/jQ=) 2: 730BD0EC384011EAADE7134BC4F9AE02.roa (hash: paapjxPleKLebHDMRnmQwPcu9J7d7Sr7UlJFEzedjKg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.crl rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:05:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2866 (0xb32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FA99, serialNumber=03A8566C8031F562199DF99D9B99B9C7E719F890 Validity Not Before: Apr 24 19:05:28 2025 GMT Not After : May 1 19:05:28 2025 GMT Subject: CN=680a8b78-da84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c6:04:56:81:5f:17:84:42:21:70:52:af:ee: b1:67:82:c6:5e:a5:54:85:35:d4:c8:e2:fa:27:41: 37:f2:20:2e:e7:f6:06:35:b6:4b:d6:0d:ac:03:01: 9b:12:99:6b:e2:10:98:eb:84:00:27:b3:39:4c:07: b6:de:9f:0b:ba:0f:f1:bc:bf:79:b3:dd:49:b2:e9: 33:5f:fd:a4:40:65:e1:23:80:8e:93:a0:86:c8:5e: b2:15:05:ff:3d:9e:e5:77:d4:75:f1:1a:6d:29:05: 54:ae:af:6c:45:19:0d:63:7f:c7:30:9b:a7:1b:ea: ff:ca:a6:2b:07:6b:05:31:f0:5e:0f:23:03:56:d8: a8:92:32:30:d2:12:4d:6b:32:e6:a2:a2:4a:b6:28: 2f:b6:7c:51:c4:d8:cf:dc:ef:36:68:49:0c:68:cf: 59:2e:7c:2b:72:5b:71:b7:17:ee:a1:f3:0a:d9:06: ee:3e:6c:72:ea:53:ac:03:a3:20:2d:47:60:b6:68: 11:05:08:bf:2c:55:7d:c7:b7:95:bf:1b:b4:85:ed: 33:ff:cf:57:d1:69:c2:11:e6:d2:4e:24:90:2f:87: c9:8f:d5:a8:82:9c:16:95:b3:e1:8e:aa:69:46:81: cf:1f:35:2d:c6:48:9e:7f:b8:e4:f5:c8:d1:87:36: a2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:5D:1C:2F:6D:63:36:2C:A4:E9:CB:EF:E6:20:46:92:F1:45:D9:F1 X509v3 Authority Key Identifier: keyid:03:A8:56:6C:80:31:F5:62:19:9D:F9:9D:9B:99:B9:C7:E7:19:F8:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:83:ff:c9:0d:e6:25:51:e9:74:41:98:21:c8:38:66:b9:f5: ef:cc:44:a1:56:5a:ca:5b:47:2b:ce:4a:f6:2f:66:4d:f0:68: 20:b5:b8:7f:c1:74:ab:74:b1:88:fb:76:b8:b0:1b:c4:55:f3: 0a:19:20:31:49:ff:21:cb:68:57:95:86:28:f7:14:1a:ef:d8: 69:bf:ae:3f:26:7d:7f:2b:fa:c0:15:04:20:e4:b0:80:ed:ec: ad:3b:81:97:11:fb:f3:39:51:ce:77:28:48:b3:a6:0e:38:ef: 68:8b:2b:f6:bf:7e:ef:89:51:36:11:52:d7:0a:62:53:8b:0b: 68:78:79:d0:06:d8:64:55:67:a4:29:68:01:6b:d4:54:31:dc: e4:38:d9:99:73:d7:97:be:49:5a:3a:5b:fc:19:41:30:fd:b6: d9:eb:8a:96:e4:90:c8:35:ec:71:26:f0:05:bf:c7:eb:d5:7a: 2a:e7:bd:32:97:49:77:04:93:83:ab:73:8e:1a:f0:60:9d:8e: a2:a2:8e:ec:40:c2:ac:74:de:cb:76:c1:2d:62:96:7e:75:c0: 3c:80:95:3b:66:76:89:d5:94:7e:77:f0:de:e5:39:72:e4:53: 4a:13:72:7f:80:7c:63:88:2e:b1:35:22:13:ca:10:eb:74:97: 0a:af:07:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZBOTkxMTAvBgNVBAUTKDAzQTg1NjZDODAzMUY1NjIxOTlERjk5RDlCOTlCOUM3 RTcxOUY4OTAwHhcNMjUwNDI0MTkwNTI4WhcNMjUwNTAxMTkwNTI4WjAYMRYwFAYD VQQDEw02ODBhOGI3OC1kYTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnsYEVoFfF4RCIXBSr+6xZ4LGXqVUhTXUyOL6J0E38iAu5/YGNbZL1g2sAwGb Eplr4hCY64QAJ7M5TAe23p8Lug/xvL95s91JsukzX/2kQGXhI4COk6CGyF6yFQX/ PZ7ld9R18RptKQVUrq9sRRkNY3/HMJunG+r/yqYrB2sFMfBeDyMDVtiokjIw0hJN azLmoqJKtigvtnxRxNjP3O82aEkMaM9ZLnwrcltxtxfuofMK2QbuPmxy6lOsA6Mg LUdgtmgRBQi/LFV9x7eVvxu0he0z/89X0WnCEebSTiSQL4fJj9WogpwWlbPhjqpp RoHPHzUtxkief7jk9cjRhzaiRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIxdHC9t YzYspOnL7+YgRpLxRdnxMB8GA1UdIwQYMBaAFAOoVmyAMfViGZ35nZuZucfnGfiQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkE5OS8wNjAyM0M3NjM4 M0YxMUVBQUVFODk0NDVDNEY5QUUwMi9BNmhXYklBeDlXSVpuZm1kbTVtNXgtY1ot SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E2aFdiSUF4OVdJWm5mbWRtNW01eC1jWi1KQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkE5OS8wNjAyM0M3NjM4M0YxMUVBQUVFODk0NDVDNEY5QUUwMi9BNmhXYklBeDlX SVpuZm1kbTVtNXgtY1otSkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8g//JDeYlUel0QZghyDhmufXvzEShVlrKW0crzkr2L2ZN8Gggtbh/ wXSrdLGI+3a4sBvEVfMKGSAxSf8hy2hXlYYo9xQa79hpv64/Jn1/K/rAFQQg5LCA 7eytO4GXEfvzOVHOdyhIs6YOOO9oiyv2v37viVE2EVLXCmJTiwtoeHnQBthkVWek KWgBa9RUMdzkONmZc9eXvklaOlv8GUEw/bbZ64qW5JDINexxJvAFv8fr1Xoq570y l0l3BJODq3OOGvBgnY6ioo7sQMKsdN7LdsEtYpZ+dcA8gJU7ZnaJ1ZR+d/De5Tly 5FNKE3J/gHxjiC6xNSITyhDrdJcKrwfK -----END CERTIFICATE-----Generated at Sat Apr 26 05:25:37 2025 by rpki-client