$ rpki-client -vvf rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.mft File: paap6sGs925VLHi914unT-3dP_k.mft (raw, json) Hash identifier: v7JsfW/HqcS8bJDK4mGYOtigkiTaMeropxEWw4tQ/1Q= Subject key identifier: 10:50:24:F3:30:8E:C7:9E:E2:F2:61:14:FA:A6:19:95:D3:EA:F1:43 Authority key identifier: A5:A6:A9:EA:C1:AC:F7:6E:55:2C:78:BD:D7:8B:A7:4F:ED:DD:3F:F9 Certificate issuer: /CN=A9129AD6/serialNumber=A5A6A9EAC1ACF76E552C78BDD78BA74FEDDD3FF9 Certificate serial: 2BA2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/paap6sGs925VLHi914unT-3dP_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.mft Manifest number: 2B92 Signing time: Thu 24 Apr 2025 15:33:20 +0000 Manifest this update: Thu 24 Apr 2025 15:33:20 +0000 Manifest next update: Thu 01 May 2025 15:33:20 +0000 Files and hashes: 1: paap6sGs925VLHi914unT-3dP_k.crl (hash: fL9S5ts+9BDc5jI58pU7yfs41WRv6M3CSaubjoZ+Ubk=) 2: 9AD04EAAD58A11EE9992494AC4F9AE02.roa (hash: Y+UHiw8c3eNlA0cJzRblwugtoQFPbU8OnmXnd1yx0dE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.crl rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/paap6sGs925VLHi914unT-3dP_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:33:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11170 (0x2ba2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129AD6, serialNumber=A5A6A9EAC1ACF76E552C78BDD78BA74FEDDD3FF9 Validity Not Before: Apr 24 15:33:20 2025 GMT Not After : May 1 15:33:20 2025 GMT Subject: CN=680a59c0-7d4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:34:98:08:de:8f:96:57:0e:9d:ed:9f:34:22: f5:45:98:70:46:4e:81:2a:e7:9c:4f:43:c8:66:54: a0:5d:fa:0e:8c:44:3c:f8:b4:4d:56:3e:e9:79:ca: 6f:e7:0c:d1:48:ab:5c:8d:7f:9c:fb:a2:ea:24:de: 1d:e0:62:0f:af:e6:57:4a:55:56:19:8d:8f:46:c8: a7:47:44:11:e9:b3:33:cc:f7:0b:68:fc:c8:5a:b1: 3a:61:51:bf:48:f5:86:5a:59:f0:a0:be:93:bf:13: d6:03:a5:d4:82:2e:b0:c5:84:ae:ba:e5:ac:07:ab: 90:c9:40:2a:87:a7:13:0d:1c:81:3a:80:66:e5:8c: 02:1a:f0:a3:63:6b:bc:92:61:0b:86:07:2b:b2:3a: 73:fd:b3:8e:08:42:0d:d7:67:e0:75:ac:5a:8f:32: 93:e5:56:37:7b:ba:bb:dd:ac:c6:8b:82:47:71:d6: eb:87:12:58:ed:de:19:dc:9a:3c:d2:74:2a:8c:4d: e9:9b:28:69:cf:aa:aa:a8:4b:3b:40:43:e2:92:31: 63:3c:f3:8e:f6:f0:80:3f:a8:db:8c:2c:5b:bc:c1: dc:cd:bc:50:78:c2:af:10:86:01:76:fb:0f:c6:13: b2:ce:2d:57:ba:2a:d7:0b:0b:2b:81:e4:ca:4c:fb: b9:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:50:24:F3:30:8E:C7:9E:E2:F2:61:14:FA:A6:19:95:D3:EA:F1:43 X509v3 Authority Key Identifier: keyid:A5:A6:A9:EA:C1:AC:F7:6E:55:2C:78:BD:D7:8B:A7:4F:ED:DD:3F:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/paap6sGs925VLHi914unT-3dP_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:dd:72:cc:d5:0f:eb:3a:bb:e7:4f:66:ce:39:10:bc:5e:f1: 8d:2b:22:e8:7e:d8:67:12:16:3a:ab:5d:42:d7:da:fd:86:d7: 9f:ab:51:3d:2f:9e:11:62:5c:28:c5:8e:de:0e:e6:35:7e:d3: 26:0b:fe:54:a4:a6:57:24:e0:1e:40:87:1b:37:f3:4a:4b:1a: 51:4c:0c:7c:76:3a:ad:84:9b:06:28:9f:8d:12:ad:23:eb:14: 32:20:ca:9d:64:38:96:c0:82:56:ac:bd:d0:fa:87:1c:49:1f: b0:ce:9b:db:b7:af:ae:61:1b:f6:a0:ed:ca:db:99:07:bf:04: 0a:e2:0b:a4:4f:c0:0e:aa:37:bc:a7:d9:5b:fe:01:bd:54:b2: d5:21:63:85:fd:2e:0a:8a:8d:8c:27:99:d3:80:47:92:ea:a9: 31:87:ad:c8:19:11:b8:f1:b2:46:0b:6a:26:9b:08:0f:0a:b9: 88:d0:7a:3d:e1:d8:24:fd:e6:01:38:4c:f3:2f:53:76:66:09: 4e:1d:ad:13:5c:68:63:9b:10:a2:39:d2:db:dc:ef:51:13:5f: 73:38:f6:08:b5:d0:67:e1:9e:6e:1b:23:4c:9b:27:7d:ea:00: 54:16:03:d5:5f:f5:39:a6:a3:22:74:9a:84:8d:5a:b7:b0:13: d6:2f:df:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICK6IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlBRDYxMTAvBgNVBAUTKEE1QTZBOUVBQzFBQ0Y3NkU1NTJDNzhCREQ3OEJBNzRG RURERDNGRjkwHhcNMjUwNDI0MTUzMzIwWhcNMjUwNTAxMTUzMzIwWjAYMRYwFAYD VQQDEw02ODBhNTljMC03ZDRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqzSYCN6PllcOne2fNCL1RZhwRk6BKuecT0PIZlSgXfoOjEQ8+LRNVj7pecpv 5wzRSKtcjX+c+6LqJN4d4GIPr+ZXSlVWGY2PRsinR0QR6bMzzPcLaPzIWrE6YVG/ SPWGWlnwoL6TvxPWA6XUgi6wxYSuuuWsB6uQyUAqh6cTDRyBOoBm5YwCGvCjY2u8 kmELhgcrsjpz/bOOCEIN12fgdaxajzKT5VY3e7q73azGi4JHcdbrhxJY7d4Z3Jo8 0nQqjE3pmyhpz6qqqEs7QEPikjFjPPOO9vCAP6jbjCxbvMHczbxQeMKvEIYBdvsP xhOyzi1XuirXCwsrgeTKTPu5cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBBQJPMw jsee4vJhFPqmGZXT6vFDMB8GA1UdIwQYMBaAFKWmqerBrPduVSx4vdeLp0/t3T/5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUFENi9ENjc3REM5NERG RDAxMUUzOTNEQjc5NUY1OTExRUEzMi9wYWFwNnNHczkyNVZMSGk5MTR1blQtM2RQ X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BhYXA2c0dzOTI1VkxIaTkxNHVuVC0zZFBfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OUFENi9ENjc3REM5NERGRDAxMUUzOTNEQjc5NUY1OTExRUEzMi9wYWFwNnNHczky NVZMSGk5MTR1blQtM2RQX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCW3XLM1Q/rOrvnT2bOORC8XvGNKyLofthnEhY6q11C19r9htefq1E9 L54RYlwoxY7eDuY1ftMmC/5UpKZXJOAeQIcbN/NKSxpRTAx8djqthJsGKJ+NEq0j 6xQyIMqdZDiWwIJWrL3Q+occSR+wzpvbt6+uYRv2oO3K25kHvwQK4gukT8AOqje8 p9lb/gG9VLLVIWOF/S4Kio2MJ5nTgEeS6qkxh63IGRG48bJGC2ommwgPCrmI0Ho9 4dgk/eYBOEzzL1N2ZglOHa0TXGhjmxCiOdLb3O9RE19zOPYItdBn4Z5uGyNMmyd9 6gBUFgPVX/U5pqMidJqEjVq3sBPWL98D -----END CERTIFICATE-----Generated at Sat Apr 26 13:47:01 2025 by rpki-client