$ rpki-client -vvf rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.mft File: 6uK86DXkKxFfGLP-Do8n-EpHSZY.mft (raw, json) Hash identifier: w374jPMJp+SxBDw//VfZIPFznAAtHzp4+gKl1oE05Mg= Subject key identifier: 2B:D6:37:44:01:A0:C4:F9:07:31:A6:92:B5:53:2E:05:15:66:20:53 Authority key identifier: EA:E2:BC:E8:35:E4:2B:11:5F:18:B3:FE:0E:8F:27:F8:4A:47:49:96 Certificate issuer: /CN=A912C0DE/serialNumber=EAE2BCE835E42B115F18B3FE0E8F27F84A474996 Certificate serial: 0110 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6uK86DXkKxFfGLP-Do8n-EpHSZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.mft Manifest number: 010C Signing time: Fri 25 Apr 2025 04:05:18 +0000 Manifest this update: Fri 25 Apr 2025 04:05:18 +0000 Manifest next update: Fri 02 May 2025 04:05:18 +0000 Files and hashes: 1: 6uK86DXkKxFfGLP-Do8n-EpHSZY.crl (hash: Ovzg/zdFPBmi7F81Q5wS3TVDw5/RjU9q58iaehKwABU=) 2: 5F57D01A5EA511EFB0E1B468C4F9AE02.roa (hash: dNtSLmbPQl6n7qJUeH+z2I4vNRh8gF+hIvNTsqOdqPk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.crl rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6uK86DXkKxFfGLP-Do8n-EpHSZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:05:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 272 (0x110) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C0DE, serialNumber=EAE2BCE835E42B115F18B3FE0E8F27F84A474996 Validity Not Before: Apr 25 04:05:18 2025 GMT Not After : May 2 04:05:18 2025 GMT Subject: CN=680b09fe-03fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:60:83:79:ad:83:b0:54:3a:c9:1f:4c:a1:37: b5:33:7c:9b:1a:c6:77:e3:35:42:bb:40:08:e0:3d: de:63:08:67:ad:b3:b8:4d:47:64:e2:ec:f7:bf:5c: 86:a1:fd:3c:76:ac:7c:84:b0:ed:b4:2c:04:7d:2e: 55:d9:e2:6e:21:c9:76:4f:49:95:59:c2:f6:d9:d1: 95:74:9d:50:27:f6:ae:e3:f3:f8:9c:20:74:1a:e1: b6:84:c4:60:d7:3e:fd:24:88:4d:26:4f:66:7b:cb: 80:a7:18:27:2d:a3:1c:53:a1:44:a7:09:a0:09:66: 99:2f:df:13:4d:0f:ac:4a:37:d7:d8:47:4c:bc:5d: b0:76:ff:12:50:20:87:f5:69:fe:1b:ec:b7:b0:56: b2:15:8f:0f:61:e4:e7:14:c4:c7:9b:df:3a:82:ba: 30:f3:6b:ff:60:23:eb:69:74:46:df:c4:a8:b8:b2: 4b:12:4e:dc:6d:0c:e1:e7:03:e1:e5:64:c1:fd:25: 44:aa:45:2e:9c:3c:5f:5e:e0:62:0f:09:eb:0e:c6: 42:e4:78:cd:e9:95:c6:b3:15:c6:96:65:e8:c7:2e: 32:57:f2:9a:b3:ee:70:4c:b8:b1:52:d3:66:53:6f: 14:f6:56:03:7f:b9:b8:63:5f:85:7c:a6:60:63:a0: b4:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:D6:37:44:01:A0:C4:F9:07:31:A6:92:B5:53:2E:05:15:66:20:53 X509v3 Authority Key Identifier: keyid:EA:E2:BC:E8:35:E4:2B:11:5F:18:B3:FE:0E:8F:27:F8:4A:47:49:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6uK86DXkKxFfGLP-Do8n-EpHSZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:1d:08:29:59:5c:fc:97:42:93:9b:43:6f:26:98:c9:bd:78: f6:16:eb:1f:fc:99:42:ca:fe:10:ab:c5:a5:f4:36:c4:8b:28: 68:f6:17:2f:d8:c7:ed:d1:1c:87:d0:d9:e9:bc:ee:e0:f9:c5: 7d:17:bb:35:42:7f:48:6a:eb:fa:45:0f:a8:b1:7b:71:be:e4: 6e:fb:68:bb:ba:ae:06:fc:b9:ab:ef:b4:79:8a:05:fc:e1:4b: 80:0c:64:13:99:84:77:2d:f5:de:c6:48:26:68:df:e0:25:94: d9:e1:c6:f5:6d:8c:21:df:5f:f9:54:eb:36:e9:05:2c:7b:d1: cd:39:45:19:f3:b3:4f:a9:59:e8:46:24:6f:c9:24:2d:96:94: 79:63:a3:3a:0b:cb:4f:3b:e2:c8:a2:48:87:d5:14:40:9b:7b: 29:38:e4:c8:75:68:a4:bb:6f:35:ae:f4:37:1a:e5:73:0f:c0: 4e:fc:8a:2e:9e:66:66:52:18:a9:16:fd:16:de:93:96:1f:63: 48:5a:ee:ed:55:81:2d:65:d0:43:f9:c7:2d:5d:b0:33:90:6d: ce:f0:04:8f:1a:28:56:fd:71:bb:33:35:d5:aa:87:6d:d8:e7: a0:4f:dc:a7:23:3f:4c:ce:9c:a1:46:77:dd:ec:88:00:b0:ae: a7:4b:02:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMwREUxMTAvBgNVBAUTKEVBRTJCQ0U4MzVFNDJCMTE1RjE4QjNGRTBFOEYyN0Y4 NEE0NzQ5OTYwHhcNMjUwNDI1MDQwNTE4WhcNMjUwNTAyMDQwNTE4WjAYMRYwFAYD VQQDEw02ODBiMDlmZS0wM2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyWCDea2DsFQ6yR9MoTe1M3ybGsZ34zVCu0AI4D3eYwhnrbO4TUdk4uz3v1yG of08dqx8hLDttCwEfS5V2eJuIcl2T0mVWcL22dGVdJ1QJ/au4/P4nCB0GuG2hMRg 1z79JIhNJk9me8uApxgnLaMcU6FEpwmgCWaZL98TTQ+sSjfX2EdMvF2wdv8SUCCH 9Wn+G+y3sFayFY8PYeTnFMTHm986grow82v/YCPraXRG38SouLJLEk7cbQzh5wPh 5WTB/SVEqkUunDxfXuBiDwnrDsZC5HjN6ZXGsxXGlmXoxy4yV/Kas+5wTLixUtNm U28U9lYDf7m4Y1+FfKZgY6C0lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCvWN0QB oMT5BzGmkrVTLgUVZiBTMB8GA1UdIwQYMBaAFOrivOg15CsRXxiz/g6PJ/hKR0mW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzBERS9FNDc0NDNENjhG RUUxMUVFOTAzODlFMUNDNEY5QUUwMi82dUs4NkRYa0t4RmZHTFAtRG84bi1FcEhT WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ1Szg2RFhrS3hGZkdMUC1EbzhuLUVwSFNaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzBERS9FNDc0NDNENjhGRUUxMUVFOTAzODlFMUNDNEY5QUUwMi82dUs4NkRYa0t4 RmZHTFAtRG84bi1FcEhTWlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnHQgpWVz8l0KTm0NvJpjJvXj2Fusf/JlCyv4Qq8Wl9DbEiyho9hcv 2Mft0RyH0NnpvO7g+cV9F7s1Qn9Iauv6RQ+osXtxvuRu+2i7uq4G/Lmr77R5igX8 4UuADGQTmYR3LfXexkgmaN/gJZTZ4cb1bYwh31/5VOs26QUse9HNOUUZ87NPqVno RiRvySQtlpR5Y6M6C8tPO+LIokiH1RRAm3spOOTIdWiku281rvQ3GuVzD8BO/Iou nmZmUhipFv0W3pOWH2NIWu7tVYEtZdBD+cctXbAzkG3O8ASPGihW/XG7MzXVqodt 2OegT9ynIz9MzpyhRnfd7IgAsK6nSwIs -----END CERTIFICATE-----Generated at Sat Apr 26 04:30:36 2025 by rpki-client