$ rpki-client -vvf rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.mft File: 6C0Q0tocmL9oykxkkbkP_Q-rM5Q.mft (raw, json) Hash identifier: QB0/d37mnLTS5jAfl3DAe3jv9tbPDuMGyLeMzKKgjiY= Subject key identifier: BB:65:A1:B9:59:28:3A:5B:B8:69:2D:DB:F2:FB:DC:79:49:9B:F6:03 Authority key identifier: E8:2D:10:D2:DA:1C:98:BF:68:CA:4C:64:91:B9:0F:FD:0F:AB:33:94 Certificate issuer: /CN=A912D5C1/serialNumber=E82D10D2DA1C98BF68CA4C6491B90FFD0FAB3394 Certificate serial: 0C70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.mft Manifest number: 0C5B Signing time: Thu 24 Apr 2025 18:16:35 +0000 Manifest this update: Thu 24 Apr 2025 18:16:34 +0000 Manifest next update: Thu 01 May 2025 18:16:34 +0000 Files and hashes: 1: 6C0Q0tocmL9oykxkkbkP_Q-rM5Q.crl (hash: nuuLxCB7due1JxIh3TyZSF2E5fRgz6yENBPHDzYRjaw=) 2: D7F98876520B11EE8B85DB63C4F9AE02.roa (hash: BvjqspRO5HaHZk8MDrrn9sDV9WNZa1iIeNw3qkNnjXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.crl rsync://rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:16:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3184 (0xc70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D5C1, serialNumber=E82D10D2DA1C98BF68CA4C6491B90FFD0FAB3394 Validity Not Before: Apr 24 18:16:34 2025 GMT Not After : May 1 18:16:34 2025 GMT Subject: CN=680a8002-f637 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ac:56:d3:32:4a:f8:d2:93:9e:a1:bf:17:de: d2:db:af:4d:eb:70:da:41:fc:98:0b:ee:98:ea:2b: 7a:34:bb:da:9d:8a:7a:9a:34:2f:f2:54:f8:37:88: 35:72:1e:cc:31:76:29:91:f2:da:55:13:f7:c0:62: 74:82:4f:93:29:26:76:1f:2a:c3:4a:06:28:a4:0c: cc:32:fb:ab:5d:6c:93:9a:db:c4:17:ac:62:57:ec: ec:5c:d7:fb:fa:73:21:d1:f4:de:a5:23:57:02:66: 2c:13:28:11:23:60:8b:6c:25:88:b1:de:38:5a:cb: 35:29:b4:06:cb:0b:51:24:54:68:fc:b9:94:3b:74: 9c:3b:8f:67:b2:9b:20:65:db:e8:89:79:9f:d0:83: 52:fc:5e:24:cd:fa:11:72:2d:6b:ff:35:c0:32:10: 8c:99:5a:db:76:b8:b0:a1:e6:97:47:fd:b4:90:8d: ab:32:7b:c7:88:aa:d1:8f:4f:a4:89:8e:3e:d2:22: 75:c6:88:f9:55:d1:13:3a:0d:47:ed:fb:2b:d1:4a: b2:4e:2d:56:07:69:13:11:e4:9c:1f:93:1f:d8:52: 96:25:23:16:bd:16:72:5d:a5:a1:d1:81:e0:8f:ad: 15:1f:9e:e0:4f:d2:99:4e:00:23:dc:cb:2a:3d:c2: 19:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:65:A1:B9:59:28:3A:5B:B8:69:2D:DB:F2:FB:DC:79:49:9B:F6:03 X509v3 Authority Key Identifier: keyid:E8:2D:10:D2:DA:1C:98:BF:68:CA:4C:64:91:B9:0F:FD:0F:AB:33:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:55:43:cf:3d:31:88:bb:6d:fd:87:c2:99:b4:43:76:f8:7e: ee:c8:96:35:2c:78:0e:4e:82:b1:4d:0f:b6:6c:01:ed:aa:41: cb:6c:f4:ca:9f:51:f6:1e:40:e8:d8:65:37:42:fe:9a:92:47: 4b:f1:a4:56:9d:2a:fe:5c:8a:ae:1b:ee:91:e6:36:20:87:b7: 92:d8:27:38:fa:52:a2:1f:76:c7:ac:95:76:2a:12:f8:f7:28: fe:9d:57:8f:b4:de:20:6a:f9:2e:8a:3b:d9:07:f9:4b:bf:40: 5f:0d:65:7c:71:e6:ff:67:fa:c1:f4:e0:69:79:d6:97:7a:5e: 12:ca:b9:d2:99:6b:77:48:ec:b7:ef:2b:f4:a7:a0:d0:80:66: 78:4a:98:2e:80:69:2e:c0:1b:ef:b9:81:f4:af:d3:7b:06:a6: 06:a5:95:04:a7:7e:fe:a6:9e:1c:57:8c:33:75:99:9a:17:fb: a6:eb:2a:1c:1a:91:fd:5a:85:9c:48:1c:a9:6f:49:b1:8b:6c: 69:7c:1d:cd:fe:c8:0b:47:6d:64:4a:d4:30:76:d0:88:18:4d: b0:62:12:45:98:df:78:27:de:9b:dd:6d:65:03:6c:2d:a3:9f: 2c:fe:83:26:88:28:fe:dc:2f:6d:e1:11:b2:17:4a:ed:1a:c1: c9:3a:ea:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQ1QzExMTAvBgNVBAUTKEU4MkQxMEQyREExQzk4QkY2OENBNEM2NDkxQjkwRkZE MEZBQjMzOTQwHhcNMjUwNDI0MTgxNjM0WhcNMjUwNTAxMTgxNjM0WjAYMRYwFAYD VQQDEw02ODBhODAwMi1mNjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx6xW0zJK+NKTnqG/F97S269N63DaQfyYC+6Y6it6NLvanYp6mjQv8lT4N4g1 ch7MMXYpkfLaVRP3wGJ0gk+TKSZ2HyrDSgYopAzMMvurXWyTmtvEF6xiV+zsXNf7 +nMh0fTepSNXAmYsEygRI2CLbCWIsd44Wss1KbQGywtRJFRo/LmUO3ScO49nspsg ZdvoiXmf0INS/F4kzfoRci1r/zXAMhCMmVrbdriwoeaXR/20kI2rMnvHiKrRj0+k iY4+0iJ1xoj5VdETOg1H7fsr0UqyTi1WB2kTEeScH5Mf2FKWJSMWvRZyXaWh0YHg j60VH57gT9KZTgAj3MsqPcIZIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLtloblZ KDpbuGkt2/L73HlJm/YDMB8GA1UdIwQYMBaAFOgtENLaHJi/aMpMZJG5D/0PqzOU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDVDMS9CMDdEQ0I0NEZG Q0MxMUU5QTVFNzk3ODRDNEY5QUUwMi82QzBRMHRvY21MOW95a3hra2JrUF9RLXJN NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZDMFEwdG9jbUw5b3lreGtrYmtQX1Etck01US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDVDMS9CMDdEQ0I0NEZGQ0MxMUU5QTVFNzk3ODRDNEY5QUUwMi82QzBRMHRvY21M OW95a3hra2JrUF9RLXJNNVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4VUPPPTGIu239h8KZtEN2+H7uyJY1LHgOToKxTQ+2bAHtqkHLbPTK n1H2HkDo2GU3Qv6akkdL8aRWnSr+XIquG+6R5jYgh7eS2Cc4+lKiH3bHrJV2KhL4 9yj+nVePtN4gavkuijvZB/lLv0BfDWV8ceb/Z/rB9OBpedaXel4SyrnSmWt3SOy3 7yv0p6DQgGZ4SpgugGkuwBvvuYH0r9N7BqYGpZUEp37+pp4cV4wzdZmaF/um6yoc GpH9WoWcSBypb0mxi2xpfB3N/sgLR21kStQwdtCIGE2wYhJFmN94J96b3W1lA2wt o58s/oMmiCj+3C9t4RGyF0rtGsHJOuov -----END CERTIFICATE-----Generated at Sat Apr 26 17:06:23 2025 by rpki-client