$ rpki-client -vvf rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.mft File: 6YYS7upK5w0ftbZSS5adR0Lc6BA.mft (raw, json) Hash identifier: 3Hqe6TF4AdUH22KC0MSteNGPDWHd3Yw3sP2x5o/VJr8= Subject key identifier: 99:24:DF:C2:5F:94:18:47:05:1A:CE:BB:3F:FE:F8:5D:E7:6D:8A:CB Authority key identifier: E9:86:12:EE:EA:4A:E7:0D:1F:B5:B6:52:4B:96:9D:47:42:DC:E8:10 Certificate issuer: /CN=A912DB99/serialNumber=E98612EEEA4AE70D1FB5B6524B969D4742DCE810 Certificate serial: 0152 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6YYS7upK5w0ftbZSS5adR0Lc6BA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.mft Manifest number: 014B Signing time: Fri 25 Apr 2025 03:24:09 +0000 Manifest this update: Fri 25 Apr 2025 03:24:08 +0000 Manifest next update: Fri 02 May 2025 03:24:08 +0000 Files and hashes: 1: 6YYS7upK5w0ftbZSS5adR0Lc6BA.crl (hash: 89dXc1fZJ7Zl/0SXXqsa5s5IzRn2QlZtkJlbiKFuVV8=) 2: E58351049F2011EE8D92FF5EC4F9AE02.roa (hash: iAgZl5cjC5GY9UT1VAX4lVlQAoyGZHmwHR+AO/vqBI0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.crl rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6YYS7upK5w0ftbZSS5adR0Lc6BA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:24:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 338 (0x152) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DB99, serialNumber=E98612EEEA4AE70D1FB5B6524B969D4742DCE810 Validity Not Before: Apr 25 03:24:08 2025 GMT Not After : May 2 03:24:08 2025 GMT Subject: CN=680b0058-b25e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:cd:55:94:bf:e2:3f:d4:cd:2b:ea:35:71:12: d9:6e:5a:c8:7c:07:7d:1d:62:7a:96:67:e8:42:78: 5a:82:49:df:a1:57:22:4b:c3:74:fb:27:6a:45:90: 2a:31:7e:ec:66:b6:f4:14:05:ca:e8:0a:a5:ee:df: 5f:79:03:69:3c:52:e5:51:1a:34:1f:8e:d5:fb:9e: 4f:67:9e:c5:95:34:7c:df:a4:0e:df:b0:ba:b3:01: 95:17:bd:3d:8f:5a:53:28:0a:e0:5c:78:57:0e:82: 55:91:5c:2c:4f:16:e0:6d:a4:26:37:db:88:b4:39: a6:a5:b1:00:eb:c8:e3:16:bf:a3:43:c1:19:f7:a2: 0c:5c:3d:46:97:5c:33:20:ca:e6:96:31:e9:fa:06: 08:a0:07:14:f7:49:6d:5e:83:62:d7:47:de:d7:48: 00:af:6d:92:ec:6b:15:27:bd:1d:dd:13:99:14:c7: 01:b5:20:8c:10:8b:48:a6:4c:a4:60:f7:4e:77:23: e8:a8:64:60:a7:40:b9:b3:7e:9d:da:23:32:b8:b6: 5e:84:df:f5:07:36:32:da:20:cf:e9:f1:e7:cf:4e: 6b:5d:28:0a:d3:43:08:e9:85:33:b7:29:cc:6a:be: 5b:6c:5c:b4:bf:29:bf:cd:9f:1c:6e:f7:4b:0e:43: 2c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:24:DF:C2:5F:94:18:47:05:1A:CE:BB:3F:FE:F8:5D:E7:6D:8A:CB X509v3 Authority Key Identifier: keyid:E9:86:12:EE:EA:4A:E7:0D:1F:B5:B6:52:4B:96:9D:47:42:DC:E8:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6YYS7upK5w0ftbZSS5adR0Lc6BA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:6e:d2:e7:23:37:e7:04:13:44:7d:33:ae:3a:ad:4f:be:ab: b3:36:41:ac:1b:b6:e2:7a:45:75:37:27:97:2c:00:ed:af:92: 5b:21:73:6a:a0:0e:fb:d7:ec:11:1d:ca:f9:16:af:f5:a3:48: cf:f9:72:bb:91:28:4a:36:8c:e6:0e:ab:c4:21:33:6f:cd:3c: be:b8:e2:0f:3b:af:f8:76:55:b1:8a:3d:b8:ce:5b:7a:20:5d: 76:c6:1d:3d:9b:cb:79:13:11:78:1f:20:5c:5f:76:35:2c:df: 13:3a:37:1f:ff:ff:b7:aa:ab:aa:ba:37:e7:7c:83:c9:b8:d0: 15:27:54:f2:06:96:46:d0:4e:60:d3:12:1a:06:fc:dd:2b:c0: 77:20:bc:f0:91:1e:e9:c6:d8:cf:2c:87:44:25:3b:ed:c5:ad: 6c:6b:9e:77:87:ba:51:ab:2a:a8:e3:19:3e:b9:e4:3e:47:54: ae:0d:e9:63:f5:f3:0a:8c:db:94:0e:ff:04:e0:9a:4a:3e:f8: 6c:42:02:33:00:5e:34:bf:89:73:e4:94:42:ef:f7:70:24:a2: 11:96:ec:a3:18:df:51:a0:40:b9:9b:44:db:6b:17:62:a7:a8: 07:1e:45:a4:29:14:f7:23:59:ab:1b:41:d2:e2:7f:0f:cd:0d: fb:78:58:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRCOTkxMTAvBgNVBAUTKEU5ODYxMkVFRUE0QUU3MEQxRkI1QjY1MjRCOTY5RDQ3 NDJEQ0U4MTAwHhcNMjUwNDI1MDMyNDA4WhcNMjUwNTAyMDMyNDA4WjAYMRYwFAYD VQQDEw02ODBiMDA1OC1iMjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7M1VlL/iP9TNK+o1cRLZblrIfAd9HWJ6lmfoQnhagknfoVciS8N0+ydqRZAq MX7sZrb0FAXK6Aql7t9feQNpPFLlURo0H47V+55PZ57FlTR836QO37C6swGVF709 j1pTKArgXHhXDoJVkVwsTxbgbaQmN9uItDmmpbEA68jjFr+jQ8EZ96IMXD1Gl1wz IMrmljHp+gYIoAcU90ltXoNi10fe10gAr22S7GsVJ70d3ROZFMcBtSCMEItIpkyk YPdOdyPoqGRgp0C5s36d2iMyuLZehN/1BzYy2iDP6fHnz05rXSgK00MI6YUztynM ar5bbFy0vym/zZ8cbvdLDkMs0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJkk38Jf lBhHBRrOuz/++F3nbYrLMB8GA1UdIwQYMBaAFOmGEu7qSucNH7W2UkuWnUdC3OgQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREI5OS9CQzY1OUJDNjMx QjQxMUVFQjU1MUYyMTFDNEY5QUUwMi82WVlTN3VwSzV3MGZ0YlpTUzVhZFIwTGM2 QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZZWVM3dXBLNXcwZnRiWlNTNWFkUjBMYzZCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REI5OS9CQzY1OUJDNjMxQjQxMUVFQjU1MUYyMTFDNEY5QUUwMi82WVlTN3VwSzV3 MGZ0YlpTUzVhZFIwTGM2QkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+btLnIzfnBBNEfTOuOq1PvquzNkGsG7biekV1NyeXLADtr5JbIXNq oA771+wRHcr5Fq/1o0jP+XK7kShKNozmDqvEITNvzTy+uOIPO6/4dlWxij24zlt6 IF12xh09m8t5ExF4HyBcX3Y1LN8TOjcf//+3qququjfnfIPJuNAVJ1TyBpZG0E5g 0xIaBvzdK8B3ILzwkR7pxtjPLIdEJTvtxa1sa553h7pRqyqo4xk+ueQ+R1SuDelj 9fMKjNuUDv8E4JpKPvhsQgIzAF40v4lz5JRC7/dwJKIRluyjGN9RoEC5m0Tbaxdi p6gHHkWkKRT3I1mrG0HS4n8PzQ37eFjF -----END CERTIFICATE-----Generated at Sat Apr 26 15:18:30 2025 by rpki-client