$ rpki-client -vvf rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft File: idd5xQ8U7RH8WtuEA3iSsmC5leY.mft (raw, json) Hash identifier: XhIYxQu+Jo75cmqJJMpbT+rvlXM8VdBR7g6rsRHuNMo= Subject key identifier: 56:3F:25:A4:79:FB:8D:7D:27:25:80:4D:F0:07:06:10:A9:70:75:82 Authority key identifier: 89:D7:79:C5:0F:14:ED:11:FC:5A:DB:84:03:78:92:B2:60:B9:95:E6 Certificate issuer: /CN=A913120A/serialNumber=89D779C50F14ED11FC5ADB84037892B260B995E6 Certificate serial: 6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft Manifest number: 6A Signing time: Fri 25 Apr 2025 05:57:47 +0000 Manifest this update: Fri 25 Apr 2025 05:57:46 +0000 Manifest next update: Fri 02 May 2025 05:57:46 +0000 Files and hashes: 1: idd5xQ8U7RH8WtuEA3iSsmC5leY.crl (hash: LId6/po3gSUMvfDQV/nJTQgDidBh0ZEAxVWE4tJ3SVU=) 2: D4F24058870411EF8D8D2635C4F9AE02.roa (hash: 8wQaCvv1woKjsPYKk6t73PO7JjxXLb0AQ69vXhKv7NA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.crl rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:57:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 107 (0x6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913120A, serialNumber=89D779C50F14ED11FC5ADB84037892B260B995E6 Validity Not Before: Apr 25 05:57:46 2025 GMT Not After : May 2 05:57:46 2025 GMT Subject: CN=680b245b-eacc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ad:30:b5:6e:1d:99:aa:e4:64:7c:3c:5d:79: 94:ba:89:53:da:fe:bd:6b:94:68:0a:15:c5:f9:34: 33:dc:80:de:e2:78:a9:fa:6c:bf:10:c8:58:0f:f1: 6c:6a:ca:2e:8d:8e:5e:60:7b:82:ed:4c:a8:2c:9c: 04:04:b7:3d:ee:af:ba:17:f4:91:36:40:c7:ec:6e: 0c:5c:fc:d0:55:db:f6:aa:6f:c1:78:25:94:af:e9: 66:00:56:5f:99:78:94:94:a8:72:f3:55:df:1e:bd: b1:03:4a:45:f7:ef:3d:b8:b3:e1:5f:49:68:d0:c3: 3f:2e:02:b9:79:8f:65:11:b7:cb:0b:09:8c:1e:04: a8:11:8b:b2:73:a0:e8:da:cb:ac:27:d4:c8:33:09: 99:30:3e:b8:a4:04:e4:6f:8a:6a:2d:12:de:dc:5d: e8:6d:d1:46:6f:b6:96:d9:c3:a3:56:c0:43:2f:43: e1:db:04:85:74:77:bc:88:b6:b6:a7:7e:1b:24:00: 8d:36:d3:0a:20:5e:ea:4e:45:3b:69:7c:d6:1d:a9: b6:8e:e9:f6:29:f0:5f:1e:c6:19:b1:13:cd:1a:b8: 9d:fc:ba:32:be:5e:98:16:93:59:08:8b:9d:73:cf: 79:e5:e8:59:79:55:a2:f5:b4:6b:d7:66:75:64:f6: 59:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:3F:25:A4:79:FB:8D:7D:27:25:80:4D:F0:07:06:10:A9:70:75:82 X509v3 Authority Key Identifier: keyid:89:D7:79:C5:0F:14:ED:11:FC:5A:DB:84:03:78:92:B2:60:B9:95:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:99:46:6a:42:f5:65:0b:4e:1e:70:21:d5:1f:99:df:c4:6a: a0:48:52:f5:e1:f9:5a:64:4c:e1:aa:c0:e1:16:1e:ce:0e:85: 79:79:7b:cc:1b:cf:e3:ea:31:5c:7b:a2:f9:a5:9d:1c:ef:ea: d8:8a:3e:31:c9:16:5c:32:75:61:8c:09:a0:fd:54:1d:a5:6f: 7c:f8:02:ee:e7:ca:23:dc:63:ce:fd:50:a1:67:ff:c4:2b:74: 07:85:ba:f0:6a:f5:79:6d:1a:ea:93:8b:b6:e1:92:84:18:85: 1b:34:9e:7b:e5:12:91:ef:a5:0d:e9:46:5b:9b:e6:40:be:5d: d1:60:fa:9e:e2:05:5c:69:63:34:ea:63:f3:b0:32:c1:5c:d2: d4:85:13:82:4f:93:2b:a8:69:5b:2c:65:22:ba:1c:a1:b8:8a: 0b:da:ba:27:ec:3f:48:db:1d:d0:bc:8d:45:21:6c:d3:cb:8b: 03:f2:e7:0d:7e:ee:a9:34:aa:a3:74:d3:7d:5f:06:6c:7c:6a: 01:1f:84:62:02:a2:63:f7:d0:52:34:45:c4:72:6a:b5:ff:6e: 6a:b1:3b:5c:08:44:4d:7f:70:43:18:42:42:43:d9:50:e4:7b: 36:b0:38:12:f3:97:ca:28:b6:2e:2a:c2:6c:86:26:44:8f:11: bb:6b:bd:6d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MTIwQTExMC8GA1UEBRMoODlENzc5QzUwRjE0RUQxMUZDNUFEQjg0MDM3ODkyQjI2 MEI5OTVFNjAeFw0yNTA0MjUwNTU3NDZaFw0yNTA1MDIwNTU3NDZaMBgxFjAUBgNV BAMTDTY4MGIyNDViLWVhY2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKrTC1bh2ZquRkfDxdeZS6iVPa/r1rlGgKFcX5NDPcgN7ieKn6bL8QyFgP8Wxq yi6Njl5ge4LtTKgsnAQEtz3ur7oX9JE2QMfsbgxc/NBV2/aqb8F4JZSv6WYAVl+Z eJSUqHLzVd8evbEDSkX37z24s+FfSWjQwz8uArl5j2URt8sLCYweBKgRi7JzoOja y6wn1MgzCZkwPrikBORvimotEt7cXeht0UZvtpbZw6NWwEMvQ+HbBIV0d7yItran fhskAI020wogXupORTtpfNYdqbaO6fYp8F8exhmxE80auJ38ujK+XpgWk1kIi51z z3nl6Fl5VaL1tGvXZnVk9lmLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVj8lpHn7 jX0nJYBN8AcGEKlwdYIwHwYDVR0jBBgwFoAUidd5xQ8U7RH8WtuEA3iSsmC5leYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMxMjBBLzgyOUE3NEE4ODZG MzExRUZCRTAyNTM2QkM0RjlBRTAyL2lkZDV4UThVN1JIOFd0dUVBM2lTc21DNWxl WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaWRkNXhROFU3Ukg4V3R1RUEzaVNzbUM1bGVZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMx MjBBLzgyOUE3NEE4ODZGMzExRUZCRTAyNTM2QkM0RjlBRTAyL2lkZDV4UThVN1JI OFd0dUVBM2lTc21DNWxlWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIeZRmpC9WULTh5wIdUfmd/EaqBIUvXh+VpkTOGqwOEWHs4OhXl5e8wb z+PqMVx7ovmlnRzv6tiKPjHJFlwydWGMCaD9VB2lb3z4Au7nyiPcY879UKFn/8Qr dAeFuvBq9XltGuqTi7bhkoQYhRs0nnvlEpHvpQ3pRlub5kC+XdFg+p7iBVxpYzTq Y/OwMsFc0tSFE4JPkyuoaVssZSK6HKG4igvauifsP0jbHdC8jUUhbNPLiwPy5w1+ 7qk0qqN0031fBmx8agEfhGIComP30FI0RcRyarX/bmqxO1wIRE1/cEMYQkJD2VDk ezawOBLzl8ooti4qwmyGJkSPEbtrvW0= -----END CERTIFICATE-----Generated at Sat Apr 26 04:36:40 2025 by rpki-client