$ rpki-client -vvf rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.mft File: 6VdtMs2hm7hvPBYuyf020_0lucE.mft (raw, json) Hash identifier: NSAq9qRCAt9kxBsTZKtP+IEan1ABm3XOQ7n9qwizudw= Subject key identifier: 4B:8B:07:60:71:7A:94:3D:7A:D5:8F:9B:7D:A7:49:90:CA:69:A9:A8 Authority key identifier: E9:57:6D:32:CD:A1:9B:B8:6F:3C:16:2E:C9:FD:36:D3:FD:25:B9:C1 Certificate issuer: /CN=A9131359/serialNumber=E9576D32CDA19BB86F3C162EC9FD36D3FD25B9C1 Certificate serial: 01CA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6VdtMs2hm7hvPBYuyf020_0lucE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.mft Manifest number: 01C6 Signing time: Fri 25 Apr 2025 02:05:17 +0000 Manifest this update: Fri 25 Apr 2025 02:05:17 +0000 Manifest next update: Fri 02 May 2025 02:05:17 +0000 Files and hashes: 1: 6VdtMs2hm7hvPBYuyf020_0lucE.crl (hash: O6icfQ4DhQyI5LCi5KObDfcnNVWAZMQqnRNNWRzNFyY=) 2: 01C299E0662611ED94A8DA42C4F9AE02.roa (hash: Cbvoa7LrgmapG4r7FY0TXw9PoDEC05XNI+g2GTtN22E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.crl rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6VdtMs2hm7hvPBYuyf020_0lucE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:05:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 458 (0x1ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131359, serialNumber=E9576D32CDA19BB86F3C162EC9FD36D3FD25B9C1 Validity Not Before: Apr 25 02:05:17 2025 GMT Not After : May 2 02:05:17 2025 GMT Subject: CN=680aeddd-1505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:45:f2:5f:35:6d:88:c3:3c:fe:43:3a:f8:9d: c3:75:7a:7d:c5:67:c6:7d:5f:2a:46:bb:68:9d:65: b3:02:9a:03:93:66:bc:5a:80:28:e6:56:6e:f4:cb: 6f:bb:e3:84:09:35:c7:95:80:50:de:da:14:e9:4e: 38:2d:96:f9:72:90:36:ed:e1:19:9a:ce:8f:c9:1f: c6:57:b9:4f:7e:22:67:ef:4c:ec:db:9f:fd:64:b8: 8d:95:f1:81:e6:0a:8c:d4:d9:d1:de:28:6d:45:e9: 5d:66:07:44:e4:f8:96:e5:bd:84:29:a9:67:87:41: 3a:a8:7f:3d:37:af:46:d6:76:04:a2:9e:66:3e:70: ab:ad:56:49:64:6a:b1:2f:2b:8b:0b:05:c6:aa:01: 52:dc:b1:be:c5:c1:6b:10:e8:82:06:ac:a1:a4:d8: 6b:c8:c9:75:ff:0f:30:99:ec:b0:b1:61:a7:ff:c6: 31:78:ac:88:88:3e:f5:e5:6c:be:30:9d:c3:1e:12: 14:7a:d3:f5:de:df:b2:0e:c0:8b:3a:d3:8f:07:de: f0:27:a8:77:6c:f1:77:bf:b6:8d:7e:ab:48:65:64: 70:12:3f:f1:30:1e:fe:17:70:06:b4:8c:cb:cb:d2: 3c:ef:a8:f3:d1:90:e1:23:1a:4b:dc:4d:6f:d0:bb: c8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:8B:07:60:71:7A:94:3D:7A:D5:8F:9B:7D:A7:49:90:CA:69:A9:A8 X509v3 Authority Key Identifier: keyid:E9:57:6D:32:CD:A1:9B:B8:6F:3C:16:2E:C9:FD:36:D3:FD:25:B9:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6VdtMs2hm7hvPBYuyf020_0lucE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:ec:0d:49:b6:35:a4:97:60:8c:97:44:47:99:3f:42:23:c5: 37:31:a1:e6:cf:f8:e8:92:ed:c5:57:e8:9b:7d:af:50:92:ba: 3d:48:e3:5c:7f:b9:7f:90:c6:91:24:67:80:42:6c:36:c9:a5: 72:64:3c:1d:4d:4e:cb:91:b7:21:d5:03:ce:99:92:68:7d:ca: 5c:56:84:c5:69:e3:5b:84:6c:7e:1a:77:f0:c6:3b:6c:ea:a6: 69:7c:9d:47:22:ac:da:95:1a:0c:74:2e:18:a0:7d:2c:af:1a: 9f:da:89:0c:47:26:4f:52:14:cf:75:18:09:35:9c:63:77:d7: 4d:d8:ff:38:91:e9:30:d3:8b:6f:bf:d2:de:0b:35:67:2b:33: 2c:91:e1:fe:77:f4:dd:08:1f:91:27:76:fb:0a:17:69:08:83: 34:3d:54:5a:fc:e1:b7:de:bc:a4:72:25:e7:41:cc:0d:10:7a: 9d:81:82:2d:46:1e:73:70:ae:8e:56:8b:d0:bd:43:c6:f4:2d: 32:38:af:1b:5e:aa:18:bc:99:04:ba:ab:e2:5f:88:e8:6e:c5: 05:cf:bc:05:24:55:3b:03:2b:ae:5f:aa:3e:d6:84:63:35:4e: 2a:f2:8c:cc:df:5d:f7:e8:11:37:74:15:6c:b9:ec:7f:df:96: 83:ad:91:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzEzNTkxMTAvBgNVBAUTKEU5NTc2RDMyQ0RBMTlCQjg2RjNDMTYyRUM5RkQzNkQz RkQyNUI5QzEwHhcNMjUwNDI1MDIwNTE3WhcNMjUwNTAyMDIwNTE3WjAYMRYwFAYD VQQDEw02ODBhZWRkZC0xNTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuUXyXzVtiMM8/kM6+J3DdXp9xWfGfV8qRrtonWWzApoDk2a8WoAo5lZu9Mtv u+OECTXHlYBQ3toU6U44LZb5cpA27eEZms6PyR/GV7lPfiJn70zs25/9ZLiNlfGB 5gqM1NnR3ihtReldZgdE5PiW5b2EKalnh0E6qH89N69G1nYEop5mPnCrrVZJZGqx LyuLCwXGqgFS3LG+xcFrEOiCBqyhpNhryMl1/w8wmeywsWGn/8YxeKyIiD715Wy+ MJ3DHhIUetP13t+yDsCLOtOPB97wJ6h3bPF3v7aNfqtIZWRwEj/xMB7+F3AGtIzL y9I876jz0ZDhIxpL3E1v0LvItwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEuLB2Bx epQ9etWPm32nSZDKaamoMB8GA1UdIwQYMBaAFOlXbTLNoZu4bzwWLsn9NtP9JbnB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTM1OS9DQTlBMzRCNjY2 MjMxMUVEOTE4NTVENDJDNEY5QUUwMi82VmR0TXMyaG03aHZQQll1eWYwMjBfMGx1 Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZWZHRNczJobTdodlBCWXV5ZjAyMF8wbHVjRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTM1OS9DQTlBMzRCNjY2MjMxMUVEOTE4NTVENDJDNEY5QUUwMi82VmR0TXMyaG03 aHZQQll1eWYwMjBfMGx1Y0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBl7A1JtjWkl2CMl0RHmT9CI8U3MaHmz/joku3FV+ibfa9Qkro9SONc f7l/kMaRJGeAQmw2yaVyZDwdTU7Lkbch1QPOmZJofcpcVoTFaeNbhGx+Gnfwxjts 6qZpfJ1HIqzalRoMdC4YoH0srxqf2okMRyZPUhTPdRgJNZxjd9dN2P84kekw04tv v9LeCzVnKzMskeH+d/TdCB+RJ3b7ChdpCIM0PVRa/OG33rykciXnQcwNEHqdgYIt Rh5zcK6OVovQvUPG9C0yOK8bXqoYvJkEuqviX4jobsUFz7wFJFU7AyuuX6o+1oRj NU4q8ozM31336BE3dBVsuex/35aDrZEV -----END CERTIFICATE-----Generated at Sat Apr 26 17:08:34 2025 by rpki-client