$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft File: 6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft (raw, json) Hash identifier: BqY1dpgbVXm0Uh6RjMxUuZCo25iAvtj4zzhw3XufUV0= Subject key identifier: 58:9F:08:B1:B7:92:E6:04:AE:33:AA:4C:C1:A5:64:08:C0:99:F5:5C Authority key identifier: E8:7D:C6:C5:C7:10:43:90:57:D8:AB:ED:90:C2:6D:0C:9C:87:2B:34 Certificate issuer: /CN=A9137ABC/serialNumber=E87DC6C5C710439057D8ABED90C26D0C9C872B34 Certificate serial: 29F3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft Manifest number: 29E4 Signing time: Thu 24 Apr 2025 14:20:10 +0000 Manifest this update: Thu 24 Apr 2025 14:20:10 +0000 Manifest next update: Thu 01 May 2025 14:20:10 +0000 Files and hashes: 1: 6H3GxccQQ5BX2KvtkMJtDJyHKzQ.crl (hash: W+FpG1TaLqHkOWzM0zPMdIYQQ3wBfbF9R8ncEfJl9rw=) 2: 79AF67622C3C11EE81B24651C4F9AE02.roa (hash: RyMrOX2UuuoLSsEP72kB/McA8P2k1GYXnFOd34HV84Y=) 3: 7A90F2402C3C11EE81B24651C4F9AE02.roa (hash: oZUQe7vF9965udCpvU+/bwZotZkJzZlfqtmcro6cyHo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.crl rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:20:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10739 (0x29f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC, serialNumber=E87DC6C5C710439057D8ABED90C26D0C9C872B34 Validity Not Before: Apr 24 14:20:10 2025 GMT Not After : May 1 14:20:10 2025 GMT Subject: CN=680a489a-6050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:25:06:8d:0c:6a:73:15:a8:1d:ae:bd:5d:b0: 95:a4:db:92:86:37:94:52:0e:20:3d:db:df:7c:22: cc:f4:2e:80:0f:01:9d:29:f0:34:67:e8:45:fd:c9: 38:89:10:3b:d0:b9:60:c6:a4:f8:ce:5b:fd:49:da: d2:66:e2:29:3b:f1:eb:e5:ca:41:83:09:0e:c3:be: e3:4c:cd:01:87:ec:15:c8:73:a2:f6:85:9b:86:60: b1:bd:81:db:e0:50:73:50:39:8a:95:54:12:27:0b: f1:55:0e:50:7b:98:90:f2:30:a0:6e:9b:b5:bd:74: 52:22:9e:1a:4b:51:f9:15:a4:2a:43:aa:56:cc:fb: 05:56:2d:60:88:24:b8:b0:c4:83:36:8e:cb:11:e8: 00:2a:27:41:d2:d7:34:92:f2:f9:61:15:16:44:d2: 13:a4:c5:6f:58:59:df:4f:21:4a:ff:b5:6f:c1:e9: 96:64:61:e3:c3:13:97:3e:72:3f:7e:b4:f7:79:05: 89:75:de:16:bd:d4:25:4c:13:72:2b:3a:35:48:db: d7:a2:d6:0b:ea:52:f7:3e:4c:76:aa:ea:40:c5:89: 0f:4f:4c:df:b5:c5:4a:c5:cd:8c:e9:02:70:29:43: d7:1b:2b:ad:ea:52:62:77:b4:95:db:a6:54:c0:12: b2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:9F:08:B1:B7:92:E6:04:AE:33:AA:4C:C1:A5:64:08:C0:99:F5:5C X509v3 Authority Key Identifier: keyid:E8:7D:C6:C5:C7:10:43:90:57:D8:AB:ED:90:C2:6D:0C:9C:87:2B:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:2c:f4:52:90:20:18:e2:3f:e1:d8:fe:ae:b0:bc:10:5a:60: 15:6b:31:db:9d:c7:a7:c1:db:e5:0f:00:ad:1b:42:3d:cb:e7: 6f:87:c6:c0:65:5f:7e:fd:16:38:c3:4f:b3:e4:01:a1:a5:b3: 06:5c:39:6b:17:80:cd:fb:fc:ae:4d:a3:e9:b6:91:da:33:1c: 9b:0f:58:de:cf:ae:e4:fb:8a:d5:8f:8d:0e:0d:8a:f2:14:78: a0:5c:6c:e1:a7:64:fb:62:f5:81:61:3a:a2:15:3d:2e:47:76: fb:a6:a1:09:c7:e3:e0:6f:06:28:fa:79:f0:91:80:2f:ce:e0: ad:c8:d8:95:f3:5b:c9:59:f1:85:82:ed:c3:82:19:5f:eb:1d: 42:24:62:c1:38:ed:03:5e:da:53:0d:54:c6:78:cb:35:0d:f5: 3a:bd:b5:d9:3b:22:f7:37:8c:72:b4:cd:f4:47:ad:51:6e:7d: 86:6d:f1:a1:a9:d7:a7:0b:4e:3c:04:f3:9b:9f:53:03:c9:e4: e9:1a:1e:9f:32:e8:f8:a2:2b:c9:df:15:46:79:51:d1:88:fe: 30:ea:01:bf:0d:76:84:84:66:eb:c9:f3:85:3e:96:72:e7:ba: 82:c2:c4:13:7a:3e:62:d1:30:4e:32:d1:61:c2:22:35:3c:16: b3:34:f9:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKEU4N0RDNkM1QzcxMDQzOTA1N0Q4QUJFRDkwQzI2RDBD OUM4NzJCMzQwHhcNMjUwNDI0MTQyMDEwWhcNMjUwNTAxMTQyMDEwWjAYMRYwFAYD VQQDEw02ODBhNDg5YS02MDUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3CUGjQxqcxWoHa69XbCVpNuShjeUUg4gPdvffCLM9C6ADwGdKfA0Z+hF/ck4 iRA70LlgxqT4zlv9SdrSZuIpO/Hr5cpBgwkOw77jTM0Bh+wVyHOi9oWbhmCxvYHb 4FBzUDmKlVQSJwvxVQ5Qe5iQ8jCgbpu1vXRSIp4aS1H5FaQqQ6pWzPsFVi1giCS4 sMSDNo7LEegAKidB0tc0kvL5YRUWRNITpMVvWFnfTyFK/7VvwemWZGHjwxOXPnI/ frT3eQWJdd4WvdQlTBNyKzo1SNvXotYL6lL3Pkx2qupAxYkPT0zftcVKxc2M6QJw KUPXGyut6lJid7SV26ZUwBKy/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFifCLG3 kuYErjOqTMGlZAjAmfVcMB8GA1UdIwQYMBaAFOh9xsXHEEOQV9ir7ZDCbQychys0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy82QjhCOUQwRTM2 RkYxMUU0OTkwNEFDNjZDNEY5QUUwMi82SDNHeGNjUVE1QlgyS3Z0a01KdERKeUhL elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZIM0d4Y2NRUTVCWDJLdnRrTUp0REp5SEt6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz N0FCQy82QjhCOUQwRTM2RkYxMUU0OTkwNEFDNjZDNEY5QUUwMi82SDNHeGNjUVE1 QlgyS3Z0a01KdERKeUhLelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiLPRSkCAY4j/h2P6usLwQWmAVazHbncenwdvlDwCtG0I9y+dvh8bA ZV9+/RY4w0+z5AGhpbMGXDlrF4DN+/yuTaPptpHaMxybD1jez67k+4rVj40ODYry FHigXGzhp2T7YvWBYTqiFT0uR3b7pqEJx+PgbwYo+nnwkYAvzuCtyNiV81vJWfGF gu3Dghlf6x1CJGLBOO0DXtpTDVTGeMs1DfU6vbXZOyL3N4xytM30R61Rbn2GbfGh qdenC048BPObn1MDyeTpGh6fMuj4oivJ3xVGeVHRiP4w6gG/DXaEhGbryfOFPpZy 57qCwsQTej5i0TBOMtFhwiI1PBazNPmP -----END CERTIFICATE-----Generated at Sat Apr 26 13:05:40 2025 by rpki-client