$ rpki-client -vvf rpki.apnic.net/member_repository/A9142E1E/1C7CDF68824211EFAD3D8181C4F9AE02/STXJCZ1YAoESreyiiRQ1_MWPuiw.mft File: STXJCZ1YAoESreyiiRQ1_MWPuiw.mft (raw, json) Hash identifier: c5/sv9zlRiEcGinOfRErKOyv4JOyBsL6P4x1XxzXY9M= Subject key identifier: BA:32:92:50:A2:1B:88:B3:01:E6:62:D5:A5:B1:33:76:21:4E:6B:74 Authority key identifier: 49:35:C9:09:9D:58:02:81:12:AD:EC:A2:89:14:35:FC:C5:8F:BA:2C Certificate issuer: /CN=A9142E1E/serialNumber=4935C9099D58028112ADECA2891435FCC58FBA2C Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/STXJCZ1YAoESreyiiRQ1_MWPuiw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142E1E/1C7CDF68824211EFAD3D8181C4F9AE02/STXJCZ1YAoESreyiiRQ1_MWPuiw.mft Manifest number: 6C Signing time: Fri 25 Apr 2025 05:54:20 +0000 Manifest this update: Fri 25 Apr 2025 05:54:20 +0000 Manifest next update: Fri 02 May 2025 05:54:20 +0000 Files and hashes: 1: STXJCZ1YAoESreyiiRQ1_MWPuiw.crl (hash: OEUe66h6TzMpqDW4T9YA3euwrG8wwunCJUzqcQht6gE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142E1E/1C7CDF68824211EFAD3D8181C4F9AE02/STXJCZ1YAoESreyiiRQ1_MWPuiw.crl rsync://rpki.apnic.net/member_repository/A9142E1E/1C7CDF68824211EFAD3D8181C4F9AE02/STXJCZ1YAoESreyiiRQ1_MWPuiw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/STXJCZ1YAoESreyiiRQ1_MWPuiw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:54:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142E1E, serialNumber=4935C9099D58028112ADECA2891435FCC58FBA2C Validity Not Before: Apr 25 05:54:20 2025 GMT Not After : May 2 05:54:20 2025 GMT Subject: CN=680b238c-97e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:da:53:86:16:74:93:a7:c1:6d:2e:3b:c5:34: f6:5e:18:b0:44:91:0e:4d:e0:64:23:cb:7e:8d:c9: cd:6b:b2:c7:37:d8:b9:43:04:be:0e:09:c2:aa:21: 3b:0d:1a:05:6f:99:36:0c:4d:ef:6c:c5:ca:5a:8f: 6d:44:07:99:2a:68:63:70:dc:fe:36:c4:06:97:48: 95:4d:20:f1:d6:b4:7f:41:88:b1:06:12:25:59:5c: fb:76:1c:55:20:ee:7b:e7:08:d8:3a:20:af:36:72: 29:61:74:ff:02:37:83:95:99:70:82:28:79:cf:00: d7:99:95:7c:be:23:be:34:c6:21:9c:8e:8e:3c:6a: e8:ab:bd:ba:ac:33:34:78:d6:5c:18:eb:af:49:15: 3e:4e:b6:39:71:5a:02:ea:67:1c:26:66:c9:2d:a4: 2a:69:cb:4d:73:47:2b:69:57:21:b0:25:ee:c3:17: b9:73:30:e4:7f:41:e3:22:f9:6d:4e:a7:db:e6:47: 89:f5:3b:aa:ac:f1:20:d9:77:ad:a5:7b:a2:10:a4: 75:c9:b1:98:2b:93:bc:92:74:1f:d9:a3:f0:ba:49: 22:84:10:44:97:43:43:eb:12:9f:ff:44:6d:2f:2e: 4d:bf:59:e1:96:0a:17:9e:a5:5a:e0:ae:6f:29:2f: 50:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:32:92:50:A2:1B:88:B3:01:E6:62:D5:A5:B1:33:76:21:4E:6B:74 X509v3 Authority Key Identifier: keyid:49:35:C9:09:9D:58:02:81:12:AD:EC:A2:89:14:35:FC:C5:8F:BA:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142E1E/1C7CDF68824211EFAD3D8181C4F9AE02/STXJCZ1YAoESreyiiRQ1_MWPuiw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/STXJCZ1YAoESreyiiRQ1_MWPuiw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142E1E/1C7CDF68824211EFAD3D8181C4F9AE02/STXJCZ1YAoESreyiiRQ1_MWPuiw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:5a:f0:7d:76:45:1e:a0:31:76:c3:91:04:6c:74:fe:f6:b7: fb:58:eb:8b:b8:3d:f4:99:92:18:58:2a:69:a4:87:1b:8d:d0: 00:ad:6f:f8:ce:b6:fe:f6:c9:bf:06:32:38:be:a3:23:61:27: eb:49:d5:4b:38:0e:a2:b3:de:d4:6d:62:8d:b7:02:23:ae:d5: 60:a9:40:79:eb:2a:66:c7:11:ff:b1:2c:42:7f:7e:05:ad:0b: 83:55:9e:08:73:a6:e4:37:0e:90:28:a7:8c:8a:93:c4:07:83: 04:68:df:e2:fd:ff:59:8b:a4:2f:58:d5:b8:8a:5c:97:9e:2f: 51:8a:b8:89:5f:f4:2b:41:9c:26:eb:0f:e1:ee:65:e2:b5:bf: 89:a6:ab:21:8d:91:b6:1c:f9:25:0a:5e:9b:8f:7f:22:c3:cf: a7:f2:2f:08:bf:2c:b6:5d:41:e0:56:70:c4:50:63:24:28:f9: 54:fa:e8:e3:aa:16:4a:05:36:8c:05:f5:02:74:1c:76:06:d9: 1f:c8:bc:db:1b:9f:6c:41:c7:ca:ff:c0:f0:80:35:e5:9e:d8: f7:69:28:99:98:b7:67:81:ac:09:cc:75:99:8f:f0:48:7d:70: 5e:e4:04:a2:5e:f9:e5:1b:a1:19:ed:e6:81:94:5a:f4:25:9f: db:d1:1f:1b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MkUxRTExMC8GA1UEBRMoNDkzNUM5MDk5RDU4MDI4MTEyQURFQ0EyODkxNDM1RkND NThGQkEyQzAeFw0yNTA0MjUwNTU0MjBaFw0yNTA1MDIwNTU0MjBaMBgxFjAUBgNV BAMTDTY4MGIyMzhjLTk3ZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDs2lOGFnSTp8FtLjvFNPZeGLBEkQ5N4GQjy36Nyc1rssc32LlDBL4OCcKqITsN GgVvmTYMTe9sxcpaj21EB5kqaGNw3P42xAaXSJVNIPHWtH9BiLEGEiVZXPt2HFUg 7nvnCNg6IK82cilhdP8CN4OVmXCCKHnPANeZlXy+I740xiGcjo48auirvbqsMzR4 1lwY669JFT5OtjlxWgLqZxwmZsktpCppy01zRytpVyGwJe7DF7lzMOR/QeMi+W1O p9vmR4n1O6qs8SDZd62le6IQpHXJsZgrk7ySdB/Zo/C6SSKEEESXQ0PrEp//RG0v Lk2/WeGWCheepVrgrm8pL1A5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUujKSUKIb iLMB5mLVpbEzdiFOa3QwHwYDVR0jBBgwFoAUSTXJCZ1YAoESreyiiRQ1/MWPuiww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyRTFFLzFDN0NERjY4ODI0 MjExRUZBRDNEODE4MUM0RjlBRTAyL1NUWEpDWjFZQW9FU3JleWlpUlExX01XUHVp dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvU1RYSkNaMVlBb0VTcmV5aWlSUTFfTVdQdWl3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy RTFFLzFDN0NERjY4ODI0MjExRUZBRDNEODE4MUM0RjlBRTAyL1NUWEpDWjFZQW9F U3JleWlpUlExX01XUHVpdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG1a8H12RR6gMXbDkQRsdP72t/tY64u4PfSZkhhYKmmkhxuN0ACtb/jO tv72yb8GMji+oyNhJ+tJ1Us4DqKz3tRtYo23AiOu1WCpQHnrKmbHEf+xLEJ/fgWt C4NVnghzpuQ3DpAop4yKk8QHgwRo3+L9/1mLpC9Y1biKXJeeL1GKuIlf9CtBnCbr D+HuZeK1v4mmqyGNkbYc+SUKXpuPfyLDz6fyLwi/LLZdQeBWcMRQYyQo+VT66OOq FkoFNowF9QJ0HHYG2R/IvNsbn2xBx8r/wPCANeWe2PdpKJmYt2eBrAnMdZmP8Eh9 cF7kBKJe+eUboRnt5oGUWvQln9vRHxs= -----END CERTIFICATE-----Generated at Sat Apr 26 04:24:33 2025 by rpki-client