$ rpki-client -vvf rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/x6CGcqgQDaMwwSIxURVYe-YRDfE.mft File: x6CGcqgQDaMwwSIxURVYe-YRDfE.mft (raw, json) Hash identifier: /nUuAnT27guzJuGsUenfugyUCu7gdiodotAPmsGX0Mc= Subject key identifier: 10:F4:A6:59:CE:02:EE:2A:69:04:FB:3C:A2:DC:27:75:16:03:38:74 Authority key identifier: C7:A0:86:72:A8:10:0D:A3:30:C1:22:31:51:15:58:7B:E6:11:0D:F1 Certificate issuer: /CN=A9149CA9/serialNumber=C7A08672A8100DA330C122315115587BE6110DF1 Certificate serial: 06D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x6CGcqgQDaMwwSIxURVYe-YRDfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/x6CGcqgQDaMwwSIxURVYe-YRDfE.mft Manifest number: 06D0 Signing time: Thu 24 Apr 2025 21:50:02 +0000 Manifest this update: Thu 24 Apr 2025 21:50:01 +0000 Manifest next update: Thu 01 May 2025 21:50:01 +0000 Files and hashes: 1: x6CGcqgQDaMwwSIxURVYe-YRDfE.crl (hash: A5f9XsB+TQ2OqQeGX8uvaNguDOAo25zBJQwdAHnnbZQ=) 2: 3F6A3A284F1C11EB9953172CC4F9AE02.roa (hash: fLIn/n29gS9WQea5NQ408mptvqiyp1OsclxpM5zgbkA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/x6CGcqgQDaMwwSIxURVYe-YRDfE.crl rsync://rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/x6CGcqgQDaMwwSIxURVYe-YRDfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x6CGcqgQDaMwwSIxURVYe-YRDfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:50:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1750 (0x6d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149CA9, serialNumber=C7A08672A8100DA330C122315115587BE6110DF1 Validity Not Before: Apr 24 21:50:01 2025 GMT Not After : May 1 21:50:01 2025 GMT Subject: CN=680ab20a-2b8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:44:b4:38:90:29:18:3e:dc:81:bb:2e:23:35: c7:1d:20:99:f2:fb:86:ca:89:05:46:fd:a8:b6:a7: 93:cb:4c:93:cb:3e:37:95:76:c3:3c:ca:01:4c:ea: 3b:7c:99:8a:99:07:3a:f3:2e:b2:31:d3:03:24:07: 3f:88:b6:32:3a:2b:9f:ef:96:c9:93:1b:89:3a:04: d1:79:c8:8e:33:16:4a:5b:87:5a:62:35:94:b4:c3: 7d:97:8b:f3:c6:1e:3f:2e:51:28:b6:1e:c8:78:93: 73:7a:84:3a:fb:2f:81:2f:b3:3b:29:32:3f:58:b0: d6:ed:cb:88:1a:69:d0:03:f7:5a:00:38:87:52:cb: dc:e0:39:96:6a:ff:72:98:11:b8:1a:b6:e5:ed:a4: cf:f3:5f:fe:11:7b:c4:a4:0c:1a:28:80:e5:95:a5: a0:49:ea:df:f1:98:d4:84:7d:56:23:be:8c:11:46: 8c:82:9e:ba:9c:0c:ce:55:a5:81:30:89:e2:89:c5: 6e:0f:f2:0f:ea:ca:09:e0:cb:fc:48:38:5a:eb:0c: 6e:a4:ee:c2:91:cd:94:61:c7:ed:4c:ab:b0:23:41: 0d:f4:c6:d6:f8:ae:14:81:70:7d:2a:14:7c:79:cd: 9b:ab:df:5d:92:56:a0:dd:08:ba:fc:27:01:5e:79: 77:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:F4:A6:59:CE:02:EE:2A:69:04:FB:3C:A2:DC:27:75:16:03:38:74 X509v3 Authority Key Identifier: keyid:C7:A0:86:72:A8:10:0D:A3:30:C1:22:31:51:15:58:7B:E6:11:0D:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/x6CGcqgQDaMwwSIxURVYe-YRDfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x6CGcqgQDaMwwSIxURVYe-YRDfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/x6CGcqgQDaMwwSIxURVYe-YRDfE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:fe:3e:e3:af:83:f9:99:1b:36:25:eb:ec:d0:82:d0:e1:4b: 05:d7:4c:4f:e1:1a:99:67:01:b1:7d:6c:4f:fe:fa:b8:91:06: 34:13:43:38:00:3c:0a:b8:76:77:bd:29:a1:81:53:f1:27:eb: 3a:65:48:4d:46:f8:ce:93:29:dd:b5:86:85:67:31:09:a7:0d: dc:66:7e:94:1b:ac:74:23:c0:5b:4a:60:39:31:14:73:7b:03: 1d:cb:a9:d9:1c:1c:65:9a:2a:88:11:4d:fe:93:ae:2f:cc:31: 3d:10:2f:85:db:b8:df:7f:6e:b1:30:f3:92:6d:5f:fd:57:cd: 50:5d:42:f8:7d:c5:85:4a:e8:a4:77:ac:19:5d:3e:65:67:03: ba:e3:b4:6d:03:1c:45:14:4c:6b:a0:93:e9:32:22:56:5e:d7: e3:72:a4:b1:36:bc:b6:21:88:af:bb:34:87:85:09:2b:ab:71: f5:71:be:b7:bb:e9:ea:82:83:39:ba:51:61:1c:71:a1:20:e3: 3a:48:c5:12:2b:e2:f4:85:f4:04:e0:68:15:74:6a:d0:2b:05: ac:ee:d8:e0:ec:af:e0:c4:e8:53:61:5c:a0:67:80:59:6d:50: b9:6b:ad:b1:9a:9e:04:59:05:d7:ce:43:5a:66:3f:97:07:a6: 31:de:99:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlDQTkxMTAvBgNVBAUTKEM3QTA4NjcyQTgxMDBEQTMzMEMxMjIzMTUxMTU1ODdC RTYxMTBERjEwHhcNMjUwNDI0MjE1MDAxWhcNMjUwNTAxMjE1MDAxWjAYMRYwFAYD VQQDEw02ODBhYjIwYS0yYjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuUS0OJApGD7cgbsuIzXHHSCZ8vuGyokFRv2otqeTy0yTyz43lXbDPMoBTOo7 fJmKmQc68y6yMdMDJAc/iLYyOiuf75bJkxuJOgTReciOMxZKW4daYjWUtMN9l4vz xh4/LlEoth7IeJNzeoQ6+y+BL7M7KTI/WLDW7cuIGmnQA/daADiHUsvc4DmWav9y mBG4Grbl7aTP81/+EXvEpAwaKIDllaWgSerf8ZjUhH1WI76MEUaMgp66nAzOVaWB MIniicVuD/IP6soJ4Mv8SDha6wxupO7Ckc2UYcftTKuwI0EN9MbW+K4UgXB9KhR8 ec2bq99dklag3Qi6/CcBXnl3QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBD0plnO Au4qaQT7PKLcJ3UWAzh0MB8GA1UdIwQYMBaAFMeghnKoEA2jMMEiMVEVWHvmEQ3x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUNBOS9FRUQ3NDhENjRG MTUxMUVCOEM3RUFCMUFDNEY5QUUwMi94NkNHY3FnUURhTXd3U0l4VVJWWWUtWVJE ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g2Q0djcWdRRGFNd3dTSXhVUlZZZS1ZUkRmRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUNBOS9FRUQ3NDhENjRGMTUxMUVCOEM3RUFCMUFDNEY5QUUwMi94NkNHY3FnUURh TXd3U0l4VVJWWWUtWVJEZkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6/j7jr4P5mRs2Jevs0ILQ4UsF10xP4RqZZwGxfWxP/vq4kQY0E0M4 ADwKuHZ3vSmhgVPxJ+s6ZUhNRvjOkyndtYaFZzEJpw3cZn6UG6x0I8BbSmA5MRRz ewMdy6nZHBxlmiqIEU3+k64vzDE9EC+F27jff26xMPOSbV/9V81QXUL4fcWFSuik d6wZXT5lZwO647RtAxxFFExroJPpMiJWXtfjcqSxNry2IYivuzSHhQkrq3H1cb63 u+nqgoM5ulFhHHGhIOM6SMUSK+L0hfQE4GgVdGrQKwWs7tjg7K/gxOhTYVygZ4BZ bVC5a62xmp4EWQXXzkNaZj+XB6Yx3pmd -----END CERTIFICATE-----Generated at Sat Apr 26 17:13:02 2025 by rpki-client