$ rpki-client -vvf rpki.apnic.net/member_repository/A914BAA2/4DECD080FE6611EF892E5214C4F9AE02/6qSDu71coOErPsD25wxbqq40VSs.mft File: 6qSDu71coOErPsD25wxbqq40VSs.mft (raw, json) Hash identifier: rDa2ImgLN5JwYCoKQn6uVaLKmSt0dKsauX5Y7MhjGDE= Subject key identifier: 69:6C:F4:F1:FB:FA:35:49:EB:D1:6A:11:FE:25:1F:A9:3B:F4:C3:1D Authority key identifier: EA:A4:83:BB:BD:5C:A0:E1:2B:3E:C0:F6:E7:0C:5B:AA:AE:34:55:2B Certificate issuer: /CN=A914BAA2/serialNumber=EAA483BBBD5CA0E12B3EC0F6E70C5BAAAE34552B Certificate serial: 2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qSDu71coOErPsD25wxbqq40VSs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BAA2/4DECD080FE6611EF892E5214C4F9AE02/6qSDu71coOErPsD25wxbqq40VSs.mft Manifest number: 27 Signing time: Fri 25 Apr 2025 06:57:01 +0000 Manifest this update: Fri 25 Apr 2025 06:57:01 +0000 Manifest next update: Fri 02 May 2025 06:57:01 +0000 Files and hashes: 1: 6qSDu71coOErPsD25wxbqq40VSs.crl (hash: 31vxOYaBWSfdZpPkwBTbVpc/CidSoplukxY9GwQ2P7k=) 2: 535D1F52069511F090414823C4F9AE02.roa (hash: Z1otMQWN0CbTaPhw5EvbwRe+YB3GZZkedSXo8XkS78Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BAA2/4DECD080FE6611EF892E5214C4F9AE02/6qSDu71coOErPsD25wxbqq40VSs.crl rsync://rpki.apnic.net/member_repository/A914BAA2/4DECD080FE6611EF892E5214C4F9AE02/6qSDu71coOErPsD25wxbqq40VSs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qSDu71coOErPsD25wxbqq40VSs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:57:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BAA2, serialNumber=EAA483BBBD5CA0E12B3EC0F6E70C5BAAAE34552B Validity Not Before: Apr 25 06:57:01 2025 GMT Not After : May 2 06:57:01 2025 GMT Subject: CN=680b323d-d1a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:1a:44:ab:36:8c:d5:84:78:7c:34:20:25:fa: 7f:7c:8f:86:f7:75:14:e9:61:f4:ac:60:35:90:3b: fd:c7:5d:57:e8:1d:ea:36:b2:77:64:d2:ed:e6:42: fd:27:9e:09:fe:40:10:b3:08:ce:51:92:3c:00:6d: 49:41:16:0a:e7:2d:88:b6:53:eb:8b:2c:93:09:82: fc:02:06:33:24:64:b9:73:03:e0:ee:51:22:bf:9a: 57:08:2b:bc:bd:99:4f:a3:1d:bb:a1:41:cd:87:66: 50:54:23:da:6b:9a:c1:ba:3b:7d:9b:37:ee:ba:3a: 5d:f2:e6:05:95:73:15:c3:7f:06:92:60:eb:a8:e5: a8:3d:60:3b:2c:c1:d6:47:5e:46:51:97:48:fc:e9: 92:19:9f:2c:82:d4:ef:ee:b7:2b:17:5a:78:ca:62: b6:76:67:31:03:59:4b:2a:ac:57:ba:6a:d6:59:52: b1:98:7a:f1:31:3c:ec:aa:4e:c2:f0:72:7b:6c:db: b5:17:f7:97:5f:4c:fe:61:fd:18:e7:b5:7a:56:54: e2:5e:e0:2c:4b:fe:e8:d1:d5:a7:62:7a:7d:c8:47: a5:d0:0d:c4:4f:bc:19:d6:cf:86:6d:83:ad:05:84: 46:c3:a7:16:d1:b7:13:27:6b:bf:01:d0:25:29:22: d0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:6C:F4:F1:FB:FA:35:49:EB:D1:6A:11:FE:25:1F:A9:3B:F4:C3:1D X509v3 Authority Key Identifier: keyid:EA:A4:83:BB:BD:5C:A0:E1:2B:3E:C0:F6:E7:0C:5B:AA:AE:34:55:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BAA2/4DECD080FE6611EF892E5214C4F9AE02/6qSDu71coOErPsD25wxbqq40VSs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qSDu71coOErPsD25wxbqq40VSs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BAA2/4DECD080FE6611EF892E5214C4F9AE02/6qSDu71coOErPsD25wxbqq40VSs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:2f:a7:38:38:f8:3e:72:f5:85:41:bb:f2:39:0e:c6:3e:a1: 10:75:24:a8:18:8a:70:ad:7f:7c:38:32:1f:7b:5e:05:93:63: 73:7f:5c:31:e7:57:50:c6:39:78:3a:8d:fe:13:03:00:21:0c: 1f:a2:3d:4e:82:ca:fb:69:ab:7c:e5:fc:cf:47:c2:8c:31:6f: 72:69:37:1d:22:00:3e:9a:3c:05:94:08:76:ba:c7:17:f2:e9: e3:88:d4:04:7c:cf:e9:fe:46:28:ab:03:19:50:fe:64:b5:f3: 1d:67:ed:5b:d5:5e:bc:48:13:e0:4f:c8:6a:a0:ed:43:65:ac: b9:ac:64:51:e9:ed:28:f0:c3:c3:ab:7b:71:33:da:0d:e1:02: f5:23:bd:eb:93:f9:6a:a1:aa:d7:de:5c:a4:ad:b9:42:ba:fc: 85:84:cb:65:e8:4d:2d:68:a2:cd:0e:61:78:cb:98:7a:3a:12: 69:cb:19:4c:f1:df:35:89:fd:ca:ff:97:ce:c6:17:8c:57:c6: 18:ed:c5:07:e5:07:a7:8d:3e:62:da:7e:98:ae:2c:fb:74:26: 23:49:b0:4f:e0:89:70:a0:c4:69:15:fa:c2:f8:36:fd:d7:4b: ed:42:72:86:ae:56:92:f7:45:a5:06:73:24:f6:fa:3b:08:33: 84:a7:5f:3a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 QkFBMjExMC8GA1UEBRMoRUFBNDgzQkJCRDVDQTBFMTJCM0VDMEY2RTcwQzVCQUFB RTM0NTUyQjAeFw0yNTA0MjUwNjU3MDFaFw0yNTA1MDIwNjU3MDFaMBgxFjAUBgNV BAMTDTY4MGIzMjNkLWQxYTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDrGkSrNozVhHh8NCAl+n98j4b3dRTpYfSsYDWQO/3HXVfoHeo2sndk0u3mQv0n ngn+QBCzCM5RkjwAbUlBFgrnLYi2U+uLLJMJgvwCBjMkZLlzA+DuUSK/mlcIK7y9 mU+jHbuhQc2HZlBUI9prmsG6O32bN+66Ol3y5gWVcxXDfwaSYOuo5ag9YDsswdZH XkZRl0j86ZIZnyyC1O/utysXWnjKYrZ2ZzEDWUsqrFe6atZZUrGYevExPOyqTsLw cnts27UX95dfTP5h/RjntXpWVOJe4CxL/ujR1adien3IR6XQDcRPvBnWz4Ztg60F hEbDpxbRtxMna78B0CUpItAtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaWz08fv6 NUnr0WoR/iUfqTv0wx0wHwYDVR0jBBgwFoAU6qSDu71coOErPsD25wxbqq40VSsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRCQUEyLzRERUNEMDgwRkU2 NjExRUY4OTJFNTIxNEM0RjlBRTAyLzZxU0R1NzFjb09FclBzRDI1d3hicXE0MFZT cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNnFTRHU3MWNvT0VyUHNEMjV3eGJxcTQwVlNzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRC QUEyLzRERUNEMDgwRkU2NjExRUY4OTJFNTIxNEM0RjlBRTAyLzZxU0R1NzFjb09F clBzRDI1d3hicXE0MFZTcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGgvpzg4+D5y9YVBu/I5DsY+oRB1JKgYinCtf3w4Mh97XgWTY3N/XDHn V1DGOXg6jf4TAwAhDB+iPU6Cyvtpq3zl/M9Hwowxb3JpNx0iAD6aPAWUCHa6xxfy 6eOI1AR8z+n+RiirAxlQ/mS18x1n7VvVXrxIE+BPyGqg7UNlrLmsZFHp7Sjww8Or e3Ez2g3hAvUjveuT+WqhqtfeXKStuUK6/IWEy2XoTS1oos0OYXjLmHo6EmnLGUzx 3zWJ/cr/l87GF4xXxhjtxQflB6eNPmLafpiuLPt0JiNJsE/giXCgxGkV+sL4Nv3X S+1CcoauVpL3RaUGcyT2+jsIM4SnXzo= -----END CERTIFICATE-----Generated at Sat Apr 26 03:46:28 2025 by rpki-client