$ rpki-client -vvf rpki.apnic.net/member_repository/A914CC1C/D93252FCABF811EAB1FBD828C4F9AE02/6eDCCGLs2ANoFFu3z2LO3YARYzo.mft File: 6eDCCGLs2ANoFFu3z2LO3YARYzo.mft (raw, json) Hash identifier: O9RS74mxymJ+w5fl/WAoa3cjJwv2qrJuYqDn0vkr/6Y= Subject key identifier: F6:D2:7F:87:16:04:52:75:2F:0C:AC:5A:9A:25:FA:45:AB:C0:B3:34 Authority key identifier: E9:E0:C2:08:62:EC:D8:03:68:14:5B:B7:CF:62:CE:DD:80:11:63:3A Certificate issuer: /CN=A914CC1C/serialNumber=E9E0C20862ECD80368145BB7CF62CEDD8011633A Certificate serial: 08D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6eDCCGLs2ANoFFu3z2LO3YARYzo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CC1C/D93252FCABF811EAB1FBD828C4F9AE02/6eDCCGLs2ANoFFu3z2LO3YARYzo.mft Manifest number: 08D5 Signing time: Thu 24 Apr 2025 20:18:22 +0000 Manifest this update: Thu 24 Apr 2025 20:18:21 +0000 Manifest next update: Thu 01 May 2025 20:18:21 +0000 Files and hashes: 1: 6eDCCGLs2ANoFFu3z2LO3YARYzo.crl (hash: ufcCrVUD23M9691Aiqra+y7W4XXjpHN6ZQXXO7oCN0E=) 2: 99CE159C912C11EFA67EA629C4F9AE02.roa (hash: uh+rzVJtvF4UI78w58itN+HR2kb9/ZhZdUQFw6xcuos=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CC1C/D93252FCABF811EAB1FBD828C4F9AE02/6eDCCGLs2ANoFFu3z2LO3YARYzo.crl rsync://rpki.apnic.net/member_repository/A914CC1C/D93252FCABF811EAB1FBD828C4F9AE02/6eDCCGLs2ANoFFu3z2LO3YARYzo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6eDCCGLs2ANoFFu3z2LO3YARYzo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:18:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2263 (0x8d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CC1C, serialNumber=E9E0C20862ECD80368145BB7CF62CEDD8011633A Validity Not Before: Apr 24 20:18:21 2025 GMT Not After : May 1 20:18:21 2025 GMT Subject: CN=680a9c8d-1041 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8f:d5:a1:3e:ab:11:bc:e6:6b:04:75:f9:05: bc:d5:b0:c5:87:c1:5d:44:01:0d:12:d2:12:ff:0a: 9b:23:cc:8d:78:31:c0:85:cf:73:48:3f:a9:5b:2d: 2f:d3:4c:03:ca:7c:f3:c0:4a:c2:c4:d4:67:f2:ad: ec:7e:e8:06:4b:01:e5:a2:0f:31:11:26:8b:39:f4: 40:ff:da:51:37:95:81:92:09:42:55:ef:0a:61:4e: 82:c8:bb:fc:7c:10:aa:21:da:69:6d:51:0e:17:7c: d7:40:c7:03:28:0d:29:00:68:d2:1a:a1:e7:3a:c8: 28:eb:01:86:2d:86:c8:1b:38:02:90:62:b2:f8:3a: c9:37:a5:7c:4e:6a:67:78:87:f8:89:f5:c7:2f:90: c9:2a:e6:ab:b0:33:74:9a:f0:33:24:9b:58:cd:2f: dd:f4:8b:f7:67:1a:88:86:b8:85:b2:21:bd:7c:2e: 98:36:01:59:a6:b2:83:52:31:1a:c7:e6:69:36:65: 9a:22:c3:a7:62:93:62:68:5d:6e:66:f0:00:d4:9a: 55:a6:63:20:2a:e7:f5:a9:6a:95:e0:7e:d6:9c:b1: 1b:4b:2a:6d:9d:05:6e:52:a9:35:53:d4:aa:94:f7: 47:b6:a6:aa:b0:ed:67:de:a1:90:b6:dc:91:d4:ce: 82:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:D2:7F:87:16:04:52:75:2F:0C:AC:5A:9A:25:FA:45:AB:C0:B3:34 X509v3 Authority Key Identifier: keyid:E9:E0:C2:08:62:EC:D8:03:68:14:5B:B7:CF:62:CE:DD:80:11:63:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CC1C/D93252FCABF811EAB1FBD828C4F9AE02/6eDCCGLs2ANoFFu3z2LO3YARYzo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6eDCCGLs2ANoFFu3z2LO3YARYzo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CC1C/D93252FCABF811EAB1FBD828C4F9AE02/6eDCCGLs2ANoFFu3z2LO3YARYzo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d6:88:7d:96:48:65:36:c9:58:08:74:2a:75:21:79:b4:4c:e1: cb:71:9f:4b:c7:5f:0c:96:53:a6:c6:7c:57:52:ce:88:b2:e2: 97:b6:d0:02:9e:5b:e0:72:13:b0:2f:8f:b9:37:58:6e:93:ab: 8e:66:21:56:90:2a:27:e7:3c:c1:d3:85:17:10:b2:a8:d8:0a: 3e:a9:48:74:94:47:36:88:78:f8:41:5e:a0:b8:1f:a1:8e:32: 2f:d4:76:85:8b:34:0f:64:79:ce:43:c9:98:02:03:ed:d4:f5: f6:77:32:ef:16:68:bb:98:d8:99:62:f2:47:b0:51:e5:f6:bf: d5:f1:aa:1a:78:cb:f4:fc:7b:ef:0a:89:4f:26:73:ac:0b:ad: 7e:56:06:c0:38:e0:50:be:21:65:86:51:92:01:57:d4:8f:5a: 53:7a:3b:2f:3e:ff:06:00:9a:87:5a:08:74:f8:aa:e8:91:42: 57:05:31:9b:46:f0:37:a6:77:38:99:bd:d5:e4:16:65:b5:0f: 28:49:10:35:08:c8:d4:7d:8a:74:0d:3a:42:35:d7:82:8e:cc: d2:f3:f5:2b:18:3c:95:77:10:62:af:d9:84:f3:82:60:91:25: ef:2b:fd:33:be:79:82:c5:0b:11:4e:04:15:5f:ba:05:e6:f2: 0e:7e:54:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENDMUMxMTAvBgNVBAUTKEU5RTBDMjA4NjJFQ0Q4MDM2ODE0NUJCN0NGNjJDRURE ODAxMTYzM0EwHhcNMjUwNDI0MjAxODIxWhcNMjUwNTAxMjAxODIxWjAYMRYwFAYD VQQDEw02ODBhOWM4ZC0xMDQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlo/VoT6rEbzmawR1+QW81bDFh8FdRAENEtIS/wqbI8yNeDHAhc9zSD+pWy0v 00wDynzzwErCxNRn8q3sfugGSwHlog8xESaLOfRA/9pRN5WBkglCVe8KYU6CyLv8 fBCqIdppbVEOF3zXQMcDKA0pAGjSGqHnOsgo6wGGLYbIGzgCkGKy+DrJN6V8Tmpn eIf4ifXHL5DJKuarsDN0mvAzJJtYzS/d9Iv3ZxqIhriFsiG9fC6YNgFZprKDUjEa x+ZpNmWaIsOnYpNiaF1uZvAA1JpVpmMgKuf1qWqV4H7WnLEbSyptnQVuUqk1U9Sq lPdHtqaqsO1n3qGQttyR1M6CCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPbSf4cW BFJ1LwysWpol+kWrwLM0MB8GA1UdIwQYMBaAFOngwghi7NgDaBRbt89izt2AEWM6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0MxQy9EOTMyNTJGQ0FC RjgxMUVBQjFGQkQ4MjhDNEY5QUUwMi82ZURDQ0dMczJBTm9GRnUzejJMTzNZQVJZ em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZlRENDR0xzMkFOb0ZGdTN6MkxPM1lBUll6by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0MxQy9EOTMyNTJGQ0FCRjgxMUVBQjFGQkQ4MjhDNEY5QUUwMi82ZURDQ0dMczJB Tm9GRnUzejJMTzNZQVJZem8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDWiH2WSGU2yVgIdCp1IXm0TOHLcZ9Lx18MllOmxnxXUs6IsuKXttAC nlvgchOwL4+5N1huk6uOZiFWkCon5zzB04UXELKo2Ao+qUh0lEc2iHj4QV6guB+h jjIv1HaFizQPZHnOQ8mYAgPt1PX2dzLvFmi7mNiZYvJHsFHl9r/V8aoaeMv0/Hvv ColPJnOsC61+VgbAOOBQviFlhlGSAVfUj1pTejsvPv8GAJqHWgh0+KrokUJXBTGb RvA3pnc4mb3V5BZltQ8oSRA1CMjUfYp0DTpCNdeCjszS8/UrGDyVdxBir9mE84Jg kSXvK/0zvnmCxQsRTgQVX7oF5vIOflQk -----END CERTIFICATE-----Generated at Sat Apr 26 12:20:19 2025 by rpki-client