$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.mft File: 6CbZQgvPRaEIfTATu05KhJYNYcc.mft (raw, json) Hash identifier: 4Af2p8m8fhX9/COssBTNFClUx/Dk3eTpLiJp963OKsQ= Subject key identifier: 22:AF:96:39:86:16:4D:5A:F2:10:CC:45:0C:C9:25:46:5A:90:E6:18 Authority key identifier: E8:26:D9:42:0B:CF:45:A1:08:7D:30:13:BB:4E:4A:84:96:0D:61:C7 Certificate issuer: /CN=A914EAE4/serialNumber=E826D9420BCF45A1087D3013BB4E4A84960D61C7 Certificate serial: 1AFB Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6CbZQgvPRaEIfTATu05KhJYNYcc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.mft Manifest number: 1AF9 Signing time: Thu 24 Apr 2025 16:19:40 +0000 Manifest this update: Thu 24 Apr 2025 16:19:40 +0000 Manifest next update: Thu 01 May 2025 16:19:40 +0000 Files and hashes: 1: 6CbZQgvPRaEIfTATu05KhJYNYcc.crl (hash: D3U4sIQCgWvYiXaku32DbPewJ9LaYfnX92KinsBzhn4=) 2: D810AAAAB60B11EFB476C022C4F9AE02.roa (hash: W3khPMeaOIIvZA6XChV502z9D4IWV/QOl7ps2nePO0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.crl rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6CbZQgvPRaEIfTATu05KhJYNYcc.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:19:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6907 (0x1afb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE4, serialNumber=E826D9420BCF45A1087D3013BB4E4A84960D61C7 Validity Not Before: Apr 24 16:19:40 2025 GMT Not After : May 1 16:19:40 2025 GMT Subject: CN=680a649c-e4bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:6b:b4:93:fd:15:6d:53:f0:83:74:7f:ce:0b: ae:af:16:9d:8d:44:e6:b0:d6:ba:c3:17:a4:b4:2a: fb:7a:70:9d:65:de:55:59:15:2a:d5:70:ab:e8:c4: 1e:b7:ae:f9:95:42:f2:29:4e:69:fe:0f:44:21:4e: 18:a3:01:9b:37:d5:d5:ba:aa:83:6a:95:08:2c:49: 83:ec:48:77:e4:89:3e:23:0d:ac:42:fc:1d:93:b2: 0f:a6:28:15:8b:b0:71:95:4e:90:57:b8:c8:30:da: ff:9c:79:52:a9:4a:d8:40:8e:a5:8c:c9:57:8b:27: 6e:fd:fb:9c:db:cd:95:08:57:e1:83:a6:32:aa:10: a9:e8:49:49:5d:19:ed:c4:ba:0c:9c:13:27:1f:00: 9f:bf:4d:a0:94:eb:0c:06:e8:78:a3:08:9a:dc:0e: cb:ea:68:50:dc:7d:6d:77:ea:4a:ca:52:da:53:9d: 45:d4:0c:73:85:d6:a5:cf:2c:75:8b:33:99:0c:6b: 73:0f:8e:61:eb:18:f8:d4:b7:09:93:7e:83:d9:37: 65:37:82:3f:77:67:97:d6:fb:c0:0a:2f:b7:c3:cf: 9d:5d:00:17:ca:bc:16:9d:27:d1:85:45:88:b9:e3: 73:b3:f0:68:1f:ce:0e:cd:37:79:bc:a4:79:f2:7b: df:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:AF:96:39:86:16:4D:5A:F2:10:CC:45:0C:C9:25:46:5A:90:E6:18 X509v3 Authority Key Identifier: keyid:E8:26:D9:42:0B:CF:45:A1:08:7D:30:13:BB:4E:4A:84:96:0D:61:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6CbZQgvPRaEIfTATu05KhJYNYcc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:b4:49:d8:ce:18:ba:ce:43:1b:48:2f:80:b3:b5:68:27:b3: af:bd:a1:8a:28:05:f4:49:aa:06:b0:0b:5c:b1:3f:5a:df:74: f6:c9:07:9c:09:18:07:2b:01:6c:3f:bb:50:a5:5d:e8:3f:c5: 35:7c:85:c5:a6:90:eb:8b:1b:d9:ee:02:26:f2:72:a8:9d:dc: 29:20:4c:bc:7f:72:77:59:27:fa:76:0d:7d:dd:10:4a:ff:6a: 5b:98:19:d9:c3:ba:2b:d8:31:45:98:06:3c:a7:80:cd:1e:6e: 44:8d:92:86:93:8b:62:0d:61:b4:ad:92:27:08:09:f1:a5:12: 2b:b6:bb:06:66:2a:94:e7:0f:55:8a:9c:3f:f7:8f:a7:90:48: 7a:89:0a:4b:f9:df:da:af:57:28:4b:55:36:1a:d9:22:08:3b: 2c:63:b5:6f:03:87:5f:19:e0:27:5f:bd:b6:57:89:fc:59:fb: 76:2f:0c:54:91:be:66:1d:9a:5c:f0:e1:fe:ed:73:1b:68:c4: 79:80:62:fa:5c:ae:09:11:d6:c8:36:b7:17:93:23:1d:b1:59: bf:53:d8:66:b5:3f:72:f4:f0:ec:1a:26:94:e7:e2:2f:62:d1: 6f:ce:fb:a0:0b:73:71:dd:72:6a:1c:ab:4a:85:9d:02:cf:b6: 9d:12:24:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGvswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVBRTQxMTAvBgNVBAUTKEU4MjZEOTQyMEJDRjQ1QTEwODdEMzAxM0JCNEU0QTg0 OTYwRDYxQzcwHhcNMjUwNDI0MTYxOTQwWhcNMjUwNTAxMTYxOTQwWjAYMRYwFAYD VQQDEw02ODBhNjQ5Yy1lNGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Wu0k/0VbVPwg3R/zguurxadjUTmsNa6wxektCr7enCdZd5VWRUq1XCr6MQe t675lULyKU5p/g9EIU4YowGbN9XVuqqDapUILEmD7Eh35Ik+Iw2sQvwdk7IPpigV i7BxlU6QV7jIMNr/nHlSqUrYQI6ljMlXiydu/fuc282VCFfhg6YyqhCp6ElJXRnt xLoMnBMnHwCfv02glOsMBuh4owia3A7L6mhQ3H1td+pKylLaU51F1Axzhdalzyx1 izOZDGtzD45h6xj41LcJk36D2TdlN4I/d2eX1vvACi+3w8+dXQAXyrwWnSfRhUWI ueNzs/BoH84OzTd5vKR58nvfPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCKvljmG Fk1a8hDMRQzJJUZakOYYMB8GA1UdIwQYMBaAFOgm2UILz0WhCH0wE7tOSoSWDWHH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUFFNC83NjRBMDY2MDI1 NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi82Q2JaUWd2UFJhRUlmVEFUdTA1S2hKWU5Z Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzZDYlpRZ3ZQUmFFSWZUQVR1MDVLaEpZTlljYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUFFNC83NjRBMDY2MDI1NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi82Q2JaUWd2UFJh RUlmVEFUdTA1S2hKWU5ZY2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHtEnYzhi6zkMbSC+As7VoJ7OvvaGKKAX0SaoGsAtcsT9a33T2yQec CRgHKwFsP7tQpV3oP8U1fIXFppDrixvZ7gIm8nKondwpIEy8f3J3WSf6dg193RBK /2pbmBnZw7or2DFFmAY8p4DNHm5EjZKGk4tiDWG0rZInCAnxpRIrtrsGZiqU5w9V ipw/94+nkEh6iQpL+d/ar1coS1U2GtkiCDssY7VvA4dfGeAnX722V4n8Wft2LwxU kb5mHZpc8OH+7XMbaMR5gGL6XK4JEdbINrcXkyMdsVm/U9hmtT9y9PDsGiaU5+Iv YtFvzvugC3Nx3XJqHKtKhZ0Cz7adEiST -----END CERTIFICATE-----Generated at Sat Apr 26 13:06:40 2025 by rpki-client