$ rpki-client -vvf rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft File: 6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft (raw, json) Hash identifier: xABeOVwIAVDnoq0U+/caxWAX7doo1mZUBY7pHtp4Gdc= Subject key identifier: FE:0E:BB:23:83:C4:46:C4:7C:D2:6E:23:99:BC:92:CE:0E:13:71:95 Authority key identifier: EA:F1:52:BD:1D:D4:70:EF:73:A5:1D:4B:95:1D:4F:A0:AA:4C:CD:8E Certificate issuer: /CN=A9154B7E/serialNumber=EAF152BD1DD470EF73A51D4B951D4FA0AA4CCD8E Certificate serial: 0A9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft Manifest number: 0A87 Signing time: Thu 24 Apr 2025 19:29:45 +0000 Manifest this update: Thu 24 Apr 2025 19:29:45 +0000 Manifest next update: Thu 01 May 2025 19:29:45 +0000 Files and hashes: 1: 6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl (hash: 8Jqn8ubTip0QmMOb9XnScCDICicuAQVnpYGXZXx5tas=) 2: 45A83CC809EE11EBAD92B66BC4F9AE02.roa (hash: BMLck7ad8d48GKkf5hIYa+BMluvYHrRfqqVkHmYs2MI=) 3: 144D1F865F7F11EBB5C08239C4F9AE02.roa (hash: xk3hG5cT6tov5WpRqBgw1GYiI5TquI6c93azZDBwgS8=) 4: 2996029C591611EA86D2A42DC4F9AE02.roa (hash: YdPahH5dD4zuJY8bYiwVpnXjRlbDVfqoQdod66sRqWI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:29:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2716 (0xa9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154B7E, serialNumber=EAF152BD1DD470EF73A51D4B951D4FA0AA4CCD8E Validity Not Before: Apr 24 19:29:45 2025 GMT Not After : May 1 19:29:45 2025 GMT Subject: CN=680a9129-a1d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9e:01:d2:aa:f4:98:58:40:44:da:14:0e:7a: ef:fe:81:fd:2f:12:7b:39:09:23:9a:a1:03:04:d1: aa:e0:68:32:03:32:9a:be:4e:bb:d7:d3:d8:3c:76: fb:c9:f9:d5:10:b8:00:d9:29:31:e9:89:68:d8:44: e7:ee:d7:ff:36:f1:63:6b:bd:f4:26:7f:38:12:9a: 02:fb:c2:e4:e6:46:ae:93:08:6f:93:2a:88:40:e4: 66:51:8c:8a:41:d8:cd:84:1b:58:ab:ff:1e:78:52: 6a:7a:e8:f5:ba:88:af:0a:20:21:69:81:14:32:c5: d7:c3:31:ff:19:02:87:19:6d:af:51:34:dd:df:0c: 71:bb:39:fb:93:25:78:37:75:7b:59:17:b2:59:ce: 04:ee:30:c4:7b:d5:9b:04:dd:d2:15:01:ca:8a:e7: 27:90:62:47:90:cb:ba:26:03:d7:11:81:c8:fd:ef: c8:28:ce:4a:14:ad:68:30:4c:2a:1e:2f:29:c8:86: aa:e9:da:dd:5f:b1:22:8e:ea:86:9e:d5:62:ec:f7: ff:a0:df:ac:f8:64:d6:75:44:ee:95:f7:8f:c5:d0: 4c:49:06:a0:23:ca:4d:c0:d9:43:bb:a1:ec:21:b5: d2:1a:48:f0:84:2d:ac:a8:37:d5:82:55:56:c4:cd: 22:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:0E:BB:23:83:C4:46:C4:7C:D2:6E:23:99:BC:92:CE:0E:13:71:95 X509v3 Authority Key Identifier: keyid:EA:F1:52:BD:1D:D4:70:EF:73:A5:1D:4B:95:1D:4F:A0:AA:4C:CD:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:2d:7e:56:48:e7:da:77:49:dc:90:36:a5:6a:39:93:8a:5e: 87:50:d1:bc:3c:14:17:bc:be:44:1a:57:cf:bd:81:16:8d:e7: ba:2f:bf:7d:27:26:1b:98:9a:d8:71:f4:e6:3a:33:88:f0:bc: 41:20:ae:18:2b:2f:2c:34:46:9a:21:da:22:25:b5:21:d4:3c: 48:54:a6:55:54:ad:98:71:97:3a:e5:75:f3:cd:68:e0:4d:00: a2:ab:80:ad:5c:8b:b1:03:61:30:7e:3a:4f:cf:bd:ec:9c:45: 9c:33:a6:27:30:76:14:dc:35:4d:24:d4:e6:2a:51:18:74:94: 6d:bc:ec:69:a7:97:75:d7:c6:02:5b:bb:ca:8a:11:a5:41:72: 0c:19:32:ac:7f:81:49:29:56:45:9b:1c:dc:a5:77:3a:98:e5: bd:ba:87:75:59:32:12:16:18:0c:3a:e9:f8:fb:4e:4d:f9:d6: 2b:97:6d:86:43:3e:37:4d:35:42:f0:e7:a6:34:24:99:77:8d: ca:ee:ad:44:06:ea:65:20:2b:a9:c4:85:5e:68:35:c7:44:cc: a9:cf:22:8a:69:a9:7b:f3:44:30:a3:d9:e2:98:b7:4b:8c:60: 49:66:70:bd:7b:d9:c6:2e:8f:93:08:c5:b0:5c:7a:a5:e6:5a: 5f:5e:bf:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCpwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTRCN0UxMTAvBgNVBAUTKEVBRjE1MkJEMURENDcwRUY3M0E1MUQ0Qjk1MUQ0RkEw QUE0Q0NEOEUwHhcNMjUwNDI0MTkyOTQ1WhcNMjUwNTAxMTkyOTQ1WjAYMRYwFAYD VQQDEw02ODBhOTEyOS1hMWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoZ4B0qr0mFhARNoUDnrv/oH9LxJ7OQkjmqEDBNGq4GgyAzKavk6719PYPHb7 yfnVELgA2Skx6Ylo2ETn7tf/NvFja730Jn84EpoC+8Lk5kaukwhvkyqIQORmUYyK QdjNhBtYq/8eeFJqeuj1uoivCiAhaYEUMsXXwzH/GQKHGW2vUTTd3wxxuzn7kyV4 N3V7WReyWc4E7jDEe9WbBN3SFQHKiucnkGJHkMu6JgPXEYHI/e/IKM5KFK1oMEwq Hi8pyIaq6drdX7EijuqGntVi7Pf/oN+s+GTWdUTulfePxdBMSQagI8pNwNlDu6Hs IbXSGkjwhC2sqDfVglVWxM0iKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP4OuyOD xEbEfNJuI5m8ks4OE3GVMB8GA1UdIwQYMBaAFOrxUr0d1HDvc6UdS5UdT6CqTM2O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEI3RS8zRjM1QzA4NDU5 MTUxMUVBQjNGMkExMkNDNEY5QUUwMi82dkZTdlIzVWNPOXpwUjFMbFIxUG9LcE16 WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ2RlN2UjNVY085enBSMUxsUjFQb0twTXpZNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NEI3RS8zRjM1QzA4NDU5MTUxMUVBQjNGMkExMkNDNEY5QUUwMi82dkZTdlIzVWNP OXpwUjFMbFIxUG9LcE16WTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBLX5WSOfad0nckDalajmTil6HUNG8PBQXvL5EGlfPvYEWjee6L799 JyYbmJrYcfTmOjOI8LxBIK4YKy8sNEaaIdoiJbUh1DxIVKZVVK2YcZc65XXzzWjg TQCiq4CtXIuxA2EwfjpPz73snEWcM6YnMHYU3DVNJNTmKlEYdJRtvOxpp5d118YC W7vKihGlQXIMGTKsf4FJKVZFmxzcpXc6mOW9uod1WTISFhgMOun4+05N+dYrl22G Qz43TTVC8OemNCSZd43K7q1EBuplICupxIVeaDXHRMypzyKKaal780Qwo9nimLdL jGBJZnC9e9nGLo+TCMWwXHql5lpfXr+w -----END CERTIFICATE-----Generated at Sat Apr 26 13:03:29 2025 by rpki-client