$ rpki-client -vvf rpki.apnic.net/member_repository/A915C532/B42B7D22B21011E9AD7E0F79C4F9AE02/C6dUacYtJZIFuou2XbmdAze6130.mft File: C6dUacYtJZIFuou2XbmdAze6130.mft (raw, json) Hash identifier: ODK/DqyRkegIOZmUyV5raVH9gxPW9D2ZIlBc8mYQqSc= Subject key identifier: 5E:B8:87:8B:2B:49:DC:B6:87:F7:C9:58:BB:DB:35:28:B1:5F:E3:ED Authority key identifier: 0B:A7:54:69:C6:2D:25:92:05:BA:8B:B6:5D:B9:9D:03:37:BA:D7:7D Certificate issuer: /CN=A915C532/serialNumber=0BA75469C62D259205BA8BB65DB99D0337BAD77D Certificate serial: 0DE1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6dUacYtJZIFuou2XbmdAze6130.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C532/B42B7D22B21011E9AD7E0F79C4F9AE02/C6dUacYtJZIFuou2XbmdAze6130.mft Manifest number: 0DD8 Signing time: Thu 24 Apr 2025 17:51:15 +0000 Manifest this update: Thu 24 Apr 2025 17:51:15 +0000 Manifest next update: Thu 01 May 2025 17:51:15 +0000 Files and hashes: 1: C6dUacYtJZIFuou2XbmdAze6130.crl (hash: /acIAwftcptXhlFk2jjhJiqeBr6SlXwiP2PTYJn2QZs=) 2: ACE45EC4C5AE11E998CC136CC4F9AE02.roa (hash: Kzik/mEOxMnkFUJ+qgd/pL/HBPAnoQURi3fpQC5rQoQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C532/B42B7D22B21011E9AD7E0F79C4F9AE02/C6dUacYtJZIFuou2XbmdAze6130.crl rsync://rpki.apnic.net/member_repository/A915C532/B42B7D22B21011E9AD7E0F79C4F9AE02/C6dUacYtJZIFuou2XbmdAze6130.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6dUacYtJZIFuou2XbmdAze6130.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:51:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3553 (0xde1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C532, serialNumber=0BA75469C62D259205BA8BB65DB99D0337BAD77D Validity Not Before: Apr 24 17:51:15 2025 GMT Not After : May 1 17:51:15 2025 GMT Subject: CN=680a7a13-d52f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b0:0a:7c:5d:ed:03:88:5f:6f:4e:26:f4:67: ad:57:54:c2:34:37:8a:5d:60:91:f5:1d:f7:78:8f: 9a:91:e0:9c:a9:d3:0d:19:cf:b2:4f:ac:be:5a:db: 13:74:68:31:be:f2:f8:f2:aa:a3:d5:88:f3:14:b7: 7c:25:c3:ee:42:ea:54:5a:09:cf:4b:25:d5:56:3c: ff:38:78:15:56:28:ac:69:58:74:39:e8:c5:8e:d8: 99:57:78:fa:5d:57:f4:7b:36:2e:da:39:d7:0e:9f: 32:81:8c:61:30:2e:0a:9f:9b:36:8d:ef:8b:8d:4c: d0:46:91:42:9b:ab:34:5a:37:a1:d0:b7:28:79:17: ac:82:4c:98:48:0f:2e:f6:b5:4c:0a:fa:df:63:86: 0b:23:6a:81:ec:53:05:3d:8f:04:d4:0b:35:ca:64: 90:2b:5d:46:1f:5f:db:9f:e6:da:04:53:6e:d1:74: ee:61:df:65:d8:e8:2c:4b:76:ba:e7:89:18:47:23: 3e:58:65:27:fa:f0:41:9d:bf:08:f6:b0:4d:b5:a3: 04:75:09:21:e4:8d:0b:fa:3b:14:44:13:47:4b:f8: 46:52:75:f7:ff:a1:96:cd:77:78:06:08:8f:69:16: 3c:aa:00:1d:4e:ca:2f:35:0c:84:17:76:92:d0:79: 0f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:B8:87:8B:2B:49:DC:B6:87:F7:C9:58:BB:DB:35:28:B1:5F:E3:ED X509v3 Authority Key Identifier: keyid:0B:A7:54:69:C6:2D:25:92:05:BA:8B:B6:5D:B9:9D:03:37:BA:D7:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C532/B42B7D22B21011E9AD7E0F79C4F9AE02/C6dUacYtJZIFuou2XbmdAze6130.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6dUacYtJZIFuou2XbmdAze6130.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C532/B42B7D22B21011E9AD7E0F79C4F9AE02/C6dUacYtJZIFuou2XbmdAze6130.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:a6:08:d3:fb:be:ea:b2:04:3e:39:8a:ad:25:23:96:33:c8: 60:75:28:52:60:58:c8:a4:60:9f:ba:da:df:2e:23:f3:b3:08: 3c:5f:66:f1:c6:73:9e:f5:81:c1:26:b0:3b:08:c8:85:7f:c5: 97:61:5f:1a:ba:ab:cb:dc:cc:b7:cc:7b:41:25:cb:13:cc:54: 32:6c:98:d8:fd:8a:d4:b1:2e:de:d8:35:5f:b2:d7:fe:8d:83: 90:8d:37:84:01:39:2a:0a:0e:a3:90:85:86:45:41:d6:82:17: 9c:e6:b2:c7:41:57:aa:00:8b:6e:8c:ff:a7:c0:ce:91:9b:08: 8d:c2:0e:3d:71:83:af:93:37:05:87:42:a3:ff:62:90:11:42: 06:92:ab:ea:42:c8:22:ee:e6:47:93:3a:27:d9:53:53:a0:67: 51:f5:6f:22:92:cf:94:94:02:81:92:b3:00:9c:97:5b:a4:ff: fb:f3:a2:2e:f8:de:56:65:a2:b7:76:5f:c9:d1:4e:6c:e9:1e: ce:8d:50:9a:d5:61:4b:fa:4d:a9:01:47:0c:cf:2e:c5:65:a0: 71:18:56:0b:1c:68:01:4f:a9:e5:45:97:07:3e:e3:40:68:b8: df:cf:43:cf:bd:45:3d:f7:26:4c:de:80:13:78:77:a5:f5:fb: 7e:7d:0c:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUM1MzIxMTAvBgNVBAUTKDBCQTc1NDY5QzYyRDI1OTIwNUJBOEJCNjVEQjk5RDAz MzdCQUQ3N0QwHhcNMjUwNDI0MTc1MTE1WhcNMjUwNTAxMTc1MTE1WjAYMRYwFAYD VQQDEw02ODBhN2ExMy1kNTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAurAKfF3tA4hfb04m9GetV1TCNDeKXWCR9R33eI+akeCcqdMNGc+yT6y+WtsT dGgxvvL48qqj1YjzFLd8JcPuQupUWgnPSyXVVjz/OHgVViisaVh0OejFjtiZV3j6 XVf0ezYu2jnXDp8ygYxhMC4Kn5s2je+LjUzQRpFCm6s0Wjeh0LcoeResgkyYSA8u 9rVMCvrfY4YLI2qB7FMFPY8E1As1ymSQK11GH1/bn+baBFNu0XTuYd9l2OgsS3a6 54kYRyM+WGUn+vBBnb8I9rBNtaMEdQkh5I0L+jsURBNHS/hGUnX3/6GWzXd4BgiP aRY8qgAdTsovNQyEF3aS0HkPfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF64h4sr Sdy2h/fJWLvbNSixX+PtMB8GA1UdIwQYMBaAFAunVGnGLSWSBbqLtl25nQM3utd9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzUzMi9CNDJCN0QyMkIy MTAxMUU5QUQ3RTBGNzlDNEY5QUUwMi9DNmRVYWNZdEpaSUZ1b3UyWGJtZEF6ZTYx MzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M2ZFVhY1l0SlpJRnVvdTJYYm1kQXplNjEzMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzUzMi9CNDJCN0QyMkIyMTAxMUU5QUQ3RTBGNzlDNEY5QUUwMi9DNmRVYWNZdEpa SUZ1b3UyWGJtZEF6ZTYxMzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFpgjT+77qsgQ+OYqtJSOWM8hgdShSYFjIpGCfutrfLiPzswg8X2bx xnOe9YHBJrA7CMiFf8WXYV8auqvL3My3zHtBJcsTzFQybJjY/YrUsS7e2DVfstf+ jYOQjTeEATkqCg6jkIWGRUHWghec5rLHQVeqAItujP+nwM6RmwiNwg49cYOvkzcF h0Kj/2KQEUIGkqvqQsgi7uZHkzon2VNToGdR9W8iks+UlAKBkrMAnJdbpP/786Iu +N5WZaK3dl/J0U5s6R7OjVCa1WFL+k2pAUcMzy7FZaBxGFYLHGgBT6nlRZcHPuNA aLjfz0PPvUU99yZM3oATeHel9ft+fQyy -----END CERTIFICATE-----Generated at Sat Apr 26 04:36:56 2025 by rpki-client