$ rpki-client -vvf rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.mft File: ET6g_81su3s89UWrzSyWLYbh7LA.mft (raw, json) Hash identifier: ZVOY5HoN4haT9gJngfF2/XBCmH6QdRQKZMZ2iMDD65Y= Subject key identifier: E0:15:38:A9:41:8D:A3:30:8A:82:EB:C3:12:A9:A2:7E:FB:CB:A0:A6 Authority key identifier: 11:3E:A0:FF:CD:6C:BB:7B:3C:F5:45:AB:CD:2C:96:2D:86:E1:EC:B0 Certificate issuer: /CN=A915C6B7/serialNumber=113EA0FFCD6CBB7B3CF545ABCD2C962D86E1ECB0 Certificate serial: 0BB4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ET6g_81su3s89UWrzSyWLYbh7LA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.mft Manifest number: 0BAC Signing time: Thu 24 Apr 2025 18:51:06 +0000 Manifest this update: Thu 24 Apr 2025 18:51:06 +0000 Manifest next update: Thu 01 May 2025 18:51:06 +0000 Files and hashes: 1: ET6g_81su3s89UWrzSyWLYbh7LA.crl (hash: Qg9wE2v7uqsGzw1cnNQUjCTTxhT/HfXud9fAw6+MpkI=) 2: 69683D8CC64D11EABD8FD32DC4F9AE02.roa (hash: ndk7WBwAom+jNCFlVWgXYFCEOWN+x873QVE3wv4MHH8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.crl rsync://rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ET6g_81su3s89UWrzSyWLYbh7LA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:51:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2996 (0xbb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C6B7, serialNumber=113EA0FFCD6CBB7B3CF545ABCD2C962D86E1ECB0 Validity Not Before: Apr 24 18:51:06 2025 GMT Not After : May 1 18:51:06 2025 GMT Subject: CN=680a881a-b7e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fa:34:4f:03:a6:48:0b:ec:85:af:9e:e6:a3: 40:d9:2c:d1:eb:59:95:02:84:7d:9c:a8:94:a8:e7: a8:36:86:a0:c8:ca:ee:05:c1:15:29:ab:8d:4d:ff: 3b:d4:d6:b9:f6:a5:48:8c:1b:9b:de:be:d6:2a:19: 4e:c2:47:95:e4:4a:51:36:f1:3b:df:7c:91:61:f8: b7:f0:ad:c2:08:ab:df:6b:c3:68:26:80:55:a0:98: 43:8c:e0:07:75:99:4e:2a:e5:96:67:e9:71:8f:84: 36:eb:1d:e6:b9:c4:75:f6:4e:f9:26:af:81:14:9a: 6d:42:b8:b4:d6:78:43:ec:92:83:e4:5d:e0:0b:d5: df:3c:93:21:a6:22:e1:9c:c9:c1:7b:c5:fa:9d:c5: 49:68:09:20:7b:8d:9f:d3:5f:40:dc:97:5a:13:1f: 30:7d:01:f0:a2:47:81:e3:45:3c:1a:f0:39:58:7f: a5:34:14:d8:7f:e4:95:99:9d:7c:f5:4e:f9:6d:7d: 95:a9:82:57:e6:6e:93:04:02:68:e4:b1:4a:d7:08: f8:98:d9:8f:f3:fd:30:fc:72:c4:10:cf:b2:1a:57: 11:95:b6:30:9a:ff:b8:ac:87:0e:1a:a6:d4:cd:5f: e8:cb:a6:8a:16:86:b6:7b:fa:3f:bb:69:e1:50:5a: 18:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:15:38:A9:41:8D:A3:30:8A:82:EB:C3:12:A9:A2:7E:FB:CB:A0:A6 X509v3 Authority Key Identifier: keyid:11:3E:A0:FF:CD:6C:BB:7B:3C:F5:45:AB:CD:2C:96:2D:86:E1:EC:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ET6g_81su3s89UWrzSyWLYbh7LA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:0d:c5:3d:75:b2:ed:3a:51:1e:26:1e:ae:c7:73:ed:a3:13: 9f:c7:80:66:d7:8e:80:ec:46:81:fb:c8:a4:57:35:da:a3:7d: 36:bc:a0:44:0a:e1:60:e1:2f:ef:f3:c6:49:8d:a0:f7:eb:c9: 7f:04:3d:ec:43:33:b0:b1:c6:2a:d2:1c:65:31:ee:f3:b2:b8: 88:76:80:70:d9:43:bd:2f:5c:4a:88:72:03:67:46:15:a3:0d: c3:dc:46:59:d2:00:22:0b:67:08:39:61:41:ad:1c:ff:5f:7a: 94:00:54:4e:01:0f:c2:d3:5b:b4:64:9e:5d:6b:f3:f5:43:53: 7d:5f:f2:b1:ce:07:52:8a:2a:64:99:8c:e1:91:7a:ff:03:76: e7:6f:14:f4:f6:95:ad:76:45:8d:75:74:55:e2:ba:41:c1:bd: 71:12:dd:14:b6:89:30:91:98:be:bf:36:85:97:c7:4f:35:78: 8e:b8:ba:c3:18:d7:f5:e8:a1:4e:31:69:41:7e:88:db:4d:04: 5c:31:94:32:d3:5b:bb:a7:56:05:21:31:12:3f:dd:c5:a8:02: 36:0b:cf:22:f0:46:8d:f3:cd:75:19:84:6c:29:6d:d5:c8:75: f4:61:bb:cc:2f:74:ef:96:cd:52:7f:8e:59:c7:74:7f:06:7b: be:b2:83:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUM2QjcxMTAvBgNVBAUTKDExM0VBMEZGQ0Q2Q0JCN0IzQ0Y1NDVBQkNEMkM5NjJE ODZFMUVDQjAwHhcNMjUwNDI0MTg1MTA2WhcNMjUwNTAxMTg1MTA2WjAYMRYwFAYD VQQDEw02ODBhODgxYS1iN2U2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr/o0TwOmSAvsha+e5qNA2SzR61mVAoR9nKiUqOeoNoagyMruBcEVKauNTf87 1Na59qVIjBub3r7WKhlOwkeV5EpRNvE733yRYfi38K3CCKvfa8NoJoBVoJhDjOAH dZlOKuWWZ+lxj4Q26x3mucR19k75Jq+BFJptQri01nhD7JKD5F3gC9XfPJMhpiLh nMnBe8X6ncVJaAkge42f019A3JdaEx8wfQHwokeB40U8GvA5WH+lNBTYf+SVmZ18 9U75bX2VqYJX5m6TBAJo5LFK1wj4mNmP8/0w/HLEEM+yGlcRlbYwmv+4rIcOGqbU zV/oy6aKFoa2e/o/u2nhUFoYrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOAVOKlB jaMwioLrwxKpon77y6CmMB8GA1UdIwQYMBaAFBE+oP/NbLt7PPVFq80sli2G4eyw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzZCNy84MDI1REQ3QTFF RjcxMUVBQUQ0NDQ5NUJDNEY5QUUwMi9FVDZnXzgxc3Uzczg5VVdyelN5V0xZYmg3 TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VUNmdfODFzdTNzODlVV3J6U3lXTFliaDdMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzZCNy84MDI1REQ3QTFFRjcxMUVBQUQ0NDQ5NUJDNEY5QUUwMi9FVDZnXzgxc3Uz czg5VVdyelN5V0xZYmg3TEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATDcU9dbLtOlEeJh6ux3PtoxOfx4Bm146A7EaB+8ikVzXao302vKBE CuFg4S/v88ZJjaD368l/BD3sQzOwscYq0hxlMe7zsriIdoBw2UO9L1xKiHIDZ0YV ow3D3EZZ0gAiC2cIOWFBrRz/X3qUAFROAQ/C01u0ZJ5da/P1Q1N9X/KxzgdSiipk mYzhkXr/A3bnbxT09pWtdkWNdXRV4rpBwb1xEt0UtokwkZi+vzaFl8dPNXiOuLrD GNf16KFOMWlBfojbTQRcMZQy01u7p1YFITESP93FqAI2C88i8EaN8811GYRsKW3V yHX0YbvML3Tvls1Sf45Zx3R/Bnu+soMz -----END CERTIFICATE-----Generated at Sat Apr 26 04:30:33 2025 by rpki-client