$ rpki-client -vvf rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft File: n6yKuWoNopKfw9GHG-1vdD6MlXc.mft (raw, json) Hash identifier: X0ctZhYjZpzkJvbAOlj10nK9Na5L3t2CQyJqRDxzaPs= Subject key identifier: 9A:55:16:39:4A:02:83:7E:76:F1:F2:C1:D4:31:C8:EB:34:05:F3:FE Authority key identifier: 9F:AC:8A:B9:6A:0D:A2:92:9F:C3:D1:87:1B:ED:6F:74:3E:8C:95:77 Certificate issuer: /CN=A916E2DC/serialNumber=9FAC8AB96A0DA2929FC3D1871BED6F743E8C9577 Certificate serial: 01DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6yKuWoNopKfw9GHG-1vdD6MlXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft Manifest number: 01D5 Signing time: Fri 25 Apr 2025 02:06:50 +0000 Manifest this update: Fri 25 Apr 2025 02:06:49 +0000 Manifest next update: Fri 02 May 2025 02:06:49 +0000 Files and hashes: 1: n6yKuWoNopKfw9GHG-1vdD6MlXc.crl (hash: AoFwdjTK/I1seRq3+0I20UVGdUN53sbUM/mlwtyzCCo=) 2: 6993B4CCD43B11EDA821F80DC4F9AE02.roa (hash: ZSI/iXYWNqdEgciLkCgrj+0eyDroB8ECUVdL5jcas7g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.crl rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6yKuWoNopKfw9GHG-1vdD6MlXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:06:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 478 (0x1de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E2DC, serialNumber=9FAC8AB96A0DA2929FC3D1871BED6F743E8C9577 Validity Not Before: Apr 25 02:06:49 2025 GMT Not After : May 2 02:06:49 2025 GMT Subject: CN=680aee39-4698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:99:07:6f:e3:dc:65:e9:b5:e6:d2:6b:82:c4: a9:74:b3:f7:2d:7a:87:c8:da:30:9b:76:76:eb:c6: 31:11:f1:f8:0e:66:0d:84:ae:d7:bd:a8:5d:fc:4c: 4a:83:35:e6:60:26:f2:fc:39:cc:ba:aa:c0:8e:f1: 06:6a:ea:33:35:db:b8:6b:c6:1a:59:1f:4a:43:20: c7:8f:f1:ca:20:ff:6c:96:03:fd:b3:2c:88:00:df: 48:bb:a6:fb:2a:48:19:bf:c4:3e:35:b3:56:8f:fa: a4:c6:7a:95:bb:f6:34:f2:21:95:42:19:e1:8a:79: f6:36:8a:3f:f0:77:3a:14:15:0a:42:4f:45:57:ca: ec:7b:77:32:02:7b:07:f5:98:a4:90:41:27:da:94: d7:ce:17:33:63:cf:7a:fa:b9:87:ce:7e:60:9c:66: de:06:84:09:47:d7:53:f2:79:fa:44:61:29:47:72: aa:53:9b:3a:99:22:b8:9e:5a:d4:5c:97:f3:d2:9a: bc:c4:45:6f:89:25:55:41:0b:a4:4d:05:de:1d:c6: 4b:87:58:41:b6:52:dd:6a:2d:71:62:47:38:0d:f0: 9c:53:88:d5:ea:6d:ed:84:33:f9:6e:9e:9a:de:2c: b1:4a:b6:c8:a0:38:6c:bd:5e:2f:7c:24:1c:48:b5: 9e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:55:16:39:4A:02:83:7E:76:F1:F2:C1:D4:31:C8:EB:34:05:F3:FE X509v3 Authority Key Identifier: keyid:9F:AC:8A:B9:6A:0D:A2:92:9F:C3:D1:87:1B:ED:6F:74:3E:8C:95:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6yKuWoNopKfw9GHG-1vdD6MlXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:f4:28:c9:7c:c0:94:31:bf:12:dc:6c:e6:75:43:61:f8:a6: 4f:39:18:34:ef:5d:e7:5e:28:d4:f3:bd:0e:a7:ca:62:7c:ca: a9:be:de:72:36:ef:20:c2:c8:58:89:c3:a4:50:b1:01:23:7e: dc:81:6e:16:1c:9b:e3:e5:db:38:af:71:21:ff:02:1f:70:bf: ab:4e:37:68:25:75:ba:b6:06:76:73:43:9b:cd:ca:01:35:32: 8e:c5:b3:be:1b:29:13:6b:56:4f:14:a8:8e:f2:1a:b3:cf:81: cc:8c:b1:5d:f9:69:af:0d:d5:43:09:8f:28:60:24:64:84:ed: 34:46:24:64:65:c4:80:5b:d2:02:c2:3e:c9:a9:34:f2:d7:d6: b0:de:77:29:fc:50:62:8a:3f:89:55:65:04:89:5d:27:e7:91: a2:2e:d4:1f:50:b0:2f:6a:2d:19:6a:82:3f:f2:25:58:28:33: a9:c0:73:24:a1:31:42:65:f0:d6:c7:33:a1:71:0d:d0:ae:1a: c5:e4:ab:12:69:de:91:fa:89:2f:11:1b:8e:1a:41:cf:7b:0c: e6:99:03:79:0d:a2:9a:c5:22:4e:e2:57:af:d4:26:1d:c7:64: e6:0a:c5:87:07:9d:67:bc:51:2f:d0:59:99:b1:bd:dc:4f:8e: c4:f1:59:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkUyREMxMTAvBgNVBAUTKDlGQUM4QUI5NkEwREEyOTI5RkMzRDE4NzFCRUQ2Rjc0 M0U4Qzk1NzcwHhcNMjUwNDI1MDIwNjQ5WhcNMjUwNTAyMDIwNjQ5WjAYMRYwFAYD VQQDEw02ODBhZWUzOS00Njk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArJkHb+PcZem15tJrgsSpdLP3LXqHyNowm3Z268YxEfH4DmYNhK7Xvahd/ExK gzXmYCby/DnMuqrAjvEGauozNdu4a8YaWR9KQyDHj/HKIP9slgP9syyIAN9Iu6b7 KkgZv8Q+NbNWj/qkxnqVu/Y08iGVQhnhinn2Noo/8Hc6FBUKQk9FV8rse3cyAnsH 9ZikkEEn2pTXzhczY896+rmHzn5gnGbeBoQJR9dT8nn6RGEpR3KqU5s6mSK4nlrU XJfz0pq8xEVviSVVQQukTQXeHcZLh1hBtlLdai1xYkc4DfCcU4jV6m3thDP5bp6a 3iyxSrbIoDhsvV4vfCQcSLWeqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJpVFjlK AoN+dvHywdQxyOs0BfP+MB8GA1UdIwQYMBaAFJ+sirlqDaKSn8PRhxvtb3Q+jJV3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTJEQy82RDg5NjQ0QTZB RTcxMUVEOTRCNDRDODdDNEY5QUUwMi9uNnlLdVdvTm9wS2Z3OUdIRy0xdmRENk1s WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL242eUt1V29Ob3BLZnc5R0hHLTF2ZEQ2TWxYYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTJEQy82RDg5NjQ0QTZBRTcxMUVEOTRCNDRDODdDNEY5QUUwMi9uNnlLdVdvTm9w S2Z3OUdIRy0xdmRENk1sWGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCT9CjJfMCUMb8S3GzmdUNh+KZPORg0713nXijU870Op8pifMqpvt5y Nu8gwshYicOkULEBI37cgW4WHJvj5ds4r3Eh/wIfcL+rTjdoJXW6tgZ2c0ObzcoB NTKOxbO+GykTa1ZPFKiO8hqzz4HMjLFd+WmvDdVDCY8oYCRkhO00RiRkZcSAW9IC wj7JqTTy19aw3ncp/FBiij+JVWUEiV0n55GiLtQfULAvai0ZaoI/8iVYKDOpwHMk oTFCZfDWxzOhcQ3QrhrF5KsSad6R+okvERuOGkHPewzmmQN5DaKaxSJO4lev1CYd x2TmCsWHB51nvFEv0FmZsb3cT47E8VlK -----END CERTIFICATE-----Generated at Sat Apr 26 12:32:02 2025 by rpki-client