$ rpki-client -vvf rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft File: 6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft (raw, json) Hash identifier: h/S/AYz/3ld+6Kt8M7ymMRrlWuPT5UjzjBRqnZCR+F0= Subject key identifier: 5C:AD:BA:C9:58:66:BA:AC:61:53:DF:76:53:21:EC:78:78:28:47:07 Authority key identifier: E9:C4:10:C7:DD:D5:26:70:AB:8F:82:16:C8:76:14:B1:0E:C3:17:7A Certificate issuer: /CN=A9171560/serialNumber=E9C410C7DDD52670AB8F8216C87614B10EC3177A Certificate serial: 0CEE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft Manifest number: 0CE3 Signing time: Thu 24 Apr 2025 18:05:34 +0000 Manifest this update: Thu 24 Apr 2025 18:05:33 +0000 Manifest next update: Thu 01 May 2025 18:05:33 +0000 Files and hashes: 1: 6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl (hash: hNjZQgJNLVGJkvuB56eHo36ma+LFsxIKcstzMXtnqU4=) 2: 65AF30D422D211EAB3ABA447C4F9AE02.roa (hash: N5g6jdfkVyESUIZ9NbhjHN5A/zAKL0uPzj31oHqn/fU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:05:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3310 (0xcee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171560, serialNumber=E9C410C7DDD52670AB8F8216C87614B10EC3177A Validity Not Before: Apr 24 18:05:33 2025 GMT Not After : May 1 18:05:33 2025 GMT Subject: CN=680a7d6d-628f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1e:ea:79:8b:6d:1f:71:fd:e8:5e:c7:35:3b: fa:fb:47:48:9e:12:49:45:7e:dc:f1:67:35:5b:d2: aa:3a:3a:58:ae:28:b5:ce:ec:26:d4:71:6c:b3:d9: f8:1f:0b:99:53:ff:4b:5e:c1:ea:b5:7f:d5:11:95: 30:f2:49:e0:7a:7c:dd:05:e3:86:af:7f:6e:b9:61: f7:c7:ea:02:47:10:23:be:fa:a3:0f:a2:42:4b:a8: 4c:2b:34:49:36:bd:2f:88:fc:49:c3:60:99:c6:10: 7d:bd:dc:fb:eb:27:36:a9:4d:e5:f3:ac:67:8a:aa: b1:18:88:f0:a1:83:41:ee:7a:7f:32:0f:81:88:e6: 75:f5:0f:d9:8f:71:f6:d2:ff:ac:f9:23:fa:1d:e9: 29:80:e3:73:da:c2:cf:94:62:5c:dd:63:a9:46:9b: 7d:5d:fd:1f:13:1f:a5:86:29:1f:0b:40:18:b8:52: 23:42:61:58:e3:69:c3:e9:7b:78:b8:2a:b2:61:81: 4b:4c:ca:f2:76:ee:f9:da:cc:d9:4a:66:c7:bc:1a: 2b:79:fd:5e:f4:5e:79:1b:ae:ba:ed:5c:08:95:ff: b0:fa:7c:4c:3d:80:85:9e:f3:09:cb:56:c2:e5:85: 0d:f4:9d:7f:23:a4:07:7c:42:6e:d4:40:8d:5e:bf: 46:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:AD:BA:C9:58:66:BA:AC:61:53:DF:76:53:21:EC:78:78:28:47:07 X509v3 Authority Key Identifier: keyid:E9:C4:10:C7:DD:D5:26:70:AB:8F:82:16:C8:76:14:B1:0E:C3:17:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:a9:50:f3:bc:e0:dc:b8:dd:bc:ca:e4:1d:f1:51:35:bf:74: aa:23:cc:f5:d5:03:ed:d0:79:06:9e:e0:ec:e2:37:83:23:37: 8e:9b:a0:74:fe:16:f1:55:3c:08:68:c2:7e:ea:ba:1c:da:bd: cd:00:4d:e3:ee:d7:60:ea:b7:39:ba:10:09:05:ee:27:23:c6: ba:47:ba:cd:44:70:f3:52:6a:23:d2:be:86:db:e4:9d:48:b4: 36:82:71:db:be:ae:40:af:71:18:11:a4:d0:de:a7:de:0e:19: 8e:0c:61:f7:06:87:68:06:55:11:32:c6:45:cc:81:f3:c3:3d: c9:b8:70:5d:c6:c5:a9:f0:e0:76:cd:c9:6b:35:e6:f9:eb:b8: bb:f6:48:80:14:aa:1b:8e:a8:1f:fc:6d:35:4d:dc:d5:0a:31: c1:5b:02:64:40:e2:62:fb:95:d1:1f:d8:f9:76:a5:83:9c:18: ec:fe:40:99:da:1b:ad:3b:2a:38:1d:65:e7:50:92:d1:f4:b4: 96:07:21:05:35:e2:45:c6:21:a5:09:be:23:b7:d3:e8:99:c4: 53:b3:69:50:f8:9e:38:e0:66:14:4f:d8:ec:19:7e:5b:2e:84: 2a:88:25:62:ce:6b:da:15:32:04:1e:d8:b1:17:38:a5:eb:46: 27:8a:ef:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE1NjAxMTAvBgNVBAUTKEU5QzQxMEM3RERENTI2NzBBQjhGODIxNkM4NzYxNEIx MEVDMzE3N0EwHhcNMjUwNDI0MTgwNTMzWhcNMjUwNTAxMTgwNTMzWjAYMRYwFAYD VQQDEw02ODBhN2Q2ZC02MjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvx7qeYttH3H96F7HNTv6+0dInhJJRX7c8Wc1W9KqOjpYrii1zuwm1HFss9n4 HwuZU/9LXsHqtX/VEZUw8kngenzdBeOGr39uuWH3x+oCRxAjvvqjD6JCS6hMKzRJ Nr0viPxJw2CZxhB9vdz76yc2qU3l86xniqqxGIjwoYNB7np/Mg+BiOZ19Q/Zj3H2 0v+s+SP6HekpgONz2sLPlGJc3WOpRpt9Xf0fEx+lhikfC0AYuFIjQmFY42nD6Xt4 uCqyYYFLTMrydu752szZSmbHvBoref1e9F55G6667VwIlf+w+nxMPYCFnvMJy1bC 5YUN9J1/I6QHfEJu1ECNXr9GqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFytuslY ZrqsYVPfdlMh7Hh4KEcHMB8GA1UdIwQYMBaAFOnEEMfd1SZwq4+CFsh2FLEOwxd6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTU2MC9BNzcwM0U5RUU0 MUQxMUU5OEY1Qjk4MTlDNEY5QUUwMi82Y1FReDkzVkpuQ3JqNElXeUhZVXNRN0RG M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZjUVF4OTNWSm5Dcmo0SVd5SFlVc1E3REYzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTU2MC9BNzcwM0U5RUU0MUQxMUU5OEY1Qjk4MTlDNEY5QUUwMi82Y1FReDkzVkpu Q3JqNElXeUhZVXNRN0RGM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDGqVDzvODcuN28yuQd8VE1v3SqI8z11QPt0HkGnuDs4jeDIzeOm6B0 /hbxVTwIaMJ+6roc2r3NAE3j7tdg6rc5uhAJBe4nI8a6R7rNRHDzUmoj0r6G2+Sd SLQ2gnHbvq5Ar3EYEaTQ3qfeDhmODGH3BodoBlURMsZFzIHzwz3JuHBdxsWp8OB2 zclrNeb567i79kiAFKobjqgf/G01TdzVCjHBWwJkQOJi+5XRH9j5dqWDnBjs/kCZ 2hutOyo4HWXnUJLR9LSWByEFNeJFxiGlCb4jt9PomcRTs2lQ+J444GYUT9jsGX5b LoQqiCVizmvaFTIEHtixFzil60Yniu+B -----END CERTIFICATE-----Generated at Sat Apr 26 17:09:17 2025 by rpki-client