$ rpki-client -vvf rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.mft File: 6q7GCbncI1xGucXxvKPNvsf_7ig.mft (raw, json) Hash identifier: jqQ+4A5Udb9wLqGq1ohpVMUmQc2DY6ONptjICM7qugs= Subject key identifier: FA:33:13:AC:E1:56:DC:BD:39:43:22:03:C9:44:4F:E6:45:B6:ED:C5 Authority key identifier: EA:AE:C6:09:B9:DC:23:5C:46:B9:C5:F1:BC:A3:CD:BE:C7:FF:EE:28 Certificate issuer: /CN=A917A82D/serialNumber=EAAEC609B9DC235C46B9C5F1BCA3CDBEC7FFEE28 Certificate serial: 0C2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6q7GCbncI1xGucXxvKPNvsf_7ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.mft Manifest number: 0C0C Signing time: Thu 24 Apr 2025 18:39:49 +0000 Manifest this update: Thu 24 Apr 2025 18:39:48 +0000 Manifest next update: Thu 01 May 2025 18:39:48 +0000 Files and hashes: 1: 6q7GCbncI1xGucXxvKPNvsf_7ig.crl (hash: vMlJwS8RT/QRF+Uqs4caezSscLe4Y3Esj0ot+EOR29I=) 2: 403FDDD0DF3511ED8FBA823DC4F9AE02.roa (hash: n02qcDfoz5xfgtE3pmF9DuTrufYGzGxNykq63R1mDas=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.crl rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6q7GCbncI1xGucXxvKPNvsf_7ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:39:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3114 (0xc2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A82D, serialNumber=EAAEC609B9DC235C46B9C5F1BCA3CDBEC7FFEE28 Validity Not Before: Apr 24 18:39:48 2025 GMT Not After : May 1 18:39:48 2025 GMT Subject: CN=680a8574-e8ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:59:7d:6b:42:40:db:16:b1:1a:63:d9:44:9a: f1:1f:52:f9:c2:cc:51:e5:f4:ae:21:ec:bc:c0:f3: 82:9c:57:43:05:09:d0:97:78:f9:98:f0:af:6d:d7: c6:39:cb:06:ac:00:c5:ec:77:3d:f0:60:96:d1:9e: 82:a9:71:28:ed:ad:17:f0:13:93:48:22:28:21:2b: 9d:ae:7a:84:e4:71:d5:86:09:e3:89:be:5d:82:20: 34:a0:78:d0:1c:46:1e:74:01:c8:29:98:55:26:f8: 6a:00:f9:8c:38:c4:69:c5:38:4f:78:51:9b:9c:a7: 76:1c:74:cf:e8:74:93:ad:21:08:35:7c:a5:bc:57: 35:74:b0:62:e0:db:96:57:ad:f7:76:f8:07:d8:5b: 67:d0:a4:e1:fb:31:65:fb:75:d2:98:3a:c3:f2:7b: 14:a8:09:50:c0:0e:29:58:47:12:f6:c2:48:29:74: 32:b9:95:50:c0:cb:d6:3d:52:37:26:d9:2a:38:ce: 88:f1:0f:44:d4:5e:f5:72:9c:e6:7e:30:e4:2e:d3: d6:06:e0:fb:53:a9:5b:ac:ef:e1:38:fa:ad:b9:c9: 2f:91:75:8d:57:81:8c:02:94:03:cb:e4:dc:bd:a6: 09:74:5e:ce:6e:b4:2c:20:68:73:1f:87:bf:62:1d: 6a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:33:13:AC:E1:56:DC:BD:39:43:22:03:C9:44:4F:E6:45:B6:ED:C5 X509v3 Authority Key Identifier: keyid:EA:AE:C6:09:B9:DC:23:5C:46:B9:C5:F1:BC:A3:CD:BE:C7:FF:EE:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6q7GCbncI1xGucXxvKPNvsf_7ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:0c:6c:7b:54:64:bc:29:7b:28:e3:18:f3:83:a5:e7:bf:2c: cc:2b:76:77:6b:74:45:2d:4b:c8:fc:0f:11:43:1e:62:f7:65: 5f:52:88:37:f0:2e:f8:d7:09:2b:86:ea:c2:b0:dc:e6:01:4d: 34:89:58:a9:d3:ba:2e:89:8e:87:49:f8:21:2a:36:a6:77:7d: 58:68:4f:0e:63:ab:7c:ac:c4:6f:f5:e6:bf:81:b5:0a:5d:f2: 55:84:ec:45:16:5c:eb:15:fe:a6:85:e1:3b:34:18:1f:9e:70: 1f:96:8c:56:2e:2b:83:b9:08:ef:18:ad:41:cc:52:c5:e3:8f: d2:94:d1:6f:51:4c:60:25:af:9e:96:16:74:98:fc:d3:68:e3: e2:c8:b3:fc:8a:51:bd:90:d8:9c:67:bc:6e:b1:23:1b:a4:00: d8:8b:40:88:71:d3:e4:95:44:e9:f4:fc:d7:90:32:06:c8:04: 99:20:84:ac:c8:69:ab:b4:6e:4a:40:b7:26:a6:ca:83:29:45: 74:c8:e7:9a:6f:64:ec:dc:d1:a2:91:7b:b7:5f:96:8b:90:83: 13:26:75:5f:3a:ee:e4:64:b9:8d:2e:a3:e7:b7:4a:06:49:fc: a3:02:39:4b:f3:84:b1:57:b6:6d:fd:60:51:76:1f:c7:a7:41: 3d:2e:dd:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E4MkQxMTAvBgNVBAUTKEVBQUVDNjA5QjlEQzIzNUM0NkI5QzVGMUJDQTNDREJF QzdGRkVFMjgwHhcNMjUwNDI0MTgzOTQ4WhcNMjUwNTAxMTgzOTQ4WjAYMRYwFAYD VQQDEw02ODBhODU3NC1lOGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVl9a0JA2xaxGmPZRJrxH1L5wsxR5fSuIey8wPOCnFdDBQnQl3j5mPCvbdfG OcsGrADF7Hc98GCW0Z6CqXEo7a0X8BOTSCIoISudrnqE5HHVhgnjib5dgiA0oHjQ HEYedAHIKZhVJvhqAPmMOMRpxThPeFGbnKd2HHTP6HSTrSEINXylvFc1dLBi4NuW V633dvgH2Ftn0KTh+zFl+3XSmDrD8nsUqAlQwA4pWEcS9sJIKXQyuZVQwMvWPVI3 JtkqOM6I8Q9E1F71cpzmfjDkLtPWBuD7U6lbrO/hOPqtuckvkXWNV4GMApQDy+Tc vaYJdF7ObrQsIGhzH4e/Yh1qjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPozE6zh Vty9OUMiA8lET+ZFtu3FMB8GA1UdIwQYMBaAFOquxgm53CNcRrnF8byjzb7H/+4o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTgyRC9BREY2NjVDMDEy NzgxMUVBOUI4RUQwMzRDNEY5QUUwMi82cTdHQ2JuY0kxeEd1Y1h4dktQTnZzZl83 aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZxN0dDYm5jSTF4R3VjWHh2S1BOdnNmXzdpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTgyRC9BREY2NjVDMDEyNzgxMUVBOUI4RUQwMzRDNEY5QUUwMi82cTdHQ2JuY0kx eEd1Y1h4dktQTnZzZl83aWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAODGx7VGS8KXso4xjzg6XnvyzMK3Z3a3RFLUvI/A8RQx5i92VfUog3 8C741wkrhurCsNzmAU00iVip07ouiY6HSfghKjamd31YaE8OY6t8rMRv9ea/gbUK XfJVhOxFFlzrFf6mheE7NBgfnnAfloxWLiuDuQjvGK1BzFLF44/SlNFvUUxgJa+e lhZ0mPzTaOPiyLP8ilG9kNicZ7xusSMbpADYi0CIcdPklUTp9PzXkDIGyASZIISs yGmrtG5KQLcmpsqDKUV0yOeab2Ts3NGikXu3X5aLkIMTJnVfOu7kZLmNLqPnt0oG SfyjAjlL84SxV7Zt/WBRdh/Hp0E9Lt0E -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:38 2025 by rpki-client