$ rpki-client -vvf rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft File: E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft (raw, json) Hash identifier: TQS7s1Gq+wNKMe5yYBO2rnuhkWP2Fuk1yh5/cXizG94= Subject key identifier: 7D:01:A1:76:14:08:1F:BA:14:63:E4:B4:4E:93:AF:66:F3:AB:99:10 Authority key identifier: 13:D7:A1:3B:42:3B:B6:E8:7A:1A:75:B7:49:3F:0B:C1:9D:0C:EA:A3 Certificate issuer: /CN=A917B633/serialNumber=13D7A13B423BB6E87A1A75B7493F0BC19D0CEAA3 Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft Manifest number: 6B Signing time: Sat 03 May 2025 06:14:19 +0000 Manifest this update: Sat 03 May 2025 06:14:18 +0000 Manifest next update: Sat 10 May 2025 06:14:18 +0000 Files and hashes: 1: E9ehO0I7tuh6GnW3ST8LwZ0M6qM.crl (hash: 9Aw3BIIZRQiC+tByoef4gAN1o3OiHvZJUnqsIDce2HE=) 2: 3E4867CC86DC11EFA6022627C4F9AE02.roa (hash: kBrZwIHTbaSnaE7XdLULllQIjEnMuSEphHZrV4DhNKM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.crl rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B633, serialNumber=13D7A13B423BB6E87A1A75B7493F0BC19D0CEAA3 Validity Not Before: May 3 06:14:18 2025 GMT Not After : May 10 06:14:18 2025 GMT Subject: CN=6815b43b-ea35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2c:ee:eb:1d:f9:5e:e4:df:2f:14:83:b3:c4: b0:a9:85:ea:ee:ea:c5:75:c3:ad:b5:99:25:7f:29: c2:8a:7d:bb:6e:24:90:fb:cc:37:91:42:ac:2a:b4: 3a:18:71:9e:8e:eb:6f:18:d6:cd:10:42:d5:38:f3: 11:1d:f2:a9:79:6d:16:f7:ac:37:1e:7c:50:e8:a9: a6:65:af:27:26:e8:c1:47:51:39:c4:0d:02:54:fe: b6:18:4e:7e:4d:98:60:91:96:ec:2d:34:58:e6:8a: 51:c3:9a:21:d5:e6:ab:ec:f8:84:d4:cc:e7:5c:5b: 72:5c:d8:72:d6:9b:83:05:f0:02:ae:5c:38:ef:13: cc:e1:5a:78:6c:bf:da:ad:91:2d:23:e0:0e:85:f5: 70:05:32:2e:93:70:40:3f:98:0a:a6:5b:f0:06:55: a2:5a:ae:ce:34:78:d7:f6:79:31:ce:d0:3b:85:59: 09:75:7d:34:5e:3f:2f:b7:86:60:fc:83:d5:5f:23: b9:79:c2:5e:a2:da:8d:5e:f3:8a:32:74:0d:c2:68: 00:69:34:30:c9:3e:fb:98:0b:68:ab:25:0e:c6:bf: 6a:ba:a6:d8:f2:0f:d4:23:d7:2e:4c:f5:56:9d:e7: 61:57:bd:18:c6:3d:9a:c9:6d:6b:49:7e:85:d3:9a: 1f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:01:A1:76:14:08:1F:BA:14:63:E4:B4:4E:93:AF:66:F3:AB:99:10 X509v3 Authority Key Identifier: keyid:13:D7:A1:3B:42:3B:B6:E8:7A:1A:75:B7:49:3F:0B:C1:9D:0C:EA:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:e1:c5:6b:af:e0:ad:9d:f5:6d:15:2b:60:30:a1:54:96:9b: dd:9c:60:fd:a4:0e:db:b3:da:47:dc:ca:65:0b:65:b1:90:a7: 96:ff:59:37:fd:03:4f:d4:ad:d1:8c:60:76:5c:f0:f0:8e:fb: 7d:6e:70:99:40:23:61:f5:b9:8a:09:f5:b4:eb:d4:e7:61:fd: fc:e5:59:be:46:9b:2b:74:3f:64:d9:0e:29:b8:55:1f:21:24: 51:e5:9a:24:9f:34:1c:79:08:bc:51:95:2e:e8:88:b5:64:c4: 90:f8:8c:9b:6c:f3:e9:40:dc:10:dc:f1:4b:69:47:30:4a:18: e2:18:49:89:ec:bf:13:c8:f5:43:7b:c9:9f:60:65:9e:4d:4b: ee:09:3b:48:93:a7:bb:5e:33:ab:9d:aa:19:d5:a2:8c:97:f4: dd:f9:da:ba:6e:1c:b1:36:e8:4b:62:c6:d1:7e:c9:5e:4d:8f: bf:d5:e2:67:1d:3d:25:81:ae:c9:17:6b:f1:57:cd:7b:b9:c0: 97:48:a4:49:1c:a9:37:88:b5:84:c3:0b:51:5f:7e:1e:3d:a6: bd:73:83:91:f0:0a:30:bf:18:a2:12:ef:5a:55:89:ef:22:a9: 87:a6:d4:b3:bf:82:06:8d:40:de:b6:c5:ab:ef:20:cd:63:45: d3:07:20:e0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QjYzMzExMC8GA1UEBRMoMTNEN0ExM0I0MjNCQjZFODdBMUE3NUI3NDkzRjBCQzE5 RDBDRUFBMzAeFw0yNTA1MDMwNjE0MThaFw0yNTA1MTAwNjE0MThaMBgxFjAUBgNV BAMTDTY4MTViNDNiLWVhMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8LO7rHfle5N8vFIOzxLCpheru6sV1w621mSV/KcKKfbtuJJD7zDeRQqwqtDoY cZ6O628Y1s0QQtU48xEd8ql5bRb3rDcefFDoqaZlrycm6MFHUTnEDQJU/rYYTn5N mGCRluwtNFjmilHDmiHV5qvs+ITUzOdcW3Jc2HLWm4MF8AKuXDjvE8zhWnhsv9qt kS0j4A6F9XAFMi6TcEA/mAqmW/AGVaJars40eNf2eTHO0DuFWQl1fTRePy+3hmD8 g9VfI7l5wl6i2o1e84oydA3CaABpNDDJPvuYC2irJQ7Gv2q6ptjyD9Qj1y5M9Vad 52FXvRjGPZrJbWtJfoXTmh+vAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfQGhdhQI H7oUY+S0TpOvZvOrmRAwHwYDVR0jBBgwFoAUE9ehO0I7tuh6GnW3ST8LwZ0M6qMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCNjMzL0QwQUI5M0U0ODZE OTExRUY4QjhCRUIxRkM0RjlBRTAyL0U5ZWhPMEk3dHVoNkduVzNTVDhMd1owTTZx TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRTllaE8wSTd0dWg2R25XM1NUOEx3WjBNNnFNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdC NjMzL0QwQUI5M0U0ODZEOTExRUY4QjhCRUIxRkM0RjlBRTAyL0U5ZWhPMEk3dHVo NkduVzNTVDhMd1owTTZxTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABjhxWuv4K2d9W0VK2AwoVSWm92cYP2kDtuz2kfcymULZbGQp5b/WTf9 A0/UrdGMYHZc8PCO+31ucJlAI2H1uYoJ9bTr1Odh/fzlWb5Gmyt0P2TZDim4VR8h JFHlmiSfNBx5CLxRlS7oiLVkxJD4jJts8+lA3BDc8UtpRzBKGOIYSYnsvxPI9UN7 yZ9gZZ5NS+4JO0iTp7teM6udqhnVooyX9N352rpuHLE26EtixtF+yV5Nj7/V4mcd PSWBrskXa/FXzXu5wJdIpEkcqTeItYTDC1Fffh49pr1zg5HwCjC/GKIS71pVie8i qYem1LO/ggaNQN62xavvIM1jRdMHIOA= -----END CERTIFICATE-----Generated at Sat May 3 13:17:26 2025 by rpki-client