$ rpki-client -vvf rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.mft File: p6JnToSEYDkgd5o1LFWATlU2UBQ.mft (raw, json) Hash identifier: Ffm4w2oUF/8cw9GxTK4fLZyMjO3eHsTwCG1xu7gl3dk= Subject key identifier: D5:4C:D2:0E:CC:09:1F:85:90:8B:EF:8E:0D:F5:02:1E:72:CF:30:80 Authority key identifier: A7:A2:67:4E:84:84:60:39:20:77:9A:35:2C:55:80:4E:55:36:50:14 Certificate issuer: /CN=A9185CF3/serialNumber=A7A2674E8484603920779A352C55804E55365014 Certificate serial: 0BA7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6JnToSEYDkgd5o1LFWATlU2UBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.mft Manifest number: 0BA0 Signing time: Thu 24 Apr 2025 18:53:10 +0000 Manifest this update: Thu 24 Apr 2025 18:53:10 +0000 Manifest next update: Thu 01 May 2025 18:53:10 +0000 Files and hashes: 1: p6JnToSEYDkgd5o1LFWATlU2UBQ.crl (hash: 3QUFiBrrz03yeh/nhFEZu8Dsf3ruIdr9FdXp5hHX87Q=) 2: 53B6182C213611EAB9F02B49C4F9AE02.roa (hash: RvdTnjVHgMOyaT2D6NI7RBOs0ab70zz7muos4KwEa2g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.crl rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6JnToSEYDkgd5o1LFWATlU2UBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2983 (0xba7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185CF3, serialNumber=A7A2674E8484603920779A352C55804E55365014 Validity Not Before: Apr 24 18:53:10 2025 GMT Not After : May 1 18:53:10 2025 GMT Subject: CN=680a8896-f217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:43:fd:a5:2f:ad:af:ab:74:d7:c8:e0:0b:52: a7:6e:7e:55:41:61:96:4d:72:d2:03:61:a8:30:d9: 30:ba:25:db:ee:0e:da:ac:09:02:bd:d2:d5:72:9b: c7:5d:52:34:4b:cf:e7:57:b7:e9:15:06:e8:01:8f: 36:cd:30:02:3a:cf:9c:91:64:5f:31:3c:36:27:87: e2:8f:54:c8:7b:6f:4c:b2:55:65:cf:77:65:ef:c2: c8:a5:c4:fb:19:69:2d:1d:14:e3:5f:15:30:22:c5: f3:1b:e6:db:8f:42:8e:66:db:22:22:ba:c5:fb:97: 99:41:60:f1:1c:a8:58:c9:ae:8a:cc:ee:50:44:d2: 1d:cf:4c:80:e9:15:b8:cf:c8:59:d2:ad:76:7c:de: ca:25:b6:48:5d:64:67:77:24:43:21:ac:d6:34:07: 4c:3e:fd:2f:4e:4d:96:08:c7:91:1b:d4:7f:81:50: be:bb:ba:ed:12:46:b6:57:61:35:82:60:9a:56:0e: 46:a8:40:be:01:ba:08:24:63:10:21:af:20:c3:5a: 1b:ec:d0:ac:69:34:d6:91:cd:23:ec:33:27:fc:7d: d1:98:b0:30:9b:e9:b8:38:07:4f:45:85:e1:8b:90: 3e:e1:a6:c5:0a:61:8a:f2:c0:cf:13:b0:7f:81:21: c0:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:4C:D2:0E:CC:09:1F:85:90:8B:EF:8E:0D:F5:02:1E:72:CF:30:80 X509v3 Authority Key Identifier: keyid:A7:A2:67:4E:84:84:60:39:20:77:9A:35:2C:55:80:4E:55:36:50:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6JnToSEYDkgd5o1LFWATlU2UBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:d1:6e:09:7a:67:d3:54:82:fe:64:29:61:32:3d:34:1d:34: 39:b0:f4:75:7a:4d:8f:75:3a:5f:25:d5:c9:df:4d:c0:22:4d: 08:1a:7a:c1:13:c1:6d:af:84:20:b1:57:05:00:f8:7a:93:15: 37:1b:1d:f7:5f:82:b5:d4:9b:a5:30:ee:e6:b6:54:2d:53:aa: 3e:a5:1e:69:03:5f:54:54:df:6a:b5:08:40:be:18:ab:85:9d: 0a:b2:f8:65:6c:b9:10:f5:22:7f:da:b2:ca:e7:40:6d:a8:a2: 75:2f:d0:65:58:6f:d8:cf:09:94:27:45:72:32:2a:cf:59:4f: 43:c3:5e:b1:e3:d8:9d:58:0a:5c:5d:ad:98:dc:bb:1f:9f:2c: bb:f8:13:5d:8c:cc:87:d4:33:14:10:89:50:ea:c4:58:64:61: c2:79:22:08:f7:24:4f:cb:c7:47:87:05:a3:1f:d3:0c:aa:52: 30:b5:0a:af:df:8a:3d:c0:28:4a:19:0e:48:e1:30:b9:fe:ac: 5b:99:fd:29:60:36:a1:14:ee:bc:ad:45:44:34:07:e8:5d:f3: ca:36:80:20:d1:da:4d:9f:99:81:4a:d4:ed:ba:50:78:2f:48: b8:3a:3f:58:34:eb:34:fb:bc:f5:96:eb:57:fe:af:c8:34:d0: ef:99:70:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVDRjMxMTAvBgNVBAUTKEE3QTI2NzRFODQ4NDYwMzkyMDc3OUEzNTJDNTU4MDRF NTUzNjUwMTQwHhcNMjUwNDI0MTg1MzEwWhcNMjUwNTAxMTg1MzEwWjAYMRYwFAYD VQQDEw02ODBhODg5Ni1mMjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1UP9pS+tr6t018jgC1Knbn5VQWGWTXLSA2GoMNkwuiXb7g7arAkCvdLVcpvH XVI0S8/nV7fpFQboAY82zTACOs+ckWRfMTw2J4fij1TIe29MslVlz3dl78LIpcT7 GWktHRTjXxUwIsXzG+bbj0KOZtsiIrrF+5eZQWDxHKhYya6KzO5QRNIdz0yA6RW4 z8hZ0q12fN7KJbZIXWRndyRDIazWNAdMPv0vTk2WCMeRG9R/gVC+u7rtEka2V2E1 gmCaVg5GqEC+AboIJGMQIa8gw1ob7NCsaTTWkc0j7DMn/H3RmLAwm+m4OAdPRYXh i5A+4abFCmGK8sDPE7B/gSHAuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNVM0g7M CR+FkIvvjg31Ah5yzzCAMB8GA1UdIwQYMBaAFKeiZ06EhGA5IHeaNSxVgE5VNlAU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUNGMy80QkRENTE4RTIx MzUxMUVBQkU0ODg3NDdDNEY5QUUwMi9wNkpuVG9TRVlEa2dkNW8xTEZXQVRsVTJV QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A2Sm5Ub1NFWURrZ2Q1bzFMRldBVGxVMlVCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUNGMy80QkRENTE4RTIxMzUxMUVBQkU0ODg3NDdDNEY5QUUwMi9wNkpuVG9TRVlE a2dkNW8xTEZXQVRsVTJVQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAy0W4JemfTVIL+ZClhMj00HTQ5sPR1ek2PdTpfJdXJ303AIk0IGnrB E8Ftr4QgsVcFAPh6kxU3Gx33X4K11JulMO7mtlQtU6o+pR5pA19UVN9qtQhAvhir hZ0KsvhlbLkQ9SJ/2rLK50BtqKJ1L9BlWG/YzwmUJ0VyMirPWU9Dw16x49idWApc Xa2Y3Lsfnyy7+BNdjMyH1DMUEIlQ6sRYZGHCeSII9yRPy8dHhwWjH9MMqlIwtQqv 34o9wChKGQ5I4TC5/qxbmf0pYDahFO68rUVENAfoXfPKNoAg0dpNn5mBStTtulB4 L0i4Oj9YNOs0+7z1lutX/q/INNDvmXDO -----END CERTIFICATE-----Generated at Sat Apr 26 04:29:47 2025 by rpki-client