$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft File: 3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft (raw, json) Hash identifier: s1p5yE96y5fbzYWlcHrQT36ZeeVDw4pEachC2hBus3A= Subject key identifier: 0E:BA:FD:F2:B2:01:CE:29:CE:64:34:DB:BF:EC:4C:F1:40:91:0E:CC Authority key identifier: DC:6A:23:74:C5:14:E8:CF:4A:C7:64:A0:F3:C8:46:F0:9B:33:D2:82 Certificate issuer: /CN=A9185D4E/serialNumber=DC6A2374C514E8CF4AC764A0F3C846F09B33D282 Certificate serial: 6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft Manifest number: 6C Signing time: Fri 25 Apr 2025 05:52:58 +0000 Manifest this update: Fri 25 Apr 2025 05:52:58 +0000 Manifest next update: Fri 02 May 2025 05:52:58 +0000 Files and hashes: 1: 3GojdMUU6M9Kx2Sg88hG8Jsz0oI.crl (hash: 7VPmHc3UYM2HX9UTsP8/8ZHwl2lWYLmVFHY9a8BAwwk=) 2: 75B289249B4311EFA6D2403DC4F9AE02.roa (hash: C1wubfWXdpG304JONiKw+mbOc+sIyxib62Hzqan2NP8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.crl rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:52:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185D4E, serialNumber=DC6A2374C514E8CF4AC764A0F3C846F09B33D282 Validity Not Before: Apr 25 05:52:58 2025 GMT Not After : May 2 05:52:58 2025 GMT Subject: CN=680b233a-0b92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:39:92:64:3f:87:d9:87:23:80:55:0f:97:a0: 92:b9:6b:ad:5e:ef:b8:42:a6:db:88:b0:4a:37:9e: 89:3c:34:f6:e5:6a:7c:e5:01:61:49:5e:ec:8c:75: a5:c4:43:e2:27:33:dc:63:bb:1d:39:09:58:73:98: 5a:c8:99:fb:be:19:a4:2f:95:bd:77:a0:bd:59:22: e9:2a:60:17:c8:af:e5:85:8d:3e:9a:62:08:a1:7d: 80:1f:7e:73:12:3e:c8:05:e0:3c:32:46:6a:16:2d: 3f:40:88:cf:2a:5f:e2:05:8e:4d:63:0d:dd:3c:a5: 6b:5c:22:6b:cc:de:fe:e3:ab:16:96:65:4a:f0:89: e9:41:73:76:3c:22:37:4b:11:3a:87:7f:9d:bf:50: 87:1d:20:3b:e2:5a:b0:59:cb:2b:b1:e7:87:c4:61: 11:87:5e:a2:c4:29:3a:d7:92:2e:38:5c:d8:8b:a3: 7f:de:c2:5d:31:f6:7a:2b:ab:cf:92:a5:52:f9:d5: 0c:71:e2:6c:11:2a:8c:26:ce:c5:f3:11:f6:03:ed: 3a:48:df:6a:13:a8:07:64:62:ef:b1:08:9e:dc:2d: 90:35:f2:60:51:7a:e0:03:f5:8f:8a:fa:4a:e6:a2: c5:e5:31:76:4e:25:ee:54:99:19:4f:6b:85:53:76: cb:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:BA:FD:F2:B2:01:CE:29:CE:64:34:DB:BF:EC:4C:F1:40:91:0E:CC X509v3 Authority Key Identifier: keyid:DC:6A:23:74:C5:14:E8:CF:4A:C7:64:A0:F3:C8:46:F0:9B:33:D2:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:d6:38:73:4e:1e:5a:71:6a:98:ff:10:98:c3:6a:9c:3a:5a: 5a:66:77:c3:77:2a:26:57:09:8c:b0:cb:7b:f9:63:4d:50:4c: 76:df:2f:77:ab:13:76:23:2d:e3:96:6b:61:11:d9:95:c3:d4: d4:48:0a:1c:26:15:41:3f:2a:01:6d:b8:8d:5b:72:64:c2:31: 0a:64:b0:c2:f5:0f:10:e5:6f:df:b1:31:c4:15:70:fc:16:f2: d7:9c:79:7c:75:a4:2d:62:08:8b:74:90:e2:1e:2d:20:c9:c9: 66:da:be:76:ca:f0:c4:9d:6e:3b:d3:32:e6:a6:35:3c:77:90: a7:0a:be:f2:bc:00:52:39:90:75:cb:49:cb:94:74:c0:b3:59: 67:d5:a6:97:2f:30:bb:6f:85:57:70:d7:81:aa:a1:45:b0:af: ef:e5:c8:b9:fa:31:7a:79:d6:ad:b6:f4:6f:5c:59:cd:3d:83: a5:b5:92:7e:f8:b3:29:9e:65:0e:32:0a:94:3e:13:c4:cf:e7: 6e:03:6a:10:20:f7:2a:ad:d2:f2:26:9f:e3:d7:8c:87:17:d3: 90:b1:30:4e:2e:f9:b0:f6:d9:ea:5d:9f:cf:1f:f5:92:00:d7: c5:5d:62:c7:11:0e:d7:71:3f:e8:72:13:54:e5:67:93:f0:f5: 98:3b:49:9a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NUQ0RTExMC8GA1UEBRMoREM2QTIzNzRDNTE0RThDRjRBQzc2NEEwRjNDODQ2RjA5 QjMzRDI4MjAeFw0yNTA0MjUwNTUyNThaFw0yNTA1MDIwNTUyNThaMBgxFjAUBgNV BAMTDTY4MGIyMzNhLTBiOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfOZJkP4fZhyOAVQ+XoJK5a61e77hCptuIsEo3nok8NPblanzlAWFJXuyMdaXE Q+InM9xjux05CVhzmFrImfu+GaQvlb13oL1ZIukqYBfIr+WFjT6aYgihfYAffnMS PsgF4DwyRmoWLT9AiM8qX+IFjk1jDd08pWtcImvM3v7jqxaWZUrwielBc3Y8IjdL ETqHf52/UIcdIDviWrBZyyux54fEYRGHXqLEKTrXki44XNiLo3/ewl0x9norq8+S pVL51Qxx4mwRKowmzsXzEfYD7TpI32oTqAdkYu+xCJ7cLZA18mBReuAD9Y+K+krm osXlMXZOJe5UmRlPa4VTdss3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDrr98rIB zinOZDTbv+xM8UCRDswwHwYDVR0jBBgwFoAU3GojdMUU6M9Kx2Sg88hG8Jsz0oIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1RDRFLzY0MjNCRTA2N0ZG MjExRUY5MEUxNEY2MEM0RjlBRTAyLzNHb2pkTVVVNk05S3gyU2c4OGhHOEpzejBv SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM0dvamRNVVU2TTlLeDJTZzg4aEc4SnN6MG9JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1 RDRFLzY0MjNCRTA2N0ZGMjExRUY5MEUxNEY2MEM0RjlBRTAyLzNHb2pkTVVVNk05 S3gyU2c4OGhHOEpzejBvSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEbWOHNOHlpxapj/EJjDapw6Wlpmd8N3KiZXCYywy3v5Y01QTHbfL3er E3YjLeOWa2ER2ZXD1NRIChwmFUE/KgFtuI1bcmTCMQpksML1DxDlb9+xMcQVcPwW 8teceXx1pC1iCIt0kOIeLSDJyWbavnbK8MSdbjvTMuamNTx3kKcKvvK8AFI5kHXL ScuUdMCzWWfVppcvMLtvhVdw14GqoUWwr+/lyLn6MXp51q229G9cWc09g6W1kn74 symeZQ4yCpQ+E8TP524DahAg9yqt0vImn+PXjIcX05CxME4u+bD22epdn88f9ZIA 18VdYscRDtdxP+hyE1TlZ5Pw9Zg7SZo= -----END CERTIFICATE-----Generated at Sat Apr 26 05:06:02 2025 by rpki-client