$ rpki-client -vvf rpki.apnic.net/member_repository/A918770D/176D4114ED2311E6938FD318C4F9AE02/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.mft File: G6-CUdGhP0GIBgqxmgMNNsqnq9Q.mft (raw, json) Hash identifier: T5bcMX+sKGt1aIwzGoJ9OCGG4nreXKwnCRs4ND3YNNo= Subject key identifier: 8A:42:81:00:F1:1C:9E:0D:67:7E:1E:6C:4B:30:DB:A0:2A:EE:60:19 Authority key identifier: 1B:AF:82:51:D1:A1:3F:41:88:06:0A:B1:9A:03:0D:36:CA:A7:AB:D4 Certificate issuer: /CN=A918770D/serialNumber=1BAF8251D1A13F4188060AB19A030D36CAA7ABD4 Certificate serial: 1C06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918770D/176D4114ED2311E6938FD318C4F9AE02/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.mft Manifest number: 1BF9 Signing time: Thu 24 Apr 2025 16:13:39 +0000 Manifest this update: Thu 24 Apr 2025 16:13:38 +0000 Manifest next update: Thu 01 May 2025 16:13:38 +0000 Files and hashes: 1: G6-CUdGhP0GIBgqxmgMNNsqnq9Q.crl (hash: gjOA2gghaiJKwTRjWMc54xkfsTUAz1YGtX8xr5UINBo=) 2: 6C5A7912ED2311E680140D19C4F9AE02.roa (hash: eMi2yq9I2MPYaPzqg2XL7DC7JwJfMQi8ycwnLu24i5s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918770D/176D4114ED2311E6938FD318C4F9AE02/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.crl rsync://rpki.apnic.net/member_repository/A918770D/176D4114ED2311E6938FD318C4F9AE02/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:13:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7174 (0x1c06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918770D, serialNumber=1BAF8251D1A13F4188060AB19A030D36CAA7ABD4 Validity Not Before: Apr 24 16:13:38 2025 GMT Not After : May 1 16:13:38 2025 GMT Subject: CN=680a6333-217a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:19:a1:60:c7:68:9e:9e:9d:b0:84:1b:ab:f5: 25:b4:81:16:ea:6e:40:5d:f5:d5:fb:99:9a:99:96: f1:bd:70:c7:8e:72:a3:2b:09:f5:ab:dd:8d:ff:e4: 18:a9:77:98:23:4c:67:0b:89:e0:b8:ed:e2:e9:19: 00:c9:46:65:d8:82:14:0d:f5:dc:6f:e1:8a:65:ee: a7:dd:53:d7:39:63:86:dd:00:9a:65:9d:82:90:61: 02:f0:47:09:50:59:2a:c0:36:49:a9:4e:80:47:2d: 61:7e:49:11:e8:2c:b1:14:7e:15:29:52:52:bc:13: fa:84:65:0e:0a:4d:d8:96:8d:23:d4:cb:79:26:b1: 65:11:c7:89:ec:5c:da:08:e4:d3:04:58:fd:39:1a: 75:c1:f9:4e:29:a2:0a:df:3b:c5:ba:26:3e:50:73: c1:4c:2e:76:ed:71:7b:1f:fd:b4:42:72:de:dd:88: 8c:cb:2b:54:04:33:24:81:23:38:76:b7:5e:ea:6f: d2:cc:74:45:e0:bb:1f:42:40:58:36:98:11:f1:73: 37:33:b2:a1:6f:00:30:b8:3c:61:a2:fe:db:8a:3e: ee:e0:8f:88:64:df:26:d9:c9:b4:9e:e9:6e:c4:16: ab:40:b1:85:b1:14:27:b2:f5:82:08:52:13:57:22: 3f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:42:81:00:F1:1C:9E:0D:67:7E:1E:6C:4B:30:DB:A0:2A:EE:60:19 X509v3 Authority Key Identifier: keyid:1B:AF:82:51:D1:A1:3F:41:88:06:0A:B1:9A:03:0D:36:CA:A7:AB:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918770D/176D4114ED2311E6938FD318C4F9AE02/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918770D/176D4114ED2311E6938FD318C4F9AE02/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:b5:bb:a4:76:3d:2e:5d:f3:c0:0d:97:ce:a7:74:8f:56:11: fc:e9:a3:be:21:f8:37:b6:79:45:98:ee:a8:19:04:f9:08:9c: 82:27:3f:50:0a:cc:ba:d4:72:af:e7:71:2f:ca:7f:97:ea:12: ad:3c:e1:aa:4d:b9:16:a9:76:5c:3b:62:f8:71:14:85:9f:29: a1:b0:8f:fc:a8:53:b4:fd:41:1a:b3:d5:d6:9c:d9:49:a4:9f: 4c:14:81:ff:51:af:3b:7c:dc:fc:99:43:1f:cc:2c:c8:a3:e5: 09:bc:b0:99:b6:dd:50:34:7a:d4:90:38:90:b4:6b:ba:b1:4e: c9:13:ce:5e:87:de:07:bd:db:80:a1:1e:24:61:f4:e3:ca:56: 77:cd:22:64:01:9d:5c:67:c5:3d:85:a4:42:2b:01:da:03:16: c3:1c:4c:24:2b:85:1b:3b:4b:56:2c:bc:b1:7e:2c:86:fc:32: c5:39:c7:db:38:27:ea:e3:ec:17:be:92:7e:d3:ce:ec:ce:43: a6:0e:ec:f7:f5:c8:22:51:f4:53:90:07:be:9a:a7:da:12:74: e3:4a:26:49:b0:92:8b:b9:da:d5:9f:a1:a3:9d:90:a3:cd:ef: d7:4d:dd:7e:96:26:90:0d:b2:1f:3d:a1:35:f4:d5:63:f6:58: 07:1a:1d:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHAYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc3MEQxMTAvBgNVBAUTKDFCQUY4MjUxRDFBMTNGNDE4ODA2MEFCMTlBMDMwRDM2 Q0FBN0FCRDQwHhcNMjUwNDI0MTYxMzM4WhcNMjUwNTAxMTYxMzM4WjAYMRYwFAYD VQQDEw02ODBhNjMzMy0yMTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4BmhYMdonp6dsIQbq/UltIEW6m5AXfXV+5mamZbxvXDHjnKjKwn1q92N/+QY qXeYI0xnC4nguO3i6RkAyUZl2IIUDfXcb+GKZe6n3VPXOWOG3QCaZZ2CkGEC8EcJ UFkqwDZJqU6ARy1hfkkR6CyxFH4VKVJSvBP6hGUOCk3Ylo0j1Mt5JrFlEceJ7Fza COTTBFj9ORp1wflOKaIK3zvFuiY+UHPBTC527XF7H/20QnLe3YiMyytUBDMkgSM4 drde6m/SzHRF4LsfQkBYNpgR8XM3M7KhbwAwuDxhov7bij7u4I+IZN8m2cm0nulu xBarQLGFsRQnsvWCCFITVyI/9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIpCgQDx HJ4NZ34ebEsw26Aq7mAZMB8GA1UdIwQYMBaAFBuvglHRoT9BiAYKsZoDDTbKp6vU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzcwRC8xNzZENDExNEVE MjMxMUU2OTM4RkQzMThDNEY5QUUwMi9HNi1DVWRHaFAwR0lCZ3F4bWdNTk5zcW5x OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c2LUNVZEdoUDBHSUJncXhtZ01OTnNxbnE5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzcwRC8xNzZENDExNEVEMjMxMUU2OTM4RkQzMThDNEY5QUUwMi9HNi1DVWRHaFAw R0lCZ3F4bWdNTk5zcW5xOVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxtbukdj0uXfPADZfOp3SPVhH86aO+Ifg3tnlFmO6oGQT5CJyCJz9Q Csy61HKv53Evyn+X6hKtPOGqTbkWqXZcO2L4cRSFnymhsI/8qFO0/UEas9XWnNlJ pJ9MFIH/Ua87fNz8mUMfzCzIo+UJvLCZtt1QNHrUkDiQtGu6sU7JE85eh94HvduA oR4kYfTjylZ3zSJkAZ1cZ8U9haRCKwHaAxbDHEwkK4UbO0tWLLyxfiyG/DLFOcfb OCfq4+wXvpJ+087szkOmDuz39cgiUfRTkAe+mqfaEnTjSiZJsJKLudrVn6GjnZCj ze/XTd1+liaQDbIfPaE19NVj9lgHGh1L -----END CERTIFICATE-----Generated at Sat Apr 26 04:22:07 2025 by rpki-client