$ rpki-client -vvf rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft File: 6Ihh_0pFOAJnqBtY-pnkia0AG70.mft (raw, json) Hash identifier: qjJ49XZI7If5pDB1KpygiUTndpBdMBHq8UxWfky7izc= Subject key identifier: C4:A9:20:0A:E0:1D:12:A9:E1:E5:89:FF:A6:F5:65:16:4C:E8:3F:E3 Authority key identifier: E8:88:61:FF:4A:45:38:02:67:A8:1B:58:FA:99:E4:89:AD:00:1B:BD Certificate issuer: /CN=A918ACB2/serialNumber=E88861FF4A45380267A81B58FA99E489AD001BBD Certificate serial: FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ihh_0pFOAJnqBtY-pnkia0AG70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft Manifest number: F4 Signing time: Fri 25 Apr 2025 04:23:16 +0000 Manifest this update: Fri 25 Apr 2025 04:23:15 +0000 Manifest next update: Fri 02 May 2025 04:23:15 +0000 Files and hashes: 1: 6Ihh_0pFOAJnqBtY-pnkia0AG70.crl (hash: lne7gnJaV7xzNacGu0amr0hR41HNhNcpocfzp3x/N8I=) 2: B66B434EBCE011EE98AEB646C4F9AE02.roa (hash: 4+NB3j+Ku9z9DW7nQRzRq87llzJ2sOudlesGDx2vWI8=) 3: BD1A38D4984B11EFB342C220C4F9AE02.roa (hash: EIknsqOvV+3/e4OowMHbRVdsbkd9a/wu1lD+d08gIWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.crl rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ihh_0pFOAJnqBtY-pnkia0AG70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:23:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 251 (0xfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918ACB2, serialNumber=E88861FF4A45380267A81B58FA99E489AD001BBD Validity Not Before: Apr 25 04:23:15 2025 GMT Not After : May 2 04:23:15 2025 GMT Subject: CN=680b0e34-b0c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1a:2c:d0:f3:42:02:04:0a:11:da:ef:7a:ae: b3:2d:f5:1d:0d:6f:85:3e:bb:8d:ca:40:59:70:34: 67:4a:19:57:b1:b7:e3:10:7d:56:bd:95:21:aa:aa: 09:07:7c:9d:6f:68:2c:cf:f1:6a:46:1e:4e:e1:6c: 99:73:ce:cf:8b:b6:61:7d:d9:1d:8d:1e:91:6b:1c: 80:63:8f:88:cd:b6:c0:eb:aa:61:e1:29:f6:95:7a: ae:1a:b2:08:f0:4f:2f:5d:b2:12:4f:9a:a9:54:89: c6:22:1c:61:06:8c:76:fa:7f:8c:9d:cb:4e:95:55: d0:9f:a2:1e:34:53:7f:82:0c:a3:57:42:f7:61:f8: bc:e1:57:bb:8d:f4:a2:9d:98:45:f1:c0:16:b5:4d: eb:94:49:1f:84:8a:b8:70:0f:16:ee:a2:0d:f8:6f: fd:95:b5:c0:a8:95:9f:c0:ef:f8:d9:c7:e4:25:97: 05:e2:84:27:2b:67:62:b5:00:80:9a:c1:13:54:f0: 26:81:95:62:74:6d:f1:df:f4:06:db:d4:ef:cc:c8: 9c:65:27:30:0f:74:a4:e5:a0:50:84:d2:7a:f3:07: b3:67:36:cf:df:88:5b:a1:ae:52:75:99:92:ca:2b: 44:eb:90:69:40:dc:2f:de:f6:46:be:6f:e7:e7:24: b7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:A9:20:0A:E0:1D:12:A9:E1:E5:89:FF:A6:F5:65:16:4C:E8:3F:E3 X509v3 Authority Key Identifier: keyid:E8:88:61:FF:4A:45:38:02:67:A8:1B:58:FA:99:E4:89:AD:00:1B:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ihh_0pFOAJnqBtY-pnkia0AG70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:8f:e0:1a:f5:10:07:91:cb:ec:d6:d1:ca:10:d0:25:1d:de: 6a:db:3a:9a:81:20:95:10:94:7a:0f:59:2c:db:7c:8e:51:0f: 72:9c:14:ff:8c:bd:34:67:04:34:da:36:f6:4a:ee:86:32:7a: fe:c9:44:13:ea:bf:7f:32:56:0c:10:75:00:7f:a4:34:b0:0a: 45:b9:16:d5:cf:b1:76:d6:06:95:a9:ea:6e:fc:7c:07:6e:41: 7c:55:79:af:b9:19:69:95:0c:46:b5:5c:f7:7b:3c:4a:ad:a2: 30:2f:60:25:fe:d5:74:e6:df:9e:7a:e0:d7:a8:ae:96:94:35: 92:0a:76:ff:e1:86:c5:56:31:40:90:f8:dc:dc:34:ff:b7:83: 3e:dd:8a:f4:37:25:40:94:71:f7:56:25:4d:0d:6d:f8:e7:9a: cc:72:2a:51:ca:06:0f:6b:e6:a2:1a:08:8a:e9:ed:d9:ef:4b: ae:b9:fb:07:37:e2:2c:cf:fa:01:5b:89:3e:ff:3e:eb:b0:b9: 9f:0a:d7:b9:6e:54:dc:9c:c5:6b:6c:40:04:76:08:ed:4b:71: a6:52:e8:71:ac:d8:3e:4e:10:9b:1c:e7:d2:6f:8f:fd:3e:85: 22:97:f2:20:7d:a4:71:83:dd:4d:c9:78:c5:49:c6:23:dd:79: f8:fb:fa:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEFDQjIxMTAvBgNVBAUTKEU4ODg2MUZGNEE0NTM4MDI2N0E4MUI1OEZBOTlFNDg5 QUQwMDFCQkQwHhcNMjUwNDI1MDQyMzE1WhcNMjUwNTAyMDQyMzE1WjAYMRYwFAYD VQQDEw02ODBiMGUzNC1iMGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAohos0PNCAgQKEdrveq6zLfUdDW+FPruNykBZcDRnShlXsbfjEH1WvZUhqqoJ B3ydb2gsz/FqRh5O4WyZc87Pi7ZhfdkdjR6RaxyAY4+IzbbA66ph4Sn2lXquGrII 8E8vXbIST5qpVInGIhxhBox2+n+MnctOlVXQn6IeNFN/ggyjV0L3Yfi84Ve7jfSi nZhF8cAWtU3rlEkfhIq4cA8W7qIN+G/9lbXAqJWfwO/42cfkJZcF4oQnK2ditQCA msETVPAmgZVidG3x3/QG29TvzMicZScwD3Sk5aBQhNJ68wezZzbP34hboa5SdZmS yitE65BpQNwv3vZGvm/n5yS3OwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMSpIArg HRKp4eWJ/6b1ZRZM6D/jMB8GA1UdIwQYMBaAFOiIYf9KRTgCZ6gbWPqZ5ImtABu9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUNCMi85RkU3NjBBNkI4 M0MxMUVFODc0MTkwMkVDNEY5QUUwMi82SWhoXzBwRk9BSm5xQnRZLXBua2lhMEFH NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZJaGhfMHBGT0FKbnFCdFktcG5raWEwQUc3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QUNCMi85RkU3NjBBNkI4M0MxMUVFODc0MTkwMkVDNEY5QUUwMi82SWhoXzBwRk9B Sm5xQnRZLXBua2lhMEFHNzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKj+Aa9RAHkcvs1tHKENAlHd5q2zqagSCVEJR6D1ks23yOUQ9ynBT/ jL00ZwQ02jb2Su6GMnr+yUQT6r9/MlYMEHUAf6Q0sApFuRbVz7F21gaVqepu/HwH bkF8VXmvuRlplQxGtVz3ezxKraIwL2Al/tV05t+eeuDXqK6WlDWSCnb/4YbFVjFA kPjc3DT/t4M+3Yr0NyVAlHH3ViVNDW3455rMcipRygYPa+aiGgiK6e3Z70uuufsH N+Isz/oBW4k+/z7rsLmfCte5blTcnMVrbEAEdgjtS3GmUuhxrNg+ThCbHOfSb4/9 PoUil/IgfaRxg91NyXjFScYj3Xn4+/pV -----END CERTIFICATE-----Generated at Sat Apr 26 17:15:18 2025 by rpki-client