$ rpki-client -vvf rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.mft File: 6FKljehxn4vGvWSUmFS0dEe4nN4.mft (raw, json) Hash identifier: LrwkInIzbdciHEZEE4wh1X5n307l8r4llK9p/1rALmM= Subject key identifier: D2:D9:FD:7F:9B:A3:44:07:1E:E1:78:44:39:AF:D9:B0:03:E1:C4:CC Authority key identifier: E8:52:A5:8D:E8:71:9F:8B:C6:BD:64:94:98:54:B4:74:47:B8:9C:DE Certificate issuer: /CN=A918F862/serialNumber=E852A58DE8719F8BC6BD64949854B47447B89CDE Certificate serial: 1125 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6FKljehxn4vGvWSUmFS0dEe4nN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.mft Manifest number: 1118 Signing time: Thu 24 Apr 2025 17:17:19 +0000 Manifest this update: Thu 24 Apr 2025 17:17:19 +0000 Manifest next update: Thu 01 May 2025 17:17:19 +0000 Files and hashes: 1: 6FKljehxn4vGvWSUmFS0dEe4nN4.crl (hash: 8DGd6C9hMYUAbWFCRk8NfiBZb+pnkK4Vhcn8gfOC7yA=) 2: D1D7F9AE0FF911E9B45E3B10C4F9AE02.roa (hash: 3Wqu6xOv+Yqgn98imVoKo0C/3S3sn8xVZaKt7qUGL5g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.crl rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6FKljehxn4vGvWSUmFS0dEe4nN4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:17:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4389 (0x1125) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F862, serialNumber=E852A58DE8719F8BC6BD64949854B47447B89CDE Validity Not Before: Apr 24 17:17:19 2025 GMT Not After : May 1 17:17:19 2025 GMT Subject: CN=680a721f-6979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:bd:76:8d:a5:38:18:e2:44:cf:0e:b6:20:47: 41:4b:32:be:c5:15:6c:ac:8b:3b:c8:9a:b9:e6:6d: 74:f9:4a:c6:af:dd:98:09:a6:04:10:1e:94:09:6d: 6a:08:4e:50:61:ba:58:81:2f:c3:fb:fa:00:52:b2: b8:65:ad:c5:c7:41:fb:79:8e:76:53:e4:75:f6:d0: 86:16:db:ef:10:62:cb:1f:65:1a:88:f0:58:48:ab: fd:4a:fd:b6:bd:59:f8:ba:6d:09:1f:49:61:81:74: ab:27:b9:41:6f:a1:c3:65:9d:0d:a2:20:1f:1e:f3: 1c:aa:e9:00:d8:ab:e4:3d:b1:16:52:dd:c3:f3:0c: 6b:c0:01:79:47:5a:e3:d4:3d:a9:b9:65:e6:ea:2b: 5b:c9:a7:2f:91:a9:f7:a3:d8:3f:94:70:35:05:ce: 73:e4:17:aa:b8:98:34:ab:ba:65:f0:06:69:d7:98: 5d:c8:7e:1f:ad:a3:17:b1:04:9c:70:be:db:e7:8f: a7:29:5e:93:4c:ab:da:61:8d:3f:67:f4:4d:36:2e: 11:bd:ee:38:fb:55:65:b9:0f:92:48:83:31:af:5d: 2f:f2:39:5a:96:41:12:00:f4:94:6d:ec:a6:dc:d1: f5:5f:83:97:59:f6:d9:41:f0:41:13:54:08:87:22: 6a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:D9:FD:7F:9B:A3:44:07:1E:E1:78:44:39:AF:D9:B0:03:E1:C4:CC X509v3 Authority Key Identifier: keyid:E8:52:A5:8D:E8:71:9F:8B:C6:BD:64:94:98:54:B4:74:47:B8:9C:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6FKljehxn4vGvWSUmFS0dEe4nN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:7b:60:77:11:c5:cf:23:78:6d:79:75:df:34:f1:0c:4f:bc: d2:33:5d:c3:8f:f3:b4:f2:ef:64:c5:47:a1:ca:25:c5:54:c1: 8a:54:8d:12:51:67:0d:35:66:3e:86:82:c7:8e:b2:17:d8:ff: 57:be:22:0a:b0:61:01:fd:ba:8d:f8:22:78:57:aa:9d:7c:c1: f2:6c:d7:58:67:d7:0f:23:8a:91:0d:ef:b2:59:4d:eb:f3:12: 4f:38:99:a9:9e:26:b6:e5:b7:9c:7f:be:08:46:2b:a7:a9:c0: 96:86:a4:09:bc:b2:10:fd:2e:25:70:26:d9:50:a1:a9:75:68: 62:4e:df:bd:fc:45:f0:15:5a:15:85:22:56:57:cb:13:d2:3a: 89:7d:4a:ea:14:36:bc:48:8b:b9:b0:6f:13:e5:fa:82:ca:54: 78:af:eb:41:0d:88:30:71:d5:dc:a4:77:5e:62:a3:94:28:03: 91:f3:fb:48:e9:70:9c:b0:ad:54:30:65:a4:51:8e:aa:4b:29: b1:61:21:c9:5c:cf:ee:ea:0d:42:1a:29:ad:ce:4e:80:46:d9: 39:0c:74:42:49:54:85:e9:19:a1:96:dc:37:cf:7a:34:28:3b: 59:49:5a:55:2f:86:1d:85:cb:a8:8a:05:64:0a:8a:00:5a:bb: d8:91:36:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICESUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY4NjIxMTAvBgNVBAUTKEU4NTJBNThERTg3MTlGOEJDNkJENjQ5NDk4NTRCNDc0 NDdCODlDREUwHhcNMjUwNDI0MTcxNzE5WhcNMjUwNTAxMTcxNzE5WjAYMRYwFAYD VQQDEw02ODBhNzIxZi02OTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9b12jaU4GOJEzw62IEdBSzK+xRVsrIs7yJq55m10+UrGr92YCaYEEB6UCW1q CE5QYbpYgS/D+/oAUrK4Za3Fx0H7eY52U+R19tCGFtvvEGLLH2UaiPBYSKv9Sv22 vVn4um0JH0lhgXSrJ7lBb6HDZZ0NoiAfHvMcqukA2KvkPbEWUt3D8wxrwAF5R1rj 1D2puWXm6itbyacvkan3o9g/lHA1Bc5z5BequJg0q7pl8AZp15hdyH4fraMXsQSc cL7b54+nKV6TTKvaYY0/Z/RNNi4Rve44+1VluQ+SSIMxr10v8jlalkESAPSUbeym 3NH1X4OXWfbZQfBBE1QIhyJqAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNLZ/X+b o0QHHuF4RDmv2bAD4cTMMB8GA1UdIwQYMBaAFOhSpY3ocZ+Lxr1klJhUtHRHuJze MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Rjg2Mi8xRTZGNkMxMjBG RjkxMUU5QTBEOTJCMEZDNEY5QUUwMi82RktsamVoeG40dkd2V1NVbUZTMGRFZTRu TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZGS2xqZWh4bjR2R3ZXU1VtRlMwZEVlNG5ONC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Rjg2Mi8xRTZGNkMxMjBGRjkxMUU5QTBEOTJCMEZDNEY5QUUwMi82RktsamVoeG40 dkd2V1NVbUZTMGRFZTRuTjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAve2B3EcXPI3hteXXfNPEMT7zSM13Dj/O08u9kxUehyiXFVMGKVI0S UWcNNWY+hoLHjrIX2P9XviIKsGEB/bqN+CJ4V6qdfMHybNdYZ9cPI4qRDe+yWU3r 8xJPOJmpnia25becf74IRiunqcCWhqQJvLIQ/S4lcCbZUKGpdWhiTt+9/EXwFVoV hSJWV8sT0jqJfUrqFDa8SIu5sG8T5fqCylR4r+tBDYgwcdXcpHdeYqOUKAOR8/tI 6XCcsK1UMGWkUY6qSymxYSHJXM/u6g1CGimtzk6ARtk5DHRCSVSF6Rmhltw3z3o0 KDtZSVpVL4YdhcuoigVkCooAWrvYkTY3 -----END CERTIFICATE-----Generated at Sat Apr 26 05:01:35 2025 by rpki-client