$ rpki-client -vvf rpki.apnic.net/member_repository/A9194AE2/2F03F57C3BAC11EF9D7EA871C4F9AE02/G6b_I23_7pYJaapF2ZXZb-TSmPE.mft File: G6b_I23_7pYJaapF2ZXZb-TSmPE.mft (raw, json) Hash identifier: 4twIDkZGM2jUyHXNPm/o08PAt9PwKR6OGwcb+sxGrmM= Subject key identifier: F4:BC:A5:CD:CE:B9:79:28:1C:3C:E6:C4:C5:61:5C:33:C1:2C:7F:06 Authority key identifier: 1B:A6:FF:23:6D:FF:EE:96:09:69:AA:45:D9:95:D9:6F:E4:D2:98:F1 Certificate issuer: /CN=A9194AE2/serialNumber=1BA6FF236DFFEE960969AA45D995D96FE4D298F1 Certificate serial: 96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6b_I23_7pYJaapF2ZXZb-TSmPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194AE2/2F03F57C3BAC11EF9D7EA871C4F9AE02/G6b_I23_7pYJaapF2ZXZb-TSmPE.mft Manifest number: 96 Signing time: Fri 25 Apr 2025 05:20:24 +0000 Manifest this update: Fri 25 Apr 2025 05:20:23 +0000 Manifest next update: Fri 02 May 2025 05:20:23 +0000 Files and hashes: 1: G6b_I23_7pYJaapF2ZXZb-TSmPE.crl (hash: qSnC9hlttxqAIDpJuS8VhWBaq5GDeHdqNrnHV3RWsbA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194AE2/2F03F57C3BAC11EF9D7EA871C4F9AE02/G6b_I23_7pYJaapF2ZXZb-TSmPE.crl rsync://rpki.apnic.net/member_repository/A9194AE2/2F03F57C3BAC11EF9D7EA871C4F9AE02/G6b_I23_7pYJaapF2ZXZb-TSmPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6b_I23_7pYJaapF2ZXZb-TSmPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 150 (0x96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194AE2, serialNumber=1BA6FF236DFFEE960969AA45D995D96FE4D298F1 Validity Not Before: Apr 25 05:20:23 2025 GMT Not After : May 2 05:20:23 2025 GMT Subject: CN=680b1b98-7034 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d3:ca:52:ec:04:85:f9:2e:f1:a2:14:1d:0e: 4d:62:07:95:6a:d5:14:0a:a7:32:07:d9:06:e5:3c: 28:59:1a:c7:a3:56:e2:ea:06:e7:fc:4c:32:05:06: ca:37:f9:62:b2:4b:59:08:29:79:5e:3a:6a:c6:41: 4d:75:16:62:38:25:95:96:f8:00:54:5a:dd:71:a9: 93:4b:3d:c9:e3:28:f5:f6:3b:cf:f9:6e:4f:55:7b: 49:2c:88:ed:ac:d1:5f:05:5a:59:2e:81:c2:7b:bd: 42:5c:69:01:bd:40:e9:ca:4b:5a:f0:1c:7f:6e:f4: 65:c1:3b:36:87:33:02:c9:cf:7e:80:7d:9e:d6:09: 61:f7:4c:09:11:1d:32:43:ef:36:78:54:ca:bc:58: 39:fd:6d:bb:c1:1a:ce:63:b0:01:79:80:15:88:ee: f2:b1:5a:f3:3f:bf:ba:3e:2a:b6:bc:d4:53:e8:65: b5:43:03:39:2f:1e:ad:b2:80:eb:33:51:79:2b:32: 8a:84:83:f0:e6:3f:ef:9e:12:f0:ed:e1:8a:35:6c: 98:10:25:c6:67:0e:85:bc:f3:aa:6c:29:82:9f:36: 8e:03:bc:ba:db:f4:10:79:7a:3d:76:e3:0b:34:86: 5d:71:c0:00:5f:5d:0d:1f:79:de:7a:cf:a7:aa:c9: 1f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:BC:A5:CD:CE:B9:79:28:1C:3C:E6:C4:C5:61:5C:33:C1:2C:7F:06 X509v3 Authority Key Identifier: keyid:1B:A6:FF:23:6D:FF:EE:96:09:69:AA:45:D9:95:D9:6F:E4:D2:98:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194AE2/2F03F57C3BAC11EF9D7EA871C4F9AE02/G6b_I23_7pYJaapF2ZXZb-TSmPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6b_I23_7pYJaapF2ZXZb-TSmPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194AE2/2F03F57C3BAC11EF9D7EA871C4F9AE02/G6b_I23_7pYJaapF2ZXZb-TSmPE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:d0:b1:b4:78:be:77:29:a8:fc:04:a7:6f:01:24:01:14:b6: 10:ea:31:a1:20:d4:f9:cc:5e:7d:ca:e7:f7:62:b1:3f:3f:09: b1:e4:9e:f6:50:66:26:67:cf:f8:bb:17:c5:cd:f3:88:aa:59: 72:76:e3:45:13:f2:6c:f4:8a:24:ab:4d:46:66:8f:a0:04:d5: 5b:f2:10:66:61:0b:00:51:12:11:e0:59:08:ce:c8:ee:73:57: c6:bc:8c:dc:d3:cb:b2:14:e0:2b:34:fb:30:58:cf:f3:ac:e8: 8e:ff:0e:26:68:17:74:80:1c:1b:76:a5:0e:9f:0e:97:6e:96: 3a:9a:ef:e7:07:0d:be:7a:92:1e:1d:e6:9e:86:9a:2c:44:f6: ae:40:50:54:b1:91:2e:16:ec:89:50:ca:1f:71:bd:16:ea:b2: 1d:57:e3:b3:2f:96:64:3a:46:4a:fc:7d:88:7e:1f:fe:b3:0a: 14:0b:2f:f8:9b:f9:f0:40:89:a2:dd:3c:b7:a1:53:46:ca:d5: 07:16:fa:ff:34:40:ba:b5:38:dc:5c:5a:e0:c2:d6:2f:58:92: d6:a9:94:22:18:fb:6f:a2:1b:c1:3c:1f:de:2c:e4:4c:2c:d1: cc:f5:57:06:37:c7:92:0a:08:82:d0:56:99:6b:c1:bb:9c:eb: 13:17:e8:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRBRTIxMTAvBgNVBAUTKDFCQTZGRjIzNkRGRkVFOTYwOTY5QUE0NUQ5OTVEOTZG RTREMjk4RjEwHhcNMjUwNDI1MDUyMDIzWhcNMjUwNTAyMDUyMDIzWjAYMRYwFAYD VQQDEw02ODBiMWI5OC03MDM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqdPKUuwEhfku8aIUHQ5NYgeVatUUCqcyB9kG5TwoWRrHo1bi6gbn/EwyBQbK N/lisktZCCl5XjpqxkFNdRZiOCWVlvgAVFrdcamTSz3J4yj19jvP+W5PVXtJLIjt rNFfBVpZLoHCe71CXGkBvUDpykta8Bx/bvRlwTs2hzMCyc9+gH2e1glh90wJER0y Q+82eFTKvFg5/W27wRrOY7ABeYAViO7ysVrzP7+6Piq2vNRT6GW1QwM5Lx6tsoDr M1F5KzKKhIPw5j/vnhLw7eGKNWyYECXGZw6FvPOqbCmCnzaOA7y62/QQeXo9duML NIZdccAAX10NH3nees+nqskftwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPS8pc3O uXkoHDzmxMVhXDPBLH8GMB8GA1UdIwQYMBaAFBum/yNt/+6WCWmqRdmV2W/k0pjx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEFFMi8yRjAzRjU3QzNC QUMxMUVGOUQ3RUE4NzFDNEY5QUUwMi9HNmJfSTIzXzdwWUphYXBGMlpYWmItVFNt UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c2Yl9JMjNfN3BZSmFhcEYyWlhaYi1UU21QRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEFFMi8yRjAzRjU3QzNCQUMxMUVGOUQ3RUE4NzFDNEY5QUUwMi9HNmJfSTIzXzdw WUphYXBGMlpYWmItVFNtUEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBF0LG0eL53Kaj8BKdvASQBFLYQ6jGhINT5zF59yuf3YrE/Pwmx5J72 UGYmZ8/4uxfFzfOIqllyduNFE/Js9Iokq01GZo+gBNVb8hBmYQsAURIR4FkIzsju c1fGvIzc08uyFOArNPswWM/zrOiO/w4maBd0gBwbdqUOnw6XbpY6mu/nBw2+epIe HeaehposRPauQFBUsZEuFuyJUMofcb0W6rIdV+OzL5ZkOkZK/H2Ifh/+swoUCy/4 m/nwQImi3Ty3oVNGytUHFvr/NEC6tTjcXFrgwtYvWJLWqZQiGPtvohvBPB/eLORM LNHM9VcGN8eSCgiC0FaZa8G7nOsTF+iU -----END CERTIFICATE-----Generated at Sat Apr 26 13:03:20 2025 by rpki-client