$ rpki-client -vvf rpki.apnic.net/member_repository/A9197E5D/4122CD9CF0B611ED8F44FB27C4F9AE02/C6aC6AONdxo3B-r6gv3QTEKaT4Y.mft File: C6aC6AONdxo3B-r6gv3QTEKaT4Y.mft (raw, json) Hash identifier: dGHPuElS0so8PC8ZTs/zgLsd6TX8CRmHRkJpwnWx6OQ= Subject key identifier: 84:C9:6F:D4:33:FF:65:72:83:DD:39:A3:35:8A:4C:CD:DD:37:FD:C0 Authority key identifier: 0B:A6:82:E8:03:8D:77:1A:37:07:EA:FA:82:FD:D0:4C:42:9A:4F:86 Certificate issuer: /CN=A9197E5D/serialNumber=0BA682E8038D771A3707EAFA82FDD04C429A4F86 Certificate serial: 0176 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6aC6AONdxo3B-r6gv3QTEKaT4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197E5D/4122CD9CF0B611ED8F44FB27C4F9AE02/C6aC6AONdxo3B-r6gv3QTEKaT4Y.mft Manifest number: 0172 Signing time: Fri 25 Apr 2025 02:58:46 +0000 Manifest this update: Fri 25 Apr 2025 02:58:46 +0000 Manifest next update: Fri 02 May 2025 02:58:46 +0000 Files and hashes: 1: C6aC6AONdxo3B-r6gv3QTEKaT4Y.crl (hash: vC5JYcppmmSNFDLv2fAjTWUNdKi/X46GVa8L44+OJBE=) 2: 582836EAF0BF11ED9EC0094AC4F9AE02.roa (hash: hIzR8zQHF9iXKmM1Y26mLPHbXqodEuNcMXt0RS8n034=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197E5D/4122CD9CF0B611ED8F44FB27C4F9AE02/C6aC6AONdxo3B-r6gv3QTEKaT4Y.crl rsync://rpki.apnic.net/member_repository/A9197E5D/4122CD9CF0B611ED8F44FB27C4F9AE02/C6aC6AONdxo3B-r6gv3QTEKaT4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6aC6AONdxo3B-r6gv3QTEKaT4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:58:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 374 (0x176) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197E5D, serialNumber=0BA682E8038D771A3707EAFA82FDD04C429A4F86 Validity Not Before: Apr 25 02:58:46 2025 GMT Not After : May 2 02:58:46 2025 GMT Subject: CN=680afa66-2c3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:36:44:b0:d6:62:c1:6f:f0:49:85:2f:46:17: 3b:86:67:21:b4:7d:a8:64:6a:37:eb:68:bf:23:b8: 9d:d0:be:c9:e0:7a:88:17:f8:3f:09:69:cb:96:49: 84:51:c9:4c:03:f0:6e:26:19:ba:9c:15:25:fb:87: 87:be:fd:aa:7a:7c:c8:29:0b:ca:e7:fe:df:66:d7: 42:a4:f2:6f:99:15:2a:d1:df:78:49:5d:c2:7b:e8: 84:4f:8a:da:20:a1:9e:11:92:1a:d4:63:52:3f:b1: 2d:88:89:7a:6f:d2:07:2d:d9:2e:98:f0:8d:70:e8: c9:ab:8d:2e:08:55:3f:16:8d:ec:6e:d6:b5:ff:a9: de:bc:90:0b:d4:62:98:88:07:b4:7f:c8:83:45:c0: c4:67:af:06:30:51:f0:c2:bd:7b:fe:d6:c8:4d:86: 0d:2a:50:ea:fe:14:5e:8e:c8:a4:68:53:83:51:72: 77:55:3d:fd:22:e8:12:8f:f0:93:85:f8:3a:5d:e0: 22:48:c4:60:2a:d8:d7:c8:d4:86:44:cf:98:38:5d: f0:23:8b:7a:1d:6d:39:b8:fd:dd:9f:52:d2:95:35: 33:9c:d7:42:d5:31:47:72:17:59:f0:01:c6:a0:40: 1b:58:c2:a6:80:99:e8:3c:8d:e4:95:c7:17:b2:05: b6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:C9:6F:D4:33:FF:65:72:83:DD:39:A3:35:8A:4C:CD:DD:37:FD:C0 X509v3 Authority Key Identifier: keyid:0B:A6:82:E8:03:8D:77:1A:37:07:EA:FA:82:FD:D0:4C:42:9A:4F:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197E5D/4122CD9CF0B611ED8F44FB27C4F9AE02/C6aC6AONdxo3B-r6gv3QTEKaT4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6aC6AONdxo3B-r6gv3QTEKaT4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197E5D/4122CD9CF0B611ED8F44FB27C4F9AE02/C6aC6AONdxo3B-r6gv3QTEKaT4Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:54:c3:f0:13:38:3a:9b:07:f2:e5:54:07:6f:f4:83:d0:78: f4:19:e2:30:f1:0a:75:7a:8a:3a:2e:e9:54:0b:d7:13:5d:c2: ce:f0:25:7d:0a:cb:de:99:bc:2d:99:cf:84:e7:6d:a5:87:f7: 4f:fa:84:53:8e:a5:ce:96:e1:4e:9d:d9:8e:5d:88:64:d9:70: c6:1b:f5:b7:09:c7:2f:01:4e:f4:51:9f:a6:01:f5:55:5c:c4: a7:28:69:64:e5:e7:c9:1e:26:1d:20:02:48:8c:5d:e3:74:84: 76:5b:36:70:73:8a:4b:c2:c7:9f:93:83:4a:8c:3d:10:b3:a2: 61:d2:68:93:b7:43:38:65:26:75:44:cd:52:47:94:93:cc:21: a9:08:b2:33:b6:2a:43:7e:b0:7f:95:47:42:43:f4:3f:2b:82: 3e:95:13:be:a7:47:2d:1c:f4:79:ba:60:7c:e0:db:9c:7c:96: da:e7:b7:77:33:5e:7c:5a:67:87:a6:81:76:e3:3c:f5:aa:38: a1:45:8a:9a:31:4f:3c:59:05:85:38:f0:57:8e:dd:8a:5c:b2: 0c:9b:7f:10:2b:fc:ec:6e:6a:59:ba:94:4b:36:6b:27:91:4c: 19:d8:35:ee:f9:17:9e:d7:30:3a:b9:8e:53:3a:9d:5c:d1:7a: b4:2c:a5:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdFNUQxMTAvBgNVBAUTKDBCQTY4MkU4MDM4RDc3MUEzNzA3RUFGQTgyRkREMDRD NDI5QTRGODYwHhcNMjUwNDI1MDI1ODQ2WhcNMjUwNTAyMDI1ODQ2WjAYMRYwFAYD VQQDEw02ODBhZmE2Ni0yYzNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2jZEsNZiwW/wSYUvRhc7hmchtH2oZGo362i/I7id0L7J4HqIF/g/CWnLlkmE UclMA/BuJhm6nBUl+4eHvv2qenzIKQvK5/7fZtdCpPJvmRUq0d94SV3Ce+iET4ra IKGeEZIa1GNSP7EtiIl6b9IHLdkumPCNcOjJq40uCFU/Fo3sbta1/6nevJAL1GKY iAe0f8iDRcDEZ68GMFHwwr17/tbITYYNKlDq/hRejsikaFODUXJ3VT39IugSj/CT hfg6XeAiSMRgKtjXyNSGRM+YOF3wI4t6HW05uP3dn1LSlTUznNdC1TFHchdZ8AHG oEAbWMKmgJnoPI3klccXsgW2hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFITJb9Qz /2Vyg905ozWKTM3dN/3AMB8GA1UdIwQYMBaAFAumgugDjXcaNwfq+oL90ExCmk+G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0U1RC80MTIyQ0Q5Q0Yw QjYxMUVEOEY0NEZCMjdDNEY5QUUwMi9DNmFDNkFPTmR4bzNCLXI2Z3YzUVRFS2FU NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M2YUM2QU9OZHhvM0ItcjZndjNRVEVLYVQ0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0U1RC80MTIyQ0Q5Q0YwQjYxMUVEOEY0NEZCMjdDNEY5QUUwMi9DNmFDNkFPTmR4 bzNCLXI2Z3YzUVRFS2FUNFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACVMPwEzg6mwfy5VQHb/SD0Hj0GeIw8Qp1eoo6LulUC9cTXcLO8CV9 Csvembwtmc+E522lh/dP+oRTjqXOluFOndmOXYhk2XDGG/W3CccvAU70UZ+mAfVV XMSnKGlk5efJHiYdIAJIjF3jdIR2WzZwc4pLwsefk4NKjD0Qs6Jh0miTt0M4ZSZ1 RM1SR5STzCGpCLIztipDfrB/lUdCQ/Q/K4I+lRO+p0ctHPR5umB84NucfJba57d3 M158WmeHpoF24zz1qjihRYqaMU88WQWFOPBXjt2KXLIMm38QK/zsbmpZupRLNmsn kUwZ2DXu+Ree1zA6uY5TOp1c0Xq0LKXD -----END CERTIFICATE-----Generated at Sat Apr 26 13:46:38 2025 by rpki-client