$ rpki-client -vvf rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.mft File: 6EKSkSMrng-5SFoKrUk9fgfH5NE.mft (raw, json) Hash identifier: KQtnyLrH3aExL2JHXezdSh2MaQbKhnNGfT5G3XqIT80= Subject key identifier: 57:3D:FE:95:DB:1E:40:9B:A8:78:CF:12:29:EA:3C:9C:23:ED:D1:6B Authority key identifier: E8:42:92:91:23:2B:9E:0F:B9:48:5A:0A:AD:49:3D:7E:07:C7:E4:D1 Certificate issuer: /CN=A9199696/serialNumber=E8429291232B9E0FB9485A0AAD493D7E07C7E4D1 Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EKSkSMrng-5SFoKrUk9fgfH5NE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.mft Manifest number: 21 Signing time: Fri 25 Apr 2025 06:49:15 +0000 Manifest this update: Fri 25 Apr 2025 06:49:15 +0000 Manifest next update: Fri 02 May 2025 06:49:14 +0000 Files and hashes: 1: 6EKSkSMrng-5SFoKrUk9fgfH5NE.crl (hash: eKa/rrcEypVXcG/0dV9UBKrawym2+o5JtdE48zBMOjA=) 2: 1A44E27AF1A711EFA441E72CC4F9AE02.roa (hash: +T8xPEy3qOwqRDiq3fa/SHDl3cgx+ER91jGPjiK2GbE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.crl rsync://rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EKSkSMrng-5SFoKrUk9fgfH5NE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:49:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199696, serialNumber=E8429291232B9E0FB9485A0AAD493D7E07C7E4D1 Validity Not Before: Apr 25 06:49:15 2025 GMT Not After : May 2 06:49:14 2025 GMT Subject: CN=680b306b-cecf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:bb:f0:6e:14:4d:39:e7:73:89:2a:40:c5:b2: 2e:56:90:d0:33:0d:ac:d5:d4:2b:32:b2:19:28:da: de:25:8b:5f:19:30:80:34:36:64:bf:87:3e:89:1e: bc:a7:db:b6:8a:74:f8:45:f5:f1:a8:a0:ec:f5:a1: 7f:e5:27:a1:e2:1b:3a:8f:9c:9f:63:95:96:37:9e: 27:6d:63:67:e8:8b:77:88:e9:f3:22:5e:fb:9b:3e: 70:d8:63:52:07:f1:43:4d:7c:e2:93:d1:3d:4d:b9: 72:f3:87:05:41:c5:4d:b0:d2:b1:e0:89:f5:27:c2: b8:50:75:1f:3e:25:c6:34:b1:71:c6:b7:bd:37:31: 69:26:a3:fb:31:09:c3:da:93:6d:8c:3e:69:69:7e: 5b:bd:9b:1a:f6:e0:47:3c:f7:4d:9a:57:d3:c8:45: b0:4d:8b:30:d5:63:83:9f:ac:50:4a:6a:77:ca:3d: 38:58:a5:33:84:ba:a1:a9:d4:ba:fb:87:84:c2:f4: 85:48:b5:0a:93:36:93:7c:9b:94:37:15:eb:58:82: 3d:cf:18:a4:88:2f:7c:12:7d:16:e8:93:5e:9e:94: 62:55:db:eb:5b:ce:d1:26:40:ba:a1:f4:55:c5:e4: f0:3a:17:5a:33:3f:c7:4d:0f:7f:8e:fa:c2:70:92: ef:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:3D:FE:95:DB:1E:40:9B:A8:78:CF:12:29:EA:3C:9C:23:ED:D1:6B X509v3 Authority Key Identifier: keyid:E8:42:92:91:23:2B:9E:0F:B9:48:5A:0A:AD:49:3D:7E:07:C7:E4:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EKSkSMrng-5SFoKrUk9fgfH5NE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:0c:f0:eb:e8:f9:2d:cf:28:8a:cc:0a:73:9c:8c:f4:fe:d0: 21:f1:2f:00:e8:7b:7e:61:f7:57:4e:bc:e6:fa:24:3b:e6:a2: a8:79:8d:a6:c5:5e:12:81:9d:83:8c:08:ec:9d:93:66:76:f7: ea:90:c9:57:4b:2e:ec:d9:24:b7:f2:79:56:fb:28:31:d4:0c: fb:01:0f:56:dd:70:28:ac:74:50:18:9c:e9:15:96:ba:70:fe: e0:8f:fc:57:53:b7:72:76:7d:aa:cc:5c:2a:6a:cd:ad:e3:ad: e3:06:fe:0f:e0:69:fa:1e:cf:8e:74:7d:12:9a:da:5c:33:ed: 13:ec:0b:5c:c7:d1:a2:36:8e:27:5f:fd:b6:94:fb:8e:3e:2b: 35:d7:d6:d5:d4:da:c0:ab:c5:ab:cc:c4:93:8c:7a:50:39:98: 1d:dd:69:52:be:1c:93:ac:7b:fd:6e:48:b8:40:db:10:2d:23: ac:12:cf:b2:aa:0d:02:aa:4b:1d:ea:74:79:7c:88:e9:7c:3c: 88:eb:a9:a2:34:92:e6:71:5c:73:fd:20:19:c6:dd:e3:f9:f4: 7d:38:31:ea:16:c6:50:58:d1:0b:26:1b:1a:c2:3b:90:f7:be: 5c:07:07:ac:b4:a9:7b:1e:5a:00:d6:1d:78:c7:65:3a:3d:26: dd:d3:97:05 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 OTY5NjExMC8GA1UEBRMoRTg0MjkyOTEyMzJCOUUwRkI5NDg1QTBBQUQ0OTNEN0Uw N0M3RTREMTAeFw0yNTA0MjUwNjQ5MTVaFw0yNTA1MDIwNjQ5MTRaMBgxFjAUBgNV BAMTDTY4MGIzMDZiLWNlY2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCu/BuFE0553OJKkDFsi5WkNAzDazV1Csyshko2t4li18ZMIA0NmS/hz6JHryn 27aKdPhF9fGooOz1oX/lJ6HiGzqPnJ9jlZY3nidtY2foi3eI6fMiXvubPnDYY1IH 8UNNfOKT0T1NuXLzhwVBxU2w0rHgifUnwrhQdR8+JcY0sXHGt703MWkmo/sxCcPa k22MPmlpflu9mxr24Ec8902aV9PIRbBNizDVY4OfrFBKanfKPThYpTOEuqGp1Lr7 h4TC9IVItQqTNpN8m5Q3FetYgj3PGKSIL3wSfRbok16elGJV2+tbztEmQLqh9FXF 5PA6F1ozP8dND3+O+sJwku+fAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVz3+ldse QJuoeM8SKeo8nCPt0WswHwYDVR0jBBgwFoAU6EKSkSMrng+5SFoKrUk9fgfH5NEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5Njk2LzJCODExNjU2RjFB NDExRUY4NDQ4RUIyMkM0RjlBRTAyLzZFS1NrU01ybmctNVNGb0tyVWs5ZmdmSDVO RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNkVLU2tTTXJuZy01U0ZvS3JVazlmZ2ZINU5FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5 Njk2LzJCODExNjU2RjFBNDExRUY4NDQ4RUIyMkM0RjlBRTAyLzZFS1NrU01ybmct NVNGb0tyVWs5ZmdmSDVORS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEAM8Ovo+S3PKIrMCnOcjPT+0CHxLwDoe35h91dOvOb6JDvmoqh5jabF XhKBnYOMCOydk2Z29+qQyVdLLuzZJLfyeVb7KDHUDPsBD1bdcCisdFAYnOkVlrpw /uCP/FdTt3J2farMXCpqza3jreMG/g/gafoez450fRKa2lwz7RPsC1zH0aI2jidf /baU+44+KzXX1tXU2sCrxavMxJOMelA5mB3daVK+HJOse/1uSLhA2xAtI6wSz7Kq DQKqSx3qdHl8iOl8PIjrqaI0kuZxXHP9IBnG3eP59H04MeoWxlBY0QsmGxrCO5D3 vlwHB6y0qXseWgDWHXjHZTo9Jt3TlwU= -----END CERTIFICATE-----Generated at Sat Apr 26 15:06:33 2025 by rpki-client