$ rpki-client -vvf rpki.apnic.net/member_repository/A919BC3B/C6BD547C39EE11EFA43D6586C4F9AE02/6PdV5x9e1_kTRSz_zj7UIIgSGmg.mft File: 6PdV5x9e1_kTRSz_zj7UIIgSGmg.mft (raw, json) Hash identifier: sP0WJlPiZQOKbxTwZno5OJjrW9LorLpzSTipWpI5/Co= Subject key identifier: E9:2C:3C:39:54:E4:4B:24:89:28:02:69:6E:8D:19:31:9D:22:03:6A Authority key identifier: E8:F7:55:E7:1F:5E:D7:F9:13:45:2C:FF:CE:3E:D4:20:88:12:1A:68 Certificate issuer: /CN=A919BC3B/serialNumber=E8F755E71F5ED7F913452CFFCE3ED42088121A68 Certificate serial: 9C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6PdV5x9e1_kTRSz_zj7UIIgSGmg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919BC3B/C6BD547C39EE11EFA43D6586C4F9AE02/6PdV5x9e1_kTRSz_zj7UIIgSGmg.mft Manifest number: 9B Signing time: Thu 01 May 2025 05:16:21 +0000 Manifest this update: Thu 01 May 2025 05:16:21 +0000 Manifest next update: Thu 08 May 2025 05:16:21 +0000 Files and hashes: 1: 6PdV5x9e1_kTRSz_zj7UIIgSGmg.crl (hash: 3kRQHbVYC/vbZfnP01JyVLVTPMxoub418j5sMCNyF34=) 2: 2C00BB1239EF11EFB6EE4687C4F9AE02.roa (hash: Oc2GQXIqmMlslfVaKJ/oBsTF1uhwqc79kyqv7lPwXrc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919BC3B/C6BD547C39EE11EFA43D6586C4F9AE02/6PdV5x9e1_kTRSz_zj7UIIgSGmg.crl rsync://rpki.apnic.net/member_repository/A919BC3B/C6BD547C39EE11EFA43D6586C4F9AE02/6PdV5x9e1_kTRSz_zj7UIIgSGmg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6PdV5x9e1_kTRSz_zj7UIIgSGmg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 05:16:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 156 (0x9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919BC3B, serialNumber=E8F755E71F5ED7F913452CFFCE3ED42088121A68 Validity Not Before: May 1 05:16:21 2025 GMT Not After : May 8 05:16:21 2025 GMT Subject: CN=681303a5-2c1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d7:76:62:77:c3:72:3a:53:83:c9:52:7c:f5: b2:bd:6a:f0:6f:32:20:6d:20:c2:98:bc:80:96:ef: 15:ea:24:64:08:8f:58:ce:b7:46:2a:fd:8d:d1:02: 5c:62:ea:a2:b6:d3:76:d3:5e:86:5e:28:05:a9:c0: db:d2:f2:18:97:c3:be:a9:9d:2b:df:14:81:4d:2d: f5:15:82:16:5c:ad:b6:08:66:b6:1b:e7:0e:c8:a9: 5e:be:1a:ff:76:67:41:7d:5e:06:14:96:df:c0:4c: 8d:9e:f0:ed:1a:63:4e:0d:ec:73:8c:d2:09:71:7a: 83:81:cc:b5:58:89:87:28:ec:02:0d:4f:7c:99:9b: 6d:2b:f1:b1:d0:1a:73:97:3a:8a:88:6e:88:8f:e1: b1:aa:eb:10:08:6d:83:61:b0:69:de:60:7e:d6:3a: 1d:2c:f8:b3:e4:46:e5:42:18:e5:eb:9d:7e:2f:ce: 4a:1c:fe:d4:ff:5a:2f:29:09:03:2d:ff:44:08:8b: 25:df:41:20:cc:12:fc:28:0a:c6:c3:91:9f:2a:a1: 73:94:af:f5:bf:b7:cc:89:5e:6f:e6:19:87:11:76: 1e:2a:4e:c8:cb:66:66:07:fd:ac:ff:29:5f:e3:af: a4:3f:9c:21:1f:19:3c:d4:6e:54:be:96:f3:eb:1c: 40:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:2C:3C:39:54:E4:4B:24:89:28:02:69:6E:8D:19:31:9D:22:03:6A X509v3 Authority Key Identifier: keyid:E8:F7:55:E7:1F:5E:D7:F9:13:45:2C:FF:CE:3E:D4:20:88:12:1A:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919BC3B/C6BD547C39EE11EFA43D6586C4F9AE02/6PdV5x9e1_kTRSz_zj7UIIgSGmg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6PdV5x9e1_kTRSz_zj7UIIgSGmg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BC3B/C6BD547C39EE11EFA43D6586C4F9AE02/6PdV5x9e1_kTRSz_zj7UIIgSGmg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:69:9f:94:ab:ad:a0:90:88:81:a8:a5:64:c3:1d:59:2b:ac: d5:12:69:4c:e8:42:86:15:f0:2c:7e:62:ab:ed:9c:96:fe:95: 94:30:86:d5:7d:c0:c8:22:c1:07:bb:35:f9:ac:50:f2:12:d4: 54:41:ae:50:e9:fc:61:25:40:5e:0f:34:8f:86:63:61:d3:a1: 83:09:fe:cf:19:60:00:10:01:13:73:c4:41:b6:89:5f:3f:d6: e2:59:5c:61:9e:67:27:ac:bb:84:e0:29:ab:53:88:9f:83:73: af:88:84:df:dd:92:ce:ea:a9:9c:6d:9c:f3:cd:40:ba:8d:8f: 16:84:c2:b3:ac:2d:4e:17:26:29:ca:c6:cd:75:3c:22:e1:c0: ad:ad:2c:e5:eb:8d:20:25:77:be:b8:63:d5:92:81:91:e4:f6: 64:73:24:94:47:1e:ae:c4:cd:46:7e:2b:b2:2e:84:0e:dc:65: 0a:aa:8a:1e:47:9e:d5:51:bf:54:0b:0c:bc:88:36:7f:ff:63: 99:07:cb:4f:d1:4f:03:24:ce:9a:ef:b9:34:57:3d:e4:41:e2: f2:d1:c3:ed:1e:11:dc:97:00:33:25:1f:d4:82:cd:6d:a2:a6: 6c:2e:1c:f1:31:45:cb:3d:ea:77:08:b6:09:7c:a9:d4:49:7c: 21:3b:f5:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUJDM0IxMTAvBgNVBAUTKEU4Rjc1NUU3MUY1RUQ3RjkxMzQ1MkNGRkNFM0VENDIw ODgxMjFBNjgwHhcNMjUwNTAxMDUxNjIxWhcNMjUwNTA4MDUxNjIxWjAYMRYwFAYD VQQDEw02ODEzMDNhNS0yYzFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxdd2YnfDcjpTg8lSfPWyvWrwbzIgbSDCmLyAlu8V6iRkCI9YzrdGKv2N0QJc YuqittN2016GXigFqcDb0vIYl8O+qZ0r3xSBTS31FYIWXK22CGa2G+cOyKlevhr/ dmdBfV4GFJbfwEyNnvDtGmNODexzjNIJcXqDgcy1WImHKOwCDU98mZttK/Gx0Bpz lzqKiG6Ij+GxqusQCG2DYbBp3mB+1jodLPiz5EblQhjl651+L85KHP7U/1ovKQkD Lf9ECIsl30EgzBL8KArGw5GfKqFzlK/1v7fMiV5v5hmHEXYeKk7Iy2ZmB/2s/ylf 46+kP5whHxk81G5Uvpbz6xxAIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOksPDlU 5EskiSgCaW6NGTGdIgNqMB8GA1UdIwQYMBaAFOj3VecfXtf5E0Us/84+1CCIEhpo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QkMzQi9DNkJENTQ3QzM5 RUUxMUVGQTQzRDY1ODZDNEY5QUUwMi82UGRWNXg5ZTFfa1RSU3pfemo3VUlJZ1NH bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZQZFY1eDllMV9rVFJTel96ajdVSUlnU0dtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QkMzQi9DNkJENTQ3QzM5RUUxMUVGQTQzRDY1ODZDNEY5QUUwMi82UGRWNXg5ZTFf a1RSU3pfemo3VUlJZ1NHbWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5aZ+Uq62gkIiBqKVkwx1ZK6zVEmlM6EKGFfAsfmKr7ZyW/pWUMIbV fcDIIsEHuzX5rFDyEtRUQa5Q6fxhJUBeDzSPhmNh06GDCf7PGWAAEAETc8RBtolf P9biWVxhnmcnrLuE4CmrU4ifg3OviITf3ZLO6qmcbZzzzUC6jY8WhMKzrC1OFyYp ysbNdTwi4cCtrSzl640gJXe+uGPVkoGR5PZkcySURx6uxM1GfiuyLoQO3GUKqooe R57VUb9UCwy8iDZ//2OZB8tP0U8DJM6a77k0Vz3kQeLy0cPtHhHclwAzJR/Ugs1t oqZsLhzxMUXLPep3CLYJfKnUSXwhO/U3 -----END CERTIFICATE-----Generated at Fri May 2 02:44:47 2025 by rpki-client