$ rpki-client -vvf rpki.apnic.net/member_repository/A9112327/6DD2C034905D11EAA7BF7725C4F9AE02/6HvQXvddUFllr1CWfUKLtf_-HME.mft File: 6HvQXvddUFllr1CWfUKLtf_-HME.mft (raw, json) Hash identifier: RI1zXEpOtWN4TKvW6MCX1zUTzKV12mdRhp0Iv7CLUAU= Subject key identifier: 3A:A6:29:5F:99:CD:BA:49:88:BE:E3:61:9A:F5:D6:9D:CA:A4:4A:92 Authority key identifier: E8:7B:D0:5E:F7:5D:50:59:65:AF:50:96:7D:42:8B:B5:FF:FE:1C:C1 Certificate issuer: /CN=A9112327/serialNumber=E87BD05EF75D505965AF50967D428BB5FFFE1CC1 Certificate serial: 096A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HvQXvddUFllr1CWfUKLtf_-HME.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112327/6DD2C034905D11EAA7BF7725C4F9AE02/6HvQXvddUFllr1CWfUKLtf_-HME.mft Manifest number: 0964 Signing time: Sun 20 Apr 2025 19:57:12 +0000 Manifest this update: Sun 20 Apr 2025 19:57:11 +0000 Manifest next update: Sun 27 Apr 2025 19:57:11 +0000 Files and hashes: 1: 6HvQXvddUFllr1CWfUKLtf_-HME.crl (hash: SMwU2ja1lNammKVTNVhHvHIywfhlQEPwGcVIyiSWaRE=) 2: 03643212905F11EA94823C28C4F9AE02.roa (hash: 32+oXxBFhxUG2PWTRaAsdjIfsPq4UsynI3l5ImWQiRY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112327/6DD2C034905D11EAA7BF7725C4F9AE02/6HvQXvddUFllr1CWfUKLtf_-HME.crl rsync://rpki.apnic.net/member_repository/A9112327/6DD2C034905D11EAA7BF7725C4F9AE02/6HvQXvddUFllr1CWfUKLtf_-HME.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HvQXvddUFllr1CWfUKLtf_-HME.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 19:57:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2410 (0x96a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112327, serialNumber=E87BD05EF75D505965AF50967D428BB5FFFE1CC1 Validity Not Before: Apr 20 19:57:11 2025 GMT Not After : Apr 27 19:57:11 2025 GMT Subject: CN=68055197-b641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b1:b0:35:78:6e:ed:72:7d:22:6a:bd:af:85: cf:3b:f1:40:74:f2:47:17:fd:06:ff:f9:88:a8:d0: d8:44:11:e7:1f:28:52:b7:f0:f1:df:60:e9:23:6b: c0:06:9c:e7:36:a8:2c:5d:b7:8f:19:cc:60:1c:04: d1:cd:81:55:09:6a:aa:34:93:c0:9b:d9:9c:73:f4: e1:1c:df:c8:4e:b3:1d:a6:8c:7b:51:66:0a:14:cf: ce:46:fa:da:09:16:cc:de:cb:f6:3e:24:22:db:54: 69:49:ad:56:6c:5c:be:e5:11:92:03:80:66:5b:24: ab:d1:41:04:ac:a7:5b:42:7b:e9:c3:db:96:de:03: ff:0f:57:b3:40:73:c8:1d:09:6a:08:60:29:f0:ca: c7:bf:b3:d8:96:3b:06:d0:19:b6:cd:35:e4:34:34: 7c:7c:5f:6e:2b:96:89:3d:a5:94:5d:a9:2c:dd:80: 5a:14:4b:1a:47:99:a0:a6:6b:21:5a:e6:52:7a:66: e8:93:08:45:fc:b9:f9:76:ac:7b:f1:7a:71:a0:08: a8:e5:29:14:51:a1:85:d7:12:3f:4d:9d:65:be:a2: 37:12:9a:00:d9:da:65:64:f0:9e:09:7e:b6:a4:53: 5e:29:0a:f3:98:d6:bc:c7:2b:e5:77:b7:18:0e:7c: 6f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:A6:29:5F:99:CD:BA:49:88:BE:E3:61:9A:F5:D6:9D:CA:A4:4A:92 X509v3 Authority Key Identifier: keyid:E8:7B:D0:5E:F7:5D:50:59:65:AF:50:96:7D:42:8B:B5:FF:FE:1C:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112327/6DD2C034905D11EAA7BF7725C4F9AE02/6HvQXvddUFllr1CWfUKLtf_-HME.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HvQXvddUFllr1CWfUKLtf_-HME.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112327/6DD2C034905D11EAA7BF7725C4F9AE02/6HvQXvddUFllr1CWfUKLtf_-HME.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:25:c2:cc:5e:6a:c2:39:2c:58:c7:0c:45:84:02:ae:d1:0c: d6:43:41:1b:c9:bd:e0:d9:ae:a2:4c:83:21:81:b1:36:09:e7: 75:f1:e9:64:3c:7d:c8:db:b3:71:0a:3f:07:28:57:0a:ad:c9: f1:c9:b7:a5:0b:69:d4:85:59:e3:3e:8e:58:9d:4c:fd:59:88: 80:93:62:78:e4:b4:d0:0c:17:ea:13:55:01:e5:3c:12:1e:9d: a2:43:05:ba:09:39:5c:85:ba:db:e8:3a:ac:ff:1e:e0:a0:d4: 3b:b3:45:dc:e8:9f:1b:52:09:cc:3d:3d:84:f8:81:f8:4e:c2: 21:82:42:0b:89:34:94:a8:3d:2d:91:86:85:f7:a6:e2:f3:5a: 25:8a:d2:d2:ca:16:f1:d4:41:80:f8:db:29:b7:3a:ee:14:05: d8:c6:ef:1d:8d:e6:92:e6:f3:7f:02:58:bd:52:03:18:a9:cb: 17:4a:9a:92:43:66:4a:2c:a6:c0:29:89:a1:4e:40:26:70:33: 71:e2:79:66:cf:0c:7b:0c:da:0d:28:b5:1d:e0:6a:ed:cd:5a: 5c:26:74:58:a7:2c:80:b6:d1:0f:45:d0:a0:cc:e5:37:1b:1f: a9:a1:b9:61:1d:01:6a:32:4f:46:b2:42:9f:98:6b:35:2f:0a: 0d:49:4c:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTIzMjcxMTAvBgNVBAUTKEU4N0JEMDVFRjc1RDUwNTk2NUFGNTA5NjdENDI4QkI1 RkZGRTFDQzEwHhcNMjUwNDIwMTk1NzExWhcNMjUwNDI3MTk1NzExWjAYMRYwFAYD VQQDEw02ODA1NTE5Ny1iNjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtLGwNXhu7XJ9Imq9r4XPO/FAdPJHF/0G//mIqNDYRBHnHyhSt/Dx32DpI2vA BpznNqgsXbePGcxgHATRzYFVCWqqNJPAm9mcc/ThHN/ITrMdpox7UWYKFM/ORvra CRbM3sv2PiQi21RpSa1WbFy+5RGSA4BmWySr0UEErKdbQnvpw9uW3gP/D1ezQHPI HQlqCGAp8MrHv7PYljsG0Bm2zTXkNDR8fF9uK5aJPaWUXaks3YBaFEsaR5mgpmsh WuZSembokwhF/Ln5dqx78XpxoAio5SkUUaGF1xI/TZ1lvqI3EpoA2dplZPCeCX62 pFNeKQrzmNa8xyvld7cYDnxv9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDqmKV+Z zbpJiL7jYZr11p3KpEqSMB8GA1UdIwQYMBaAFOh70F73XVBZZa9Qln1Ci7X//hzB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjMyNy82REQyQzAzNDkw NUQxMUVBQTdCRjc3MjVDNEY5QUUwMi82SHZRWHZkZFVGbGxyMUNXZlVLTHRmXy1I TUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZIdlFYdmRkVUZsbHIxQ1dmVUtMdGZfLUhNRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjMyNy82REQyQzAzNDkwNUQxMUVBQTdCRjc3MjVDNEY5QUUwMi82SHZRWHZkZFVG bGxyMUNXZlVLTHRmXy1ITUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPJcLMXmrCOSxYxwxFhAKu0QzWQ0Ebyb3g2a6iTIMhgbE2Ced18elk PH3I27NxCj8HKFcKrcnxybelC2nUhVnjPo5YnUz9WYiAk2J45LTQDBfqE1UB5TwS Hp2iQwW6CTlchbrb6Dqs/x7goNQ7s0Xc6J8bUgnMPT2E+IH4TsIhgkILiTSUqD0t kYaF96bi81olitLSyhbx1EGA+NsptzruFAXYxu8djeaS5vN/Ali9UgMYqcsXSpqS Q2ZKLKbAKYmhTkAmcDNx4nlmzwx7DNoNKLUd4GrtzVpcJnRYpyyAttEPRdCgzOU3 Gx+poblhHQFqMk9GskKfmGs1LwoNSUyK -----END CERTIFICATE-----Generated at Tue Apr 22 02:09:41 2025 by rpki-client