$ rpki-client -vvf rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.mft File: 6oOvSiHLwgcfVpVuXd1YTHY4-ls.mft (raw, json) Hash identifier: gRTtziqWRQ9eN5GnaGHwtgaRtoWItO9eH5wW6I7nXtU= Subject key identifier: CD:45:31:7A:DF:1E:03:FD:6A:78:BD:D2:30:10:65:DF:F3:5A:E7:12 Authority key identifier: EA:83:AF:4A:21:CB:C2:07:1F:56:95:6E:5D:DD:58:4C:76:38:FA:5B Certificate issuer: /CN=A911C362/serialNumber=EA83AF4A21CBC2071F56956E5DDD584C7638FA5B Certificate serial: CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.mft Manifest number: B8 Signing time: Sat 29 Mar 2025 05:40:44 +0000 Manifest this update: Sat 29 Mar 2025 05:40:44 +0000 Manifest next update: Sat 05 Apr 2025 05:40:44 +0000 Files and hashes: 1: 6oOvSiHLwgcfVpVuXd1YTHY4-ls.crl (hash: R2jcYX9rmFQo8ZX/WdRoNtHm+Bz+9IsSiVG/ovkLzHs=) 2: 6492D4985B9011EF8DB48C24C4F9AE02.roa (hash: 839PtDlknFxmB3zgVp3xI06k2fZt9x7Vqucm5KUUEiA=) 3: 90C05DD633A111EF862DBF10C4F9AE02.roa (hash: xnGbCBgPXY4F/fgFAEYRN9dsh6A0F9wHpHXallGErko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.crl rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 206 (0xce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C362 Validity Not Before: Mar 29 05:40:44 2025 GMT Not After : Apr 5 05:40:44 2025 GMT Subject: CN=67e787dc-9952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2f:72:95:e0:fd:36:f0:5a:87:90:d1:d0:99: da:ca:13:ec:19:bb:0a:f5:58:38:5e:0d:5e:0c:9a: 1f:76:44:f9:8f:fc:a3:45:2c:0c:66:11:22:15:33: 82:62:f3:50:c7:09:8c:f0:88:0c:88:db:42:dd:ef: 5b:e6:b1:82:5d:b3:04:24:aa:2b:b3:71:37:12:ff: 00:80:f1:ea:03:44:da:e2:6a:ff:0b:68:7f:51:bd: 11:2f:75:70:d5:e8:b7:44:29:98:2a:74:27:e4:9e: cd:de:e0:96:59:35:71:6f:41:ce:5a:f6:41:8b:4b: 25:cd:bb:2d:86:fd:58:a6:24:ce:b1:3b:de:46:8e: b6:a1:f8:f3:70:bd:b5:cf:95:c9:33:39:3c:da:66: 14:11:55:bd:20:72:82:5d:71:0c:6e:45:3b:00:6a: 99:5a:09:9c:35:fd:96:71:fd:c8:9f:3d:83:86:6d: 92:95:94:76:31:0a:de:39:eb:f5:a5:a0:9d:f5:11: 00:53:5c:3a:06:34:64:b4:e5:35:14:e6:10:f2:7b: 5c:d1:6e:ec:97:89:e7:41:fb:b8:ea:5b:b7:c7:11: 9a:cc:b8:3d:1b:a7:52:96:d0:43:24:49:9c:73:52: 2e:a1:1f:a8:aa:e5:d6:cd:34:4b:96:16:76:2a:5b: 1a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:45:31:7A:DF:1E:03:FD:6A:78:BD:D2:30:10:65:DF:F3:5A:E7:12 X509v3 Authority Key Identifier: keyid:EA:83:AF:4A:21:CB:C2:07:1F:56:95:6E:5D:DD:58:4C:76:38:FA:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:67:ea:9b:8e:33:04:6a:20:cd:84:8e:85:76:b1:d8:97:cc: f7:ce:df:ca:fa:9e:d9:ae:20:8f:ae:33:4e:49:9e:0b:d4:de: c9:f2:68:f0:db:54:35:7d:c7:58:21:57:44:23:36:a5:01:25: 85:14:fd:29:83:6f:15:14:b0:0a:50:ab:90:52:74:40:b5:5b: 90:49:8f:75:97:09:b2:45:aa:2c:e3:ef:03:59:b5:fb:02:e8: fb:90:87:de:e7:3a:01:86:31:64:94:ed:27:7d:00:c3:36:31: 6a:63:e8:b9:fd:2c:eb:75:f0:a7:aa:a5:80:18:c3:bd:58:ff: b9:6e:9d:58:75:34:80:43:fd:81:62:53:1b:db:b8:ac:7e:47: 05:be:a4:3a:55:fe:bd:bf:ec:2f:96:53:41:33:c7:63:63:e3: 07:df:38:24:8f:c4:67:b0:ad:1e:65:1b:c3:e9:41:0d:8e:a7: 29:63:86:29:20:84:a7:2f:a4:8d:1f:1d:4d:53:fe:7c:b2:de: 28:67:d7:12:fc:c4:7d:4e:ce:c8:1a:72:f3:fc:f7:7b:0c:c1: b7:39:26:8e:4a:4d:45:96:22:6d:29:c2:e4:bb:d1:23:40:03: 6b:62:1f:fd:ef:06:b9:87:5c:e6:18:51:6b:39:31:d7:11:5b: 48:fa:37:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMzNjIxMTAvBgNVBAUTKEVBODNBRjRBMjFDQkMyMDcxRjU2OTU2RTVEREQ1ODRD NzYzOEZBNUIwHhcNMjUwMzI5MDU0MDQ0WhcNMjUwNDA1MDU0MDQ0WjAYMRYwFAYD VQQDEw02N2U3ODdkYy05OTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyS9yleD9NvBah5DR0JnayhPsGbsK9Vg4Xg1eDJofdkT5j/yjRSwMZhEiFTOC YvNQxwmM8IgMiNtC3e9b5rGCXbMEJKors3E3Ev8AgPHqA0Ta4mr/C2h/Ub0RL3Vw 1ei3RCmYKnQn5J7N3uCWWTVxb0HOWvZBi0slzbsthv1YpiTOsTveRo62ofjzcL21 z5XJMzk82mYUEVW9IHKCXXEMbkU7AGqZWgmcNf2Wcf3Inz2Dhm2SlZR2MQreOev1 paCd9REAU1w6BjRktOU1FOYQ8ntc0W7sl4nnQfu46lu3xxGazLg9G6dSltBDJEmc c1IuoR+oquXWzTRLlhZ2KlsagQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM1FMXrf HgP9ani90jAQZd/zWucSMB8GA1UdIwQYMBaAFOqDr0ohy8IHH1aVbl3dWEx2OPpb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzM2Mi82QTA4RjQ5MjI1 NzcxMUVGQkIwQjgyNTFDNEY5QUUwMi82b092U2lITHdnY2ZWcFZ1WGQxWVRIWTQt bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZvT3ZTaUhMd2djZlZwVnVYZDFZVEhZNC1scy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzM2Mi82QTA4RjQ5MjI1NzcxMUVGQkIwQjgyNTFDNEY5QUUwMi82b092U2lITHdn Y2ZWcFZ1WGQxWVRIWTQtbHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3Z+qbjjMEaiDNhI6FdrHYl8z3zt/K+p7ZriCPrjNOSZ4L1N7J8mjw 21Q1fcdYIVdEIzalASWFFP0pg28VFLAKUKuQUnRAtVuQSY91lwmyRaos4+8DWbX7 Auj7kIfe5zoBhjFklO0nfQDDNjFqY+i5/SzrdfCnqqWAGMO9WP+5bp1YdTSAQ/2B YlMb27isfkcFvqQ6Vf69v+wvllNBM8djY+MH3zgkj8RnsK0eZRvD6UENjqcpY4Yp IISnL6SNHx1NU/58st4oZ9cS/MR9Ts7IGnLz/Pd7DMG3OSaOSk1FliJtKcLku9Ej QANrYh/97wa5h1zmGFFrOTHXEVtI+jdF -----END CERTIFICATE-----Generated at Fri Apr 4 18:35:55 2025 by rpki-client