$ rpki-client -vvf rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft File: B6YH3KkzMh_3j-xozXpMFJVDel8.mft (raw, json) Hash identifier: a5eMXjeKF+bY/yIzG2abgsS8yj4UEaSIMskHhPabwYE= Subject key identifier: D6:9F:9F:40:B5:45:78:25:BF:BA:01:0E:2B:3A:A0:A2:70:D4:83:6C Authority key identifier: 07:A6:07:DC:A9:33:32:1F:F7:8F:EC:68:CD:7A:4C:14:95:43:7A:5F Certificate issuer: /CN=A9129DCB/serialNumber=07A607DCA933321FF78FEC68CD7A4C1495437A5F Certificate serial: 0993 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6YH3KkzMh_3j-xozXpMFJVDel8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft Manifest number: 0985 Signing time: Wed 16 Apr 2025 19:56:44 +0000 Manifest this update: Wed 16 Apr 2025 19:56:43 +0000 Manifest next update: Wed 23 Apr 2025 19:56:43 +0000 Files and hashes: 1: B6YH3KkzMh_3j-xozXpMFJVDel8.crl (hash: y1BiIXy+bPw5tL+XzN4nvM5BK0uBp9UAMG0SoC8NDFM=) 2: BAA6E77E852D11ED9A1A8D47C4F9AE02.roa (hash: LpYZeCMqtoq3Zi6VrSOzNbUcfWQzSLEFLO1bEbqVHyo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.crl rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6YH3KkzMh_3j-xozXpMFJVDel8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 19:56:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2451 (0x993) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129DCB, serialNumber=07A607DCA933321FF78FEC68CD7A4C1495437A5F Validity Not Before: Apr 16 19:56:43 2025 GMT Not After : Apr 23 19:56:43 2025 GMT Subject: CN=68000b7b-f927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:62:45:e4:ad:b0:81:2d:8a:42:cd:09:04:8a: 25:cd:92:42:eb:18:ce:72:92:18:ec:8e:30:7d:ac: 6b:94:63:9b:3c:2d:f6:8e:78:8e:78:f2:7b:4e:18: e9:61:c0:3f:1a:66:7a:e7:62:5e:1f:e0:43:0a:fe: 63:dd:2c:ec:e4:e7:32:10:5d:d2:63:2c:ef:82:fb: 04:c9:95:12:a7:24:8a:5f:70:df:b0:48:8a:d6:8b: 11:f5:de:09:ba:21:6f:2c:21:25:ed:b2:a1:aa:4a: 42:7f:f5:7f:8c:a4:ae:94:d2:04:a9:e5:34:5e:e5: 35:ea:45:3b:da:2d:15:1d:a5:32:11:83:7b:bc:18: bb:9b:18:58:ef:b8:a0:c0:5d:f6:51:83:ca:1d:6d: 8a:2c:45:0e:e6:1f:72:b0:57:4f:8a:05:f7:83:c1: 84:ff:43:77:ac:7b:df:6e:4b:ec:f6:53:30:5b:eb: cd:ef:2c:c1:87:18:93:5e:15:9b:1f:a3:48:6a:6e: d6:bf:6d:00:1b:ce:ff:60:a2:37:46:67:5a:bd:2e: 0a:de:13:66:6d:c2:bd:6c:75:fd:cb:13:40:cd:86: c0:b3:7c:d1:fb:a2:15:f6:9f:e2:8f:19:4f:d7:5c: 0d:eb:7c:56:6e:c8:eb:49:8c:5d:fb:49:16:59:91: a6:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:9F:9F:40:B5:45:78:25:BF:BA:01:0E:2B:3A:A0:A2:70:D4:83:6C X509v3 Authority Key Identifier: keyid:07:A6:07:DC:A9:33:32:1F:F7:8F:EC:68:CD:7A:4C:14:95:43:7A:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6YH3KkzMh_3j-xozXpMFJVDel8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:6c:db:25:3d:9c:23:71:b9:2a:f7:68:15:45:6e:f2:7a:89: ce:88:08:2c:86:38:24:f2:cc:19:d0:6d:12:67:31:54:42:22: 59:85:56:69:32:a9:54:cb:9d:2b:61:c0:e3:cf:97:ff:83:f9: 94:70:bf:00:95:e6:40:b9:bb:ba:5a:40:e0:08:98:d5:04:1a: b8:51:50:1e:38:21:87:10:91:cc:84:05:4d:09:83:2b:65:44: 5c:b2:d9:17:80:e0:aa:1b:03:bc:6c:0d:7f:8c:12:74:94:7b: 3d:3b:6b:11:dd:ad:2e:7f:26:c0:e5:22:e5:0c:9c:1b:81:03: c5:27:92:2d:57:ab:64:ea:f2:90:88:63:fe:41:87:c1:af:e1: db:32:d4:89:f3:79:75:c4:1a:28:be:b3:8b:ac:64:e7:f9:31: 6a:fa:a5:82:9a:1d:72:24:23:dd:45:71:3c:05:53:72:dd:8c: d6:19:dc:55:a6:b0:d5:8b:fe:f6:e9:cb:fc:2d:9d:73:b0:65: f8:88:c7:17:d7:a7:59:08:39:40:99:eb:8c:99:99:a1:7a:2c: 3d:54:bc:12:eb:95:62:13:a8:85:0c:7d:34:5f:6e:d8:fd:70: 54:8b:48:19:66:0a:a9:c1:97:dd:cf:3d:f8:88:72:c5:4b:b3: cc:a8:06:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlEQ0IxMTAvBgNVBAUTKDA3QTYwN0RDQTkzMzMyMUZGNzhGRUM2OENEN0E0QzE0 OTU0MzdBNUYwHhcNMjUwNDE2MTk1NjQzWhcNMjUwNDIzMTk1NjQzWjAYMRYwFAYD VQQDEw02ODAwMGI3Yi1mOTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw2JF5K2wgS2KQs0JBIolzZJC6xjOcpIY7I4wfaxrlGObPC32jniOePJ7Thjp YcA/GmZ652JeH+BDCv5j3Szs5OcyEF3SYyzvgvsEyZUSpySKX3DfsEiK1osR9d4J uiFvLCEl7bKhqkpCf/V/jKSulNIEqeU0XuU16kU72i0VHaUyEYN7vBi7mxhY77ig wF32UYPKHW2KLEUO5h9ysFdPigX3g8GE/0N3rHvfbkvs9lMwW+vN7yzBhxiTXhWb H6NIam7Wv20AG87/YKI3RmdavS4K3hNmbcK9bHX9yxNAzYbAs3zR+6IV9p/ijxlP 11wN63xWbsjrSYxd+0kWWZGmHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNafn0C1 RXglv7oBDis6oKJw1INsMB8GA1UdIwQYMBaAFAemB9ypMzIf94/saM16TBSVQ3pf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOURDQi83QzlFQzlCQThD NEMxMUVBQTA1MTg1ODJDNEY5QUUwMi9CNllIM0trek1oXzNqLXhvelhwTUZKVkRl bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I2WUgzS2t6TWhfM2oteG96WHBNRkpWRGVsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OURDQi83QzlFQzlCQThDNEMxMUVBQTA1MTg1ODJDNEY5QUUwMi9CNllIM0trek1o XzNqLXhvelhwTUZKVkRlbDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcbNslPZwjcbkq92gVRW7yeonOiAgshjgk8swZ0G0SZzFUQiJZhVZp MqlUy50rYcDjz5f/g/mUcL8AleZAubu6WkDgCJjVBBq4UVAeOCGHEJHMhAVNCYMr ZURcstkXgOCqGwO8bA1/jBJ0lHs9O2sR3a0ufybA5SLlDJwbgQPFJ5ItV6tk6vKQ iGP+QYfBr+HbMtSJ83l1xBoovrOLrGTn+TFq+qWCmh1yJCPdRXE8BVNy3YzWGdxV prDVi/726cv8LZ1zsGX4iMcX16dZCDlAmeuMmZmheiw9VLwS65ViE6iFDH00X27Y /XBUi0gZZgqpwZfdzz34iHLFS7PMqAas -----END CERTIFICATE-----Generated at Fri Apr 18 21:08:49 2025 by rpki-client