$ rpki-client -vvf rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.mft File: 6uK86DXkKxFfGLP-Do8n-EpHSZY.mft (raw, json) Hash identifier: 68nTbbWrICPiZ3+8sLXVAababBRxNFP3cXyeFwh/RuU= Subject key identifier: A2:CB:66:F1:C7:9D:2D:89:DD:DC:0B:B9:08:A0:5C:7C:5F:EB:C9:E0 Authority key identifier: EA:E2:BC:E8:35:E4:2B:11:5F:18:B3:FE:0E:8F:27:F8:4A:47:49:96 Certificate issuer: /CN=A912C0DE/serialNumber=EAE2BCE835E42B115F18B3FE0E8F27F84A474996 Certificate serial: 0105 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6uK86DXkKxFfGLP-Do8n-EpHSZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.mft Manifest number: 0101 Signing time: Thu 03 Apr 2025 04:22:15 +0000 Manifest this update: Thu 03 Apr 2025 04:22:15 +0000 Manifest next update: Thu 10 Apr 2025 04:22:15 +0000 Files and hashes: 1: 6uK86DXkKxFfGLP-Do8n-EpHSZY.crl (hash: qrlO/JZAMescd9Prl2oOx7gJRJWqSEC8M2BBCOSVWIE=) 2: 5F57D01A5EA511EFB0E1B468C4F9AE02.roa (hash: dNtSLmbPQl6n7qJUeH+z2I4vNRh8gF+hIvNTsqOdqPk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.crl rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6uK86DXkKxFfGLP-Do8n-EpHSZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 04:22:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 261 (0x105) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C0DE Validity Not Before: Apr 3 04:22:15 2025 GMT Not After : Apr 10 04:22:15 2025 GMT Subject: CN=67ee0cf7-4b6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:af:82:0e:08:85:bd:9a:46:2e:12:40:a0:c9: 36:6a:01:c5:d9:24:23:7b:5b:13:7a:5c:e6:3c:b5: af:ba:90:a2:1b:ec:29:ab:bd:1d:ed:e1:9e:2f:35: 32:0e:9d:1d:bf:df:c9:bd:4e:43:e3:0b:b0:3d:1a: 34:95:6a:a8:4b:94:c2:e3:22:15:01:3b:6d:0f:af: 39:4b:fa:04:13:50:6e:6b:c2:84:5d:0d:95:ce:ee: 19:5f:77:97:d5:7f:5b:6c:90:cb:58:55:d7:c7:9f: f9:fb:f4:43:49:b0:be:d5:29:07:4f:89:9b:f3:1a: ae:6d:6e:db:a0:e0:3a:04:cd:74:14:b3:9c:2b:25: fd:be:31:ee:59:65:72:4a:8c:85:0b:20:07:4c:bc: 6b:95:71:54:90:35:9f:2c:04:61:0f:cb:be:3c:5a: bf:06:29:f5:b3:60:7e:35:de:f1:03:9a:5d:30:1e: 66:38:36:31:ed:c6:0d:8a:d5:d2:ba:11:4a:b5:8b: f0:27:bb:36:4e:ae:f1:d1:07:4e:b8:29:03:da:ba: 4c:14:2b:3d:54:67:f3:70:6a:9c:53:4a:9c:f1:97: b5:80:23:11:ae:bb:2e:6a:b4:e6:3d:85:d2:70:0f: b8:95:c7:ac:d2:d2:f2:88:ce:0c:d2:f2:da:6d:8c: 92:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:CB:66:F1:C7:9D:2D:89:DD:DC:0B:B9:08:A0:5C:7C:5F:EB:C9:E0 X509v3 Authority Key Identifier: keyid:EA:E2:BC:E8:35:E4:2B:11:5F:18:B3:FE:0E:8F:27:F8:4A:47:49:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6uK86DXkKxFfGLP-Do8n-EpHSZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:f7:d7:56:29:61:e6:22:a2:7e:25:05:74:db:17:52:a1:71: 8a:a8:1c:0b:11:d4:f7:25:5f:03:ad:c1:81:74:8a:f5:80:1d: 94:d5:ee:3f:d3:ea:e9:02:7e:3e:3f:f7:4b:64:da:b1:26:da: 91:3c:04:3a:a6:45:f8:bb:c8:12:48:c1:ef:21:ba:da:ba:a8: 62:1e:8d:a1:bd:a7:88:94:58:21:c7:9e:2c:3d:5c:bb:ad:e5: c6:a8:6e:d0:69:4c:03:58:9f:85:4b:c8:4c:26:61:10:d5:52: af:bd:ad:7b:83:81:4b:89:34:15:6e:19:cb:2c:da:79:55:fe: 0c:59:74:38:7d:4e:e2:f2:75:8b:9f:15:0e:fe:4c:dd:6b:8f: 37:dd:42:80:02:d1:1f:d5:90:bf:6d:67:85:14:a7:0f:bb:45: 45:7e:e5:77:d7:45:c0:e6:d1:4e:a4:3c:b9:93:da:59:42:8e: 80:aa:6e:08:4a:bf:fa:4c:d6:63:38:3b:09:c1:b1:39:29:44: 66:71:0a:0d:67:1b:ba:b6:4b:9c:f5:1f:df:23:11:6f:a1:1f: 21:c6:d6:79:4c:50:a2:36:d6:20:62:31:7d:4a:7b:41:33:68: 17:7c:1e:a2:4a:2e:09:10:01:28:d6:b8:f9:7b:cb:a3:4d:2e: 4c:51:33:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMwREUxMTAvBgNVBAUTKEVBRTJCQ0U4MzVFNDJCMTE1RjE4QjNGRTBFOEYyN0Y4 NEE0NzQ5OTYwHhcNMjUwNDAzMDQyMjE1WhcNMjUwNDEwMDQyMjE1WjAYMRYwFAYD VQQDEw02N2VlMGNmNy00YjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA26+CDgiFvZpGLhJAoMk2agHF2SQje1sTelzmPLWvupCiG+wpq70d7eGeLzUy Dp0dv9/JvU5D4wuwPRo0lWqoS5TC4yIVATttD685S/oEE1Bua8KEXQ2Vzu4ZX3eX 1X9bbJDLWFXXx5/5+/RDSbC+1SkHT4mb8xqubW7boOA6BM10FLOcKyX9vjHuWWVy SoyFCyAHTLxrlXFUkDWfLARhD8u+PFq/Bin1s2B+Nd7xA5pdMB5mODYx7cYNitXS uhFKtYvwJ7s2Tq7x0QdOuCkD2rpMFCs9VGfzcGqcU0qc8Ze1gCMRrrsuarTmPYXS cA+4lces0tLyiM4M0vLabYyS/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKLLZvHH nS2J3dwLuQigXHxf68ngMB8GA1UdIwQYMBaAFOrivOg15CsRXxiz/g6PJ/hKR0mW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzBERS9FNDc0NDNENjhG RUUxMUVFOTAzODlFMUNDNEY5QUUwMi82dUs4NkRYa0t4RmZHTFAtRG84bi1FcEhT WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ1Szg2RFhrS3hGZkdMUC1EbzhuLUVwSFNaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzBERS9FNDc0NDNENjhGRUUxMUVFOTAzODlFMUNDNEY5QUUwMi82dUs4NkRYa0t4 RmZHTFAtRG84bi1FcEhTWlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+99dWKWHmIqJ+JQV02xdSoXGKqBwLEdT3JV8DrcGBdIr1gB2U1e4/ 0+rpAn4+P/dLZNqxJtqRPAQ6pkX4u8gSSMHvIbrauqhiHo2hvaeIlFghx54sPVy7 reXGqG7QaUwDWJ+FS8hMJmEQ1VKvva17g4FLiTQVbhnLLNp5Vf4MWXQ4fU7i8nWL nxUO/kzda4833UKAAtEf1ZC/bWeFFKcPu0VFfuV310XA5tFOpDy5k9pZQo6Aqm4I Sr/6TNZjODsJwbE5KURmcQoNZxu6tkuc9R/fIxFvoR8hxtZ5TFCiNtYgYjF9SntB M2gXfB6iSi4JEAEo1rj5e8ujTS5MUTNY -----END CERTIFICATE-----Generated at Fri Apr 4 22:13:48 2025 by rpki-client