$ rpki-client -vvf rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.mft File: 6C0Q0tocmL9oykxkkbkP_Q-rM5Q.mft (raw, json) Hash identifier: x1xhAxJRYhqIKQNcGUF6dAMA/vJs2Eic9wQU/Vkw5q4= Subject key identifier: 3F:9F:D2:84:4F:39:60:7D:F3:ED:3D:53:7F:AF:0D:D1:71:96:33:A9 Authority key identifier: E8:2D:10:D2:DA:1C:98:BF:68:CA:4C:64:91:B9:0F:FD:0F:AB:33:94 Certificate issuer: /CN=A912D5C1/serialNumber=E82D10D2DA1C98BF68CA4C6491B90FFD0FAB3394 Certificate serial: 0C68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.mft Manifest number: 0C53 Signing time: Tue 08 Apr 2025 18:18:00 +0000 Manifest this update: Tue 08 Apr 2025 18:18:00 +0000 Manifest next update: Tue 15 Apr 2025 18:18:00 +0000 Files and hashes: 1: 6C0Q0tocmL9oykxkkbkP_Q-rM5Q.crl (hash: oFuqgvlvMHzlzhZ82Nu9uyY5zdrMC9xs0xVSPu9fjPE=) 2: D7F98876520B11EE8B85DB63C4F9AE02.roa (hash: BvjqspRO5HaHZk8MDrrn9sDV9WNZa1iIeNw3qkNnjXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.crl rsync://rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 18:17:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3176 (0xc68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D5C1 Validity Not Before: Apr 8 18:18:00 2025 GMT Not After : Apr 15 18:18:00 2025 GMT Subject: CN=67f56858-6bca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d4:89:03:60:0b:4e:d5:64:b3:2b:e6:b0:f9: 0e:04:4f:35:5f:cf:e9:fd:5b:26:34:16:ac:cf:ee: 2e:8f:fa:7a:ec:88:d8:a4:c5:3d:0b:61:be:52:e4: 3f:92:72:54:1c:e5:8c:c9:fe:cf:df:7f:ad:a1:f7: 6c:03:cc:af:27:bc:23:90:ef:2d:3d:79:f6:b2:b3: 63:82:4d:47:6f:7d:1b:af:e3:cc:60:b9:a3:4c:a7: 5a:f6:02:43:60:0b:74:09:25:a0:ed:28:9d:7b:0f: b8:ce:65:1c:68:ce:3f:38:1c:e9:c8:ef:54:78:2e: 0f:aa:0e:2d:52:d7:a4:a8:83:5f:99:84:30:7b:88: e4:ce:5a:8e:7a:d3:55:da:89:e1:3e:ad:34:ad:05: ec:f0:aa:5b:6e:01:12:47:cb:6a:1e:f4:bf:57:bd: 9a:37:12:48:66:7e:c9:3c:91:c6:66:79:33:b5:db: e2:f5:23:f7:bf:7f:f8:a8:2b:b4:24:8b:ab:18:1d: 32:29:f8:da:10:9d:cf:85:11:40:61:26:e3:c8:91: e1:d5:0d:b9:a2:ba:d8:48:d3:86:74:14:fc:b6:a1: 3e:3b:2a:3f:52:e8:87:db:fd:4d:3c:76:25:f0:1c: 4e:75:2a:7c:1f:0d:76:f8:77:13:68:dd:39:8c:35: 75:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:9F:D2:84:4F:39:60:7D:F3:ED:3D:53:7F:AF:0D:D1:71:96:33:A9 X509v3 Authority Key Identifier: keyid:E8:2D:10:D2:DA:1C:98:BF:68:CA:4C:64:91:B9:0F:FD:0F:AB:33:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:73:e6:40:71:d2:54:b5:71:5d:d4:48:b5:a6:d5:da:1e:95: f0:65:9a:2d:76:49:1e:0d:86:c0:59:fa:19:46:68:43:f9:d7: cd:22:ce:27:19:36:89:22:b2:80:79:40:ec:55:f0:e0:59:8b: 75:1e:5e:0c:51:fd:0a:f4:21:2b:75:d9:ef:a5:45:72:c7:eb: 84:c2:a9:c3:05:a9:a7:99:94:00:6c:67:af:7f:93:7b:5e:28: ad:de:62:3c:fc:a1:1e:e4:f6:97:96:37:ee:83:37:7c:95:0d: 7b:2a:68:c7:2c:20:47:96:52:c0:44:93:cb:65:c7:fb:60:c0: 39:2e:df:47:97:47:c6:46:1c:82:c2:45:4c:07:c7:8b:9c:8d: 48:b3:1a:a1:92:a1:de:da:e2:61:55:ec:f6:b7:38:c1:3f:a1: ac:dd:c2:64:9d:d7:43:03:aa:02:6b:f7:67:bc:9a:50:cc:f2: bf:6d:f1:e6:0e:21:5c:6a:98:68:cf:47:fc:78:52:fb:77:7e: b4:ab:da:0b:b8:8a:99:bb:2c:97:91:2f:f5:25:2d:9a:e2:fa: ca:a7:ec:11:cf:b7:96:3b:68:9e:a9:2b:08:27:27:ac:9c:60: 1e:af:b8:91:8f:8d:24:91:11:59:0c:a2:37:8c:c2:ed:1d:8b: 6d:7d:20:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQ1QzExMTAvBgNVBAUTKEU4MkQxMEQyREExQzk4QkY2OENBNEM2NDkxQjkwRkZE MEZBQjMzOTQwHhcNMjUwNDA4MTgxODAwWhcNMjUwNDE1MTgxODAwWjAYMRYwFAYD VQQDEw02N2Y1Njg1OC02YmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3dSJA2ALTtVksyvmsPkOBE81X8/p/VsmNBasz+4uj/p67IjYpMU9C2G+UuQ/ knJUHOWMyf7P33+tofdsA8yvJ7wjkO8tPXn2srNjgk1Hb30br+PMYLmjTKda9gJD YAt0CSWg7Sidew+4zmUcaM4/OBzpyO9UeC4Pqg4tUtekqINfmYQwe4jkzlqOetNV 2onhPq00rQXs8KpbbgESR8tqHvS/V72aNxJIZn7JPJHGZnkztdvi9SP3v3/4qCu0 JIurGB0yKfjaEJ3PhRFAYSbjyJHh1Q25orrYSNOGdBT8tqE+Oyo/UuiH2/1NPHYl 8BxOdSp8Hw12+HcTaN05jDV1SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD+f0oRP OWB98+09U3+vDdFxljOpMB8GA1UdIwQYMBaAFOgtENLaHJi/aMpMZJG5D/0PqzOU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDVDMS9CMDdEQ0I0NEZG Q0MxMUU5QTVFNzk3ODRDNEY5QUUwMi82QzBRMHRvY21MOW95a3hra2JrUF9RLXJN NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZDMFEwdG9jbUw5b3lreGtrYmtQX1Etck01US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDVDMS9CMDdEQ0I0NEZGQ0MxMUU5QTVFNzk3ODRDNEY5QUUwMi82QzBRMHRvY21M OW95a3hra2JrUF9RLXJNNVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtc+ZAcdJUtXFd1Ei1ptXaHpXwZZotdkkeDYbAWfoZRmhD+dfNIs4n GTaJIrKAeUDsVfDgWYt1Hl4MUf0K9CErddnvpUVyx+uEwqnDBamnmZQAbGevf5N7 Xiit3mI8/KEe5PaXljfugzd8lQ17KmjHLCBHllLARJPLZcf7YMA5Lt9Hl0fGRhyC wkVMB8eLnI1IsxqhkqHe2uJhVez2tzjBP6Gs3cJknddDA6oCa/dnvJpQzPK/bfHm DiFcaphoz0f8eFL7d360q9oLuIqZuyyXkS/1JS2a4vrKp+wRz7eWO2ieqSsIJyes nGAer7iRj40kkRFZDKI3jMLtHYttfSAD -----END CERTIFICATE-----Generated at Fri Apr 11 23:34:30 2025 by rpki-client