$ rpki-client -vvf rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.mft File: 6YYS7upK5w0ftbZSS5adR0Lc6BA.mft (raw, json) Hash identifier: x8zrll5WtotDgQh9g3ySCK6wty2MbUAhk2XH0eZvcf8= Subject key identifier: 1B:A3:FB:CA:D0:12:6E:BD:7F:4D:07:DA:64:D6:EF:20:8D:14:CC:7D Authority key identifier: E9:86:12:EE:EA:4A:E7:0D:1F:B5:B6:52:4B:96:9D:47:42:DC:E8:10 Certificate issuer: /CN=A912DB99/serialNumber=E98612EEEA4AE70D1FB5B6524B969D4742DCE810 Certificate serial: 0148 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6YYS7upK5w0ftbZSS5adR0Lc6BA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.mft Manifest number: 0141 Signing time: Sat 05 Apr 2025 03:46:57 +0000 Manifest this update: Sat 05 Apr 2025 03:46:56 +0000 Manifest next update: Sat 12 Apr 2025 03:46:56 +0000 Files and hashes: 1: 6YYS7upK5w0ftbZSS5adR0Lc6BA.crl (hash: +bazL3w78hUM3s8ahiHYWHOH5sTabn6+avMvaNlsNi4=) 2: E58351049F2011EE8D92FF5EC4F9AE02.roa (hash: iAgZl5cjC5GY9UT1VAX4lVlQAoyGZHmwHR+AO/vqBI0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.crl rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6YYS7upK5w0ftbZSS5adR0Lc6BA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 03:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 328 (0x148) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DB99 Validity Not Before: Apr 5 03:46:56 2025 GMT Not After : Apr 12 03:46:56 2025 GMT Subject: CN=67f0a7b1-1470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:5c:6e:68:c3:a1:35:e6:0b:92:1c:9f:c5:86: ee:ca:51:b8:ee:fe:94:af:5a:1d:7d:5e:39:25:3f: 9f:3f:b4:19:f8:97:e3:f3:8c:79:09:ec:e5:0a:86: c3:cc:a6:50:8f:ca:2c:e6:9c:25:5f:18:2c:71:40: 5e:55:11:f1:50:31:f2:fb:99:f0:31:7d:24:e8:4c: e3:ee:59:2a:22:f9:ca:47:f6:66:71:b2:7a:e0:4e: fc:81:e6:25:95:1a:e2:f2:55:de:5c:66:4c:4e:b6: f8:71:d6:6d:3b:d2:0b:a4:9c:8a:a9:c6:be:f8:91: 09:dd:2d:35:b5:84:15:a1:2d:db:93:c7:a1:83:84: 05:33:d1:b8:39:a6:2b:1e:f9:0e:28:45:cb:37:86: 19:51:86:a5:b9:4c:8c:a7:22:5d:88:06:37:fb:75: 30:e7:14:dc:8a:ae:e1:ab:87:96:d1:da:dc:79:5f: 55:a6:b8:85:08:f5:35:4a:30:ff:54:d7:69:88:18: e2:79:5d:47:ac:5e:f2:93:f3:a5:3c:98:7f:69:75: 43:17:07:63:db:77:b4:e4:53:12:22:3a:18:4b:45: 33:0f:4e:20:05:80:db:c3:fb:23:55:55:80:d8:3e: 1c:a0:d9:16:aa:fe:3d:b0:92:43:2e:d3:cc:69:2a: de:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:A3:FB:CA:D0:12:6E:BD:7F:4D:07:DA:64:D6:EF:20:8D:14:CC:7D X509v3 Authority Key Identifier: keyid:E9:86:12:EE:EA:4A:E7:0D:1F:B5:B6:52:4B:96:9D:47:42:DC:E8:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6YYS7upK5w0ftbZSS5adR0Lc6BA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:6c:9d:22:c8:5e:02:48:d3:8b:42:41:68:5b:cf:8f:96:a7: c9:27:72:8a:a8:d5:87:89:b6:fe:ed:8b:4c:28:18:e5:41:88: 52:65:f9:a0:a4:c3:ac:64:81:f7:fd:48:98:fa:da:e8:1d:3d: ab:5e:df:5c:f2:b6:a7:35:06:2a:95:00:53:bd:9e:69:ab:a0: fc:a6:46:f1:4f:27:ac:ab:81:47:87:4c:5b:51:c2:8a:21:75: 0d:99:73:ac:92:7d:bb:b6:c3:4a:34:3d:8c:4f:a0:67:b6:c2: 12:e5:ea:f0:d0:45:3c:ba:f8:d7:a6:bf:af:e6:b1:56:1e:75: 8d:c6:fd:54:aa:ca:10:ed:63:d5:02:c0:5f:8b:e7:7d:32:f6: ee:c7:30:6b:04:0f:f5:0d:d9:53:fd:3d:29:77:7a:df:a6:0a: 9a:1d:6b:f5:76:eb:0d:db:5e:67:d7:22:0c:ed:9a:5d:c9:2e: ee:e1:e6:7e:a4:df:8c:04:83:46:d3:44:c9:8c:2d:7c:19:f2: 1c:2b:25:48:1b:18:99:57:c0:33:4d:77:f2:9c:20:5e:e2:55: ba:80:97:ee:97:bf:03:74:b7:b7:cd:2e:74:ef:b5:51:5f:e9: 62:3b:26:cd:92:50:c9:0f:2f:7d:22:44:d2:33:f0:b7:41:bc: 38:dd:23:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRCOTkxMTAvBgNVBAUTKEU5ODYxMkVFRUE0QUU3MEQxRkI1QjY1MjRCOTY5RDQ3 NDJEQ0U4MTAwHhcNMjUwNDA1MDM0NjU2WhcNMjUwNDEyMDM0NjU2WjAYMRYwFAYD VQQDEw02N2YwYTdiMS0xNDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlVxuaMOhNeYLkhyfxYbuylG47v6Ur1odfV45JT+fP7QZ+Jfj84x5CezlCobD zKZQj8os5pwlXxgscUBeVRHxUDHy+5nwMX0k6Ezj7lkqIvnKR/ZmcbJ64E78geYl lRri8lXeXGZMTrb4cdZtO9ILpJyKqca++JEJ3S01tYQVoS3bk8ehg4QFM9G4OaYr HvkOKEXLN4YZUYaluUyMpyJdiAY3+3Uw5xTciq7hq4eW0drceV9VpriFCPU1SjD/ VNdpiBjieV1HrF7yk/OlPJh/aXVDFwdj23e05FMSIjoYS0UzD04gBYDbw/sjVVWA 2D4coNkWqv49sJJDLtPMaSreXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBuj+8rQ Em69f00H2mTW7yCNFMx9MB8GA1UdIwQYMBaAFOmGEu7qSucNH7W2UkuWnUdC3OgQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREI5OS9CQzY1OUJDNjMx QjQxMUVFQjU1MUYyMTFDNEY5QUUwMi82WVlTN3VwSzV3MGZ0YlpTUzVhZFIwTGM2 QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZZWVM3dXBLNXcwZnRiWlNTNWFkUjBMYzZCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REI5OS9CQzY1OUJDNjMxQjQxMUVFQjU1MUYyMTFDNEY5QUUwMi82WVlTN3VwSzV3 MGZ0YlpTUzVhZFIwTGM2QkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABbJ0iyF4CSNOLQkFoW8+PlqfJJ3KKqNWHibb+7YtMKBjlQYhSZfmg pMOsZIH3/UiY+troHT2rXt9c8ranNQYqlQBTvZ5pq6D8pkbxTyesq4FHh0xbUcKK IXUNmXOskn27tsNKND2MT6BntsIS5erw0EU8uvjXpr+v5rFWHnWNxv1UqsoQ7WPV AsBfi+d9MvbuxzBrBA/1DdlT/T0pd3rfpgqaHWv1dusN215n1yIM7ZpdyS7u4eZ+ pN+MBING00TJjC18GfIcKyVIGxiZV8AzTXfynCBe4lW6gJful78DdLe3zS5077VR X+liOybNklDJDy99IkTSM/C3Qbw43SMV -----END CERTIFICATE-----Generated at Sat Apr 5 08:09:11 2025 by rpki-client