$ rpki-client -vvf rpki.apnic.net/member_repository/A914331D/4B45BFE8AD1E11EA94C7E581C4F9AE02/06m0znk41yolUFSgwIW_eI6wabA.mft File: 06m0znk41yolUFSgwIW_eI6wabA.mft (raw, json) Hash identifier: FRcbqOrztcu4qeUU7C+XxvHXYpL+JFbbmIIrr+7qyEM= Subject key identifier: 01:96:82:3F:AA:51:F4:3B:C9:DF:07:96:F8:23:2B:06:B7:F2:77:5B Authority key identifier: D3:A9:B4:CE:79:38:D7:2A:25:50:54:A0:C0:85:BF:78:8E:B0:69:B0 Certificate issuer: /CN=A914331D/serialNumber=D3A9B4CE7938D72A255054A0C085BF788EB069B0 Certificate serial: 08D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/06m0znk41yolUFSgwIW_eI6wabA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914331D/4B45BFE8AD1E11EA94C7E581C4F9AE02/06m0znk41yolUFSgwIW_eI6wabA.mft Manifest number: 08CA Signing time: Tue 08 Apr 2025 20:19:06 +0000 Manifest this update: Tue 08 Apr 2025 20:19:06 +0000 Manifest next update: Tue 15 Apr 2025 20:19:06 +0000 Files and hashes: 1: 06m0znk41yolUFSgwIW_eI6wabA.crl (hash: FQXG2Xxx3Id4VgwK791VsFxLv2XCBCfiXdAfTinpWgE=) 2: 425602A0AD2111EA9510AC0DC4F9AE02.roa (hash: /7CSrLoWR8aR13lBtLre9qbhzd0pZBgpO/Lz0opKvSI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914331D/4B45BFE8AD1E11EA94C7E581C4F9AE02/06m0znk41yolUFSgwIW_eI6wabA.crl rsync://rpki.apnic.net/member_repository/A914331D/4B45BFE8AD1E11EA94C7E581C4F9AE02/06m0znk41yolUFSgwIW_eI6wabA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/06m0znk41yolUFSgwIW_eI6wabA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 20:19:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2257 (0x8d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914331D Validity Not Before: Apr 8 20:19:06 2025 GMT Not After : Apr 15 20:19:06 2025 GMT Subject: CN=67f584ba-ae10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4d:05:16:c5:28:48:3a:e6:63:97:44:06:23: 58:c9:63:99:2c:15:64:78:9c:4c:94:90:1b:bd:c9: 93:98:c6:ef:49:35:6d:8b:da:a0:5c:7b:d0:a3:ad: 57:dd:e0:1e:30:17:5f:2f:1e:e7:3b:71:49:2a:36: 11:0f:d8:79:fb:da:dc:60:f5:55:fb:74:a4:ef:20: 6d:28:c4:36:c9:8e:67:66:7c:a7:01:90:58:b2:bb: 81:3c:c0:fb:44:4d:a6:e5:b8:c2:5d:ca:5a:53:9c: 26:5d:ec:e2:e2:ee:e1:4b:d1:38:55:6d:42:a5:ae: a6:ec:d3:3f:4b:d2:10:4e:3e:bd:e5:07:f1:21:45: 0a:67:ee:bd:a3:1c:e1:f5:00:7c:39:d2:c0:0b:82: 60:03:c1:b2:e2:53:82:e3:78:e9:22:b0:f2:12:70: 5e:23:8e:fa:79:d5:13:17:11:c0:13:d8:d2:76:31: 99:6d:23:2c:f3:0c:0e:15:35:c7:57:e9:1f:81:0b: cd:99:56:4b:60:74:c0:45:cb:17:82:eb:4b:68:55: 1d:88:c9:53:f9:db:5d:e6:f5:db:22:5b:aa:50:84: f2:e4:f6:9b:93:07:bd:10:1a:3c:65:05:09:49:19: c1:43:c8:29:b3:cc:1d:29:cc:e9:c9:23:c2:02:e2: e1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:96:82:3F:AA:51:F4:3B:C9:DF:07:96:F8:23:2B:06:B7:F2:77:5B X509v3 Authority Key Identifier: keyid:D3:A9:B4:CE:79:38:D7:2A:25:50:54:A0:C0:85:BF:78:8E:B0:69:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914331D/4B45BFE8AD1E11EA94C7E581C4F9AE02/06m0znk41yolUFSgwIW_eI6wabA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/06m0znk41yolUFSgwIW_eI6wabA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914331D/4B45BFE8AD1E11EA94C7E581C4F9AE02/06m0znk41yolUFSgwIW_eI6wabA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:91:99:fd:0c:ae:9a:a8:e8:dc:df:72:43:5e:9f:b1:69:8d: e3:f8:89:3b:fe:5e:67:fa:24:e6:87:13:ab:b6:f2:5b:24:f5: 02:f6:9e:52:29:5e:a7:df:40:08:de:33:17:cd:19:b8:c7:1a: f2:92:d2:4e:b8:8b:80:67:f4:87:06:55:fa:8a:d0:a4:04:70: 18:ed:5a:f4:9f:3d:d9:5b:1d:c2:fc:3f:f7:b2:05:1f:ed:50: 27:ba:09:44:dc:a8:35:b8:3f:e5:2a:35:b7:0f:96:bc:4b:fa: e1:33:dc:18:b6:69:3a:57:e0:c6:f7:5e:c6:ba:26:64:32:42: 8e:aa:71:a5:2a:c0:9c:44:32:b8:c6:42:49:dc:a0:a1:2c:6f: 31:c5:9a:fc:2e:94:b3:90:d8:ba:2a:a3:b0:50:e7:0e:62:c6: bf:00:ea:60:5a:7e:12:15:44:12:71:fc:f1:eb:6a:89:8b:04: 72:88:16:57:4a:f0:f7:65:19:b6:97:ca:a8:8a:47:b9:35:2c: af:dd:a2:41:8a:b5:39:eb:53:4f:92:97:82:b1:59:43:23:b8: e4:8a:46:fb:bc:ed:f6:90:7b:4a:a2:77:2f:6e:4e:b1:c3:ea: 4f:e0:b6:4b:8c:42:20:bb:e3:9a:fa:a8:6f:58:42:3c:a4:4c: a4:c9:e6:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDMzMUQxMTAvBgNVBAUTKEQzQTlCNENFNzkzOEQ3MkEyNTUwNTRBMEMwODVCRjc4 OEVCMDY5QjAwHhcNMjUwNDA4MjAxOTA2WhcNMjUwNDE1MjAxOTA2WjAYMRYwFAYD VQQDEw02N2Y1ODRiYS1hZTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1E0FFsUoSDrmY5dEBiNYyWOZLBVkeJxMlJAbvcmTmMbvSTVti9qgXHvQo61X 3eAeMBdfLx7nO3FJKjYRD9h5+9rcYPVV+3Sk7yBtKMQ2yY5nZnynAZBYsruBPMD7 RE2m5bjCXcpaU5wmXezi4u7hS9E4VW1Cpa6m7NM/S9IQTj695QfxIUUKZ+69oxzh 9QB8OdLAC4JgA8Gy4lOC43jpIrDyEnBeI476edUTFxHAE9jSdjGZbSMs8wwOFTXH V+kfgQvNmVZLYHTARcsXgutLaFUdiMlT+dtd5vXbIluqUITy5Pabkwe9EBo8ZQUJ SRnBQ8gps8wdKczpySPCAuLhPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAGWgj+q UfQ7yd8HlvgjKwa38ndbMB8GA1UdIwQYMBaAFNOptM55ONcqJVBUoMCFv3iOsGmw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzMxRC80QjQ1QkZFOEFE MUUxMUVBOTRDN0U1ODFDNEY5QUUwMi8wNm0wem5rNDF5b2xVRlNnd0lXX2VJNndh YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA2bTB6bms0MXlvbFVGU2d3SVdfZUk2d2FiQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzMxRC80QjQ1QkZFOEFEMUUxMUVBOTRDN0U1ODFDNEY5QUUwMi8wNm0wem5rNDF5 b2xVRlNnd0lXX2VJNndhYkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWkZn9DK6aqOjc33JDXp+xaY3j+Ik7/l5n+iTmhxOrtvJbJPUC9p5S KV6n30AI3jMXzRm4xxryktJOuIuAZ/SHBlX6itCkBHAY7Vr0nz3ZWx3C/D/3sgUf 7VAnuglE3Kg1uD/lKjW3D5a8S/rhM9wYtmk6V+DG917GuiZkMkKOqnGlKsCcRDK4 xkJJ3KChLG8xxZr8LpSzkNi6KqOwUOcOYsa/AOpgWn4SFUQScfzx62qJiwRyiBZX SvD3ZRm2l8qoike5NSyv3aJBirU561NPkpeCsVlDI7jkikb7vO32kHtKoncvbk6x w+pP4LZLjEIgu+Oa+qhvWEI8pEykyeaw -----END CERTIFICATE-----Generated at Fri Apr 11 14:10:57 2025 by rpki-client