$ rpki-client -vvf rpki.apnic.net/member_repository/A9144463/8BF5A5D4113611ED8F0AB712C4F9AE02/a6pcUguOS_VkxLv0bh8xa9RfoDc.mft File: a6pcUguOS_VkxLv0bh8xa9RfoDc.mft (raw, json) Hash identifier: t+6DultUG6Q4NS/cJ8IfWGRfc7HSwhs5JFaVlppNGe4= Subject key identifier: 8F:7A:E9:8B:55:CC:70:B3:31:9E:E0:24:FD:D0:D3:49:BC:5F:F1:A2 Authority key identifier: 6B:AA:5C:52:0B:8E:4B:F5:64:C4:BB:F4:6E:1F:31:6B:D4:5F:A0:37 Certificate issuer: /CN=A9144463/serialNumber=6BAA5C520B8E4BF564C4BBF46E1F316BD45FA037 Certificate serial: 0262 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6pcUguOS_VkxLv0bh8xa9RfoDc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144463/8BF5A5D4113611ED8F0AB712C4F9AE02/a6pcUguOS_VkxLv0bh8xa9RfoDc.mft Manifest number: 025A Signing time: Tue 15 Apr 2025 01:28:50 +0000 Manifest this update: Tue 15 Apr 2025 01:28:50 +0000 Manifest next update: Tue 22 Apr 2025 01:28:50 +0000 Files and hashes: 1: a6pcUguOS_VkxLv0bh8xa9RfoDc.crl (hash: Wz7F9cppdrZ8omxowCFCmk6wGOO1LYGuCS+OvrTzo+M=) 2: 5B9A1DA0114211ED957E085DC4F9AE02.roa (hash: AeJZ7ukdYWaHFVb/G2XrVYPGgRINb8DYT1Z4AfpetOI=) 3: 3E6091DA139811EDB1D7223FC4F9AE02.roa (hash: pPqfy6MrMQAhBR4En++nqCHYyx2R/69ReVZ+i2NT/No=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144463/8BF5A5D4113611ED8F0AB712C4F9AE02/a6pcUguOS_VkxLv0bh8xa9RfoDc.crl rsync://rpki.apnic.net/member_repository/A9144463/8BF5A5D4113611ED8F0AB712C4F9AE02/a6pcUguOS_VkxLv0bh8xa9RfoDc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6pcUguOS_VkxLv0bh8xa9RfoDc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 01:28:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 610 (0x262) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144463, serialNumber=6BAA5C520B8E4BF564C4BBF46E1F316BD45FA037 Validity Not Before: Apr 15 01:28:50 2025 GMT Not After : Apr 22 01:28:50 2025 GMT Subject: CN=67fdb652-1623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:84:d2:6d:c5:56:08:b5:76:92:a7:48:77:f1: 24:bc:ed:73:ea:63:d0:a2:ab:4c:7c:b8:54:3e:e1: d5:3c:a8:76:ea:42:f5:41:64:87:cf:02:10:5a:ff: 1f:d1:85:1d:d5:a2:49:67:9a:41:18:6b:4c:7c:be: fe:94:2d:df:6e:90:2b:fd:b1:fe:21:67:61:ab:72: f1:be:51:f5:b4:59:40:94:2d:16:29:a3:84:5b:fe: 10:56:0f:b3:67:42:5a:09:d1:a8:b6:2e:ec:25:f2: 5f:08:2b:de:5c:98:de:77:d1:2c:a8:5d:45:18:1e: b9:84:75:62:c4:9a:de:3a:c3:75:f2:ec:79:18:24: 7a:b5:c6:2d:f8:b9:ee:66:e4:28:35:c0:c0:e3:b5: 57:42:ff:6f:2b:5b:fd:a4:07:a9:aa:79:7b:0e:22: ca:5a:1f:b4:86:d2:59:8c:6e:9f:88:b7:d2:70:d5: 46:cb:27:20:16:ca:ca:15:fd:62:d3:5b:b7:8e:ac: 63:6f:0c:c3:1d:27:3d:b8:78:7e:53:a6:ac:df:62: fe:5a:91:c6:28:29:01:55:48:a9:21:d0:6d:f6:1d: 9f:71:a0:49:31:f3:0f:67:e1:69:d5:7d:2d:bc:41: da:fa:0f:e6:bf:8e:ee:0d:24:91:3b:86:8a:fa:04: 06:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:7A:E9:8B:55:CC:70:B3:31:9E:E0:24:FD:D0:D3:49:BC:5F:F1:A2 X509v3 Authority Key Identifier: keyid:6B:AA:5C:52:0B:8E:4B:F5:64:C4:BB:F4:6E:1F:31:6B:D4:5F:A0:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144463/8BF5A5D4113611ED8F0AB712C4F9AE02/a6pcUguOS_VkxLv0bh8xa9RfoDc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6pcUguOS_VkxLv0bh8xa9RfoDc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144463/8BF5A5D4113611ED8F0AB712C4F9AE02/a6pcUguOS_VkxLv0bh8xa9RfoDc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:28:3d:e1:b4:1d:e4:71:68:f8:79:0d:43:dc:9a:9a:5c:ac: 1a:de:fe:57:49:ef:d6:8d:e0:90:4b:eb:ee:c1:04:e0:07:03: 18:89:29:d6:ff:ac:68:7c:14:4e:39:0a:05:0a:a2:17:61:77: 81:41:68:b9:ed:18:0f:a3:ca:5f:e7:a2:4f:3f:e3:1f:e9:de: 23:cb:c4:56:5d:e1:63:02:fd:8c:03:4a:aa:eb:ce:e2:8b:af: 68:da:6e:ed:09:60:f7:ed:65:fd:79:31:0a:d7:dc:3f:bf:1c: 51:2e:b1:90:46:90:b3:1c:8b:6d:23:2a:14:aa:33:35:9e:7b: 6e:e7:6e:05:27:55:31:55:16:12:3e:90:bf:79:a0:77:e8:93: 4e:80:65:79:c0:be:ad:49:1e:d0:e1:58:b6:f9:31:6a:12:8b: 33:2b:49:20:6a:ce:f3:5c:6f:6e:2c:7c:db:fa:b6:b6:38:1d: d0:82:4c:20:84:6c:13:62:64:f6:fe:01:a2:b5:90:60:65:47: 7d:13:7c:9e:5d:c6:d4:dc:cb:fc:ef:62:46:a2:dd:ee:3e:1c: 65:49:7f:2d:f8:b7:47:5f:ad:58:6c:e9:f5:07:4d:8e:d6:7a: 36:4e:ed:b5:a9:82:d8:ec:24:aa:ce:ed:bc:f8:af:63:07:e0: a9:2b:e7:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ0NjMxMTAvBgNVBAUTKDZCQUE1QzUyMEI4RTRCRjU2NEM0QkJGNDZFMUYzMTZC RDQ1RkEwMzcwHhcNMjUwNDE1MDEyODUwWhcNMjUwNDIyMDEyODUwWjAYMRYwFAYD VQQDEw02N2ZkYjY1Mi0xNjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv4TSbcVWCLV2kqdId/EkvO1z6mPQoqtMfLhUPuHVPKh26kL1QWSHzwIQWv8f 0YUd1aJJZ5pBGGtMfL7+lC3fbpAr/bH+IWdhq3LxvlH1tFlAlC0WKaOEW/4QVg+z Z0JaCdGoti7sJfJfCCveXJjed9EsqF1FGB65hHVixJreOsN18ux5GCR6tcYt+Lnu ZuQoNcDA47VXQv9vK1v9pAepqnl7DiLKWh+0htJZjG6fiLfScNVGyycgFsrKFf1i 01u3jqxjbwzDHSc9uHh+U6as32L+WpHGKCkBVUipIdBt9h2fcaBJMfMPZ+Fp1X0t vEHa+g/mv47uDSSRO4aK+gQGwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI966YtV zHCzMZ7gJP3Q00m8X/GiMB8GA1UdIwQYMBaAFGuqXFILjkv1ZMS79G4fMWvUX6A3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDQ2My84QkY1QTVENDEx MzYxMUVEOEYwQUI3MTJDNEY5QUUwMi9hNnBjVWd1T1NfVmt4THYwYmg4eGE5UmZv RGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E2cGNVZ3VPU19Wa3hMdjBiaDh4YTlSZm9EYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDQ2My84QkY1QTVENDExMzYxMUVEOEYwQUI3MTJDNEY5QUUwMi9hNnBjVWd1T1Nf Vmt4THYwYmg4eGE5UmZvRGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWKD3htB3kcWj4eQ1D3JqaXKwa3v5XSe/WjeCQS+vuwQTgBwMYiSnW /6xofBROOQoFCqIXYXeBQWi57RgPo8pf56JPP+Mf6d4jy8RWXeFjAv2MA0qq687i i69o2m7tCWD37WX9eTEK19w/vxxRLrGQRpCzHIttIyoUqjM1nntu524FJ1UxVRYS PpC/eaB36JNOgGV5wL6tSR7Q4Vi2+TFqEoszK0kgas7zXG9uLHzb+ra2OB3Qgkwg hGwTYmT2/gGitZBgZUd9E3yeXcbU3Mv872JGot3uPhxlSX8t+LdHX61YbOn1B02O 1no2Tu21qYLY7CSqzu28+K9jB+CpK+eu -----END CERTIFICATE-----Generated at Tue Apr 15 17:32:12 2025 by rpki-client