$ rpki-client -vvf rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/x6CGcqgQDaMwwSIxURVYe-YRDfE.mft File: x6CGcqgQDaMwwSIxURVYe-YRDfE.mft (raw, json) Hash identifier: 0gZS/aSogAHySch+u/ZJksg5c63DstNiVIsfqtWuRVw= Subject key identifier: A3:1D:03:AB:2A:8A:F6:39:62:DD:67:CB:C0:EE:15:EC:A6:68:BF:67 Authority key identifier: C7:A0:86:72:A8:10:0D:A3:30:C1:22:31:51:15:58:7B:E6:11:0D:F1 Certificate issuer: /CN=A9149CA9/serialNumber=C7A08672A8100DA330C122315115587BE6110DF1 Certificate serial: 06CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x6CGcqgQDaMwwSIxURVYe-YRDfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/x6CGcqgQDaMwwSIxURVYe-YRDfE.mft Manifest number: 06C5 Signing time: Wed 02 Apr 2025 22:03:35 +0000 Manifest this update: Wed 02 Apr 2025 22:03:35 +0000 Manifest next update: Wed 09 Apr 2025 22:03:35 +0000 Files and hashes: 1: x6CGcqgQDaMwwSIxURVYe-YRDfE.crl (hash: FOts9VWKjFKuLQxXZdumxRs5GhjCMcVN8zIRTcsluHs=) 2: 3F6A3A284F1C11EB9953172CC4F9AE02.roa (hash: fLIn/n29gS9WQea5NQ408mptvqiyp1OsclxpM5zgbkA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/x6CGcqgQDaMwwSIxURVYe-YRDfE.crl rsync://rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/x6CGcqgQDaMwwSIxURVYe-YRDfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x6CGcqgQDaMwwSIxURVYe-YRDfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 22:03:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1739 (0x6cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149CA9 Validity Not Before: Apr 2 22:03:35 2025 GMT Not After : Apr 9 22:03:35 2025 GMT Subject: CN=67edb437-8871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ed:a1:67:46:b5:98:17:2c:b3:ef:f6:e2:70: 74:b7:1d:e5:3f:0b:17:ad:be:ca:e9:c8:3f:8f:22: 74:48:8a:53:dc:71:4d:ec:86:1d:53:ad:85:ef:32: 2d:ba:78:4f:22:73:68:0a:a2:e5:df:0d:d2:d9:f4: 58:48:24:bb:a5:c3:a8:5d:19:06:b5:97:ec:e1:1c: f3:16:19:2f:5b:8d:43:f2:f8:c7:95:f2:0e:2c:17: 3b:c4:1d:0e:fa:16:5f:81:20:26:36:64:32:92:0f: 7b:d4:c9:64:c9:bc:50:be:3c:b2:11:c6:e3:6b:38: 30:ce:7b:97:f0:31:d5:ae:59:60:d9:67:e7:e0:b9: 97:ae:75:c9:26:59:ba:4f:74:e6:e6:16:73:70:2c: 4b:83:3d:c1:9a:36:3a:4e:47:24:b4:ea:8c:ac:51: a1:8a:27:31:d8:e3:6c:a9:9b:22:af:d5:8a:7d:bd: af:1d:fe:2b:0c:3f:32:63:38:cb:ce:d1:cb:72:a3: 47:10:3f:e0:be:92:c7:71:47:ed:56:86:5a:40:4b: b0:16:84:fd:c0:e7:55:62:b7:16:21:46:6e:24:ed: 8d:26:b2:23:49:c5:bd:6e:76:16:23:e4:84:8b:28: 56:8c:a2:aa:e9:7d:08:99:2f:e9:47:ad:bf:51:26: 92:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:1D:03:AB:2A:8A:F6:39:62:DD:67:CB:C0:EE:15:EC:A6:68:BF:67 X509v3 Authority Key Identifier: keyid:C7:A0:86:72:A8:10:0D:A3:30:C1:22:31:51:15:58:7B:E6:11:0D:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/x6CGcqgQDaMwwSIxURVYe-YRDfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x6CGcqgQDaMwwSIxURVYe-YRDfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/x6CGcqgQDaMwwSIxURVYe-YRDfE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:10:4e:4d:37:10:0f:bf:cf:51:aa:5c:4b:f5:72:6f:a1:4c: b3:54:cb:2c:df:9d:e4:76:1c:66:83:04:01:70:9f:c4:a0:58: d7:f4:f8:cb:25:5c:06:cd:83:fb:3e:a7:59:d3:87:84:b6:66: 20:a7:b5:12:58:6a:b9:16:3d:63:b5:f3:3e:d5:16:48:1c:07: ce:6c:9c:cd:9c:1b:76:02:11:d6:e8:d5:36:d5:d2:6d:48:46: 80:ba:3b:d7:b2:6e:77:3d:14:89:ce:0c:f0:84:17:f6:00:ee: 80:95:11:8c:06:a7:c1:cc:18:76:ee:c5:2d:22:88:52:af:08: ab:d9:ea:46:37:9a:78:af:31:82:aa:33:02:14:f6:3e:83:da: 90:4b:cb:8b:47:aa:bc:d0:a4:b8:43:83:45:4d:08:81:12:ea: 15:31:0e:12:89:8a:16:3d:09:98:ce:d5:21:28:0f:9d:0f:3f: 07:1b:f6:a0:1e:35:50:98:d9:ab:d9:a2:23:fb:bc:80:ea:56: 87:3a:4e:0e:c8:0f:90:ab:f1:5f:9f:41:f7:f6:1c:21:e7:72: 76:e9:a8:b6:00:ab:9d:29:d1:ba:78:6d:cc:af:1e:ce:c6:97: 2c:1d:75:2f:62:69:e9:1f:8c:87:1e:08:dd:dc:28:c1:e9:c7: 91:fd:ff:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlDQTkxMTAvBgNVBAUTKEM3QTA4NjcyQTgxMDBEQTMzMEMxMjIzMTUxMTU1ODdC RTYxMTBERjEwHhcNMjUwNDAyMjIwMzM1WhcNMjUwNDA5MjIwMzM1WjAYMRYwFAYD VQQDEw02N2VkYjQzNy04ODcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy+2hZ0a1mBcss+/24nB0tx3lPwsXrb7K6cg/jyJ0SIpT3HFN7IYdU62F7zIt unhPInNoCqLl3w3S2fRYSCS7pcOoXRkGtZfs4RzzFhkvW41D8vjHlfIOLBc7xB0O +hZfgSAmNmQykg971MlkybxQvjyyEcbjazgwznuX8DHVrllg2Wfn4LmXrnXJJlm6 T3Tm5hZzcCxLgz3BmjY6TkcktOqMrFGhiicx2ONsqZsir9WKfb2vHf4rDD8yYzjL ztHLcqNHED/gvpLHcUftVoZaQEuwFoT9wOdVYrcWIUZuJO2NJrIjScW9bnYWI+SE iyhWjKKq6X0ImS/pR62/USaSbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKMdA6sq ivY5Yt1ny8DuFeymaL9nMB8GA1UdIwQYMBaAFMeghnKoEA2jMMEiMVEVWHvmEQ3x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUNBOS9FRUQ3NDhENjRG MTUxMUVCOEM3RUFCMUFDNEY5QUUwMi94NkNHY3FnUURhTXd3U0l4VVJWWWUtWVJE ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g2Q0djcWdRRGFNd3dTSXhVUlZZZS1ZUkRmRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUNBOS9FRUQ3NDhENjRGMTUxMUVCOEM3RUFCMUFDNEY5QUUwMi94NkNHY3FnUURh TXd3U0l4VVJWWWUtWVJEZkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4EE5NNxAPv89RqlxL9XJvoUyzVMss353kdhxmgwQBcJ/EoFjX9PjL JVwGzYP7PqdZ04eEtmYgp7USWGq5Fj1jtfM+1RZIHAfObJzNnBt2AhHW6NU21dJt SEaAujvXsm53PRSJzgzwhBf2AO6AlRGMBqfBzBh27sUtIohSrwir2epGN5p4rzGC qjMCFPY+g9qQS8uLR6q80KS4Q4NFTQiBEuoVMQ4SiYoWPQmYztUhKA+dDz8HG/ag HjVQmNmr2aIj+7yA6laHOk4OyA+Qq/Ffn0H39hwh53J26ai2AKudKdG6eG3Mrx7O xpcsHXUvYmnpH4yHHgjd3CjB6ceR/f+p -----END CERTIFICATE-----Generated at Fri Apr 4 18:34:03 2025 by rpki-client