$ rpki-client -vvf rpki.apnic.net/member_repository/A914F0E7/03A12C5C3DC611EB82A7681CC4F9AE02/r6xXdRxedph17Sb1vN8X9T3_nJk.mft File: r6xXdRxedph17Sb1vN8X9T3_nJk.mft (raw, json) Hash identifier: 8MZKcikRf4htfH259EyBNhfv00Qu6IIy/+d37hN2znc= Subject key identifier: BC:63:D2:FF:0E:71:AC:D0:DD:6B:69:C8:29:5B:EC:B9:B7:B7:3B:96 Authority key identifier: AF:AC:57:75:1C:5E:76:98:75:ED:26:F5:BC:DF:17:F5:3D:FF:9C:99 Certificate issuer: /CN=A914F0E7/serialNumber=AFAC57751C5E769875ED26F5BCDF17F53DFF9C99 Certificate serial: 06FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6xXdRxedph17Sb1vN8X9T3_nJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F0E7/03A12C5C3DC611EB82A7681CC4F9AE02/r6xXdRxedph17Sb1vN8X9T3_nJk.mft Manifest number: 06F7 Signing time: Sat 12 Apr 2025 21:37:36 +0000 Manifest this update: Sat 12 Apr 2025 21:37:36 +0000 Manifest next update: Sat 19 Apr 2025 21:37:36 +0000 Files and hashes: 1: r6xXdRxedph17Sb1vN8X9T3_nJk.crl (hash: CEE6oicWxULs+w4nkL4ql+w9mkcEvPo7FGdaS5OTSwE=) 2: 595EF8C63DC711EBA35AB51DC4F9AE02.roa (hash: kDcfkRRwNdoJ431TUAg/mhxPRjcYBJFeGLnnYla+ins=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F0E7/03A12C5C3DC611EB82A7681CC4F9AE02/r6xXdRxedph17Sb1vN8X9T3_nJk.crl rsync://rpki.apnic.net/member_repository/A914F0E7/03A12C5C3DC611EB82A7681CC4F9AE02/r6xXdRxedph17Sb1vN8X9T3_nJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6xXdRxedph17Sb1vN8X9T3_nJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 17:48:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1788 (0x6fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F0E7, serialNumber=AFAC57751C5E769875ED26F5BCDF17F53DFF9C99 Validity Not Before: Apr 12 21:37:36 2025 GMT Not After : Apr 19 21:37:36 2025 GMT Subject: CN=67fadd20-0ef6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:22:9d:57:fe:0a:0f:ca:05:6f:35:0b:9c:27: f7:9f:6f:84:f8:62:a4:6b:23:8a:64:75:0e:9a:7a: cf:c2:fe:e3:0e:74:4b:11:72:55:e6:7b:c0:64:85: 30:b0:9c:30:ea:9e:22:01:b4:59:99:44:ab:a3:f1: 82:9b:7c:0f:ec:a8:29:18:64:d8:85:94:31:da:47: f7:ff:16:22:14:0b:26:a4:cf:94:08:5f:8f:e9:f7: c7:7e:88:74:d2:6e:8e:f5:37:62:47:e2:1d:80:07: 2a:d2:df:6a:81:71:29:22:29:79:c3:cc:ec:c9:75: 95:17:11:dd:7f:5b:cc:fd:25:4e:6c:ae:97:43:ce: 23:07:ae:8b:36:3b:58:81:1b:88:b5:26:cc:53:10: 3c:bd:96:d0:db:90:ed:f7:1c:5c:e5:c8:2d:b9:8b: c5:af:45:35:d1:17:2e:a9:8f:fc:85:c3:b5:63:ae: a1:3c:d0:dd:b6:cf:c0:c7:e7:2e:09:de:3e:9d:51: 33:14:c1:88:76:69:47:51:84:d4:e1:c8:62:e0:0a: e2:65:f4:ae:b1:5b:aa:83:5b:2c:9b:a8:be:c1:3a: da:e4:0a:64:bd:ee:88:ab:69:3b:f8:e5:3e:2a:a7: 9a:54:55:16:71:bc:4e:50:86:b7:60:f1:65:77:e6: cf:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:63:D2:FF:0E:71:AC:D0:DD:6B:69:C8:29:5B:EC:B9:B7:B7:3B:96 X509v3 Authority Key Identifier: keyid:AF:AC:57:75:1C:5E:76:98:75:ED:26:F5:BC:DF:17:F5:3D:FF:9C:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F0E7/03A12C5C3DC611EB82A7681CC4F9AE02/r6xXdRxedph17Sb1vN8X9T3_nJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6xXdRxedph17Sb1vN8X9T3_nJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F0E7/03A12C5C3DC611EB82A7681CC4F9AE02/r6xXdRxedph17Sb1vN8X9T3_nJk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:d8:9b:58:b7:a5:20:e8:32:87:26:9c:7d:a4:d6:f1:da:8b: 87:a8:5a:a6:b9:37:c8:3b:f8:fc:c4:10:87:b7:d1:19:7d:3f: 4e:2d:f8:67:77:05:ce:c9:a9:2b:a8:07:d8:cd:94:b2:9b:8a: 78:c5:90:52:0d:bc:0a:34:d3:6f:dd:d4:0d:b7:b9:41:48:04: 73:fc:7e:53:2d:d4:c4:13:e8:1c:98:8c:ab:83:81:5a:a4:1e: a7:41:8f:02:2f:2c:ab:58:29:a9:e8:80:f6:f6:91:93:26:c2: 77:83:3e:60:d7:a3:c5:c8:a5:cd:49:b4:77:e9:fd:75:ce:2f: 43:cd:82:2b:71:90:19:97:11:1c:e7:ea:6a:7d:63:36:9e:18: a5:fc:49:39:02:d9:c6:99:89:e3:d2:7f:27:ee:f4:83:58:15: b2:86:42:97:2e:c7:00:4d:60:1e:b5:a8:51:e8:f6:ce:be:8b: 93:2a:b9:af:3a:0d:c7:7f:b4:5f:85:bf:a2:96:b4:3b:73:d0: 33:f4:c1:c9:02:a0:63:63:15:8c:9e:5d:38:b5:1f:1f:2d:a3: 52:c6:b6:90:66:27:02:65:85:c8:7d:3d:73:71:51:43:10:c0: 96:87:34:08:c5:fa:9b:f1:b3:a5:e7:c8:90:f1:ab:99:3f:f6: 02:45:a4:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEYwRTcxMTAvBgNVBAUTKEFGQUM1Nzc1MUM1RTc2OTg3NUVEMjZGNUJDREYxN0Y1 M0RGRjlDOTkwHhcNMjUwNDEyMjEzNzM2WhcNMjUwNDE5MjEzNzM2WjAYMRYwFAYD VQQDEw02N2ZhZGQyMC0wZWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtiKdV/4KD8oFbzULnCf3n2+E+GKkayOKZHUOmnrPwv7jDnRLEXJV5nvAZIUw sJww6p4iAbRZmUSro/GCm3wP7KgpGGTYhZQx2kf3/xYiFAsmpM+UCF+P6ffHfoh0 0m6O9TdiR+IdgAcq0t9qgXEpIil5w8zsyXWVFxHdf1vM/SVObK6XQ84jB66LNjtY gRuItSbMUxA8vZbQ25Dt9xxc5cgtuYvFr0U10RcuqY/8hcO1Y66hPNDdts/Ax+cu Cd4+nVEzFMGIdmlHUYTU4chi4AriZfSusVuqg1ssm6i+wTra5Apkve6Iq2k7+OU+ KqeaVFUWcbxOUIa3YPFld+bPxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLxj0v8O cazQ3WtpyClb7Lm3tzuWMB8GA1UdIwQYMBaAFK+sV3UcXnaYde0m9bzfF/U9/5yZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjBFNy8wM0ExMkM1QzNE QzYxMUVCODJBNzY4MUNDNEY5QUUwMi9yNnhYZFJ4ZWRwaDE3U2Ixdk44WDlUM19u SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I2eFhkUnhlZHBoMTdTYjF2TjhYOVQzX25Kay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjBFNy8wM0ExMkM1QzNEQzYxMUVCODJBNzY4MUNDNEY5QUUwMi9yNnhYZFJ4ZWRw aDE3U2Ixdk44WDlUM19uSmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDJ2JtYt6Ug6DKHJpx9pNbx2ouHqFqmuTfIO/j8xBCHt9EZfT9OLfhn dwXOyakrqAfYzZSym4p4xZBSDbwKNNNv3dQNt7lBSARz/H5TLdTEE+gcmIyrg4Fa pB6nQY8CLyyrWCmp6ID29pGTJsJ3gz5g16PFyKXNSbR36f11zi9DzYIrcZAZlxEc 5+pqfWM2nhil/Ek5AtnGmYnj0n8n7vSDWBWyhkKXLscATWAetahR6PbOvouTKrmv Og3Hf7Rfhb+ilrQ7c9Az9MHJAqBjYxWMnl04tR8fLaNSxraQZicCZYXIfT1zcVFD EMCWhzQIxfqb8bOl58iQ8auZP/YCRaSx -----END CERTIFICATE-----Generated at Sun Apr 13 01:30:41 2025 by rpki-client