$ rpki-client -vvf rpki.apnic.net/member_repository/A915392C/A6404A4A54CB11EFA1627016C4F9AE02/6IBLfhBNZXbwyNxIKlG142eqH3c.mft File: 6IBLfhBNZXbwyNxIKlG142eqH3c.mft (raw, json) Hash identifier: xOxOFcr3WgJTzkCjbG6NMpJ9cEhe1eCojv+vJbb5Msc= Subject key identifier: 2B:34:21:1A:0F:05:9F:A6:EE:F1:1C:C1:4A:38:DC:DE:4D:CA:11:91 Authority key identifier: E8:80:4B:7E:10:4D:65:76:F0:C8:DC:48:2A:51:B5:E3:67:AA:1F:77 Certificate issuer: /CN=A915392C/serialNumber=E8804B7E104D6576F0C8DC482A51B5E367AA1F77 Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6IBLfhBNZXbwyNxIKlG142eqH3c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915392C/A6404A4A54CB11EFA1627016C4F9AE02/6IBLfhBNZXbwyNxIKlG142eqH3c.mft Manifest number: 7B Signing time: Sat 29 Mar 2025 06:00:47 +0000 Manifest this update: Sat 29 Mar 2025 06:00:47 +0000 Manifest next update: Sat 05 Apr 2025 06:00:47 +0000 Files and hashes: 1: 6IBLfhBNZXbwyNxIKlG142eqH3c.crl (hash: W6ohIlRKPBuggUQNMo2ZuoiGPQh3986LhioyariTiWA=) 2: 2920764254CC11EF84CA4F17C4F9AE02.roa (hash: LFTBpIjwd4vxs9M7HrIPjAgrFCw7KOfaHYdxK0dO8Jg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915392C/A6404A4A54CB11EFA1627016C4F9AE02/6IBLfhBNZXbwyNxIKlG142eqH3c.crl rsync://rpki.apnic.net/member_repository/A915392C/A6404A4A54CB11EFA1627016C4F9AE02/6IBLfhBNZXbwyNxIKlG142eqH3c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6IBLfhBNZXbwyNxIKlG142eqH3c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915392C Validity Not Before: Mar 29 06:00:47 2025 GMT Not After : Apr 5 06:00:47 2025 GMT Subject: CN=67e78c8f-0625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:43:1c:12:1d:b8:99:29:d3:56:10:e8:52:57: 62:e3:98:34:ff:a3:e5:73:b8:ea:e1:d7:6f:d1:71: 44:33:90:14:0e:01:95:32:fe:31:3e:39:bf:03:af: e7:70:12:f1:be:45:b8:46:df:ca:d5:cf:08:dc:ea: 29:d5:c8:5d:a2:e7:45:23:c4:d2:b6:4f:96:62:71: e2:c5:10:e9:b8:1e:0b:a7:6a:aa:c6:0f:3b:b1:d9: 03:53:cb:03:a9:39:54:a3:f6:97:a1:4c:63:43:62: 1e:5f:f8:ae:98:66:fc:ab:68:b3:7e:e0:b6:2d:ba: 2f:c7:6b:62:c5:9f:01:f7:bf:fd:b7:6d:02:3e:cf: 25:5b:e2:e4:6d:1d:7c:f6:c6:f3:d7:98:74:04:ad: b0:4f:2c:99:d8:64:ab:45:29:84:60:35:ad:d0:c2: 67:89:a6:a8:a7:5e:39:6c:a0:00:c4:7c:c2:06:6d: 19:1c:9d:31:39:55:0f:fa:f5:81:95:8a:d0:b0:6b: 2a:be:8c:ca:22:d0:6b:90:bc:fe:fe:24:ce:76:5c: b0:77:3d:df:e6:dc:e7:66:b2:33:7e:a7:9d:7f:1b: 19:ff:b4:3d:70:f0:47:e0:68:64:bc:46:b2:ef:df: 9d:5e:6f:d5:23:1f:b2:de:c5:d1:cf:e4:39:9f:a7: 40:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:34:21:1A:0F:05:9F:A6:EE:F1:1C:C1:4A:38:DC:DE:4D:CA:11:91 X509v3 Authority Key Identifier: keyid:E8:80:4B:7E:10:4D:65:76:F0:C8:DC:48:2A:51:B5:E3:67:AA:1F:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915392C/A6404A4A54CB11EFA1627016C4F9AE02/6IBLfhBNZXbwyNxIKlG142eqH3c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6IBLfhBNZXbwyNxIKlG142eqH3c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915392C/A6404A4A54CB11EFA1627016C4F9AE02/6IBLfhBNZXbwyNxIKlG142eqH3c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:fd:af:78:f3:17:57:fc:8d:3e:00:a6:41:a0:7c:17:f5:fb: e8:6b:13:7f:4a:4a:d6:8d:c7:5d:74:63:af:8c:27:36:54:1a: 1d:dc:e7:da:e9:f0:f6:22:77:32:b4:f3:ad:56:60:54:82:33: b5:fb:e2:c3:36:30:c8:8a:63:a8:27:46:10:db:e0:29:cb:53: f4:10:dc:df:6d:9a:70:2c:15:70:cc:97:ef:f4:46:3c:c0:b1: 67:0b:62:c9:ee:f9:62:7a:e5:4e:55:32:cb:32:15:c2:66:dd: 88:cd:49:4b:76:8b:c1:08:c8:03:2e:6a:6b:0f:f7:19:c0:88: f1:ad:c7:27:44:ff:79:f8:fc:6f:2d:6f:ec:81:6a:09:74:b1: 17:38:f7:2b:a9:3b:12:53:12:24:c2:dc:06:68:04:96:75:15: 4b:40:a5:d1:83:cf:d6:7c:87:9f:f1:cf:c2:33:6b:59:96:f2: af:0e:95:e0:ab:a1:a4:09:a1:46:c6:81:20:12:bd:cc:fb:81: 41:6a:78:fd:31:97:93:e3:15:c4:6d:55:c6:c6:f9:72:d2:ef: 25:d5:11:a0:21:8f:62:1a:69:ec:e7:ab:f0:fc:0a:36:02:59: 43:23:d5:61:e7:2a:e3:28:fb:09:bc:95:7e:2b:bf:7e:5a:b6: e3:bc:4d:74 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MzkyQzExMC8GA1UEBRMoRTg4MDRCN0UxMDRENjU3NkYwQzhEQzQ4MkE1MUI1RTM2 N0FBMUY3NzAeFw0yNTAzMjkwNjAwNDdaFw0yNTA0MDUwNjAwNDdaMBgxFjAUBgNV BAMTDTY3ZTc4YzhmLTA2MjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvQxwSHbiZKdNWEOhSV2LjmDT/o+VzuOrh12/RcUQzkBQOAZUy/jE+Ob8Dr+dw EvG+RbhG38rVzwjc6inVyF2i50UjxNK2T5ZiceLFEOm4HgunaqrGDzux2QNTywOp OVSj9pehTGNDYh5f+K6YZvyraLN+4LYtui/Ha2LFnwH3v/23bQI+zyVb4uRtHXz2 xvPXmHQErbBPLJnYZKtFKYRgNa3QwmeJpqinXjlsoADEfMIGbRkcnTE5VQ/69YGV itCwayq+jMoi0GuQvP7+JM52XLB3Pd/m3OdmsjN+p51/Gxn/tD1w8EfgaGS8RrLv 351eb9UjH7LexdHP5Dmfp0CTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKzQhGg8F n6bu8RzBSjjc3k3KEZEwHwYDVR0jBBgwFoAU6IBLfhBNZXbwyNxIKlG142eqH3cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzOTJDL0E2NDA0QTRBNTRD QjExRUZBMTYyNzAxNkM0RjlBRTAyLzZJQkxmaEJOWlhid3lOeElLbEcxNDJlcUgz Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNklCTGZoQk5aWGJ3eU54SUtsRzE0MmVxSDNjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUz OTJDL0E2NDA0QTRBNTRDQjExRUZBMTYyNzAxNkM0RjlBRTAyLzZJQkxmaEJOWlhi d3lOeElLbEcxNDJlcUgzYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJj9r3jzF1f8jT4ApkGgfBf1++hrE39KStaNx110Y6+MJzZUGh3c59rp 8PYidzK0861WYFSCM7X74sM2MMiKY6gnRhDb4CnLU/QQ3N9tmnAsFXDMl+/0RjzA sWcLYsnu+WJ65U5VMssyFcJm3YjNSUt2i8EIyAMuamsP9xnAiPGtxydE/3n4/G8t b+yBagl0sRc49yupOxJTEiTC3AZoBJZ1FUtApdGDz9Z8h5/xz8Iza1mW8q8OleCr oaQJoUbGgSASvcz7gUFqeP0xl5PjFcRtVcbG+XLS7yXVEaAhj2Iaaeznq/D8CjYC WUMj1WHnKuMo+wm8lX4rv35atuO8TXQ= -----END CERTIFICATE-----Generated at Fri Apr 4 22:34:49 2025 by rpki-client