$ rpki-client -vvf rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft File: 6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft (raw, json) Hash identifier: xz6Wu94GQ0h3pkp+sPRRihc7Uqrz5smEEUoWR1UX78g= Subject key identifier: 79:4A:9D:0B:83:0A:C4:C1:9A:B6:96:DF:09:27:FF:86:E2:90:87:B9 Authority key identifier: E9:9F:F0:44:8B:0B:DA:37:71:CD:C4:A9:6C:59:F7:C9:F9:C8:79:44 Certificate issuer: /CN=A9157E9C/serialNumber=E99FF0448B0BDA3771CDC4A96C59F7C9F9C87944 Certificate serial: 03DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft Manifest number: 03D4 Signing time: Tue 15 Apr 2025 00:16:11 +0000 Manifest this update: Tue 15 Apr 2025 00:16:11 +0000 Manifest next update: Tue 22 Apr 2025 00:16:11 +0000 Files and hashes: 1: 6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.crl (hash: Y8vsNknFEhW0H2P4RAIhOv/skq98vVWxArc2IJgvHVY=) 2: E3CD40BE7D6611ECBA65C232C4F9AE02.roa (hash: 0enjz6SIbauvQ9h6jwc2NEiXIAcjMM9tvz5AS5aCRh4=) 3: 438C7C387D6F11ECBCDC721DC4F9AE02.roa (hash: c2QsjvxJtydLLoad0ereLNJmmVF8IBQhrQgpfGdgdxI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.crl rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 00:16:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 989 (0x3dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157E9C, serialNumber=E99FF0448B0BDA3771CDC4A96C59F7C9F9C87944 Validity Not Before: Apr 15 00:16:11 2025 GMT Not After : Apr 22 00:16:11 2025 GMT Subject: CN=67fda54b-2c0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:86:91:4a:89:b9:4b:68:d1:71:22:ea:3d:d2: c7:b6:d5:63:b2:b5:81:9a:7e:75:bf:38:61:21:37: ed:9a:75:3b:5f:15:33:c5:91:0b:98:76:ae:a0:13: e3:ad:16:19:a4:7c:46:07:67:15:5e:57:4e:37:4f: cc:e6:43:0d:21:dd:67:4d:3b:04:4a:6b:17:4a:79: d7:64:16:3f:5c:3e:88:0a:55:a3:7a:d6:43:b0:e9: e1:40:cb:41:f0:08:3e:b3:72:b2:cf:b7:ba:bc:6e: fb:f9:75:41:b2:df:de:31:62:86:89:1e:11:54:09: e1:cf:d5:c3:a5:3a:19:c9:f2:ed:4e:2a:7c:e6:6a: b1:e6:ce:83:e8:78:16:0c:b5:ef:14:3a:bb:71:44: eb:9a:7a:8d:a5:17:e2:2c:70:a8:c7:9a:c5:ac:bc: b5:94:c8:b8:01:2f:54:9a:c0:4e:0a:e4:fd:4e:4e: 13:5e:d8:62:2f:99:44:db:08:10:28:38:e9:d7:0b: f3:a9:48:ae:42:4d:af:25:39:11:a8:3a:b8:40:88: d8:bb:81:80:7f:e3:c3:1c:f8:56:78:10:34:52:04: 83:d8:bc:d0:a3:df:5c:85:3d:86:d8:45:6a:46:f9: a6:e3:19:cb:97:da:e6:7c:6e:bf:92:51:29:3b:d3: a3:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:4A:9D:0B:83:0A:C4:C1:9A:B6:96:DF:09:27:FF:86:E2:90:87:B9 X509v3 Authority Key Identifier: keyid:E9:9F:F0:44:8B:0B:DA:37:71:CD:C4:A9:6C:59:F7:C9:F9:C8:79:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:6d:81:b1:9d:3c:80:7f:3b:d4:32:70:2f:e8:ad:83:a1:b6: 07:c3:b8:13:64:3e:1b:ba:23:77:48:d0:6c:56:e0:0d:a5:90: 69:87:97:a3:a0:2a:30:22:e2:d1:a3:07:a9:71:f9:7a:30:78: 62:55:18:28:69:f1:6e:c9:ea:51:aa:3e:2f:46:5e:67:ad:ff: 31:48:a0:ba:c3:f9:86:2c:1e:ba:ea:d8:dc:20:ed:72:eb:2b: a6:3b:f2:7c:d3:ec:80:39:e0:0e:b8:aa:da:f7:5a:81:19:e9: 25:de:c1:2a:2b:7d:b1:38:c2:e0:ad:10:ef:b3:1c:3b:80:3f: ac:1c:63:c8:ee:f2:b5:53:c8:95:27:7f:16:53:9a:95:ab:1c: 4b:1b:89:50:f1:6e:19:f9:c5:17:0a:46:71:d4:ef:5a:c3:ba: 9d:8f:ba:c1:79:1a:d3:30:b1:4c:e2:b3:2d:0a:37:3c:7f:13: 44:df:27:69:cd:1c:68:ad:3d:f3:a9:53:c6:6c:ab:00:96:22: 07:26:d9:91:5b:83:40:90:52:fd:78:eb:12:1f:97:c2:2a:94: 90:99:ec:27:5d:6f:1e:76:76:ed:b6:53:c1:63:69:e6:86:db: 7f:1f:81:31:ad:c6:59:46:30:ae:7d:5c:3b:dc:7b:86:c7:05: 88:26:a7:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdFOUMxMTAvBgNVBAUTKEU5OUZGMDQ0OEIwQkRBMzc3MUNEQzRBOTZDNTlGN0M5 RjlDODc5NDQwHhcNMjUwNDE1MDAxNjExWhcNMjUwNDIyMDAxNjExWjAYMRYwFAYD VQQDEw02N2ZkYTU0Yi0yYzBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxYaRSom5S2jRcSLqPdLHttVjsrWBmn51vzhhITftmnU7XxUzxZELmHauoBPj rRYZpHxGB2cVXldON0/M5kMNId1nTTsESmsXSnnXZBY/XD6IClWjetZDsOnhQMtB 8Ag+s3Kyz7e6vG77+XVBst/eMWKGiR4RVAnhz9XDpToZyfLtTip85mqx5s6D6HgW DLXvFDq7cUTrmnqNpRfiLHCox5rFrLy1lMi4AS9UmsBOCuT9Tk4TXthiL5lE2wgQ KDjp1wvzqUiuQk2vJTkRqDq4QIjYu4GAf+PDHPhWeBA0UgSD2LzQo99chT2G2EVq Rvmm4xnLl9rmfG6/klEpO9OjrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHlKnQuD CsTBmraW3wkn/4bikIe5MB8GA1UdIwQYMBaAFOmf8ESLC9o3cc3EqWxZ98n5yHlE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0U5Qy81MEM5OTNDRTdE NjMxMUVDQUM1QzdGMUVDNEY5QUUwMi82Wl93UklzTDJqZHh6Y1NwYkZuM3lmbkll VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZaX3dSSXNMMmpkeHpjU3BiRm4zeWZuSWVVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0U5Qy81MEM5OTNDRTdENjMxMUVDQUM1QzdGMUVDNEY5QUUwMi82Wl93UklzTDJq ZHh6Y1NwYkZuM3lmbkllVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPbYGxnTyAfzvUMnAv6K2DobYHw7gTZD4buiN3SNBsVuANpZBph5ej oCowIuLRowepcfl6MHhiVRgoafFuyepRqj4vRl5nrf8xSKC6w/mGLB666tjcIO1y 6yumO/J80+yAOeAOuKra91qBGekl3sEqK32xOMLgrRDvsxw7gD+sHGPI7vK1U8iV J38WU5qVqxxLG4lQ8W4Z+cUXCkZx1O9aw7qdj7rBeRrTMLFM4rMtCjc8fxNE3ydp zRxorT3zqVPGbKsAliIHJtmRW4NAkFL9eOsSH5fCKpSQmewnXW8ednbttlPBY2nm htt/H4ExrcZZRjCufVw73HuGxwWIJqcL -----END CERTIFICATE-----Generated at Wed Apr 16 17:09:11 2025 by rpki-client