$ rpki-client -vvf rpki.apnic.net/member_repository/A915B3AE/CC02A754CA9311EEA726CC09C4F9AE02/nA6EGePLBsHaXiDY90VQWCUP1-0.mft File: nA6EGePLBsHaXiDY90VQWCUP1-0.mft (raw, json) Hash identifier: huOWzp7tHZmkI0qUhVHlfxQRU5mNFw3XY+YLYiNsHLM= Subject key identifier: 77:A8:33:21:E2:A6:E1:C7:A6:40:08:80:30:B4:BB:A1:59:49:5A:1B Authority key identifier: 9C:0E:84:19:E3:CB:06:C1:DA:5E:20:D8:F7:45:50:58:25:0F:D7:ED Certificate issuer: /CN=A915B3AE/serialNumber=9C0E8419E3CB06C1DA5E20D8F7455058250FD7ED Certificate serial: D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nA6EGePLBsHaXiDY90VQWCUP1-0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B3AE/CC02A754CA9311EEA726CC09C4F9AE02/nA6EGePLBsHaXiDY90VQWCUP1-0.mft Manifest number: D5 Signing time: Thu 03 Apr 2025 04:50:28 +0000 Manifest this update: Thu 03 Apr 2025 04:50:28 +0000 Manifest next update: Thu 10 Apr 2025 04:50:28 +0000 Files and hashes: 1: nA6EGePLBsHaXiDY90VQWCUP1-0.crl (hash: vFwGuN7vjbJLeJlzZeosyWLRU1e24gzdLF0HKAkijCY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B3AE/CC02A754CA9311EEA726CC09C4F9AE02/nA6EGePLBsHaXiDY90VQWCUP1-0.crl rsync://rpki.apnic.net/member_repository/A915B3AE/CC02A754CA9311EEA726CC09C4F9AE02/nA6EGePLBsHaXiDY90VQWCUP1-0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nA6EGePLBsHaXiDY90VQWCUP1-0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 04:50:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B3AE Validity Not Before: Apr 3 04:50:28 2025 GMT Not After : Apr 10 04:50:28 2025 GMT Subject: CN=67ee1394-8b66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:13:76:f5:1f:b7:6a:d3:93:e4:99:35:23:28: ec:d6:fa:d4:e2:5d:87:94:4a:4c:e8:81:59:b3:02: ee:b9:09:a2:32:19:32:26:92:70:e4:25:c9:56:3d: 29:72:ff:1f:b0:3f:e2:d7:96:3b:91:80:a8:58:e7: 92:7c:28:f0:6b:08:7e:31:6d:5f:a7:ba:68:e3:c2: bf:46:d1:7e:7c:b0:1a:8d:43:d8:bf:a1:8d:6d:f8: f7:b4:ee:22:0a:bf:1b:d5:4a:df:cc:de:3a:58:88: 13:bc:5a:b5:94:77:98:69:0f:cd:34:81:de:9a:f4: 24:69:9c:18:e6:99:e8:13:16:23:e1:d9:76:73:4e: b7:3e:0c:20:22:25:4f:a3:81:31:fd:cf:73:b0:d2: 31:bc:ff:80:e5:7f:b1:e1:e0:9c:e9:ea:32:4d:89: 3d:e2:39:36:34:c9:45:06:b9:d3:21:69:9c:0b:3b: bd:41:0a:bc:14:63:35:f1:a5:20:19:21:75:da:7f: 96:0e:e9:d1:5f:35:09:db:61:b3:50:21:c2:cc:d8: bf:70:1c:06:cc:24:b8:23:58:34:9b:59:b4:f0:d6: 71:56:e8:b5:82:70:49:fb:30:13:7c:0b:4f:9b:2a: 87:f2:33:82:bb:8b:12:a4:66:b1:4f:2a:70:a9:d7: 42:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:A8:33:21:E2:A6:E1:C7:A6:40:08:80:30:B4:BB:A1:59:49:5A:1B X509v3 Authority Key Identifier: keyid:9C:0E:84:19:E3:CB:06:C1:DA:5E:20:D8:F7:45:50:58:25:0F:D7:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B3AE/CC02A754CA9311EEA726CC09C4F9AE02/nA6EGePLBsHaXiDY90VQWCUP1-0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nA6EGePLBsHaXiDY90VQWCUP1-0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B3AE/CC02A754CA9311EEA726CC09C4F9AE02/nA6EGePLBsHaXiDY90VQWCUP1-0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:8d:29:a7:c9:a8:02:c9:22:e1:5e:8e:df:f3:d8:73:c3:fd: 7c:b9:5a:7d:ee:99:7d:0b:ee:d2:b3:ee:1b:d9:1b:96:b7:b1: 9c:c2:43:e1:e1:e5:2b:ca:2b:f9:5e:6d:49:a7:a4:b0:0f:8f: f9:f3:76:60:8d:e1:da:e9:98:44:3a:7a:af:ad:a4:95:5c:00: 92:5e:e2:b5:71:79:a4:26:72:9a:9b:0e:3e:fe:33:ca:c0:3e: cd:97:05:6a:2e:35:7c:3d:9e:04:c7:c6:dc:58:b6:b9:2c:43: fa:03:88:e7:7a:5f:09:aa:94:cb:b1:f9:49:ae:87:8d:5c:19: 82:33:db:ae:3b:81:4f:e1:9f:6b:10:89:16:94:f1:f8:b0:6f: 0b:cc:4f:59:67:99:1d:1e:d8:d4:7b:fc:09:f6:21:3e:e1:29: bb:6a:f0:83:72:8e:5f:e6:3b:da:28:18:7a:9c:c8:45:d9:4b: bc:67:64:3c:c3:0e:9a:ee:ca:a9:a0:4c:ae:84:1f:80:63:79: 0e:65:6e:8c:88:2e:b3:9c:a0:c5:95:47:39:18:36:87:b0:1d: d1:44:e4:8a:88:db:2e:75:2f:17:bd:68:4c:95:b6:54:67:76: f4:f9:22:17:19:4f:db:8c:0a:38:94:10:71:00:e2:46:7a:d9: 69:67:00:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUIzQUUxMTAvBgNVBAUTKDlDMEU4NDE5RTNDQjA2QzFEQTVFMjBEOEY3NDU1MDU4 MjUwRkQ3RUQwHhcNMjUwNDAzMDQ1MDI4WhcNMjUwNDEwMDQ1MDI4WjAYMRYwFAYD VQQDEw02N2VlMTM5NC04YjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxRN29R+3atOT5Jk1Iyjs1vrU4l2HlEpM6IFZswLuuQmiMhkyJpJw5CXJVj0p cv8fsD/i15Y7kYCoWOeSfCjwawh+MW1fp7po48K/RtF+fLAajUPYv6GNbfj3tO4i Cr8b1UrfzN46WIgTvFq1lHeYaQ/NNIHemvQkaZwY5pnoExYj4dl2c063PgwgIiVP o4Ex/c9zsNIxvP+A5X+x4eCc6eoyTYk94jk2NMlFBrnTIWmcCzu9QQq8FGM18aUg GSF12n+WDunRXzUJ22GzUCHCzNi/cBwGzCS4I1g0m1m08NZxVui1gnBJ+zATfAtP myqH8jOCu4sSpGaxTypwqddCLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHeoMyHi puHHpkAIgDC0u6FZSVobMB8GA1UdIwQYMBaAFJwOhBnjywbB2l4g2PdFUFglD9ft MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjNBRS9DQzAyQTc1NENB OTMxMUVFQTcyNkNDMDlDNEY5QUUwMi9uQTZFR2VQTEJzSGFYaURZOTBWUVdDVVAx LTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25BNkVHZVBMQnNIYVhpRFk5MFZRV0NVUDEtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjNBRS9DQzAyQTc1NENBOTMxMUVFQTcyNkNDMDlDNEY5QUUwMi9uQTZFR2VQTEJz SGFYaURZOTBWUVdDVVAxLTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWjSmnyagCySLhXo7f89hzw/18uVp97pl9C+7Ss+4b2RuWt7GcwkPh 4eUryiv5Xm1Jp6SwD4/583ZgjeHa6ZhEOnqvraSVXACSXuK1cXmkJnKamw4+/jPK wD7NlwVqLjV8PZ4Ex8bcWLa5LEP6A4jnel8JqpTLsflJroeNXBmCM9uuO4FP4Z9r EIkWlPH4sG8LzE9ZZ5kdHtjUe/wJ9iE+4Sm7avCDco5f5jvaKBh6nMhF2Uu8Z2Q8 ww6a7sqpoEyuhB+AY3kOZW6MiC6znKDFlUc5GDaHsB3RROSKiNsudS8XvWhMlbZU Z3b0+SIXGU/bjAo4lBBxAOJGetlpZwBs -----END CERTIFICATE-----Generated at Sat Apr 5 03:57:13 2025 by rpki-client