$ rpki-client -vvf rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.mft File: ET6g_81su3s89UWrzSyWLYbh7LA.mft (raw, json) Hash identifier: 2GvsAdy2Z8FtcXwLv6S+ja7UP3UfqdNXHE4GNWtOz5U= Subject key identifier: E8:80:FD:DE:8C:35:53:96:E1:8E:19:F7:21:E1:44:19:2E:5E:E8:E2 Authority key identifier: 11:3E:A0:FF:CD:6C:BB:7B:3C:F5:45:AB:CD:2C:96:2D:86:E1:EC:B0 Certificate issuer: /CN=A915C6B7/serialNumber=113EA0FFCD6CBB7B3CF545ABCD2C962D86E1ECB0 Certificate serial: 0BAA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ET6g_81su3s89UWrzSyWLYbh7LA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.mft Manifest number: 0BA2 Signing time: Fri 04 Apr 2025 19:03:47 +0000 Manifest this update: Fri 04 Apr 2025 19:03:47 +0000 Manifest next update: Fri 11 Apr 2025 19:03:47 +0000 Files and hashes: 1: ET6g_81su3s89UWrzSyWLYbh7LA.crl (hash: ZWRULofsIWYh7rS2QRd+smZefz6veCdxnDV3lYjBJwU=) 2: 69683D8CC64D11EABD8FD32DC4F9AE02.roa (hash: ndk7WBwAom+jNCFlVWgXYFCEOWN+x873QVE3wv4MHH8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.crl rsync://rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ET6g_81su3s89UWrzSyWLYbh7LA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:03:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2986 (0xbaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C6B7 Validity Not Before: Apr 4 19:03:47 2025 GMT Not After : Apr 11 19:03:47 2025 GMT Subject: CN=67f02d13-d407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c8:20:16:02:ad:3e:71:8e:34:e8:43:5f:97: 99:1f:06:36:4e:fb:f8:90:13:2e:3a:aa:3a:7e:f2: 5b:f6:64:69:1c:5b:f1:74:b3:3e:c0:d4:8f:fc:5c: d1:56:ba:b2:45:e0:90:ff:3f:19:7b:a6:37:d6:f3: 79:8e:20:33:72:34:db:dd:68:73:c6:da:20:c3:f6: 7e:cf:6e:54:da:88:68:91:e1:9f:9c:ae:88:a1:b1: 04:eb:c7:b5:00:31:c0:e3:51:ec:88:5d:52:03:bd: 5e:a8:55:4b:77:60:34:2a:63:41:d8:94:8c:65:6b: 29:57:ef:51:c7:25:20:f3:ff:df:9e:ed:70:7f:e9: 4b:26:67:fd:38:e3:f4:31:fd:c2:7f:56:38:fb:e3: b4:ab:7c:5f:5b:ed:dc:f6:ff:a3:02:0a:e7:9d:8b: cb:68:23:8b:83:15:ee:ae:ee:f6:a2:37:2d:76:bd: bd:b9:1d:42:eb:8a:20:d4:78:f1:cd:a0:76:41:cf: e3:1e:b4:52:ea:2f:55:ea:6f:de:f0:79:74:ca:8f: 19:aa:34:e9:d4:5d:b7:b7:b2:2e:8b:d6:69:47:27: aa:c3:15:fd:17:8c:4b:69:3e:78:76:d5:16:b3:41: f6:94:d2:5a:f3:ee:a8:fc:b5:e5:03:f6:a4:fb:15: 55:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:80:FD:DE:8C:35:53:96:E1:8E:19:F7:21:E1:44:19:2E:5E:E8:E2 X509v3 Authority Key Identifier: keyid:11:3E:A0:FF:CD:6C:BB:7B:3C:F5:45:AB:CD:2C:96:2D:86:E1:EC:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ET6g_81su3s89UWrzSyWLYbh7LA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:b1:e7:cb:95:35:8e:45:a0:81:35:0f:20:78:a5:04:3b:8b: 14:cc:f6:b2:3e:e4:c8:72:61:76:d9:26:3d:d3:49:66:40:f9: fa:72:50:59:fa:91:b2:5f:42:e9:19:b2:de:2b:28:fc:ae:4e: 5b:70:65:eb:3d:07:96:64:85:15:fd:3d:47:f0:64:48:74:90: 86:e0:bf:1c:cb:50:1c:14:a6:5a:1a:ce:d4:27:20:0d:4b:8c: 58:a6:c6:e2:e5:3f:62:be:15:e4:8b:3f:56:f6:ea:99:6c:f5: 60:68:68:36:1a:ae:bc:a9:ab:46:cb:8a:18:80:1a:0e:02:6c: ae:2a:6f:e9:15:b8:24:ee:8a:52:f6:89:8d:ad:27:25:e2:cf: 7f:2a:98:79:b3:82:00:04:dd:83:f6:2a:88:74:f7:82:9a:28: 86:65:a1:e6:4c:76:6c:15:38:6c:0b:15:91:21:55:00:b3:e3: e0:9f:5c:ea:b1:85:46:c3:27:fc:0c:68:b0:e9:6d:a3:a3:3a: 5d:18:c4:b9:0f:27:ce:aa:b9:f8:37:b1:53:d1:4b:ac:53:7b: 26:62:88:12:8b:1f:eb:e1:45:97:e1:ac:7a:05:56:ee:10:a0: 18:03:d0:4a:1d:4e:37:72:bc:42:f4:5b:9a:30:39:2a:26:fe: ff:22:62:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUM2QjcxMTAvBgNVBAUTKDExM0VBMEZGQ0Q2Q0JCN0IzQ0Y1NDVBQkNEMkM5NjJE ODZFMUVDQjAwHhcNMjUwNDA0MTkwMzQ3WhcNMjUwNDExMTkwMzQ3WjAYMRYwFAYD VQQDEw02N2YwMmQxMy1kNDA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu8ggFgKtPnGONOhDX5eZHwY2Tvv4kBMuOqo6fvJb9mRpHFvxdLM+wNSP/FzR VrqyReCQ/z8Ze6Y31vN5jiAzcjTb3Whzxtogw/Z+z25U2ohokeGfnK6IobEE68e1 ADHA41HsiF1SA71eqFVLd2A0KmNB2JSMZWspV+9RxyUg8//fnu1wf+lLJmf9OOP0 Mf3Cf1Y4++O0q3xfW+3c9v+jAgrnnYvLaCOLgxXuru72ojctdr29uR1C64og1Hjx zaB2Qc/jHrRS6i9V6m/e8Hl0yo8ZqjTp1F23t7Iui9ZpRyeqwxX9F4xLaT54dtUW s0H2lNJa8+6o/LXlA/ak+xVVJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOiA/d6M NVOW4Y4Z9yHhRBkuXujiMB8GA1UdIwQYMBaAFBE+oP/NbLt7PPVFq80sli2G4eyw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzZCNy84MDI1REQ3QTFF RjcxMUVBQUQ0NDQ5NUJDNEY5QUUwMi9FVDZnXzgxc3Uzczg5VVdyelN5V0xZYmg3 TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VUNmdfODFzdTNzODlVV3J6U3lXTFliaDdMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzZCNy84MDI1REQ3QTFFRjcxMUVBQUQ0NDQ5NUJDNEY5QUUwMi9FVDZnXzgxc3Uz czg5VVdyelN5V0xZYmg3TEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQsefLlTWORaCBNQ8geKUEO4sUzPayPuTIcmF22SY900lmQPn6clBZ +pGyX0LpGbLeKyj8rk5bcGXrPQeWZIUV/T1H8GRIdJCG4L8cy1AcFKZaGs7UJyAN S4xYpsbi5T9ivhXkiz9W9uqZbPVgaGg2Gq68qatGy4oYgBoOAmyuKm/pFbgk7opS 9omNrScl4s9/Kph5s4IABN2D9iqIdPeCmiiGZaHmTHZsFThsCxWRIVUAs+Pgn1zq sYVGwyf8DGiw6W2jozpdGMS5DyfOqrn4N7FT0UusU3smYogSix/r4UWX4ax6BVbu EKAYA9BKHU43crxC9FuaMDkqJv7/ImJM -----END CERTIFICATE-----Generated at Fri Apr 4 22:13:35 2025 by rpki-client