$ rpki-client -vvf rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft File: n6yKuWoNopKfw9GHG-1vdD6MlXc.mft (raw, json) Hash identifier: E9SGyWv2pwIT0kmvuHbUIRQktghX2gd69yaZf9eQNGY= Subject key identifier: 19:19:0E:42:EC:04:7C:38:BD:FC:F4:0F:AB:2D:48:FD:3C:8E:EA:7A Authority key identifier: 9F:AC:8A:B9:6A:0D:A2:92:9F:C3:D1:87:1B:ED:6F:74:3E:8C:95:77 Certificate issuer: /CN=A916E2DC/serialNumber=9FAC8AB96A0DA2929FC3D1871BED6F743E8C9577 Certificate serial: 01CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6yKuWoNopKfw9GHG-1vdD6MlXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft Manifest number: 01C5 Signing time: Sat 29 Mar 2025 02:37:53 +0000 Manifest this update: Sat 29 Mar 2025 02:37:53 +0000 Manifest next update: Sat 05 Apr 2025 02:37:53 +0000 Files and hashes: 1: n6yKuWoNopKfw9GHG-1vdD6MlXc.crl (hash: 4f1dLr/LijlmFA1O4rHw9d587QrK5xCit0VCSLPDjPg=) 2: 6993B4CCD43B11EDA821F80DC4F9AE02.roa (hash: uxp2G2bghn9NecpAe+byqEWG3Y6T1GBL3cmiQ22tnnk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.crl rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6yKuWoNopKfw9GHG-1vdD6MlXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 02:37:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 461 (0x1cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E2DC Validity Not Before: Mar 29 02:37:53 2025 GMT Not After : Apr 5 02:37:53 2025 GMT Subject: CN=67e75d01-2b0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:88:eb:93:93:a2:de:6f:33:91:1a:ec:50:3f: 77:c2:60:7a:5c:bd:8d:2a:65:bf:1f:90:54:5d:9c: e4:a7:50:cc:d8:e3:3c:59:4b:fe:ff:7b:ad:5b:aa: 2f:32:ed:01:64:b9:56:c8:1a:7e:cc:5f:d1:43:19: c3:ad:99:3f:0f:24:6b:ab:98:46:9c:49:a2:a2:f3: 03:68:d6:5d:e5:62:2b:f2:1f:9c:2c:95:7d:ee:72: c9:3f:f7:fa:e7:bf:b9:a7:10:1a:72:4a:20:cd:4d: b9:61:b7:eb:ee:de:ab:3f:0e:5d:cf:ac:4c:01:90: da:34:14:cf:5b:15:ec:c6:4e:a3:a4:4c:19:02:e3: 01:b4:ce:bb:81:69:15:33:b9:aa:e6:64:ff:6a:cc: 2d:83:c0:e9:20:fd:bc:db:6d:4e:16:9f:9f:fe:75: fa:95:b5:c0:36:b2:30:b4:87:53:69:9d:fc:8e:d3: c1:83:e1:c1:d7:53:61:4c:d1:e9:5d:f8:1f:20:27: 81:ea:76:97:6f:b2:e1:02:79:2a:e8:b6:72:57:15: 8f:b7:e8:bc:b2:32:87:a7:f2:b8:18:e9:fc:43:3d: 47:5e:5e:ea:1c:67:f3:43:b0:50:1f:c8:73:fb:f8: 8d:ac:1a:f2:16:87:7a:93:8c:7b:25:be:26:0f:67: c8:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:19:0E:42:EC:04:7C:38:BD:FC:F4:0F:AB:2D:48:FD:3C:8E:EA:7A X509v3 Authority Key Identifier: keyid:9F:AC:8A:B9:6A:0D:A2:92:9F:C3:D1:87:1B:ED:6F:74:3E:8C:95:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6yKuWoNopKfw9GHG-1vdD6MlXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:f0:1f:49:6f:4a:d1:8f:2d:ec:a9:e2:9b:03:38:b5:26:0e: f4:ff:6c:c9:b1:ba:2c:b7:52:05:04:8f:2a:a0:25:79:34:f8: 69:2a:18:24:0f:54:c9:79:aa:50:07:67:31:ee:a7:7d:35:f7: 92:54:bc:7d:ff:24:2a:e9:3c:b4:25:ba:9f:ac:28:b1:c7:10: a2:ae:9b:26:08:12:6e:fe:99:c7:41:d6:9b:24:f1:87:25:c8: 56:b8:05:27:1d:77:ca:53:5e:4d:95:5c:0b:80:a4:0d:f3:90: 7d:87:f8:1c:df:80:b9:5d:fe:08:bc:9a:0f:41:3f:fc:e0:28: 27:8c:52:1f:76:33:70:41:2e:b7:43:bc:0f:69:a2:1a:a1:cd: 1b:fb:31:70:d9:da:61:17:18:b2:87:5c:4b:67:f9:0b:37:13: db:f7:8a:9a:1b:c0:35:c9:78:a5:60:ff:5a:a8:4f:83:ce:23: 3a:d1:dd:98:09:23:10:dd:04:69:28:c8:54:e0:89:75:d3:a2: 4a:ac:68:39:bb:37:6b:1c:d3:fa:4e:6b:f6:2b:dc:cd:2e:58: 9c:13:93:45:3f:ec:3d:3a:40:3d:11:27:0b:c2:e2:82:90:91: 1d:27:1d:02:32:3a:4b:dd:c1:b4:99:08:d1:81:f0:fd:61:bc: 7f:23:81:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkUyREMxMTAvBgNVBAUTKDlGQUM4QUI5NkEwREEyOTI5RkMzRDE4NzFCRUQ2Rjc0 M0U4Qzk1NzcwHhcNMjUwMzI5MDIzNzUzWhcNMjUwNDA1MDIzNzUzWjAYMRYwFAYD VQQDEw02N2U3NWQwMS0yYjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Yjrk5Oi3m8zkRrsUD93wmB6XL2NKmW/H5BUXZzkp1DM2OM8WUv+/3utW6ov Mu0BZLlWyBp+zF/RQxnDrZk/DyRrq5hGnEmiovMDaNZd5WIr8h+cLJV97nLJP/f6 57+5pxAackogzU25Ybfr7t6rPw5dz6xMAZDaNBTPWxXsxk6jpEwZAuMBtM67gWkV M7mq5mT/aswtg8DpIP28221OFp+f/nX6lbXANrIwtIdTaZ38jtPBg+HB11NhTNHp XfgfICeB6naXb7LhAnkq6LZyVxWPt+i8sjKHp/K4GOn8Qz1HXl7qHGfzQ7BQH8hz +/iNrBryFod6k4x7Jb4mD2fI1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBkZDkLs BHw4vfz0D6stSP08jup6MB8GA1UdIwQYMBaAFJ+sirlqDaKSn8PRhxvtb3Q+jJV3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTJEQy82RDg5NjQ0QTZB RTcxMUVEOTRCNDRDODdDNEY5QUUwMi9uNnlLdVdvTm9wS2Z3OUdIRy0xdmRENk1s WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL242eUt1V29Ob3BLZnc5R0hHLTF2ZEQ2TWxYYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTJEQy82RDg5NjQ0QTZBRTcxMUVEOTRCNDRDODdDNEY5QUUwMi9uNnlLdVdvTm9w S2Z3OUdIRy0xdmRENk1sWGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBr8B9Jb0rRjy3sqeKbAzi1Jg70/2zJsbost1IFBI8qoCV5NPhpKhgk D1TJeapQB2cx7qd9NfeSVLx9/yQq6Ty0JbqfrCixxxCirpsmCBJu/pnHQdabJPGH JchWuAUnHXfKU15NlVwLgKQN85B9h/gc34C5Xf4IvJoPQT/84CgnjFIfdjNwQS63 Q7wPaaIaoc0b+zFw2dphFxiyh1xLZ/kLNxPb94qaG8A1yXilYP9aqE+DziM60d2Y CSMQ3QRpKMhU4Il106JKrGg5uzdrHNP6Tmv2K9zNLlicE5NFP+w9OkA9EScLwuKC kJEdJx0CMjpL3cG0mQjRgfD9Ybx/I4GR -----END CERTIFICATE-----Generated at Fri Apr 4 22:09:20 2025 by rpki-client