$ rpki-client -vvf rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft File: 6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft (raw, json) Hash identifier: 6DxkvBolqavwo8PidNM69wcI8V7UkulspaORZhreHNg= Subject key identifier: 74:56:B0:C9:F9:78:4C:DD:EC:95:77:B2:43:0C:F2:AE:C9:49:CE:1D Authority key identifier: E9:C4:10:C7:DD:D5:26:70:AB:8F:82:16:C8:76:14:B1:0E:C3:17:7A Certificate issuer: /CN=A9171560/serialNumber=E9C410C7DDD52670AB8F8216C87614B10EC3177A Certificate serial: 0CE4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft Manifest number: 0CD9 Signing time: Fri 04 Apr 2025 18:15:14 +0000 Manifest this update: Fri 04 Apr 2025 18:15:13 +0000 Manifest next update: Fri 11 Apr 2025 18:15:13 +0000 Files and hashes: 1: 6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl (hash: JLfWfEI9f/WCEg37amwg39LYgebaWy+0pk0OtwnQess=) 2: 65AF30D422D211EAB3ABA447C4F9AE02.roa (hash: N5g6jdfkVyESUIZ9NbhjHN5A/zAKL0uPzj31oHqn/fU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:15:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3300 (0xce4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171560 Validity Not Before: Apr 4 18:15:13 2025 GMT Not After : Apr 11 18:15:13 2025 GMT Subject: CN=67f021b1-aa9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:16:b5:b8:6e:c0:bf:79:2e:1b:7e:05:f3:51: 4a:05:41:08:2d:ac:54:61:65:d5:0f:59:95:f7:03: c0:41:dd:0d:fd:6c:6e:25:25:f2:f7:4f:52:5e:ac: 80:f1:a4:8f:93:2e:b3:f3:39:c3:c3:14:6e:be:13: 4d:1e:1f:fc:0f:3a:0a:7d:ae:58:68:00:77:2e:8a: e8:02:f7:10:30:66:f5:ab:38:8a:7a:b3:0a:34:22: 62:59:87:6c:3e:f7:6e:59:11:a4:40:20:6c:ce:60: 4c:9c:85:33:98:b7:d3:1a:82:9c:8f:04:89:69:2e: 0f:d3:ef:7d:69:b4:2a:c5:1d:07:33:cd:65:24:24: c5:6c:8a:25:79:89:24:3a:bb:78:a0:7a:6a:de:07: 28:6e:43:ca:08:73:d0:02:34:bb:3f:a2:d9:55:4f: c2:d9:b5:19:a9:f2:54:1a:75:69:93:7f:9e:d3:a7: 39:a2:99:4b:c2:4a:26:f8:6c:66:38:c6:f1:6c:2b: 44:55:09:dd:0e:57:60:6f:69:8f:e7:50:a3:1e:e9: d0:72:02:d5:ab:24:b5:fd:7d:c4:2e:0a:30:93:64: ef:f0:2a:3d:43:23:08:6c:c4:0a:05:e4:89:07:05: 37:12:20:25:8a:9b:24:93:1d:7b:8d:99:5f:db:dc: 14:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:56:B0:C9:F9:78:4C:DD:EC:95:77:B2:43:0C:F2:AE:C9:49:CE:1D X509v3 Authority Key Identifier: keyid:E9:C4:10:C7:DD:D5:26:70:AB:8F:82:16:C8:76:14:B1:0E:C3:17:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:6c:5f:91:13:17:80:2e:63:48:6a:79:28:01:e6:cd:f0:7b: e4:19:df:c2:9b:85:0a:9a:b8:a6:5d:0e:c8:94:d5:37:1d:2c: 1e:bd:69:a2:80:64:d1:80:85:56:18:e6:24:c9:fc:ac:91:f9: 1f:51:02:db:88:3d:25:bc:e9:43:68:bc:45:fd:ad:46:a5:90: 13:08:66:0a:f6:57:2f:b5:6f:f1:4d:ab:2f:4d:86:e2:08:46: 2c:af:5e:ae:37:6e:d1:5d:ac:f3:53:46:dd:c9:e4:7d:5b:26: 3f:94:76:86:ed:62:24:81:58:37:c6:37:03:5d:f7:41:4d:f0: 66:e2:02:1b:df:c4:59:40:3b:8b:65:1b:31:0d:b7:39:b2:13: b7:70:13:10:5d:36:b7:d2:6d:73:07:8d:c7:03:a9:41:3e:86: 77:a3:cc:97:42:c0:cf:b2:d8:e6:89:c1:66:58:f0:5a:40:0d: 34:d8:22:f7:4b:9c:97:a8:16:fa:a5:45:a2:99:64:d7:a1:57: bf:99:00:d0:2d:57:a9:ef:84:0d:fe:5b:ef:01:30:31:a6:1d: 4d:3f:98:31:cc:f8:a4:e0:4c:0b:57:7b:ea:93:5b:5f:d1:9c: 61:67:a7:56:14:84:c1:c5:b0:37:ce:1b:0c:d6:d4:97:b3:d3: 9e:87:dc:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE1NjAxMTAvBgNVBAUTKEU5QzQxMEM3RERENTI2NzBBQjhGODIxNkM4NzYxNEIx MEVDMzE3N0EwHhcNMjUwNDA0MTgxNTEzWhcNMjUwNDExMTgxNTEzWjAYMRYwFAYD VQQDEw02N2YwMjFiMS1hYTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqBa1uG7Av3kuG34F81FKBUEILaxUYWXVD1mV9wPAQd0N/WxuJSXy909SXqyA 8aSPky6z8znDwxRuvhNNHh/8DzoKfa5YaAB3LoroAvcQMGb1qziKerMKNCJiWYds PvduWRGkQCBszmBMnIUzmLfTGoKcjwSJaS4P0+99abQqxR0HM81lJCTFbIoleYkk Ort4oHpq3gcobkPKCHPQAjS7P6LZVU/C2bUZqfJUGnVpk3+e06c5oplLwkom+Gxm OMbxbCtEVQndDldgb2mP51CjHunQcgLVqyS1/X3ELgowk2Tv8Co9QyMIbMQKBeSJ BwU3EiAlipskkx17jZlf29wUiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHRWsMn5 eEzd7JV3skMM8q7JSc4dMB8GA1UdIwQYMBaAFOnEEMfd1SZwq4+CFsh2FLEOwxd6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTU2MC9BNzcwM0U5RUU0 MUQxMUU5OEY1Qjk4MTlDNEY5QUUwMi82Y1FReDkzVkpuQ3JqNElXeUhZVXNRN0RG M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZjUVF4OTNWSm5Dcmo0SVd5SFlVc1E3REYzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTU2MC9BNzcwM0U5RUU0MUQxMUU5OEY1Qjk4MTlDNEY5QUUwMi82Y1FReDkzVkpu Q3JqNElXeUhZVXNRN0RGM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+bF+RExeALmNIankoAebN8HvkGd/Cm4UKmrimXQ7IlNU3HSwevWmi gGTRgIVWGOYkyfyskfkfUQLbiD0lvOlDaLxF/a1GpZATCGYK9lcvtW/xTasvTYbi CEYsr16uN27RXazzU0bdyeR9WyY/lHaG7WIkgVg3xjcDXfdBTfBm4gIb38RZQDuL ZRsxDbc5shO3cBMQXTa30m1zB43HA6lBPoZ3o8yXQsDPstjmicFmWPBaQA002CL3 S5yXqBb6pUWimWTXoVe/mQDQLVep74QN/lvvATAxph1NP5gxzPik4EwLV3vqk1tf 0ZxhZ6dWFITBxbA3zhsM1tSXs9Oeh9w5 -----END CERTIFICATE-----Generated at Sun Apr 6 03:02:59 2025 by rpki-client