$ rpki-client -vvf rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.mft File: --G6XF5MRXTo6VEiWGdWCd9Ba7c.mft (raw, json) Hash identifier: KQ2ytHtmwH/vfnBVANiXtyEBmtEIoOxFvnzIXYqAnPY= Subject key identifier: EA:6C:8B:74:D3:D1:F9:23:96:74:10:F2:0F:2D:E3:59:0A:32:27:C1 Authority key identifier: FB:E1:BA:5C:5E:4C:45:74:E8:E9:51:22:58:67:56:09:DF:41:6B:B7 Certificate issuer: /CN=A9172506/serialNumber=FBE1BA5C5E4C4574E8E9512258675609DF416BB7 Certificate serial: 70 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/--G6XF5MRXTo6VEiWGdWCd9Ba7c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.mft Manifest number: 70 Signing time: Wed 09 Apr 2025 05:42:53 +0000 Manifest this update: Wed 09 Apr 2025 05:42:52 +0000 Manifest next update: Wed 16 Apr 2025 05:42:52 +0000 Files and hashes: 1: --G6XF5MRXTo6VEiWGdWCd9Ba7c.crl (hash: z5YInuWzY18881i2XnLEBwfqXKO3IVLOuuRVLZJ8wTY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.crl rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/--G6XF5MRXTo6VEiWGdWCd9Ba7c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 05:42:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 112 (0x70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172506 Validity Not Before: Apr 9 05:42:52 2025 GMT Not After : Apr 16 05:42:52 2025 GMT Subject: CN=67f608dd-be19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:40:86:8c:c1:78:02:2f:ac:2b:4d:a4:b4:78: 7d:35:31:52:0d:35:b9:36:72:22:9d:bf:57:6d:9a: 26:ac:2b:c4:27:12:1e:98:6f:8f:57:f7:26:dc:36: 80:00:54:d3:f1:6b:f2:4e:32:aa:a8:b7:6e:4a:0d: 2d:e1:ad:5e:3c:11:e2:29:30:28:81:97:70:44:a3: 1b:42:db:c4:6b:3c:70:4e:04:a1:b7:20:58:13:90: 1c:4f:fb:62:fc:65:90:1c:91:d2:35:70:7f:7b:ce: 77:8c:89:2d:21:a8:2c:0f:87:a6:06:4e:54:91:36: 5e:5a:ab:f7:e6:00:c5:12:00:21:15:e3:9f:af:43: e7:77:84:9a:f7:c6:ac:2a:01:23:96:ec:58:0d:b6: bb:84:8a:01:98:fa:77:8f:f8:66:2c:8d:c5:01:97: 51:77:67:fd:f0:18:97:ed:55:d1:8e:c5:7e:70:25: 0a:22:6c:f9:61:5b:e0:ec:2c:a5:56:bc:d4:32:18: a4:3c:f6:d2:da:5a:2e:54:6c:bc:0b:56:6b:f1:81: 3e:1c:f9:ea:e5:5b:ce:7d:1f:55:0f:ca:40:24:30: b3:08:05:12:bc:0c:4a:d7:63:bb:0f:30:7b:6e:31: dc:08:f7:66:d2:f6:7c:e4:78:e0:b2:82:e9:0c:c9: 3a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:6C:8B:74:D3:D1:F9:23:96:74:10:F2:0F:2D:E3:59:0A:32:27:C1 X509v3 Authority Key Identifier: keyid:FB:E1:BA:5C:5E:4C:45:74:E8:E9:51:22:58:67:56:09:DF:41:6B:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/--G6XF5MRXTo6VEiWGdWCd9Ba7c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:f1:26:17:2f:f5:a7:a7:98:8e:79:9f:2e:37:c3:a0:3c:e4: 48:aa:22:9c:44:22:04:74:ca:e8:b1:f1:a9:20:2b:58:68:68: 2f:b0:07:9f:75:c2:26:1e:eb:07:d5:69:3b:3a:61:dc:25:ab: 9f:26:12:f0:45:87:05:f6:ca:af:5b:95:82:fe:90:d7:d7:7c: 6e:dc:17:e6:77:98:61:57:42:11:03:60:98:3f:d1:f4:28:9c: 60:fb:15:7d:34:00:d4:3e:9f:db:f7:cf:cb:85:5b:c2:bf:d8: 3a:a9:08:0d:e8:0f:c9:a7:5f:46:91:b3:b6:ce:5d:70:9d:e2: 2c:57:be:91:64:e4:7d:60:0d:e3:25:fe:51:fc:53:eb:8a:5f: ef:c3:b5:da:3b:91:83:97:dd:64:57:f9:63:b5:83:f1:3c:02: b7:01:34:f6:e9:19:a2:9d:cd:bf:f9:94:49:fc:32:e9:d8:90: 09:d9:52:e1:bf:34:f6:41:94:04:80:72:04:a4:ff:75:4c:b1: c2:5e:9d:98:f5:bb:4a:e6:dd:4f:aa:e9:ab:2b:cb:7b:dd:73: 66:45:12:62:57:be:1b:32:b6:fe:e7:34:1d:8b:85:f1:d5:c8: 10:4f:5b:9b:4b:dd:d2:03:d7:91:e9:fe:d0:27:8d:78:ce:fc: bc:39:37:2d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MjUwNjExMC8GA1UEBRMoRkJFMUJBNUM1RTRDNDU3NEU4RTk1MTIyNTg2NzU2MDlE RjQxNkJCNzAeFw0yNTA0MDkwNTQyNTJaFw0yNTA0MTYwNTQyNTJaMBgxFjAUBgNV BAMTDTY3ZjYwOGRkLWJlMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyQIaMwXgCL6wrTaS0eH01MVINNbk2ciKdv1dtmiasK8QnEh6Yb49X9ybcNoAA VNPxa/JOMqqot25KDS3hrV48EeIpMCiBl3BEoxtC28RrPHBOBKG3IFgTkBxP+2L8 ZZAckdI1cH97zneMiS0hqCwPh6YGTlSRNl5aq/fmAMUSACEV45+vQ+d3hJr3xqwq ASOW7FgNtruEigGY+neP+GYsjcUBl1F3Z/3wGJftVdGOxX5wJQoibPlhW+DsLKVW vNQyGKQ89tLaWi5UbLwLVmvxgT4c+erlW859H1UPykAkMLMIBRK8DErXY7sPMHtu MdwI92bS9nzkeOCygukMyTpfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6myLdNPR +SOWdBDyDy3jWQoyJ8EwHwYDVR0jBBgwFoAU++G6XF5MRXTo6VEiWGdWCd9Ba7cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcyNTA2L0E1RTRDNDVFNkVE RTExRUZBQUMyQ0I1REM0RjlBRTAyLy0tRzZYRjVNUlhUbzZWRWlXR2RXQ2Q5QmE3 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvLS1HNlhGNU1SWFRvNlZFaVdHZFdDZDlCYTdjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcy NTA2L0E1RTRDNDVFNkVERTExRUZBQUMyQ0I1REM0RjlBRTAyLy0tRzZYRjVNUlhU bzZWRWlXR2RXQ2Q5QmE3Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA/xJhcv9aenmI55ny43w6A85EiqIpxEIgR0yuix8akgK1hoaC+wB591 wiYe6wfVaTs6Ydwlq58mEvBFhwX2yq9blYL+kNfXfG7cF+Z3mGFXQhEDYJg/0fQo nGD7FX00ANQ+n9v3z8uFW8K/2DqpCA3oD8mnX0aRs7bOXXCd4ixXvpFk5H1gDeMl /lH8U+uKX+/Dtdo7kYOX3WRX+WO1g/E8ArcBNPbpGaKdzb/5lEn8MunYkAnZUuG/ NPZBlASAcgSk/3VMscJenZj1u0rm3U+q6asry3vdc2ZFEmJXvhsytv7nNB2LhfHV yBBPW5tL3dID15Hp/tAnjXjO/Lw5Ny0= -----END CERTIFICATE-----Generated at Thu Apr 10 22:04:05 2025 by rpki-client