$ rpki-client -vvf rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/6N3s7Bb-NIXVthplph7s11qYG0M.mft File: 6N3s7Bb-NIXVthplph7s11qYG0M.mft (raw, json) Hash identifier: Dm4oAUQll1Sxz9OaCaIPBoe35ZPc5vvAII6XcU11m5w= Subject key identifier: B6:F8:EB:A4:48:2D:C0:C9:D4:74:1F:4D:2F:4E:98:83:93:B6:5B:7A Authority key identifier: E8:DD:EC:EC:16:FE:34:85:D5:B6:1A:65:A6:1E:EC:D7:5A:98:1B:43 Certificate issuer: /CN=A9172EF8/serialNumber=E8DDECEC16FE3485D5B61A65A61EECD75A981B43 Certificate serial: 07F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N3s7Bb-NIXVthplph7s11qYG0M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/6N3s7Bb-NIXVthplph7s11qYG0M.mft Manifest number: 07EA Signing time: Fri 04 Apr 2025 21:07:03 +0000 Manifest this update: Fri 04 Apr 2025 21:07:02 +0000 Manifest next update: Fri 11 Apr 2025 21:07:02 +0000 Files and hashes: 1: 6N3s7Bb-NIXVthplph7s11qYG0M.crl (hash: iaF6COD9Pdj46Cs/+w2YCsU8UAUjbgIACQrpp7odtXg=) 2: 82001182986511EFBFE02134C4F9AE02.roa (hash: zFMhUdKAsUErPaBJNxHFhs6kNz0L2uuSFEiFAntBllQ=) 3: 879AF91C9A8C11EF98A18D7FC4F9AE02.roa (hash: LWV1KeEebkqoxDRj/MN5Z6I+5780TArhWaO+yA4BHQg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/6N3s7Bb-NIXVthplph7s11qYG0M.crl rsync://rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/6N3s7Bb-NIXVthplph7s11qYG0M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N3s7Bb-NIXVthplph7s11qYG0M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 21:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2034 (0x7f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172EF8 Validity Not Before: Apr 4 21:07:02 2025 GMT Not After : Apr 11 21:07:02 2025 GMT Subject: CN=67f049f6-6890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f3:25:93:39:ba:9f:08:ad:80:0d:76:12:4f: 50:7b:f9:4b:02:e5:ba:bd:73:87:61:f3:a0:21:3e: 05:cd:5e:eb:7b:45:ca:96:d3:cf:99:8a:b9:81:93: 17:76:9a:f9:81:5e:64:ea:fa:bc:aa:62:5e:ce:de: c0:82:f1:d5:dc:d2:f8:50:97:8f:81:d9:ce:76:03: 61:d2:fe:e6:d2:2c:f3:e6:df:1c:65:23:61:70:1e: cb:53:3e:23:b1:ad:57:6f:68:71:e0:17:17:ef:0a: da:e0:12:cc:47:8e:53:6b:21:18:ef:50:73:4d:e5: 7a:a3:f5:f9:a2:a6:26:fd:11:29:b1:d7:19:80:07: 2e:60:7c:90:bc:90:0a:30:92:f6:42:fe:6b:61:d1: bd:8a:2c:b4:fa:a2:c8:04:4b:a3:d1:b2:12:70:a2: 5c:68:03:7c:bb:23:ba:b0:2b:b8:64:05:41:05:eb: d8:39:31:45:47:bf:47:ec:a5:00:25:b0:8d:59:23: c8:7b:d5:e2:80:04:34:59:67:51:0d:c8:bf:29:6d: 16:f5:d2:a5:49:aa:db:bf:ad:6c:ef:24:19:8b:1a: cc:58:11:06:89:e2:cb:d8:23:1c:04:ea:79:66:c1: 91:ea:04:d1:2d:63:e0:6b:5d:1b:79:eb:bc:f9:6b: 4a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:F8:EB:A4:48:2D:C0:C9:D4:74:1F:4D:2F:4E:98:83:93:B6:5B:7A X509v3 Authority Key Identifier: keyid:E8:DD:EC:EC:16:FE:34:85:D5:B6:1A:65:A6:1E:EC:D7:5A:98:1B:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/6N3s7Bb-NIXVthplph7s11qYG0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N3s7Bb-NIXVthplph7s11qYG0M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/6N3s7Bb-NIXVthplph7s11qYG0M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:b3:05:1c:6f:6b:bc:81:42:12:3b:0f:df:14:99:02:49:a6: 85:8c:a5:42:8c:5f:b7:52:2f:ec:8c:43:6b:de:b3:6a:ec:2c: f8:22:0c:c4:55:66:8e:ce:1c:13:70:dd:a1:d4:1f:75:ef:cb: 1b:45:3a:44:61:c8:7d:35:c8:a8:94:c7:83:e5:c4:c5:eb:74: 1f:78:e2:cc:3c:c8:ac:89:fe:a8:9d:e6:d1:b9:eb:20:24:1e: 3a:71:41:12:e5:71:53:f4:a4:cf:1d:9a:9a:3c:19:d3:2d:0a: bb:e2:b9:96:e2:a8:d7:1e:8f:18:9f:b4:49:d6:f6:60:0f:2d: a0:63:b0:8a:63:33:af:50:1c:42:05:03:85:d3:17:0a:ee:95: 9c:2c:f1:62:eb:b8:40:70:5c:b7:14:8b:7b:45:03:99:36:fd: 2c:f9:c1:a3:43:45:4f:56:d8:30:2a:47:56:f2:6f:14:fe:7c: 91:b5:be:61:41:45:60:b2:11:3c:72:79:3f:2e:ea:d9:6f:d1: bf:53:92:36:a3:16:b0:47:a7:04:d7:8b:5f:5c:e8:15:f4:6a: be:69:10:64:da:1b:9b:48:40:c2:cf:4f:7f:f4:91:e4:53:24: 89:d2:5d:d5:45:f3:e2:34:e9:a7:4d:4f:df:2c:c5:52:ef:f3: cb:26:0e:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJFRjgxMTAvBgNVBAUTKEU4RERFQ0VDMTZGRTM0ODVENUI2MUE2NUE2MUVFQ0Q3 NUE5ODFCNDMwHhcNMjUwNDA0MjEwNzAyWhcNMjUwNDExMjEwNzAyWjAYMRYwFAYD VQQDEw02N2YwNDlmNi02ODkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/Mlkzm6nwitgA12Ek9Qe/lLAuW6vXOHYfOgIT4FzV7re0XKltPPmYq5gZMX dpr5gV5k6vq8qmJezt7AgvHV3NL4UJePgdnOdgNh0v7m0izz5t8cZSNhcB7LUz4j sa1Xb2hx4BcX7wra4BLMR45TayEY71BzTeV6o/X5oqYm/REpsdcZgAcuYHyQvJAK MJL2Qv5rYdG9iiy0+qLIBEuj0bIScKJcaAN8uyO6sCu4ZAVBBevYOTFFR79H7KUA JbCNWSPIe9XigAQ0WWdRDci/KW0W9dKlSarbv61s7yQZixrMWBEGieLL2CMcBOp5 ZsGR6gTRLWPga10beeu8+WtKnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLb466RI LcDJ1HQfTS9OmIOTtlt6MB8GA1UdIwQYMBaAFOjd7OwW/jSF1bYaZaYe7NdamBtD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkVGOC83N0Y5OEMzOERE OEMxMUVBQkRGMEU2ODJDNEY5QUUwMi82TjNzN0JiLU5JWFZ0aHBscGg3czExcVlH ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZOM3M3QmItTklYVnRocGxwaDdzMTFxWUcwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkVGOC83N0Y5OEMzOEREOEMxMUVBQkRGMEU2ODJDNEY5QUUwMi82TjNzN0JiLU5J WFZ0aHBscGg3czExcVlHME0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0swUcb2u8gUISOw/fFJkCSaaFjKVCjF+3Ui/sjENr3rNq7Cz4IgzE VWaOzhwTcN2h1B9178sbRTpEYch9NciolMeD5cTF63QfeOLMPMisif6onebRuesg JB46cUES5XFT9KTPHZqaPBnTLQq74rmW4qjXHo8Yn7RJ1vZgDy2gY7CKYzOvUBxC BQOF0xcK7pWcLPFi67hAcFy3FIt7RQOZNv0s+cGjQ0VPVtgwKkdW8m8U/nyRtb5h QUVgshE8cnk/LurZb9G/U5I2oxawR6cE14tfXOgV9Gq+aRBk2hubSEDCz09/9JHk UySJ0l3VRfPiNOmnTU/fLMVS7/PLJg7u -----END CERTIFICATE-----Generated at Sat Apr 5 11:41:58 2025 by rpki-client