$ rpki-client -vvf rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.mft File: 6q7GCbncI1xGucXxvKPNvsf_7ig.mft (raw, json) Hash identifier: Ijtv7TeCLZSNp1wYrLkI0C0PaZnvLjYm2XEvNwWpeS0= Subject key identifier: B5:AB:17:C5:72:B4:87:86:F6:03:D0:B7:DC:E7:B2:8F:26:A8:6F:3A Authority key identifier: EA:AE:C6:09:B9:DC:23:5C:46:B9:C5:F1:BC:A3:CD:BE:C7:FF:EE:28 Certificate issuer: /CN=A917A82D/serialNumber=EAAEC609B9DC235C46B9C5F1BCA3CDBEC7FFEE28 Certificate serial: 0C23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6q7GCbncI1xGucXxvKPNvsf_7ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.mft Manifest number: 0C05 Signing time: Thu 10 Apr 2025 18:41:45 +0000 Manifest this update: Thu 10 Apr 2025 18:41:45 +0000 Manifest next update: Thu 17 Apr 2025 18:41:45 +0000 Files and hashes: 1: 6q7GCbncI1xGucXxvKPNvsf_7ig.crl (hash: 4l3fp7LhYUb2unEBVhVC1xHmKEmyPvf90c7NrefRA6s=) 2: 403FDDD0DF3511ED8FBA823DC4F9AE02.roa (hash: n02qcDfoz5xfgtE3pmF9DuTrufYGzGxNykq63R1mDas=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.crl rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6q7GCbncI1xGucXxvKPNvsf_7ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 18:41:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3107 (0xc23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A82D, serialNumber=EAAEC609B9DC235C46B9C5F1BCA3CDBEC7FFEE28 Validity Not Before: Apr 10 18:41:45 2025 GMT Not After : Apr 17 18:41:45 2025 GMT Subject: CN=67f810e9-491a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f8:93:b4:de:fa:8e:a4:d9:a2:a6:06:b5:6f: 7e:42:ef:b6:20:b8:67:bd:16:4d:5c:95:77:7f:32: a3:4b:78:e9:94:13:be:cd:a0:a8:07:fd:89:2a:32: af:19:8f:e7:f9:43:c3:a9:11:b6:2f:4e:59:cb:b4: b0:7f:ee:15:7b:97:d9:96:6b:56:f4:79:b5:6f:ac: 02:97:38:80:0d:1e:cb:f4:f5:59:89:4f:f4:5f:11: 53:3b:be:97:c7:10:5b:58:91:3b:a6:0f:a6:89:bb: 43:a7:d3:32:94:57:19:00:dc:d5:88:fc:ef:2d:6b: b2:f6:88:f2:76:c6:9c:49:80:87:36:6b:0f:b6:93: 58:84:63:a4:de:17:66:4d:1b:70:e8:df:3c:67:d4: 15:3c:15:57:d3:2b:c4:26:6f:38:be:58:96:2c:9b: 63:35:ef:77:7b:52:fe:7d:a0:ab:0b:50:6c:0f:71: a7:dd:6c:ce:6a:06:0e:e4:72:93:10:8f:3a:bd:84: 1a:6b:10:7f:8a:c3:ca:5f:3d:59:e9:7a:f0:56:f7: e5:24:96:69:eb:e2:e1:af:97:1f:6b:c6:d9:d2:46: 19:a9:1c:39:1f:d6:2a:d3:20:0d:56:a9:4d:a1:24: 17:05:f6:f3:c9:e3:7e:08:52:49:01:96:ea:3e:a4: f0:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:AB:17:C5:72:B4:87:86:F6:03:D0:B7:DC:E7:B2:8F:26:A8:6F:3A X509v3 Authority Key Identifier: keyid:EA:AE:C6:09:B9:DC:23:5C:46:B9:C5:F1:BC:A3:CD:BE:C7:FF:EE:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6q7GCbncI1xGucXxvKPNvsf_7ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:bc:47:32:92:d9:91:1b:bc:b1:92:a6:c3:97:d6:07:ad:5f: 01:47:22:82:7c:e5:21:14:93:14:29:b6:1d:d9:cb:88:55:80: 8f:8c:7f:83:cf:59:5e:c7:15:d2:fb:1f:05:0e:d6:36:41:c1: 7b:a3:19:93:82:aa:10:1e:cc:9a:d3:12:10:34:53:16:c4:a3: 4f:62:f1:f7:2d:8f:bc:3a:32:d9:37:06:7e:7a:0d:d6:da:0e: 29:07:3c:08:66:1d:a3:40:02:83:ed:2c:8b:80:44:53:37:4c: 47:d0:f2:75:90:66:e8:6e:db:49:75:c3:76:3a:44:9c:d9:9d: 19:00:74:58:04:5d:74:19:aa:50:41:52:cb:24:70:b8:e8:ab: 53:91:9a:cb:c8:0e:fc:21:59:ff:30:5e:90:7b:97:b9:3b:e2: 02:26:59:56:e1:d3:f7:8f:c8:ff:6c:92:21:d2:6e:57:43:5d: 57:54:a7:cf:25:c7:8a:07:bd:3a:f7:93:a5:7d:08:35:92:d9: a3:15:ff:21:a5:67:eb:6d:4c:e5:a3:2b:2a:2f:4b:47:69:0b: cb:ba:fc:44:9e:dc:88:d3:57:d5:0b:44:a6:24:bd:8a:fa:39: 78:be:27:c7:1b:c4:a0:8e:b6:dd:ca:30:da:d9:55:8d:97:da: 4f:3d:c7:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E4MkQxMTAvBgNVBAUTKEVBQUVDNjA5QjlEQzIzNUM0NkI5QzVGMUJDQTNDREJF QzdGRkVFMjgwHhcNMjUwNDEwMTg0MTQ1WhcNMjUwNDE3MTg0MTQ1WjAYMRYwFAYD VQQDEw02N2Y4MTBlOS00OTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0/iTtN76jqTZoqYGtW9+Qu+2ILhnvRZNXJV3fzKjS3jplBO+zaCoB/2JKjKv GY/n+UPDqRG2L05Zy7Swf+4Ve5fZlmtW9Hm1b6wClziADR7L9PVZiU/0XxFTO76X xxBbWJE7pg+mibtDp9MylFcZANzViPzvLWuy9ojydsacSYCHNmsPtpNYhGOk3hdm TRtw6N88Z9QVPBVX0yvEJm84vliWLJtjNe93e1L+faCrC1BsD3Gn3WzOagYO5HKT EI86vYQaaxB/isPKXz1Z6XrwVvflJJZp6+Lhr5cfa8bZ0kYZqRw5H9Yq0yANVqlN oSQXBfbzyeN+CFJJAZbqPqTweQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLWrF8Vy tIeG9gPQt9znso8mqG86MB8GA1UdIwQYMBaAFOquxgm53CNcRrnF8byjzb7H/+4o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTgyRC9BREY2NjVDMDEy NzgxMUVBOUI4RUQwMzRDNEY5QUUwMi82cTdHQ2JuY0kxeEd1Y1h4dktQTnZzZl83 aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZxN0dDYm5jSTF4R3VjWHh2S1BOdnNmXzdpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTgyRC9BREY2NjVDMDEyNzgxMUVBOUI4RUQwMzRDNEY5QUUwMi82cTdHQ2JuY0kx eEd1Y1h4dktQTnZzZl83aWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbvEcyktmRG7yxkqbDl9YHrV8BRyKCfOUhFJMUKbYd2cuIVYCPjH+D z1lexxXS+x8FDtY2QcF7oxmTgqoQHsya0xIQNFMWxKNPYvH3LY+8OjLZNwZ+eg3W 2g4pBzwIZh2jQAKD7SyLgERTN0xH0PJ1kGbobttJdcN2OkSc2Z0ZAHRYBF10GapQ QVLLJHC46KtTkZrLyA78IVn/MF6Qe5e5O+ICJllW4dP3j8j/bJIh0m5XQ11XVKfP JceKB70695OlfQg1ktmjFf8hpWfrbUzloysqL0tHaQvLuvxEntyI01fVC0SmJL2K +jl4vifHG8SgjrbdyjDa2VWNl9pPPcd9 -----END CERTIFICATE-----Generated at Sat Apr 12 17:43:11 2025 by rpki-client