$ rpki-client -vvf rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.mft File: M6eur6VSbc3FbPCHa71BEz49JHk.mft (raw, json) Hash identifier: BvA7toCvchwlEFJ/XMAaEvVy4p7OuXzEBFOHNOrxMQ8= Subject key identifier: DA:0D:76:7E:E6:E5:CC:90:1B:E2:B2:5D:F6:73:BE:EE:73:63:F2:FB Authority key identifier: 33:A7:AE:AF:A5:52:6D:CD:C5:6C:F0:87:6B:BD:41:13:3E:3D:24:79 Certificate issuer: /CN=A917B9CB/serialNumber=33A7AEAFA5526DCDC56CF0876BBD41133E3D2479 Certificate serial: 3476 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6eur6VSbc3FbPCHa71BEz49JHk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.mft Manifest number: 346F Signing time: Sun 06 Apr 2025 14:38:14 +0000 Manifest this update: Sun 06 Apr 2025 14:38:13 +0000 Manifest next update: Sun 13 Apr 2025 14:38:13 +0000 Files and hashes: 1: M6eur6VSbc3FbPCHa71BEz49JHk.crl (hash: oNVaZYLVybNJ2gzLXT9thUKZdle/Ej9Npg5xmm0zAYY=) 2: 054DC680CE7411EAA3A39A3EC4F9AE02.roa (hash: tOOpFlVehdre7+VYiGaBuYQR/Vo4EGkW1VHTBCn7RFE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.crl rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6eur6VSbc3FbPCHa71BEz49JHk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 14:38:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13430 (0x3476) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B9CB Validity Not Before: Apr 6 14:38:13 2025 GMT Not After : Apr 13 14:38:13 2025 GMT Subject: CN=67f291d6-c947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:66:3d:e2:0c:58:27:04:66:72:2e:cc:89:9d: 03:76:9f:ef:e4:62:94:96:9f:1c:1a:34:1e:52:6a: f0:1a:e6:06:82:ae:5f:fc:42:17:66:bb:91:ea:83: eb:c2:bf:40:82:60:93:54:88:7f:5e:ad:4e:e6:01: 57:c8:b4:6f:c4:8e:e4:d0:63:98:f7:5e:9e:2c:71: 12:a2:69:43:86:42:65:7e:93:90:b1:d4:78:2a:fa: 0e:63:0f:86:42:ab:76:78:85:3d:57:cc:e3:25:c1: 94:45:3e:f4:7a:1c:ef:e3:07:0a:9b:5b:60:82:44: dd:3c:9f:fa:1b:3a:f4:72:a3:9a:b0:5f:c6:da:99: ce:ab:e2:8d:0c:e4:25:0a:b6:0c:31:d6:9d:f3:50: 37:0f:2d:4d:09:c6:50:5c:40:d6:3e:05:63:9b:16: dd:ab:e2:63:0e:86:79:1a:fc:99:8a:fc:2f:cd:e2: 8a:8d:78:a3:cb:75:4b:3c:ab:1a:c4:dd:b0:85:40: 24:c7:23:0c:5c:4c:79:6c:f4:df:6a:fa:0c:3d:e0: 4d:9c:52:2e:d3:ea:c1:d7:ef:fc:7e:7b:2f:dd:e9: 8e:19:1e:92:1c:b1:d0:c7:c6:74:dc:8a:63:f4:10: 93:49:83:e7:f1:4b:05:f9:17:e0:0e:23:80:8c:88: dd:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:0D:76:7E:E6:E5:CC:90:1B:E2:B2:5D:F6:73:BE:EE:73:63:F2:FB X509v3 Authority Key Identifier: keyid:33:A7:AE:AF:A5:52:6D:CD:C5:6C:F0:87:6B:BD:41:13:3E:3D:24:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6eur6VSbc3FbPCHa71BEz49JHk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:47:44:dd:0d:13:c4:ef:fe:c7:b0:c3:0b:a7:99:ac:2b:ad: 35:ec:38:85:3e:db:76:fa:58:a0:80:36:a4:bd:1d:3f:ce:3e: 9c:31:8a:22:8d:16:32:72:7d:78:1a:90:6a:b6:6c:ca:9d:18: 7b:40:64:b2:e2:74:73:81:51:2d:27:0f:bc:0d:98:fb:82:e0: 6b:c0:75:0a:fb:e1:67:3b:ee:50:ed:4d:71:b4:f0:7e:29:1e: d3:f4:6d:87:96:8a:f0:13:89:24:31:7a:b7:b2:a3:c6:a3:2a: 87:75:c2:29:b5:84:7d:d0:e6:ff:e9:a1:9b:e2:5b:f5:dc:e9: 2e:e5:a8:55:27:c2:29:83:77:9e:66:f0:87:7c:9b:26:d4:c9: ec:bd:7d:ea:e6:1d:c4:fa:a4:6e:ad:3a:92:8c:a4:7b:34:ef: 96:97:13:86:c6:f7:e9:49:32:a6:53:a2:1d:84:0f:7d:6a:b3: ea:16:72:05:31:f7:e5:ce:cb:11:1b:51:42:fd:84:ac:ab:2f: 36:21:66:f5:99:d4:94:69:51:91:22:73:b5:02:a6:4f:ab:ce: 6e:16:6b:9e:c3:d8:3e:31:b0:d5:a4:98:b7:40:c0:ef:fd:d8: f1:f4:52:bb:5d:72:4d:d5:b3:24:8d:4d:ff:c5:f5:39:43:36: e0:d7:15:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I5Q0IxMTAvBgNVBAUTKDMzQTdBRUFGQTU1MjZEQ0RDNTZDRjA4NzZCQkQ0MTEz M0UzRDI0NzkwHhcNMjUwNDA2MTQzODEzWhcNMjUwNDEzMTQzODEzWjAYMRYwFAYD VQQDEw02N2YyOTFkNi1jOTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtmY94gxYJwRmci7MiZ0Ddp/v5GKUlp8cGjQeUmrwGuYGgq5f/EIXZruR6oPr wr9AgmCTVIh/Xq1O5gFXyLRvxI7k0GOY916eLHESomlDhkJlfpOQsdR4KvoOYw+G Qqt2eIU9V8zjJcGURT70ehzv4wcKm1tggkTdPJ/6Gzr0cqOasF/G2pnOq+KNDOQl CrYMMdad81A3Dy1NCcZQXEDWPgVjmxbdq+JjDoZ5GvyZivwvzeKKjXijy3VLPKsa xN2whUAkxyMMXEx5bPTfavoMPeBNnFIu0+rB1+/8fnsv3emOGR6SHLHQx8Z03Ipj 9BCTSYPn8UsF+RfgDiOAjIjddwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNoNdn7m 5cyQG+KyXfZzvu5zY/L7MB8GA1UdIwQYMBaAFDOnrq+lUm3NxWzwh2u9QRM+PSR5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjlDQi82RjZFREM2MDFE OEUxMUUyODg1Q0RGRUMwOEIwMkNEMi9NNmV1cjZWU2JjM0ZiUENIYTcxQkV6NDlK SGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL002ZXVyNlZTYmMzRmJQQ0hhNzFCRXo0OUpIay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjlDQi82RjZFREM2MDFEOEUxMUUyODg1Q0RGRUMwOEIwMkNEMi9NNmV1cjZWU2Jj M0ZiUENIYTcxQkV6NDlKSGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgR0TdDRPE7/7HsMMLp5msK6017DiFPtt2+liggDakvR0/zj6cMYoi jRYycn14GpBqtmzKnRh7QGSy4nRzgVEtJw+8DZj7guBrwHUK++FnO+5Q7U1xtPB+ KR7T9G2HlorwE4kkMXq3sqPGoyqHdcIptYR90Ob/6aGb4lv13Oku5ahVJ8Ipg3ee ZvCHfJsm1MnsvX3q5h3E+qRurTqSjKR7NO+WlxOGxvfpSTKmU6IdhA99arPqFnIF MfflzssRG1FC/YSsqy82IWb1mdSUaVGRInO1AqZPq85uFmuew9g+MbDVpJi3QMDv /djx9FK7XXJN1bMkjU3/xfU5Qzbg1xUT -----END CERTIFICATE-----Generated at Mon Apr 7 14:34:36 2025 by rpki-client