$ rpki-client -vvf rpki.apnic.net/member_repository/A9185339/DACDB38EDB6711EEA6178924C4F9AE02/6qKbMnjqfy5or_PZQPu17Kn41WA.mft File: 6qKbMnjqfy5or_PZQPu17Kn41WA.mft (raw, json) Hash identifier: 7480jN8FadHwOQN4WR3rM61Ywp8W2RJMcilihLnlaX8= Subject key identifier: F4:BD:DB:6E:DA:CE:3C:9E:89:EE:BB:34:3A:4D:01:E2:6E:29:E9:BD Authority key identifier: EA:A2:9B:32:78:EA:7F:2E:68:AF:F3:D9:40:FB:B5:EC:A9:F8:D5:60 Certificate issuer: /CN=A9185339/serialNumber=EAA29B3278EA7F2E68AFF3D940FBB5ECA9F8D560 Certificate serial: CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qKbMnjqfy5or_PZQPu17Kn41WA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185339/DACDB38EDB6711EEA6178924C4F9AE02/6qKbMnjqfy5or_PZQPu17Kn41WA.mft Manifest number: CB Signing time: Thu 03 Apr 2025 05:03:19 +0000 Manifest this update: Thu 03 Apr 2025 05:03:19 +0000 Manifest next update: Thu 10 Apr 2025 05:03:19 +0000 Files and hashes: 1: 6qKbMnjqfy5or_PZQPu17Kn41WA.crl (hash: Hp+nwXABtb9zTQvZwh8K8jm0Zjk2ViFGddLt0RVNVic=) 2: 57410984DB6811EEA3A06625C4F9AE02.roa (hash: PjA6/y3/URFKtBBGqwXOyXSRNtGtQief3EK0IMYpEOs=) 3: 68005612A19211EF9444186DC4F9AE02.roa (hash: 57t9aslQBqVubnpXgZYR9ppPEM+QHeUVCTd2/IZVpT4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185339/DACDB38EDB6711EEA6178924C4F9AE02/6qKbMnjqfy5or_PZQPu17Kn41WA.crl rsync://rpki.apnic.net/member_repository/A9185339/DACDB38EDB6711EEA6178924C4F9AE02/6qKbMnjqfy5or_PZQPu17Kn41WA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qKbMnjqfy5or_PZQPu17Kn41WA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 05:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 207 (0xcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185339 Validity Not Before: Apr 3 05:03:19 2025 GMT Not After : Apr 10 05:03:19 2025 GMT Subject: CN=67ee1697-a2b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1b:97:8a:54:89:23:c9:8f:5b:e2:0d:5e:55: 92:c7:13:41:98:c6:b8:eb:cd:be:34:30:4e:fc:7b: 08:91:5b:62:01:01:17:39:a0:d9:c6:14:5f:16:4a: ec:a2:f7:2f:4f:da:fb:ac:64:37:a0:11:21:cd:65: 9a:e6:86:ab:4b:85:1e:02:b0:ba:89:49:0c:0e:15: a4:0f:b6:14:3d:6e:a5:99:e7:6b:8b:ed:04:35:c1: 34:1c:02:79:1e:2f:e6:49:c9:ae:a6:98:32:1e:57: 72:70:e5:e4:8a:03:0c:5a:67:39:42:d8:3f:80:ba: 25:10:01:87:b0:9f:00:b2:70:78:9a:a2:2f:cf:00: 4a:84:71:34:05:84:14:d3:e7:88:ab:7b:b8:99:65: 87:cf:fe:1c:3d:37:93:6b:be:cb:7a:c0:9a:3d:62: 88:44:db:1c:66:f6:2d:07:45:06:0f:07:04:a0:39: df:b9:68:80:f4:e0:df:7d:72:88:9b:18:b8:3e:d2: 35:bd:3e:50:09:cb:8f:88:00:dd:2c:88:76:d8:9f: 5d:c1:d4:24:4f:f0:41:f1:bb:0b:cf:da:53:a6:8c: 23:2b:88:dc:fc:f3:bb:d6:7c:d3:51:50:b7:a5:76: 94:85:4c:db:ec:0a:5d:88:c2:f8:4b:c7:60:37:6c: 79:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:BD:DB:6E:DA:CE:3C:9E:89:EE:BB:34:3A:4D:01:E2:6E:29:E9:BD X509v3 Authority Key Identifier: keyid:EA:A2:9B:32:78:EA:7F:2E:68:AF:F3:D9:40:FB:B5:EC:A9:F8:D5:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185339/DACDB38EDB6711EEA6178924C4F9AE02/6qKbMnjqfy5or_PZQPu17Kn41WA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qKbMnjqfy5or_PZQPu17Kn41WA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185339/DACDB38EDB6711EEA6178924C4F9AE02/6qKbMnjqfy5or_PZQPu17Kn41WA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:2e:28:49:8c:18:d0:67:25:2e:45:df:0a:5f:17:0f:29:e7: d1:ec:95:05:15:5d:00:53:39:2c:33:41:90:2e:08:61:b2:3b: 04:44:76:19:02:33:a9:33:de:e4:b0:74:df:ba:33:e8:d9:7d: 2a:0c:1c:ae:6d:0e:76:5a:2f:17:ec:d5:e3:48:ea:11:18:00: 93:f3:fe:e1:0f:ba:21:33:e2:e5:e0:2e:3e:fb:9f:8e:54:29: 53:bc:1c:17:21:df:6b:33:5a:18:38:72:b5:ff:05:42:08:de: 08:2a:0f:82:52:b6:7f:cb:e6:3c:75:ec:94:80:9f:c6:41:a7: 17:ad:84:36:8a:26:21:89:fc:f1:c0:f1:e1:ae:fb:4a:60:2d: a9:59:4f:38:a7:19:4a:02:d0:01:93:bb:2d:b9:5f:71:0b:15: 81:83:3a:3c:03:5f:cb:14:e2:c5:62:3c:7e:0e:20:5d:6f:6f: 7e:eb:36:56:4b:70:b6:18:73:18:ff:8e:c9:e0:f6:be:34:8d: 23:ef:e9:ba:76:9b:0d:26:6a:78:22:eb:00:b6:49:9c:56:4d: 01:8b:18:0d:35:bf:d4:1c:90:fc:3d:f3:5a:af:84:35:fb:18: 76:d5:46:9a:cc:68:1e:83:44:15:74:d7:83:27:ad:b6:11:37: b1:ac:4b:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUzMzkxMTAvBgNVBAUTKEVBQTI5QjMyNzhFQTdGMkU2OEFGRjNEOTQwRkJCNUVD QTlGOEQ1NjAwHhcNMjUwNDAzMDUwMzE5WhcNMjUwNDEwMDUwMzE5WjAYMRYwFAYD VQQDEw02N2VlMTY5Ny1hMmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyRuXilSJI8mPW+INXlWSxxNBmMa4682+NDBO/HsIkVtiAQEXOaDZxhRfFkrs ovcvT9r7rGQ3oBEhzWWa5oarS4UeArC6iUkMDhWkD7YUPW6lmedri+0ENcE0HAJ5 Hi/mScmuppgyHldycOXkigMMWmc5Qtg/gLolEAGHsJ8AsnB4mqIvzwBKhHE0BYQU 0+eIq3u4mWWHz/4cPTeTa77LesCaPWKIRNscZvYtB0UGDwcEoDnfuWiA9ODffXKI mxi4PtI1vT5QCcuPiADdLIh22J9dwdQkT/BB8bsLz9pTpowjK4jc/PO71nzTUVC3 pXaUhUzb7ApdiML4S8dgN2x5yQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPS9227a zjyeie67NDpNAeJuKem9MB8GA1UdIwQYMBaAFOqimzJ46n8uaK/z2UD7teyp+NVg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTMzOS9EQUNEQjM4RURC NjcxMUVFQTYxNzg5MjRDNEY5QUUwMi82cUtiTW5qcWZ5NW9yX1BaUVB1MTdLbjQx V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZxS2JNbmpxZnk1b3JfUFpRUHUxN0tuNDFXQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTMzOS9EQUNEQjM4RURCNjcxMUVFQTYxNzg5MjRDNEY5QUUwMi82cUtiTW5qcWZ5 NW9yX1BaUVB1MTdLbjQxV0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVLihJjBjQZyUuRd8KXxcPKefR7JUFFV0AUzksM0GQLghhsjsERHYZ AjOpM97ksHTfujPo2X0qDByubQ52Wi8X7NXjSOoRGACT8/7hD7ohM+Ll4C4++5+O VClTvBwXId9rM1oYOHK1/wVCCN4IKg+CUrZ/y+Y8deyUgJ/GQacXrYQ2iiYhifzx wPHhrvtKYC2pWU84pxlKAtABk7stuV9xCxWBgzo8A1/LFOLFYjx+DiBdb29+6zZW S3C2GHMY/47J4Pa+NI0j7+m6dpsNJmp4IusAtkmcVk0BixgNNb/UHJD8PfNar4Q1 +xh21UaazGgeg0QVdNeDJ622ETexrEsG -----END CERTIFICATE-----Generated at Fri Apr 4 22:34:52 2025 by rpki-client