$ rpki-client -vvf rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/6sJx1r3dV8MxnnHIEdhQR1NMRzA.mft File: 6sJx1r3dV8MxnnHIEdhQR1NMRzA.mft (raw, json) Hash identifier: pYm46u5zaKYN7bE8k1Ne2Kb0IRAngwJSDV6TSuJ1Vm0= Subject key identifier: 6B:91:D8:85:79:F0:94:8E:1A:27:07:2B:D0:D4:88:0E:62:C9:E8:AA Authority key identifier: EA:C2:71:D6:BD:DD:57:C3:31:9E:71:C8:11:D8:50:47:53:4C:47:30 Certificate issuer: /CN=A919A1BE/serialNumber=EAC271D6BDDD57C3319E71C811D85047534C4730 Certificate serial: 0AC7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sJx1r3dV8MxnnHIEdhQR1NMRzA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/6sJx1r3dV8MxnnHIEdhQR1NMRzA.mft Manifest number: 0ABE Signing time: Wed 16 Apr 2025 19:18:32 +0000 Manifest this update: Wed 16 Apr 2025 19:18:31 +0000 Manifest next update: Wed 23 Apr 2025 19:18:31 +0000 Files and hashes: 1: 6sJx1r3dV8MxnnHIEdhQR1NMRzA.crl (hash: JsThS5/Azh1ybsYGqA7Q8CziSRokIoSgMXcTgepV49M=) 2: 0FFE5282122811F0AC9B4112C4F9AE02.roa (hash: qP7+uhy7LyLUv4jd3g7zWSe0a9FYblcgiMmuUDc4eAs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/6sJx1r3dV8MxnnHIEdhQR1NMRzA.crl rsync://rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/6sJx1r3dV8MxnnHIEdhQR1NMRzA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sJx1r3dV8MxnnHIEdhQR1NMRzA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 18:56:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2759 (0xac7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A1BE, serialNumber=EAC271D6BDDD57C3319E71C811D85047534C4730 Validity Not Before: Apr 16 19:18:31 2025 GMT Not After : Apr 23 19:18:31 2025 GMT Subject: CN=68000288-f111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:78:37:d5:ba:e1:cd:4f:c7:91:3a:a3:17:87: 17:2d:be:7a:17:4e:7b:87:6d:33:a0:b1:17:1f:7f: 43:ef:b7:ad:d8:e2:bf:84:9a:b1:40:49:19:9f:cb: a1:e3:43:a2:b4:99:10:cc:70:41:9a:0e:bc:02:67: bf:1c:ed:48:fb:a0:e1:2d:92:e5:99:89:71:cc:f9: 73:c1:b6:01:a5:f9:b1:79:ea:68:50:b2:5f:db:96: f2:86:a4:5f:a2:eb:5e:23:4d:71:92:f2:b9:7a:9f: 4a:cb:74:d0:49:83:1c:5e:b2:21:25:2f:fa:b7:08: 1f:a3:1b:56:75:b3:66:74:9b:28:94:6b:81:1c:58: 21:f2:c7:ad:a7:71:65:a7:bf:a2:f6:94:00:cb:3d: dc:29:3b:b9:f6:4c:da:6c:f0:8a:f7:2e:f0:8e:14: 39:89:3e:ed:f7:36:ab:fd:1f:a3:75:36:72:a9:09: f3:15:85:9b:97:1e:47:82:b7:3a:e5:ba:b2:e2:45: 31:28:58:53:77:42:d8:e8:04:16:8f:5f:31:3c:30: db:0d:ce:bd:55:66:d6:da:fd:05:73:35:a7:cc:cf: 39:0a:de:63:48:70:96:56:1f:54:c4:12:4e:21:b2: 7a:a8:df:99:8a:b7:ae:83:43:24:4f:bc:54:67:4a: b1:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:91:D8:85:79:F0:94:8E:1A:27:07:2B:D0:D4:88:0E:62:C9:E8:AA X509v3 Authority Key Identifier: keyid:EA:C2:71:D6:BD:DD:57:C3:31:9E:71:C8:11:D8:50:47:53:4C:47:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/6sJx1r3dV8MxnnHIEdhQR1NMRzA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sJx1r3dV8MxnnHIEdhQR1NMRzA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/6sJx1r3dV8MxnnHIEdhQR1NMRzA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:b6:54:c9:95:10:b6:1f:a6:03:bb:dc:a8:98:9f:a6:85:39: 19:a8:b7:76:4c:d9:cb:3a:a9:d9:b3:50:a6:c5:80:dd:6a:5b: a1:3d:b6:87:30:d1:50:5a:75:ca:5e:3f:e6:87:c3:cf:ba:4e: 99:45:44:86:a0:84:65:82:c7:91:c1:44:fc:75:9d:ad:ac:15: 45:9c:99:6e:1e:62:4d:31:9c:95:2f:49:55:a4:07:1e:a1:2e: b5:6d:b5:a5:62:d0:0b:7a:a7:64:e0:f9:89:34:ed:7c:3c:99: b6:8f:fa:5e:e9:46:55:1b:d7:33:76:8d:33:46:f9:84:4c:6f: 39:52:e9:d1:6e:21:1f:ec:7b:11:6c:8d:0d:9a:98:6c:56:ef: d0:37:2b:aa:bc:df:a9:0c:c3:52:f5:99:26:a7:3d:aa:3c:94: 75:28:07:03:af:3a:83:95:cc:fd:ef:61:d3:40:97:46:5c:3c: 28:f6:a4:0d:e9:a6:0c:67:74:97:84:16:f7:88:78:7b:a9:e3: 77:2e:0e:34:7f:1c:c8:64:fa:7f:ef:ac:cf:e8:2a:30:6f:14: 97:b1:db:ea:15:03:8f:bc:08:98:19:f6:a6:85:fb:db:9a:4d: 21:d8:b9:b1:06:b3:61:4b:dc:f1:56:18:fb:87:a2:9f:23:26: 20:f1:ed:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUExQkUxMTAvBgNVBAUTKEVBQzI3MUQ2QkRERDU3QzMzMTlFNzFDODExRDg1MDQ3 NTM0QzQ3MzAwHhcNMjUwNDE2MTkxODMxWhcNMjUwNDIzMTkxODMxWjAYMRYwFAYD VQQDEw02ODAwMDI4OC1mMTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Hg31brhzU/HkTqjF4cXLb56F057h20zoLEXH39D77et2OK/hJqxQEkZn8uh 40OitJkQzHBBmg68Ame/HO1I+6DhLZLlmYlxzPlzwbYBpfmxeepoULJf25byhqRf outeI01xkvK5ep9Ky3TQSYMcXrIhJS/6twgfoxtWdbNmdJsolGuBHFgh8setp3Fl p7+i9pQAyz3cKTu59kzabPCK9y7wjhQ5iT7t9zar/R+jdTZyqQnzFYWblx5Hgrc6 5bqy4kUxKFhTd0LY6AQWj18xPDDbDc69VWbW2v0FczWnzM85Ct5jSHCWVh9UxBJO IbJ6qN+Zireug0MkT7xUZ0qxFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGuR2IV5 8JSOGicHK9DUiA5iyeiqMB8GA1UdIwQYMBaAFOrCcda93VfDMZ5xyBHYUEdTTEcw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTFCRS83MDA4NDc3RTRE NjAxMUVBQUI2MzUzNzRDNEY5QUUwMi82c0p4MXIzZFY4TXhubkhJRWRoUVIxTk1S ekEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZzSngxcjNkVjhNeG5uSElFZGhRUjFOTVJ6QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTFCRS83MDA4NDc3RTRENjAxMUVBQUI2MzUzNzRDNEY5QUUwMi82c0p4MXIzZFY4 TXhubkhJRWRoUVIxTk1SekEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADtlTJlRC2H6YDu9yomJ+mhTkZqLd2TNnLOqnZs1CmxYDdaluhPbaH MNFQWnXKXj/mh8PPuk6ZRUSGoIRlgseRwUT8dZ2trBVFnJluHmJNMZyVL0lVpAce oS61bbWlYtALeqdk4PmJNO18PJm2j/pe6UZVG9czdo0zRvmETG85UunRbiEf7HsR bI0NmphsVu/QNyuqvN+pDMNS9Zkmpz2qPJR1KAcDrzqDlcz972HTQJdGXDwo9qQN 6aYMZ3SXhBb3iHh7qeN3Lg40fxzIZPp/76zP6CowbxSXsdvqFQOPvAiYGfamhfvb mk0h2LmxBrNhS9zxVhj7h6KfIyYg8e05 -----END CERTIFICATE-----Generated at Wed Apr 16 21:14:31 2025 by rpki-client