$ rpki-client -vvf rpki.apnic.net/member_repository/A919BC3B/C6BD547C39EE11EFA43D6586C4F9AE02/6PdV5x9e1_kTRSz_zj7UIIgSGmg.mft File: 6PdV5x9e1_kTRSz_zj7UIIgSGmg.mft (raw, json) Hash identifier: rFx1rmAV5rY850ivR37LfHJga+5l87ZcRX4BN4BZr+s= Subject key identifier: 9B:D5:DB:87:19:FB:AE:E2:36:87:87:18:14:FA:FA:7F:8D:89:88:2B Authority key identifier: E8:F7:55:E7:1F:5E:D7:F9:13:45:2C:FF:CE:3E:D4:20:88:12:1A:68 Certificate issuer: /CN=A919BC3B/serialNumber=E8F755E71F5ED7F913452CFFCE3ED42088121A68 Certificate serial: 97 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6PdV5x9e1_kTRSz_zj7UIIgSGmg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919BC3B/C6BD547C39EE11EFA43D6586C4F9AE02/6PdV5x9e1_kTRSz_zj7UIIgSGmg.mft Manifest number: 96 Signing time: Mon 21 Apr 2025 05:11:02 +0000 Manifest this update: Mon 21 Apr 2025 05:11:01 +0000 Manifest next update: Mon 28 Apr 2025 05:11:01 +0000 Files and hashes: 1: 6PdV5x9e1_kTRSz_zj7UIIgSGmg.crl (hash: QM4o0oWoch7YXaNiuWSEwFmMmg6Ni7gUyiX0ONavgz8=) 2: 2C00BB1239EF11EFB6EE4687C4F9AE02.roa (hash: Oc2GQXIqmMlslfVaKJ/oBsTF1uhwqc79kyqv7lPwXrc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919BC3B/C6BD547C39EE11EFA43D6586C4F9AE02/6PdV5x9e1_kTRSz_zj7UIIgSGmg.crl rsync://rpki.apnic.net/member_repository/A919BC3B/C6BD547C39EE11EFA43D6586C4F9AE02/6PdV5x9e1_kTRSz_zj7UIIgSGmg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6PdV5x9e1_kTRSz_zj7UIIgSGmg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 05:11:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 151 (0x97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919BC3B, serialNumber=E8F755E71F5ED7F913452CFFCE3ED42088121A68 Validity Not Before: Apr 21 05:11:01 2025 GMT Not After : Apr 28 05:11:01 2025 GMT Subject: CN=6805d365-eb1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9b:86:ff:f8:5b:87:50:49:c9:3e:85:e2:c7: 83:f8:41:6f:dc:c3:a7:de:21:e7:db:a7:0a:4a:fc: a0:b2:df:4e:eb:91:bf:ec:3b:78:59:da:ba:dd:98: 26:6c:7b:c6:61:ec:40:a1:cb:71:16:94:d4:c7:7b: 42:b0:75:1f:80:35:48:6f:7c:24:5d:e8:7e:86:b9: d3:eb:8e:f4:bc:5c:be:cf:32:d1:a5:34:76:c1:86: d5:39:fe:9c:0c:2e:ca:1b:66:88:81:ac:c9:9b:36: 33:f0:e5:d3:dd:06:ef:b2:ba:58:21:b2:bc:b2:bc: fa:66:5e:8a:6f:dd:89:48:e5:12:93:66:7f:fc:d2: 13:83:9d:e4:5d:94:66:a9:dd:70:bb:25:5e:41:d3: 42:bf:e7:36:70:a4:f1:20:6d:85:5f:cf:ee:db:cc: 25:fb:ae:be:5a:7f:72:26:6e:c2:dc:18:a9:2f:93: 57:7d:07:db:f0:b8:71:41:aa:6c:ae:36:d4:ca:ca: 7e:c5:16:b0:e4:5c:54:41:d2:30:38:8d:b7:3a:78: 2b:f1:fe:ad:65:a9:32:9c:42:c5:f2:a2:90:99:1a: cb:e4:da:ff:f8:d4:53:61:66:85:da:2e:52:3b:71: e5:8a:32:36:63:0b:9b:b8:b7:00:71:2e:84:3a:1d: a3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:D5:DB:87:19:FB:AE:E2:36:87:87:18:14:FA:FA:7F:8D:89:88:2B X509v3 Authority Key Identifier: keyid:E8:F7:55:E7:1F:5E:D7:F9:13:45:2C:FF:CE:3E:D4:20:88:12:1A:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919BC3B/C6BD547C39EE11EFA43D6586C4F9AE02/6PdV5x9e1_kTRSz_zj7UIIgSGmg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6PdV5x9e1_kTRSz_zj7UIIgSGmg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BC3B/C6BD547C39EE11EFA43D6586C4F9AE02/6PdV5x9e1_kTRSz_zj7UIIgSGmg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:4b:c5:be:f7:e6:d1:93:b0:62:5c:80:7c:7f:8e:44:70:cb: 76:20:33:8a:f6:72:c8:07:9c:02:ab:8a:e2:b0:05:cc:28:2c: e4:69:17:c7:8e:3d:35:f9:d8:f6:d1:ee:e2:1e:b0:8e:b1:ae: 78:76:b8:02:3d:d7:f7:19:06:e2:55:ef:ce:14:6a:3c:80:08: 2e:ef:1a:ba:63:c1:4b:b2:a8:5d:d1:b7:a1:dd:6a:b2:85:70: 91:a5:de:06:17:7d:8f:ec:cb:b3:d1:34:98:a2:ae:fe:a7:d5: ae:c6:df:73:31:0e:bc:2d:ee:2b:7f:36:b8:69:aa:7d:ce:f1: e7:34:fb:c3:6a:d8:24:d6:30:36:05:e8:6a:c7:5c:55:aa:8d: 43:ad:27:cc:88:76:16:74:ce:7f:56:2e:df:ff:60:7a:09:3d: f9:18:6d:fc:af:76:48:56:4a:ef:db:33:c1:a3:1c:7f:e3:47: 72:51:6b:e5:ca:f8:d1:3c:76:12:af:43:18:4f:3c:ce:37:ad: 77:c3:a3:3d:28:a7:fc:a0:09:d9:06:d6:8e:09:ae:6a:02:0c: 5c:e2:47:cb:00:8c:3a:72:45:48:f2:f1:81:21:db:8a:e6:67: 7f:75:d3:ce:0a:81:ac:b9:34:1f:94:f5:33:1d:04:c6:79:9e: 9a:46:e3:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUJDM0IxMTAvBgNVBAUTKEU4Rjc1NUU3MUY1RUQ3RjkxMzQ1MkNGRkNFM0VENDIw ODgxMjFBNjgwHhcNMjUwNDIxMDUxMTAxWhcNMjUwNDI4MDUxMTAxWjAYMRYwFAYD VQQDEw02ODA1ZDM2NS1lYjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArJuG//hbh1BJyT6F4seD+EFv3MOn3iHn26cKSvygst9O65G/7Dt4Wdq63Zgm bHvGYexAoctxFpTUx3tCsHUfgDVIb3wkXeh+hrnT6470vFy+zzLRpTR2wYbVOf6c DC7KG2aIgazJmzYz8OXT3QbvsrpYIbK8srz6Zl6Kb92JSOUSk2Z//NITg53kXZRm qd1wuyVeQdNCv+c2cKTxIG2FX8/u28wl+66+Wn9yJm7C3BipL5NXfQfb8LhxQaps rjbUysp+xRaw5FxUQdIwOI23Ongr8f6tZakynELF8qKQmRrL5Nr/+NRTYWaF2i5S O3HlijI2YwubuLcAcS6EOh2j9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJvV24cZ +67iNoeHGBT6+n+NiYgrMB8GA1UdIwQYMBaAFOj3VecfXtf5E0Us/84+1CCIEhpo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QkMzQi9DNkJENTQ3QzM5 RUUxMUVGQTQzRDY1ODZDNEY5QUUwMi82UGRWNXg5ZTFfa1RSU3pfemo3VUlJZ1NH bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZQZFY1eDllMV9rVFJTel96ajdVSUlnU0dtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QkMzQi9DNkJENTQ3QzM5RUUxMUVGQTQzRDY1ODZDNEY5QUUwMi82UGRWNXg5ZTFf a1RSU3pfemo3VUlJZ1NHbWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtS8W+9+bRk7BiXIB8f45EcMt2IDOK9nLIB5wCq4risAXMKCzkaRfH jj01+dj20e7iHrCOsa54drgCPdf3GQbiVe/OFGo8gAgu7xq6Y8FLsqhd0beh3Wqy hXCRpd4GF32P7Muz0TSYoq7+p9Wuxt9zMQ68Le4rfza4aap9zvHnNPvDatgk1jA2 Behqx1xVqo1DrSfMiHYWdM5/Vi7f/2B6CT35GG38r3ZIVkrv2zPBoxx/40dyUWvl yvjRPHYSr0MYTzzON613w6M9KKf8oAnZBtaOCa5qAgxc4kfLAIw6ckVI8vGBIduK 5md/ddPOCoGsuTQflPUzHQTGeZ6aRuMk -----END CERTIFICATE-----Generated at Mon Apr 21 21:12:33 2025 by rpki-client