$ rpki-client -vvf rpki.apnic.net/member_repository/A919C355/22E76B442F5911EEB957EA72C4F9AE02/6AKchCosGw6rjSFi239_RN4ccCg.mft File: 6AKchCosGw6rjSFi239_RN4ccCg.mft (raw, json) Hash identifier: 88FZlYrZYnsw//BLt3V9pCJQXzZvish5M38JbdPba60= Subject key identifier: AE:4D:30:67:A4:9F:7A:B2:61:B6:A5:2A:36:BA:96:7A:CA:F1:DF:71 Authority key identifier: E8:02:9C:84:2A:2C:1B:0E:AB:8D:21:62:DB:7F:7F:44:DE:1C:70:28 Certificate issuer: /CN=A919C355/serialNumber=E8029C842A2C1B0EAB8D2162DB7F7F44DE1C7028 Certificate serial: 0148 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6AKchCosGw6rjSFi239_RN4ccCg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C355/22E76B442F5911EEB957EA72C4F9AE02/6AKchCosGw6rjSFi239_RN4ccCg.mft Manifest number: 0145 Signing time: Mon 21 Apr 2025 03:12:22 +0000 Manifest this update: Mon 21 Apr 2025 03:12:22 +0000 Manifest next update: Mon 28 Apr 2025 03:12:22 +0000 Files and hashes: 1: 6AKchCosGw6rjSFi239_RN4ccCg.crl (hash: f1493Uz5rPlFyeaeOLFFwn6IiPaJLGfXwFtxk5r+Rf8=) 2: 63884D122F5911EE8D896A87C4F9AE02.roa (hash: 4AwkRBSah0q0zkuKlGnrqVF3ZLdqCQgqioJ/w/eqAGc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C355/22E76B442F5911EEB957EA72C4F9AE02/6AKchCosGw6rjSFi239_RN4ccCg.crl rsync://rpki.apnic.net/member_repository/A919C355/22E76B442F5911EEB957EA72C4F9AE02/6AKchCosGw6rjSFi239_RN4ccCg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6AKchCosGw6rjSFi239_RN4ccCg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 03:12:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 328 (0x148) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C355, serialNumber=E8029C842A2C1B0EAB8D2162DB7F7F44DE1C7028 Validity Not Before: Apr 21 03:12:22 2025 GMT Not After : Apr 28 03:12:22 2025 GMT Subject: CN=6805b796-6e27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:59:96:b7:cd:15:d4:5c:39:e7:08:71:54:d6: 16:83:53:10:bf:17:01:6a:a1:7c:2d:b6:26:a4:b9: 17:4a:0d:6e:08:e9:88:ea:af:ce:7b:77:69:eb:95: 64:77:d8:9b:b6:b7:a4:1a:bc:de:49:9f:2a:f6:ec: e9:eb:78:86:b2:f5:c3:42:8a:09:41:8d:b7:3e:b3: f7:cb:c4:51:c3:5d:d0:dc:87:4d:43:8f:21:4b:2c: bf:6e:56:b2:9a:0e:8f:06:69:46:a7:91:6d:42:b7: 37:48:d2:e3:b7:f3:2a:10:71:77:1c:24:e8:ac:1e: ec:2c:db:97:6d:5e:de:14:3b:cc:e1:87:17:fd:8e: f2:4c:52:0e:21:8f:b5:1c:21:0e:64:98:4d:fe:25: 00:98:69:b6:df:90:1a:e1:c6:6c:2a:32:9b:88:bc: fe:dd:0b:3b:5f:0f:c4:1b:54:93:86:66:4d:a3:cf: f5:93:a8:03:9f:ab:99:7d:18:3e:d0:91:62:2e:93: 68:51:df:f9:ac:3e:52:e5:f4:3b:de:9b:5e:21:ad: 1b:29:03:90:e0:90:dc:3e:b4:94:53:c4:ed:ba:75: 57:6c:88:81:81:f7:fa:16:c4:2e:8b:43:34:56:90: 31:02:d7:37:cb:77:fd:24:f4:0e:3c:58:1f:c8:a9: e0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:4D:30:67:A4:9F:7A:B2:61:B6:A5:2A:36:BA:96:7A:CA:F1:DF:71 X509v3 Authority Key Identifier: keyid:E8:02:9C:84:2A:2C:1B:0E:AB:8D:21:62:DB:7F:7F:44:DE:1C:70:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C355/22E76B442F5911EEB957EA72C4F9AE02/6AKchCosGw6rjSFi239_RN4ccCg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6AKchCosGw6rjSFi239_RN4ccCg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C355/22E76B442F5911EEB957EA72C4F9AE02/6AKchCosGw6rjSFi239_RN4ccCg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:83:48:e3:5c:af:e5:1a:cc:af:95:1c:8a:05:3c:c3:f0:32: 14:51:7d:88:08:b0:90:81:08:1d:45:68:1f:58:5c:94:6d:a5: 0e:09:25:8b:c1:03:4e:6d:a7:e8:89:50:3e:83:01:4d:78:31: 15:55:68:7f:f7:15:2d:cd:0a:84:0d:09:b2:d1:a4:13:d0:17: 8c:32:10:f6:78:2b:6a:5e:37:15:9c:3b:d8:53:de:e5:82:f7: ff:bf:ee:7b:4d:b2:c9:62:13:bf:84:53:96:9b:e2:5d:5f:9e: f0:3a:9e:aa:1a:8b:e4:85:7b:ab:69:f6:2a:99:f1:86:d3:72: 14:13:61:ab:6b:71:5f:30:5d:49:8f:af:20:0d:31:ed:22:b9: b5:6d:68:b5:7f:35:86:6b:d1:6f:c4:8b:6b:d5:50:cf:cf:e7: d7:b6:87:97:75:2a:cf:66:e7:6b:73:25:19:6d:85:b9:e4:99: 01:a2:45:77:42:f3:41:39:a3:5b:5e:c6:51:96:21:ca:21:b3: 68:cd:6f:a4:87:49:6b:6c:f1:02:39:ea:79:0b:29:10:9a:55: 5b:5c:6c:5a:7e:68:0e:f7:d8:2d:b9:21:17:5b:87:b6:29:12: 53:44:d2:b9:a7:ba:e4:95:06:ad:61:3a:a7:60:76:40:b7:4c: d3:1f:87:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMzNTUxMTAvBgNVBAUTKEU4MDI5Qzg0MkEyQzFCMEVBQjhEMjE2MkRCN0Y3RjQ0 REUxQzcwMjgwHhcNMjUwNDIxMDMxMjIyWhcNMjUwNDI4MDMxMjIyWjAYMRYwFAYD VQQDEw02ODA1Yjc5Ni02ZTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1VmWt80V1Fw55whxVNYWg1MQvxcBaqF8LbYmpLkXSg1uCOmI6q/Oe3dp65Vk d9ibtrekGrzeSZ8q9uzp63iGsvXDQooJQY23PrP3y8RRw13Q3IdNQ48hSyy/blay mg6PBmlGp5FtQrc3SNLjt/MqEHF3HCTorB7sLNuXbV7eFDvM4YcX/Y7yTFIOIY+1 HCEOZJhN/iUAmGm235Aa4cZsKjKbiLz+3Qs7Xw/EG1SThmZNo8/1k6gDn6uZfRg+ 0JFiLpNoUd/5rD5S5fQ73pteIa0bKQOQ4JDcPrSUU8TtunVXbIiBgff6FsQui0M0 VpAxAtc3y3f9JPQOPFgfyKngHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK5NMGek n3qyYbalKja6lnrK8d9xMB8GA1UdIwQYMBaAFOgCnIQqLBsOq40hYtt/f0TeHHAo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzM1NS8yMkU3NkI0NDJG NTkxMUVFQjk1N0VBNzJDNEY5QUUwMi82QUtjaENvc0d3NnJqU0ZpMjM5X1JONGNj Q2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZBS2NoQ29zR3c2cmpTRmkyMzlfUk40Y2NDZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzM1NS8yMkU3NkI0NDJGNTkxMUVFQjk1N0VBNzJDNEY5QUUwMi82QUtjaENvc0d3 NnJqU0ZpMjM5X1JONGNjQ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFg0jjXK/lGsyvlRyKBTzD8DIUUX2ICLCQgQgdRWgfWFyUbaUOCSWL wQNObafoiVA+gwFNeDEVVWh/9xUtzQqEDQmy0aQT0BeMMhD2eCtqXjcVnDvYU97l gvf/v+57TbLJYhO/hFOWm+JdX57wOp6qGovkhXurafYqmfGG03IUE2Gra3FfMF1J j68gDTHtIrm1bWi1fzWGa9FvxItr1VDPz+fXtoeXdSrPZudrcyUZbYW55JkBokV3 QvNBOaNbXsZRliHKIbNozW+kh0lrbPECOep5CykQmlVbXGxafmgO99gtuSEXW4e2 KRJTRNK5p7rklQatYTqnYHZAt0zTH4dk -----END CERTIFICATE-----Generated at Tue Apr 22 13:17:31 2025 by rpki-client