$ rpki-client -vvf rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.mft File: 6GcXUDRPGMKvdH_68lWFDrx50B8.mft (raw, json) Hash identifier: qBQ3SEGYiJK+DvC2dGlLkILbKMcutH4b7b3z7hgJxLU= Subject key identifier: 7C:0C:BE:A7:6E:D5:2E:C2:75:AC:4C:CB:AC:13:25:62:68:F7:00:F3 Authority key identifier: E8:67:17:50:34:4F:18:C2:AF:74:7F:FA:F2:55:85:0E:BC:79:D0:1F Certificate issuer: /CN=A9114DDF/serialNumber=E8671750344F18C2AF747FFAF255850EBC79D01F Certificate serial: 0389 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GcXUDRPGMKvdH_68lWFDrx50B8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.mft Manifest number: 0381 Signing time: Sat 31 May 2025 01:04:50 +0000 Manifest this update: Sat 31 May 2025 01:04:49 +0000 Manifest next update: Sat 07 Jun 2025 01:04:49 +0000 Files and hashes: 1: 6GcXUDRPGMKvdH_68lWFDrx50B8.crl (hash: nNUsG0V1t7ypQqwhejUczajyYIy3dFXxDZ4bn/y1vI4=) 2: FFFC26F0A51C11EC8394365BC4F9AE02.roa (hash: lo57P9VBB46ycGdmIW/WQMt7Bnu1G5Vu55lF8eOkAJo=) 3: FF46137EA51C11EC8394365BC4F9AE02.roa (hash: pjuKTxitr3okr7uU46xmlWjTNZ4Ce4fMa5LiHSn7lO8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.crl rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GcXUDRPGMKvdH_68lWFDrx50B8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:04:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 905 (0x389) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114DDF, serialNumber=E8671750344F18C2AF747FFAF255850EBC79D01F Validity Not Before: May 31 01:04:49 2025 GMT Not After : Jun 7 01:04:49 2025 GMT Subject: CN=683a55b2-0caf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:65:5b:f1:8f:26:af:87:bf:67:dc:67:16:f4: 6c:6f:c7:2f:51:18:df:ed:25:c4:86:16:00:4b:81: 3c:56:e5:b8:a4:76:21:74:72:8b:f7:f9:31:16:58: cd:33:4d:4e:00:42:a9:3b:2e:92:43:fe:ab:d9:bc: d5:0c:ac:53:28:aa:c9:75:40:6c:d0:c8:78:31:1c: 72:ec:b3:bf:c2:de:e6:99:e7:42:b4:70:63:ba:4b: 6b:7b:58:14:54:96:0b:f3:cb:0e:74:13:9a:6f:bd: b4:fb:4e:12:7f:24:39:eb:ce:a6:67:6a:ea:9d:b9: a5:d2:63:98:05:4b:46:42:f4:3d:2c:97:b9:14:23: 98:48:de:78:11:88:aa:66:f3:b0:33:df:20:d8:42: 0c:8e:16:b1:3e:d7:4e:f5:a3:51:fe:d9:ec:80:25: 30:4c:53:d6:a4:dd:08:ac:41:80:3c:16:34:94:4f: 22:8b:cc:89:e9:35:29:46:9a:03:28:25:8f:93:9e: 69:58:59:f0:66:a1:99:34:85:8a:d8:f4:c1:46:f4: 4a:fd:d6:ed:f3:0e:d8:c6:4d:92:4a:b2:7f:ee:a2: 00:7f:71:41:0b:32:15:52:7d:4d:57:cd:fc:44:e3: ba:dd:cc:2f:ff:0a:ea:9b:44:1c:ba:26:d5:78:b0: a8:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:0C:BE:A7:6E:D5:2E:C2:75:AC:4C:CB:AC:13:25:62:68:F7:00:F3 X509v3 Authority Key Identifier: keyid:E8:67:17:50:34:4F:18:C2:AF:74:7F:FA:F2:55:85:0E:BC:79:D0:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GcXUDRPGMKvdH_68lWFDrx50B8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:22:b8:3f:82:51:84:7e:ca:e2:9d:e5:18:dc:d0:c8:3c:c6: df:5d:1b:35:10:d5:aa:ee:9e:f6:48:f3:1f:69:f4:4a:43:00: 6d:c4:58:c2:b8:3d:8f:43:a6:7c:c8:b6:43:45:76:49:e1:fa: f7:14:7f:7e:45:e1:cc:e7:6c:7c:d9:d6:4c:7a:9f:ea:c8:ba: 31:09:f2:a7:21:f4:89:03:a0:e8:8b:66:ef:77:e9:29:43:10: 18:1b:1f:ff:7e:40:f7:12:b6:4c:c5:a4:a4:fd:cf:4e:6c:84: 16:34:13:74:95:bc:0d:bb:04:25:4a:d3:6e:8b:8c:8c:56:ab: 7f:48:52:b2:84:17:a9:6b:e4:29:9a:3e:39:79:b0:fb:da:84: b0:b3:aa:6d:a6:df:c8:89:d6:a7:b7:e8:53:8d:4c:75:db:83: 36:3e:c7:0b:50:a8:99:48:44:e2:e6:57:30:71:1d:ae:c3:9b: db:30:e3:ac:fb:07:e0:18:80:a4:d6:70:d1:5e:a8:ed:ec:fe: 93:52:e2:ba:28:3a:8d:cc:95:13:df:93:7f:e6:0e:44:f0:6c: fa:36:1b:07:75:71:c8:78:41:77:9e:5a:43:d7:0c:71:7d:40: f6:b2:84:11:3b:c4:29:60:94:f1:1d:2d:72:3b:e5:43:39:73: d9:c8:0e:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTREREYxMTAvBgNVBAUTKEU4NjcxNzUwMzQ0RjE4QzJBRjc0N0ZGQUYyNTU4NTBF QkM3OUQwMUYwHhcNMjUwNTMxMDEwNDQ5WhcNMjUwNjA3MDEwNDQ5WjAYMRYwFAYD VQQDEw02ODNhNTViMi0wY2FmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAumVb8Y8mr4e/Z9xnFvRsb8cvURjf7SXEhhYAS4E8VuW4pHYhdHKL9/kxFljN M01OAEKpOy6SQ/6r2bzVDKxTKKrJdUBs0Mh4MRxy7LO/wt7mmedCtHBjuktre1gU VJYL88sOdBOab720+04SfyQ5686mZ2rqnbml0mOYBUtGQvQ9LJe5FCOYSN54EYiq ZvOwM98g2EIMjhaxPtdO9aNR/tnsgCUwTFPWpN0IrEGAPBY0lE8ii8yJ6TUpRpoD KCWPk55pWFnwZqGZNIWK2PTBRvRK/dbt8w7Yxk2SSrJ/7qIAf3FBCzIVUn1NV838 ROO63cwv/wrqm0QcuibVeLCoawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHwMvqdu 1S7CdaxMy6wTJWJo9wDzMB8GA1UdIwQYMBaAFOhnF1A0TxjCr3R/+vJVhQ68edAf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNERERi81QjA2RkVGMkE1 MEExMUVDQjI3NzhENUNDNEY5QUUwMi82R2NYVURSUEdNS3ZkSF82OGxXRkRyeDUw QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZHY1hVRFJQR01LdmRIXzY4bFdGRHJ4NTBCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NERERi81QjA2RkVGMkE1MEExMUVDQjI3NzhENUNDNEY5QUUwMi82R2NYVURSUEdN S3ZkSF82OGxXRkRyeDUwQjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAIrg/glGEfsrineUY3NDIPMbfXRs1ENWq7p72SPMfafRKQwBtxFjC uD2PQ6Z8yLZDRXZJ4fr3FH9+ReHM52x82dZMep/qyLoxCfKnIfSJA6Doi2bvd+kp QxAYGx//fkD3ErZMxaSk/c9ObIQWNBN0lbwNuwQlStNui4yMVqt/SFKyhBepa+Qp mj45ebD72oSws6ptpt/Iidant+hTjUx124M2PscLUKiZSETi5lcwcR2uw5vbMOOs +wfgGICk1nDRXqjt7P6TUuK6KDqNzJUT35N/5g5E8Gz6NhsHdXHIeEF3nlpD1wxx fUD2soQRO8QpYJTxHS1yO+VDOXPZyA5D -----END CERTIFICATE-----Generated at Sat May 31 17:39:21 2025 by rpki-client