$ rpki-client -vvf rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.mft File: 6tgeRb5BR2cpw1YqNG-29i_IH70.mft (raw, json) Hash identifier: gAp6Q8UXJqPzOzGS/7PdQL+9ZQyg96bOUP9KVr8015E= Subject key identifier: B4:D1:4D:D3:2D:15:F1:3D:68:97:B4:CC:2F:DC:AF:72:1F:9F:97:DF Authority key identifier: EA:D8:1E:45:BE:41:47:67:29:C3:56:2A:34:6F:B6:F6:2F:C8:1F:BD Certificate issuer: /CN=A9119624/serialNumber=EAD81E45BE41476729C3562A346FB6F62FC81FBD Certificate serial: 0D49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tgeRb5BR2cpw1YqNG-29i_IH70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.mft Manifest number: 0D40 Signing time: Fri 30 May 2025 18:10:42 +0000 Manifest this update: Fri 30 May 2025 18:10:42 +0000 Manifest next update: Fri 06 Jun 2025 18:10:42 +0000 Files and hashes: 1: 6tgeRb5BR2cpw1YqNG-29i_IH70.crl (hash: GGlbcVlYFSMgqiF7N3X6cQmXPJclZZ9Gkitp4rO4YbY=) 2: 0FA62A50214011EA90EFFE63C4F9AE02.roa (hash: b2eeZFRX3Cfrh2KgUNSH2XUFjtsQ8yv94mtfUkRiNmk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.crl rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tgeRb5BR2cpw1YqNG-29i_IH70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:10:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3401 (0xd49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119624, serialNumber=EAD81E45BE41476729C3562A346FB6F62FC81FBD Validity Not Before: May 30 18:10:42 2025 GMT Not After : Jun 6 18:10:42 2025 GMT Subject: CN=6839f4a2-3b7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:56:a8:59:c7:ed:3e:13:74:f9:c2:a4:77:d7: 7c:56:da:53:ed:55:5b:9e:34:cd:7c:0f:f5:7e:cc: 55:5a:9d:7b:ed:a6:04:dc:7f:70:e8:0e:70:3c:33: 2f:8a:e3:e8:ce:5c:41:87:1d:a2:e3:5f:19:ac:dc: 1d:30:1b:88:c3:c7:33:89:f1:74:6b:8f:2e:58:3a: 3c:c8:c0:9d:dd:61:50:4e:5a:1e:0d:ea:bf:40:e5: 4a:4c:a6:b2:54:2d:7c:00:42:f3:81:bb:92:a9:37: c6:d6:17:74:e5:c6:73:ec:fb:a7:37:9e:18:9d:4f: db:17:0f:f5:4d:18:45:69:ed:2b:4d:9e:d7:16:1c: e4:ef:cb:02:a7:7e:92:2a:8f:89:80:5f:72:f8:b1: 07:e4:c9:51:6b:01:ca:c3:c6:ec:07:ea:d2:f5:5f: 02:2a:52:72:de:b2:aa:5a:fc:42:41:b5:67:57:e1: 6e:51:22:d7:8a:19:2c:f5:4b:cd:a8:9b:eb:b5:0f: 87:ec:8c:ed:77:e6:04:b9:ef:9e:bb:74:7b:98:58: 30:19:ef:a9:3d:df:7f:de:53:0e:7e:24:91:30:b8: 31:0e:1f:ea:14:d7:bd:7b:9a:3f:06:d9:83:0a:14: ff:cd:c8:7f:18:91:ea:38:3b:94:37:de:fa:fc:f8: 75:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:D1:4D:D3:2D:15:F1:3D:68:97:B4:CC:2F:DC:AF:72:1F:9F:97:DF X509v3 Authority Key Identifier: keyid:EA:D8:1E:45:BE:41:47:67:29:C3:56:2A:34:6F:B6:F6:2F:C8:1F:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tgeRb5BR2cpw1YqNG-29i_IH70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:2e:4d:14:a9:1b:2a:a4:69:23:8c:83:bd:f1:4a:13:b9:e0: 9d:dc:e1:e4:65:74:18:46:4d:8c:99:fd:08:5f:6a:0f:b0:09: e2:0e:60:7a:60:f0:50:3e:e2:b6:e1:1b:f3:ba:eb:f0:24:8f: ee:48:07:b7:7e:91:01:04:20:8f:64:9b:ad:55:76:de:09:28: f3:cd:b5:0f:7a:95:2b:f5:bb:d6:ab:79:74:a5:7b:36:1b:53: 78:90:e1:89:f7:e3:a1:75:62:12:20:c4:a6:0a:18:aa:20:f5: 75:c1:6d:65:62:9f:28:da:46:cf:fa:f0:9d:7f:30:dd:68:ca: cd:3d:33:4f:4c:15:68:e5:5b:71:6c:07:dd:05:33:e0:42:97: 75:ce:11:a9:8a:a6:36:fe:7b:e7:a5:b3:d5:d6:1e:75:c1:8f: ff:43:61:32:9d:92:7c:9d:94:54:04:18:ae:d0:ac:df:8f:63: 61:44:3f:77:2d:ee:4b:a4:5d:f1:13:df:6a:01:17:29:05:37: c6:2e:27:94:84:fc:90:04:81:76:ae:6c:d7:0d:32:9f:e4:45: 9a:1e:00:b0:dd:51:cf:f6:da:0f:79:72:1b:37:e0:83:36:d7: ab:91:74:57:b3:3f:49:6c:5e:68:8d:f7:21:5d:5a:40:45:1a: 14:0d:33:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk2MjQxMTAvBgNVBAUTKEVBRDgxRTQ1QkU0MTQ3NjcyOUMzNTYyQTM0NkZCNkY2 MkZDODFGQkQwHhcNMjUwNTMwMTgxMDQyWhcNMjUwNjA2MTgxMDQyWjAYMRYwFAYD VQQDEw02ODM5ZjRhMi0zYjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuFaoWcftPhN0+cKkd9d8VtpT7VVbnjTNfA/1fsxVWp177aYE3H9w6A5wPDMv iuPozlxBhx2i418ZrNwdMBuIw8czifF0a48uWDo8yMCd3WFQTloeDeq/QOVKTKay VC18AELzgbuSqTfG1hd05cZz7PunN54YnU/bFw/1TRhFae0rTZ7XFhzk78sCp36S Ko+JgF9y+LEH5MlRawHKw8bsB+rS9V8CKlJy3rKqWvxCQbVnV+FuUSLXihks9UvN qJvrtQ+H7Iztd+YEue+eu3R7mFgwGe+pPd9/3lMOfiSRMLgxDh/qFNe9e5o/BtmD ChT/zch/GJHqODuUN976/Ph1pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLTRTdMt FfE9aJe0zC/cr3Ifn5ffMB8GA1UdIwQYMBaAFOrYHkW+QUdnKcNWKjRvtvYvyB+9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTYyNC8zRDRBNUE4NEQ0 NEQxMUU5QTM4M0EzNUJDNEY5QUUwMi82dGdlUmI1QlIyY3B3MVlxTkctMjlpX0lI NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ0Z2VSYjVCUjJjcHcxWXFORy0yOWlfSUg3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTYyNC8zRDRBNUE4NEQ0NEQxMUU5QTM4M0EzNUJDNEY5QUUwMi82dGdlUmI1QlIy Y3B3MVlxTkctMjlpX0lINzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBLk0UqRsqpGkjjIO98UoTueCd3OHkZXQYRk2Mmf0IX2oPsAniDmB6 YPBQPuK24RvzuuvwJI/uSAe3fpEBBCCPZJutVXbeCSjzzbUPepUr9bvWq3l0pXs2 G1N4kOGJ9+OhdWISIMSmChiqIPV1wW1lYp8o2kbP+vCdfzDdaMrNPTNPTBVo5Vtx bAfdBTPgQpd1zhGpiqY2/nvnpbPV1h51wY//Q2EynZJ8nZRUBBiu0Kzfj2NhRD93 Le5LpF3xE99qARcpBTfGLieUhPyQBIF2rmzXDTKf5EWaHgCw3VHP9toPeXIbN+CD NterkXRXsz9JbF5ojfchXVpARRoUDTOe -----END CERTIFICATE-----Generated at Sat May 31 17:01:12 2025 by rpki-client