$ rpki-client -vvf rpki.apnic.net/member_repository/A912F6E3/EA5381DEB5DD11EF97D9FA34C4F9AE02/mP6mxE_1MoSDXoHQcN_BggttUOk.mft File: mP6mxE_1MoSDXoHQcN_BggttUOk.mft (raw, json) Hash identifier: UzV7NMX7o/PWUKiX5OpeDncATkLThb+nIJ64UbPBKcI= Subject key identifier: 73:DB:C9:8A:B2:B9:CC:7C:E7:78:6E:08:0D:F7:D2:0F:73:36:FB:C6 Authority key identifier: 98:FE:A6:C4:4F:F5:32:84:83:5E:81:D0:70:DF:C1:82:0B:6D:50:E9 Certificate issuer: /CN=A912F6E3/serialNumber=98FEA6C44FF53284835E81D070DFC1820B6D50E9 Certificate serial: 47 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mP6mxE_1MoSDXoHQcN_BggttUOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F6E3/EA5381DEB5DD11EF97D9FA34C4F9AE02/mP6mxE_1MoSDXoHQcN_BggttUOk.mft Manifest number: 45 Signing time: Wed 09 Apr 2025 06:18:12 +0000 Manifest this update: Wed 09 Apr 2025 06:18:11 +0000 Manifest next update: Wed 16 Apr 2025 06:18:11 +0000 Files and hashes: 1: mP6mxE_1MoSDXoHQcN_BggttUOk.crl (hash: OCfG/TzCVxbZZYwy0EMcJgYR1KdtQN1tol8Uvdu7Zww=) 2: B21566C0EE5911EF87651F0AC4F9AE02.roa (hash: wUwv5nKPByd5iXm4Rp1wHIbyB56bV0LiIzKOApqPsGU=) 3: C241D8CCE1DD11EF9D21BB10C4F9AE02.roa (hash: aOaJVSoayyWp8EmwajlM6cWFw4ReqENsLISzvhYiTKc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F6E3/EA5381DEB5DD11EF97D9FA34C4F9AE02/mP6mxE_1MoSDXoHQcN_BggttUOk.crl rsync://rpki.apnic.net/member_repository/A912F6E3/EA5381DEB5DD11EF97D9FA34C4F9AE02/mP6mxE_1MoSDXoHQcN_BggttUOk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mP6mxE_1MoSDXoHQcN_BggttUOk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 03:07:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F6E3 Validity Not Before: Apr 9 06:18:11 2025 GMT Not After : Apr 16 06:18:11 2025 GMT Subject: CN=67f61124-bed4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7e:87:86:c5:da:d4:11:2c:7f:cd:8f:85:87: ad:ca:7e:b8:45:d7:91:b9:8e:83:e7:69:ee:83:a4: f0:89:8b:b0:0c:9b:4e:43:bb:ea:ef:d8:a6:16:60: a7:25:ac:81:8a:7b:78:e3:15:60:68:26:32:13:fb: 9b:04:3e:68:ff:e2:93:14:78:8e:15:54:4e:6a:84: dd:e1:e3:86:e5:b0:74:66:29:54:43:c0:b0:5d:28: c6:7e:da:72:35:7a:87:d6:f3:14:4e:a4:bd:f2:f7: 3a:88:41:88:b8:d9:69:3b:39:0b:a8:19:88:c5:11: 45:60:3e:53:9c:3c:be:48:0a:1c:d5:2d:cb:05:28: 7a:5e:4d:83:02:f9:d1:32:c0:59:3a:62:e6:43:45: bf:2f:c7:b5:90:2b:16:b8:42:2e:66:7f:81:97:81: 0f:18:8d:c9:a5:a1:09:4d:84:61:97:9f:4a:b1:da: b6:98:64:fe:8e:27:21:89:d1:22:44:86:e8:5e:94: 50:67:54:bd:31:d5:45:a3:f5:21:f9:e2:3a:6e:21: ad:bc:fb:6e:dc:e3:44:f9:62:7d:92:a7:ce:7d:29: a0:79:a9:6b:e2:0f:c2:0c:a8:23:3c:35:b5:f8:00: e9:ca:ad:91:a3:77:82:5f:3a:82:e5:18:51:94:20: 7f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:DB:C9:8A:B2:B9:CC:7C:E7:78:6E:08:0D:F7:D2:0F:73:36:FB:C6 X509v3 Authority Key Identifier: keyid:98:FE:A6:C4:4F:F5:32:84:83:5E:81:D0:70:DF:C1:82:0B:6D:50:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F6E3/EA5381DEB5DD11EF97D9FA34C4F9AE02/mP6mxE_1MoSDXoHQcN_BggttUOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mP6mxE_1MoSDXoHQcN_BggttUOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F6E3/EA5381DEB5DD11EF97D9FA34C4F9AE02/mP6mxE_1MoSDXoHQcN_BggttUOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:db:c4:04:32:b7:d7:d3:ba:ef:9f:f8:ac:1b:d5:24:f4:ba: d7:3e:45:dd:e5:87:8c:98:7d:38:49:31:44:95:94:ed:dd:eb: 81:c1:eb:c5:ab:6b:c1:f5:24:34:3f:b0:a9:ac:ec:a7:41:95: 4a:80:9a:18:b6:dc:af:77:b4:3b:59:b7:bf:e9:41:51:c7:24: 4e:8f:46:13:25:af:d6:61:9d:43:f1:1e:c9:bb:9b:7d:8c:2f: 25:cb:98:4c:22:b7:cb:05:23:74:03:e7:f0:6d:91:ef:bc:74: d1:6b:e1:57:d8:56:e5:83:92:89:31:11:36:ac:c6:ce:ad:11: 3a:ca:4e:17:c5:8f:ff:c7:ca:38:35:5d:48:d0:1a:8a:25:11: ca:7b:9a:ed:d7:43:fc:b1:a4:9d:d0:ce:a2:97:9c:fd:88:a5: 9e:ad:ad:07:3b:c4:be:be:a4:78:4d:06:08:c7:f1:e5:73:71: 63:aa:ae:49:6a:04:d0:18:d9:52:9c:4f:aa:db:b7:cb:96:d2: 09:17:1e:65:5a:10:88:fc:09:0d:aa:a9:ff:6c:29:18:3f:82: db:a1:ba:58:a6:81:dd:7e:72:e9:80:ab:c1:a3:67:f9:93:bf: f5:94:c7:8b:f5:26:5d:81:66:e9:ca:f3:e8:8f:70:7a:88:2d: 6e:87:c2:cb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RjZFMzExMC8GA1UEBRMoOThGRUE2QzQ0RkY1MzI4NDgzNUU4MUQwNzBERkMxODIw QjZENTBFOTAeFw0yNTA0MDkwNjE4MTFaFw0yNTA0MTYwNjE4MTFaMBgxFjAUBgNV BAMTDTY3ZjYxMTI0LWJlZDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDfoeGxdrUESx/zY+Fh63KfrhF15G5joPnae6DpPCJi7AMm05Du+rv2KYWYKcl rIGKe3jjFWBoJjIT+5sEPmj/4pMUeI4VVE5qhN3h44blsHRmKVRDwLBdKMZ+2nI1 eofW8xROpL3y9zqIQYi42Wk7OQuoGYjFEUVgPlOcPL5IChzVLcsFKHpeTYMC+dEy wFk6YuZDRb8vx7WQKxa4Qi5mf4GXgQ8YjcmloQlNhGGXn0qx2raYZP6OJyGJ0SJE huhelFBnVL0x1UWj9SH54jpuIa28+27c40T5Yn2Sp859KaB5qWviD8IMqCM8NbX4 AOnKrZGjd4JfOoLlGFGUIH/LAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUc9vJirK5 zHzneG4IDffSD3M2+8YwHwYDVR0jBBgwFoAUmP6mxE/1MoSDXoHQcN/BggttUOkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJGNkUzL0VBNTM4MURFQjVE RDExRUY5N0Q5RkEzNEM0RjlBRTAyL21QNm14RV8xTW9TRFhvSFFjTl9CZ2d0dFVP ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbVA2bXhFXzFNb1NEWG9IUWNOX0JnZ3R0VU9rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJG NkUzL0VBNTM4MURFQjVERDExRUY5N0Q5RkEzNEM0RjlBRTAyL21QNm14RV8xTW9T RFhvSFFjTl9CZ2d0dFVPay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAALbxAQyt9fTuu+f+Kwb1ST0utc+Rd3lh4yYfThJMUSVlO3d64HB68Wr a8H1JDQ/sKms7KdBlUqAmhi23K93tDtZt7/pQVHHJE6PRhMlr9ZhnUPxHsm7m32M LyXLmEwit8sFI3QD5/Btke+8dNFr4VfYVuWDkokxETasxs6tETrKThfFj//Hyjg1 XUjQGoolEcp7mu3XQ/yxpJ3QzqKXnP2IpZ6trQc7xL6+pHhNBgjH8eVzcWOqrklq BNAY2VKcT6rbt8uW0gkXHmVaEIj8CQ2qqf9sKRg/gtuhulimgd1+cumAq8GjZ/mT v/WUx4v1Jl2BZunK8+iPcHqILW6Hwss= -----END CERTIFICATE-----Generated at Wed Apr 9 16:27:47 2025 by rpki-client