$ rpki-client -vvf rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.mft File: 6VdtMs2hm7hvPBYuyf020_0lucE.mft (raw, json) Hash identifier: /VFM7uLbN9dLWM3baz7Tg1ZGtF59WIkbJouiP7pDlg0= Subject key identifier: ED:21:12:AA:E5:16:AF:DF:00:C2:F0:23:18:CE:E8:EE:D9:75:1A:26 Authority key identifier: E9:57:6D:32:CD:A1:9B:B8:6F:3C:16:2E:C9:FD:36:D3:FD:25:B9:C1 Certificate issuer: /CN=A9131359/serialNumber=E9576D32CDA19BB86F3C162EC9FD36D3FD25B9C1 Certificate serial: 01B4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6VdtMs2hm7hvPBYuyf020_0lucE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.mft Manifest number: 01B0 Signing time: Thu 13 Mar 2025 01:58:50 +0000 Manifest this update: Thu 13 Mar 2025 01:58:49 +0000 Manifest next update: Thu 20 Mar 2025 01:58:49 +0000 Files and hashes: 1: 6VdtMs2hm7hvPBYuyf020_0lucE.crl (hash: xJL4Dw8D2mSvWMfgdwzIyn5IIOinUURcRA/Qi5KMwYM=) 2: 01C299E0662611ED94A8DA42C4F9AE02.roa (hash: Cbvoa7LrgmapG4r7FY0TXw9PoDEC05XNI+g2GTtN22E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.crl rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6VdtMs2hm7hvPBYuyf020_0lucE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Mar 2025 01:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 436 (0x1b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131359 Validity Not Before: Mar 13 01:58:49 2025 GMT Not After : Mar 20 01:58:49 2025 GMT Subject: CN=67d23bd9-fc97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:23:1f:bf:77:45:10:4d:19:08:7f:8d:07:f9: ef:33:95:1d:e2:85:81:e5:5a:9d:65:65:92:21:66: 30:9b:fe:22:24:86:b0:b8:14:34:ee:f4:34:95:cb: 4f:e7:37:d1:d4:47:1e:f3:7d:e6:4a:93:20:a1:3d: 5f:6a:2b:82:2e:4a:2e:6a:1e:f0:ee:29:90:ec:7b: 51:1f:6b:e1:7f:4c:06:a1:71:05:04:7b:0c:06:34: 66:5f:68:4b:55:ff:48:d4:5d:26:d1:82:d4:c3:3d: 75:12:9d:a9:d2:b3:49:5c:a2:f2:c7:b3:31:1f:c7: 4e:b4:5f:8b:90:78:e6:87:87:35:95:a5:e0:cb:39: 7f:02:f9:8b:27:e0:c7:fa:d7:de:71:d5:3e:fe:6b: fa:4e:a7:91:37:6e:46:e3:d3:47:cf:08:d0:40:db: 1e:a9:d5:c6:6b:1d:12:70:4d:a4:f6:c4:10:4f:65: 4b:f1:14:f7:19:78:b6:0a:37:c8:a9:93:17:df:88: 62:31:10:e2:65:7f:8c:2e:d3:c6:38:a9:1c:ba:5e: 15:9b:8a:6a:b3:64:6b:78:8e:dd:25:22:b9:85:42: 4d:79:63:7d:27:66:4b:39:63:53:e2:62:2d:14:e2: 61:01:9d:90:c3:b5:cb:e1:74:45:92:f7:da:56:55: bd:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:21:12:AA:E5:16:AF:DF:00:C2:F0:23:18:CE:E8:EE:D9:75:1A:26 X509v3 Authority Key Identifier: keyid:E9:57:6D:32:CD:A1:9B:B8:6F:3C:16:2E:C9:FD:36:D3:FD:25:B9:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6VdtMs2hm7hvPBYuyf020_0lucE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:c2:01:7b:28:e2:28:52:09:60:f2:38:01:e6:e3:ae:4a:f6: 09:6c:c8:83:db:76:13:d5:ec:24:e3:73:aa:e3:b1:86:fe:bb: 5b:35:00:86:1d:c2:0e:00:75:14:71:aa:0e:15:ef:65:57:e7: b8:92:07:63:ff:f3:83:2e:af:76:4b:9a:f5:4b:2b:ba:47:a5: e3:45:cf:22:f8:2b:a2:2f:1c:74:17:1f:9d:79:cc:7f:0d:ec: a7:16:87:35:78:be:61:0d:e3:99:bb:6b:d2:d3:72:a4:5c:45: 6c:b9:1b:e7:3d:3f:d3:c5:bf:ef:3d:38:93:52:0c:72:69:30: c7:95:07:be:44:30:7b:bc:87:83:d6:4e:63:4b:a1:44:0b:4a: 26:2d:59:3a:dc:ef:51:8c:35:de:cc:7d:e8:af:6b:87:a5:fd: 5c:da:a9:40:f7:d4:79:a8:b6:ff:76:4d:a8:1b:3e:a2:ee:44: 92:30:70:3f:f3:96:59:9b:9b:c5:27:c1:7b:ba:57:d4:2b:f8: 70:4d:64:b9:7c:48:fa:b4:0f:4b:af:32:32:e1:6e:39:fc:67: 66:7d:68:d4:64:c8:0e:f8:9b:34:1e:c4:3b:08:16:d2:d0:06: a8:ec:88:31:d2:ea:c6:83:70:92:77:4b:2c:93:cc:8a:5b:48: cf:b8:74:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzEzNTkxMTAvBgNVBAUTKEU5NTc2RDMyQ0RBMTlCQjg2RjNDMTYyRUM5RkQzNkQz RkQyNUI5QzEwHhcNMjUwMzEzMDE1ODQ5WhcNMjUwMzIwMDE1ODQ5WjAYMRYwFAYD VQQDEw02N2QyM2JkOS1mYzk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxiMfv3dFEE0ZCH+NB/nvM5Ud4oWB5VqdZWWSIWYwm/4iJIawuBQ07vQ0lctP 5zfR1Ece833mSpMgoT1faiuCLkouah7w7imQ7HtRH2vhf0wGoXEFBHsMBjRmX2hL Vf9I1F0m0YLUwz11Ep2p0rNJXKLyx7MxH8dOtF+LkHjmh4c1laXgyzl/AvmLJ+DH +tfecdU+/mv6TqeRN25G49NHzwjQQNseqdXGax0ScE2k9sQQT2VL8RT3GXi2CjfI qZMX34hiMRDiZX+MLtPGOKkcul4Vm4pqs2RreI7dJSK5hUJNeWN9J2ZLOWNT4mIt FOJhAZ2Qw7XL4XRFkvfaVlW9UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO0hEqrl Fq/fAMLwIxjO6O7ZdRomMB8GA1UdIwQYMBaAFOlXbTLNoZu4bzwWLsn9NtP9JbnB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTM1OS9DQTlBMzRCNjY2 MjMxMUVEOTE4NTVENDJDNEY5QUUwMi82VmR0TXMyaG03aHZQQll1eWYwMjBfMGx1 Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZWZHRNczJobTdodlBCWXV5ZjAyMF8wbHVjRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTM1OS9DQTlBMzRCNjY2MjMxMUVEOTE4NTVENDJDNEY5QUUwMi82VmR0TXMyaG03 aHZQQll1eWYwMjBfMGx1Y0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRwgF7KOIoUglg8jgB5uOuSvYJbMiD23YT1ewk43Oq47GG/rtbNQCG HcIOAHUUcaoOFe9lV+e4kgdj//ODLq92S5r1Syu6R6XjRc8i+CuiLxx0Fx+decx/ DeynFoc1eL5hDeOZu2vS03KkXEVsuRvnPT/Txb/vPTiTUgxyaTDHlQe+RDB7vIeD 1k5jS6FEC0omLVk63O9RjDXezH3or2uHpf1c2qlA99R5qLb/dk2oGz6i7kSSMHA/ 85ZZm5vFJ8F7ulfUK/hwTWS5fEj6tA9LrzIy4W45/GdmfWjUZMgO+Js0HsQ7CBbS 0Aao7Igx0urGg3CSd0ssk8yKW0jPuHS3 -----END CERTIFICATE-----Generated at Thu Mar 13 21:31:45 2025 by rpki-client