$ rpki-client -vvf rpki.apnic.net/member_repository/A9144463/8BF5A5D4113611ED8F0AB712C4F9AE02/a6pcUguOS_VkxLv0bh8xa9RfoDc.mft File: a6pcUguOS_VkxLv0bh8xa9RfoDc.mft (raw, json) Hash identifier: RrP2N32WyiMaZXD5iGaAeYisDmHnueFZeCGyxYsrCI8= Subject key identifier: E3:86:A2:0E:AB:A0:6C:40:14:2A:E5:2C:BA:1C:15:51:12:CA:79:0D Authority key identifier: 6B:AA:5C:52:0B:8E:4B:F5:64:C4:BB:F4:6E:1F:31:6B:D4:5F:A0:37 Certificate issuer: /CN=A9144463/serialNumber=6BAA5C520B8E4BF564C4BBF46E1F316BD45FA037 Certificate serial: 0283 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6pcUguOS_VkxLv0bh8xa9RfoDc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144463/8BF5A5D4113611ED8F0AB712C4F9AE02/a6pcUguOS_VkxLv0bh8xa9RfoDc.mft Manifest number: 0278 Signing time: Tue 03 Jun 2025 01:59:05 +0000 Manifest this update: Tue 03 Jun 2025 01:59:05 +0000 Manifest next update: Tue 10 Jun 2025 01:59:05 +0000 Files and hashes: 1: a6pcUguOS_VkxLv0bh8xa9RfoDc.crl (hash: IPw43z/Sp1Y4qtLwuUCGqoSsPfbY3ZwCMYhSNOq7QvQ=) 2: 5B9A1DA0114211ED957E085DC4F9AE02.roa (hash: 434R2ZI7IqSBRHE33dBHuVGC0axS/evdyQtP96MQ17A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144463/8BF5A5D4113611ED8F0AB712C4F9AE02/a6pcUguOS_VkxLv0bh8xa9RfoDc.crl rsync://rpki.apnic.net/member_repository/A9144463/8BF5A5D4113611ED8F0AB712C4F9AE02/a6pcUguOS_VkxLv0bh8xa9RfoDc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6pcUguOS_VkxLv0bh8xa9RfoDc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 01:59:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 643 (0x283) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144463, serialNumber=6BAA5C520B8E4BF564C4BBF46E1F316BD45FA037 Validity Not Before: Jun 3 01:59:05 2025 GMT Not After : Jun 10 01:59:05 2025 GMT Subject: CN=683e56e9-90ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:2d:34:38:7d:e6:7c:27:6d:2c:77:d7:f6:12: 96:7a:07:ce:3d:be:49:81:69:9d:ea:1b:02:1a:e4: ac:6e:55:64:d3:b3:11:c3:fe:14:fa:f3:db:87:90: 0c:76:60:5e:44:94:a1:86:34:c6:b0:4b:79:a6:82: 39:be:39:5a:bd:7a:cd:d7:f0:78:32:02:78:4b:3d: 7a:8d:cc:e2:3b:85:c8:86:5a:d3:26:6e:cc:16:3a: 08:9c:90:58:af:77:5d:2a:99:7f:5e:d1:d2:61:26: 12:87:94:92:d5:e7:c2:db:7a:ff:26:41:ca:65:35: 25:a8:f3:93:12:9b:bb:17:5f:7a:3b:20:36:1c:f5: a4:cd:62:45:46:f6:cb:f8:5f:d7:b1:0e:17:51:89: 50:a1:fa:d5:c9:32:64:6f:93:5b:ba:87:58:97:de: 77:20:64:cb:05:4c:12:bb:5e:20:8b:5a:8b:da:b5: 7f:0a:63:31:b4:df:49:c9:fc:9e:61:8a:b4:71:16: 00:65:a7:d6:db:36:9b:f9:e7:c3:50:16:b7:59:0f: 50:15:83:4a:63:44:f5:2b:b4:fa:0e:01:12:6e:d0: 88:88:3c:47:4e:9a:78:7f:23:9c:7d:d2:ab:80:42: fb:59:b3:62:8e:ee:c0:f5:54:80:bf:d1:34:e6:71: 86:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:86:A2:0E:AB:A0:6C:40:14:2A:E5:2C:BA:1C:15:51:12:CA:79:0D X509v3 Authority Key Identifier: keyid:6B:AA:5C:52:0B:8E:4B:F5:64:C4:BB:F4:6E:1F:31:6B:D4:5F:A0:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144463/8BF5A5D4113611ED8F0AB712C4F9AE02/a6pcUguOS_VkxLv0bh8xa9RfoDc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6pcUguOS_VkxLv0bh8xa9RfoDc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144463/8BF5A5D4113611ED8F0AB712C4F9AE02/a6pcUguOS_VkxLv0bh8xa9RfoDc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:62:dc:a9:a3:24:b3:a4:fb:29:24:e2:6c:58:c9:0b:ec:2c: e4:02:5d:98:cb:d9:50:c6:63:03:7a:00:d5:be:c9:7c:41:f3: 98:db:c7:64:d9:36:07:83:88:d1:dc:dc:11:63:ab:47:04:72: a4:19:c6:51:bf:17:ed:76:50:70:12:b8:f0:4b:e5:be:db:ff: 9d:19:8c:a2:23:66:86:77:84:99:1e:e5:ee:07:30:59:1b:c4: b0:b4:e5:d4:ae:cc:4f:06:b5:0c:2e:d9:03:72:ee:b7:0a:bb: 49:f3:c4:47:ce:0e:db:23:8b:00:7f:c7:d9:3f:0f:2b:54:19: d2:50:56:5b:5b:fb:63:1f:a8:1c:60:81:35:b8:b9:d5:60:66: e9:96:db:e7:b9:38:2b:92:bc:20:d6:18:fc:21:40:a9:f2:47: 1e:37:0a:00:9a:4a:fa:fb:d9:e3:bc:4b:1b:be:7a:98:f8:76: c9:b5:64:f6:68:a3:e8:fc:a8:fa:34:f7:3e:54:85:26:6c:d2: b9:8d:46:53:93:cd:d5:f9:a3:40:59:79:e0:dd:fe:44:82:12: 65:25:82:9f:f2:a4:ba:4b:91:32:1c:6c:48:38:67:7e:be:47: ae:6f:23:32:07:5b:ee:ba:7d:25:6f:7f:4d:12:01:70:51:67: 02:95:37:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ0NjMxMTAvBgNVBAUTKDZCQUE1QzUyMEI4RTRCRjU2NEM0QkJGNDZFMUYzMTZC RDQ1RkEwMzcwHhcNMjUwNjAzMDE1OTA1WhcNMjUwNjEwMDE1OTA1WjAYMRYwFAYD VQQDEw02ODNlNTZlOS05MGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4C00OH3mfCdtLHfX9hKWegfOPb5JgWmd6hsCGuSsblVk07MRw/4U+vPbh5AM dmBeRJShhjTGsEt5poI5vjlavXrN1/B4MgJ4Sz16jcziO4XIhlrTJm7MFjoInJBY r3ddKpl/XtHSYSYSh5SS1efC23r/JkHKZTUlqPOTEpu7F196OyA2HPWkzWJFRvbL +F/XsQ4XUYlQofrVyTJkb5NbuodYl953IGTLBUwSu14gi1qL2rV/CmMxtN9Jyfye YYq0cRYAZafW2zab+efDUBa3WQ9QFYNKY0T1K7T6DgESbtCIiDxHTpp4fyOcfdKr gEL7WbNiju7A9VSAv9E05nGGUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOOGog6r oGxAFCrlLLocFVESynkNMB8GA1UdIwQYMBaAFGuqXFILjkv1ZMS79G4fMWvUX6A3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDQ2My84QkY1QTVENDEx MzYxMUVEOEYwQUI3MTJDNEY5QUUwMi9hNnBjVWd1T1NfVmt4THYwYmg4eGE5UmZv RGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E2cGNVZ3VPU19Wa3hMdjBiaDh4YTlSZm9EYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDQ2My84QkY1QTVENDExMzYxMUVEOEYwQUI3MTJDNEY5QUUwMi9hNnBjVWd1T1Nf Vmt4THYwYmg4eGE5UmZvRGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALYtypoySzpPspJOJsWMkL7CzkAl2Yy9lQxmMDegDVvsl8QfOY28dk 2TYHg4jR3NwRY6tHBHKkGcZRvxftdlBwErjwS+W+2/+dGYyiI2aGd4SZHuXuBzBZ G8SwtOXUrsxPBrUMLtkDcu63CrtJ88RHzg7bI4sAf8fZPw8rVBnSUFZbW/tjH6gc YIE1uLnVYGbpltvnuTgrkrwg1hj8IUCp8kceNwoAmkr6+9njvEsbvnqY+HbJtWT2 aKPo/Kj6NPc+VIUmbNK5jUZTk83V+aNAWXng3f5EghJlJYKf8qS6S5EyHGxIOGd+ vkeubyMyB1vuun0lb39NEgFwUWcClTd6 -----END CERTIFICATE-----Generated at Tue Jun 3 23:49:17 2025 by rpki-client