$ rpki-client -vvf rpki.apnic.net/member_repository/A914CC1C/D93252FCABF811EAB1FBD828C4F9AE02/6eDCCGLs2ANoFFu3z2LO3YARYzo.mft File: 6eDCCGLs2ANoFFu3z2LO3YARYzo.mft (raw, json) Hash identifier: witZIQZMRZ0K0yU9kI/Xu439Fq9QDJb+k8zRVR6kzo0= Subject key identifier: 87:7E:FC:13:3C:6C:F7:70:EC:99:D9:75:28:22:9E:7F:6E:91:9B:95 Authority key identifier: E9:E0:C2:08:62:EC:D8:03:68:14:5B:B7:CF:62:CE:DD:80:11:63:3A Certificate issuer: /CN=A914CC1C/serialNumber=E9E0C20862ECD80368145BB7CF62CEDD8011633A Certificate serial: 08E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6eDCCGLs2ANoFFu3z2LO3YARYzo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CC1C/D93252FCABF811EAB1FBD828C4F9AE02/6eDCCGLs2ANoFFu3z2LO3YARYzo.mft Manifest number: 08E7 Signing time: Fri 30 May 2025 20:37:21 +0000 Manifest this update: Fri 30 May 2025 20:37:21 +0000 Manifest next update: Fri 06 Jun 2025 20:37:21 +0000 Files and hashes: 1: 6eDCCGLs2ANoFFu3z2LO3YARYzo.crl (hash: fnBkMG93zkJw/hIbrZEt1fJyQQGpOZNDa2m84xuoNTE=) 2: 99CE159C912C11EFA67EA629C4F9AE02.roa (hash: uh+rzVJtvF4UI78w58itN+HR2kb9/ZhZdUQFw6xcuos=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CC1C/D93252FCABF811EAB1FBD828C4F9AE02/6eDCCGLs2ANoFFu3z2LO3YARYzo.crl rsync://rpki.apnic.net/member_repository/A914CC1C/D93252FCABF811EAB1FBD828C4F9AE02/6eDCCGLs2ANoFFu3z2LO3YARYzo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6eDCCGLs2ANoFFu3z2LO3YARYzo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:37:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2281 (0x8e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CC1C, serialNumber=E9E0C20862ECD80368145BB7CF62CEDD8011633A Validity Not Before: May 30 20:37:21 2025 GMT Not After : Jun 6 20:37:21 2025 GMT Subject: CN=683a1701-dde9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:79:b1:fd:08:e8:f4:6c:97:90:7b:05:78:e9: 53:2a:d7:bd:80:14:03:9c:21:01:ab:b1:d3:43:7e: d0:9e:be:a3:bb:1c:a2:8d:d5:87:cf:a8:fa:45:3a: c3:92:2a:b1:02:89:6f:b7:a9:07:d2:13:f8:c8:e6: ba:98:bb:11:2d:6e:3e:1d:f1:89:be:54:c1:45:a0: 8e:89:c0:43:14:ef:fe:23:d8:36:22:59:7b:a4:4a: 41:e2:2f:40:e2:4a:b3:e4:5f:e1:3c:b7:16:8b:96: da:06:8a:c0:35:85:a3:42:46:c4:41:c8:d1:76:a8: 93:cd:ac:33:4a:6c:fa:91:6a:33:92:aa:69:53:ee: 9c:c3:7a:09:f2:27:56:2f:23:08:c5:cd:27:79:4b: 24:d4:22:32:21:fd:aa:56:4f:79:79:3b:64:e7:af: a1:64:af:00:b0:6b:eb:d3:a7:90:d6:2c:0b:4c:3f: 70:71:6a:cc:65:db:40:6b:15:6c:29:43:83:0f:d3: 39:81:29:33:95:e9:91:68:e6:69:74:08:2b:46:08: 5e:9c:5b:73:37:18:47:14:84:13:ee:03:29:1e:74: 6a:72:ae:89:dd:dc:5a:8c:14:6b:66:23:96:5b:e0: b8:24:a2:df:ff:f4:6f:b3:de:4e:50:cc:95:e5:39: a1:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:7E:FC:13:3C:6C:F7:70:EC:99:D9:75:28:22:9E:7F:6E:91:9B:95 X509v3 Authority Key Identifier: keyid:E9:E0:C2:08:62:EC:D8:03:68:14:5B:B7:CF:62:CE:DD:80:11:63:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CC1C/D93252FCABF811EAB1FBD828C4F9AE02/6eDCCGLs2ANoFFu3z2LO3YARYzo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6eDCCGLs2ANoFFu3z2LO3YARYzo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CC1C/D93252FCABF811EAB1FBD828C4F9AE02/6eDCCGLs2ANoFFu3z2LO3YARYzo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:87:24:c7:a5:89:f7:03:a4:11:2c:ad:7b:f8:30:49:2e:91: 4c:bd:ba:14:af:ad:6a:15:8d:fc:b6:b4:ee:11:d6:5a:55:e4: 8d:cc:50:e7:80:6a:31:33:25:e5:d4:f9:34:d7:e3:49:be:85: eb:63:87:8a:ff:a1:09:ce:c7:b4:e6:51:e6:54:d4:4f:74:77: 86:af:4b:f1:6f:9f:36:ec:7c:8c:8f:ce:1c:18:94:82:ef:08: c6:e3:f7:92:d2:77:bc:36:bd:58:52:ca:30:8f:3e:dc:df:1e: 75:71:e3:bd:cb:14:57:25:39:26:13:28:43:9c:16:53:71:ca: cf:d5:1a:7f:89:7c:1d:08:3c:76:82:a5:86:fe:b9:72:96:2c: e6:04:5f:d7:ae:df:49:9e:d6:e3:a7:fa:87:ce:2c:c7:37:03: 5e:31:e4:c2:20:9b:cd:4f:b3:fd:e5:59:9f:63:ed:8a:4e:65: 42:1e:10:42:48:96:68:7d:b5:eb:7f:e3:38:b8:99:b9:27:c0: e2:83:02:47:43:81:bb:3e:86:1a:3f:b0:58:5c:de:9c:9a:19: 55:6b:1c:6f:4b:93:2b:c8:0b:20:11:f3:3e:34:c6:05:b7:44: 84:6d:9e:68:42:27:f3:23:07:e9:4f:f3:d1:a6:b6:12:f5:dc: 4b:fa:cc:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENDMUMxMTAvBgNVBAUTKEU5RTBDMjA4NjJFQ0Q4MDM2ODE0NUJCN0NGNjJDRURE ODAxMTYzM0EwHhcNMjUwNTMwMjAzNzIxWhcNMjUwNjA2MjAzNzIxWjAYMRYwFAYD VQQDEw02ODNhMTcwMS1kZGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunmx/Qjo9GyXkHsFeOlTKte9gBQDnCEBq7HTQ37Qnr6juxyijdWHz6j6RTrD kiqxAolvt6kH0hP4yOa6mLsRLW4+HfGJvlTBRaCOicBDFO/+I9g2Ill7pEpB4i9A 4kqz5F/hPLcWi5baBorANYWjQkbEQcjRdqiTzawzSmz6kWozkqppU+6cw3oJ8idW LyMIxc0neUsk1CIyIf2qVk95eTtk56+hZK8AsGvr06eQ1iwLTD9wcWrMZdtAaxVs KUODD9M5gSkzlemRaOZpdAgrRghenFtzNxhHFIQT7gMpHnRqcq6J3dxajBRrZiOW W+C4JKLf//Rvs95OUMyV5TmhNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFId+/BM8 bPdw7JnZdSginn9ukZuVMB8GA1UdIwQYMBaAFOngwghi7NgDaBRbt89izt2AEWM6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0MxQy9EOTMyNTJGQ0FC RjgxMUVBQjFGQkQ4MjhDNEY5QUUwMi82ZURDQ0dMczJBTm9GRnUzejJMTzNZQVJZ em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZlRENDR0xzMkFOb0ZGdTN6MkxPM1lBUll6by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0MxQy9EOTMyNTJGQ0FCRjgxMUVBQjFGQkQ4MjhDNEY5QUUwMi82ZURDQ0dMczJB Tm9GRnUzejJMTzNZQVJZem8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByhyTHpYn3A6QRLK17+DBJLpFMvboUr61qFY38trTuEdZaVeSNzFDn gGoxMyXl1Pk01+NJvoXrY4eK/6EJzse05lHmVNRPdHeGr0vxb5827HyMj84cGJSC 7wjG4/eS0ne8Nr1YUsowjz7c3x51ceO9yxRXJTkmEyhDnBZTccrP1Rp/iXwdCDx2 gqWG/rlylizmBF/Xrt9Jntbjp/qHzizHNwNeMeTCIJvNT7P95VmfY+2KTmVCHhBC SJZofbXrf+M4uJm5J8DigwJHQ4G7PoYaP7BYXN6cmhlVaxxvS5MryAsgEfM+NMYF t0SEbZ5oQifzIwfpT/PRprYS9dxL+sw6 -----END CERTIFICATE-----Generated at Sat May 31 16:28:38 2025 by rpki-client