$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.mft File: 6CbZQgvPRaEIfTATu05KhJYNYcc.mft (raw, json) Hash identifier: QCRVmNsGAkA1lEBJP53G/D27VzvTLFo5t7rvN7tXRv8= Subject key identifier: 14:48:F1:BF:DD:CB:49:09:B9:A9:82:3B:A0:4C:5F:D4:25:97:BC:94 Authority key identifier: E8:26:D9:42:0B:CF:45:A1:08:7D:30:13:BB:4E:4A:84:96:0D:61:C7 Certificate issuer: /CN=A914EAE4/serialNumber=E826D9420BCF45A1087D3013BB4E4A84960D61C7 Certificate serial: 1AF9 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6CbZQgvPRaEIfTATu05KhJYNYcc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.mft Manifest number: 1AF7 Signing time: Sun 20 Apr 2025 16:15:38 +0000 Manifest this update: Sun 20 Apr 2025 16:15:38 +0000 Manifest next update: Sun 27 Apr 2025 16:15:38 +0000 Files and hashes: 1: 6CbZQgvPRaEIfTATu05KhJYNYcc.crl (hash: UzTHvusUug+VmzSSZsAizr3FqQiKKXlNwdnY9daXq4s=) 2: D810AAAAB60B11EFB476C022C4F9AE02.roa (hash: W3khPMeaOIIvZA6XChV502z9D4IWV/QOl7ps2nePO0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.crl rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6CbZQgvPRaEIfTATu05KhJYNYcc.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 16:15:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6905 (0x1af9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE4, serialNumber=E826D9420BCF45A1087D3013BB4E4A84960D61C7 Validity Not Before: Apr 20 16:15:38 2025 GMT Not After : Apr 27 16:15:38 2025 GMT Subject: CN=68051daa-b70d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:75:8d:d2:8b:41:4a:15:c6:ca:f6:4e:d1:ce: 01:3a:95:73:f2:4f:e2:09:87:c8:ec:d0:4f:c3:dc: 2e:c8:ff:3a:59:6a:64:bf:13:ea:e7:ee:2a:4d:54: 7d:2c:2c:de:ea:9f:6a:e9:3f:cc:ff:e1:82:a5:8a: 5c:cd:3e:2a:72:c8:68:3a:52:76:29:23:f9:f7:bd: 2f:dd:54:09:9d:2e:65:3d:65:ec:d5:ee:aa:d9:03: 5b:60:f6:ce:a8:35:d2:dc:e7:f6:61:34:09:8c:41: 4e:a4:86:20:33:c9:7c:95:dd:e9:f0:7f:6a:93:5a: 38:a2:06:70:d9:8a:30:5c:0d:64:a6:06:a7:4f:b7: 6b:2c:b7:2a:27:e4:3e:90:d4:bc:4b:0c:50:34:fb: 92:58:fc:b3:ce:a9:40:1d:13:25:1a:ee:fd:a2:bb: 06:39:0d:1e:a6:87:77:dc:8a:49:bc:3c:e7:d6:54: ee:f0:21:10:28:cf:91:8c:3b:0d:eb:88:19:db:db: 9c:26:56:3a:41:e6:e7:15:55:54:ef:d9:17:35:c3: e8:9a:bc:84:ab:e0:85:ed:fd:8d:0f:48:4b:e9:ee: 64:0f:5a:fd:80:57:24:94:b3:ae:6a:b1:6c:32:c3: 81:c9:7f:0e:a9:8f:2f:9b:76:cb:7d:2d:77:83:99: 66:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:48:F1:BF:DD:CB:49:09:B9:A9:82:3B:A0:4C:5F:D4:25:97:BC:94 X509v3 Authority Key Identifier: keyid:E8:26:D9:42:0B:CF:45:A1:08:7D:30:13:BB:4E:4A:84:96:0D:61:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6CbZQgvPRaEIfTATu05KhJYNYcc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:6a:68:78:1e:8a:39:78:2c:54:be:30:cd:bc:fd:7e:f4:9a: 74:97:d7:be:69:63:23:df:f7:a0:52:21:f3:d2:56:70:7d:e1: 93:81:bc:f0:f7:27:17:a7:16:9f:e5:a8:49:88:80:f3:26:c4: 14:00:92:36:68:3e:9e:cf:04:1f:4f:ea:9c:77:56:c2:62:41: ee:85:ba:2f:cb:6e:7f:7b:e6:98:b8:d3:e1:c0:46:80:de:57: fc:a6:19:92:55:b9:6b:ba:b9:26:d5:da:78:1c:c3:a9:5b:ab: b1:2c:ff:46:c3:8f:22:e1:77:e3:4f:96:03:d8:48:f5:36:0e: b6:17:f9:77:5e:1a:1f:40:74:7b:4b:8d:c5:5f:19:1b:40:43: d7:7b:4c:46:d7:90:c5:5f:f9:6e:1a:3d:5d:36:f0:aa:88:8a: b1:2a:80:66:4f:93:59:2f:cb:68:29:8d:da:ae:fe:ea:42:30: c1:33:9f:be:54:58:9a:71:e4:46:50:a3:ab:84:23:75:b1:9c: 70:12:dd:64:c4:ed:8d:21:6e:96:76:28:d2:7e:a4:29:35:77: cb:22:57:76:39:1d:3c:9c:0f:dc:36:37:97:e1:c6:50:84:7c: 00:55:59:a2:48:76:f9:0e:4c:a8:53:82:e5:bf:62:2b:e3:66: 78:d7:33:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGvkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVBRTQxMTAvBgNVBAUTKEU4MjZEOTQyMEJDRjQ1QTEwODdEMzAxM0JCNEU0QTg0 OTYwRDYxQzcwHhcNMjUwNDIwMTYxNTM4WhcNMjUwNDI3MTYxNTM4WjAYMRYwFAYD VQQDEw02ODA1MWRhYS1iNzBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7XWN0otBShXGyvZO0c4BOpVz8k/iCYfI7NBPw9wuyP86WWpkvxPq5+4qTVR9 LCze6p9q6T/M/+GCpYpczT4qcshoOlJ2KSP5970v3VQJnS5lPWXs1e6q2QNbYPbO qDXS3Of2YTQJjEFOpIYgM8l8ld3p8H9qk1o4ogZw2YowXA1kpganT7drLLcqJ+Q+ kNS8SwxQNPuSWPyzzqlAHRMlGu79orsGOQ0epod33IpJvDzn1lTu8CEQKM+RjDsN 64gZ29ucJlY6QebnFVVU79kXNcPomryEq+CF7f2ND0hL6e5kD1r9gFcklLOuarFs MsOByX8OqY8vm3bLfS13g5lmYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBRI8b/d y0kJuamCO6BMX9Qll7yUMB8GA1UdIwQYMBaAFOgm2UILz0WhCH0wE7tOSoSWDWHH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUFFNC83NjRBMDY2MDI1 NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi82Q2JaUWd2UFJhRUlmVEFUdTA1S2hKWU5Z Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzZDYlpRZ3ZQUmFFSWZUQVR1MDVLaEpZTlljYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUFFNC83NjRBMDY2MDI1NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi82Q2JaUWd2UFJh RUlmVEFUdTA1S2hKWU5ZY2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTamh4Hoo5eCxUvjDNvP1+9Jp0l9e+aWMj3/egUiHz0lZwfeGTgbzw 9ycXpxaf5ahJiIDzJsQUAJI2aD6ezwQfT+qcd1bCYkHuhbovy25/e+aYuNPhwEaA 3lf8phmSVblrurkm1dp4HMOpW6uxLP9Gw48i4XfjT5YD2Ej1Ng62F/l3XhofQHR7 S43FXxkbQEPXe0xG15DFX/luGj1dNvCqiIqxKoBmT5NZL8toKY3arv7qQjDBM5++ VFiaceRGUKOrhCN1sZxwEt1kxO2NIW6WdijSfqQpNXfLIld2OR08nA/cNjeX4cZQ hHwAVVmiSHb5DkyoU4Llv2Ir42Z41zPf -----END CERTIFICATE-----Generated at Tue Apr 22 03:12:06 2025 by rpki-client