$ rpki-client -vvf rpki.apnic.net/member_repository/A9165772/04BD1A6C07C411EF852DCC7DC4F9AE02/6osEPoaPdVc7zEVArUlUEC3JIrg.mft File: 6osEPoaPdVc7zEVArUlUEC3JIrg.mft (raw, json) Hash identifier: pxa6ctGDmpxqHuWn8K1fYE5UeIJX11RkkodAnrCvuQs= Subject key identifier: DA:70:03:D0:7B:A3:A5:98:1E:F6:E9:48:43:C2:79:F6:89:2D:26:BE Authority key identifier: EA:8B:04:3E:86:8F:75:57:3B:CC:45:40:AD:49:54:10:2D:C9:22:B8 Certificate issuer: /CN=A9165772/serialNumber=EA8B043E868F75573BCC4540AD4954102DC922B8 Certificate serial: CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6osEPoaPdVc7zEVArUlUEC3JIrg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165772/04BD1A6C07C411EF852DCC7DC4F9AE02/6osEPoaPdVc7zEVArUlUEC3JIrg.mft Manifest number: CB Signing time: Sat 31 May 2025 05:19:54 +0000 Manifest this update: Sat 31 May 2025 05:19:53 +0000 Manifest next update: Sat 07 Jun 2025 05:19:53 +0000 Files and hashes: 1: 6osEPoaPdVc7zEVArUlUEC3JIrg.crl (hash: geXWjN0QwKf3YciOUHWr8YtkCs+c4koGemfDtYfPrAg=) 2: 6EF22D0A07C411EF8A38A486C4F9AE02.roa (hash: Z/bRh5gfICRhTgZIBmGvmKVx5q7fvhoDOyqb8F4Xn3w=) 3: 4F038F1007C511EFB3AD2E14C4F9AE02.roa (hash: YLqUw8RXSjFSw9i6iZFHkMU1fvDuVln4F0j/za3GPYo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165772/04BD1A6C07C411EF852DCC7DC4F9AE02/6osEPoaPdVc7zEVArUlUEC3JIrg.crl rsync://rpki.apnic.net/member_repository/A9165772/04BD1A6C07C411EF852DCC7DC4F9AE02/6osEPoaPdVc7zEVArUlUEC3JIrg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6osEPoaPdVc7zEVArUlUEC3JIrg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:19:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 207 (0xcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165772, serialNumber=EA8B043E868F75573BCC4540AD4954102DC922B8 Validity Not Before: May 31 05:19:53 2025 GMT Not After : Jun 7 05:19:53 2025 GMT Subject: CN=683a9179-4751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:6b:67:53:07:ed:66:54:d1:12:64:65:43:a5: a2:1a:92:f6:46:c0:b5:cb:c3:a2:dc:72:ba:50:d1: 27:7d:0f:3b:b2:ec:b1:f8:fa:ba:4f:79:97:bd:3a: 76:94:38:42:22:db:ec:6d:68:2a:93:c5:f4:e4:4e: 48:92:dc:4a:be:f1:a9:24:88:c8:6b:73:3c:d7:e3: 12:12:a1:1c:14:cf:22:cf:b1:3d:ab:a6:cf:23:3f: 4d:76:6d:4f:98:08:05:fa:ca:67:09:8e:48:fc:11: 0e:24:1c:85:28:60:05:16:c1:51:ec:6e:3c:56:56: 09:21:80:92:fd:74:6a:79:2c:51:9c:a0:b7:fd:e6: 55:22:27:29:c4:c2:15:74:b6:d8:89:e9:ab:ca:53: c1:e9:b6:ae:0e:14:1b:82:b8:44:d5:79:e9:47:e1: d5:a3:79:17:55:76:3c:f1:25:80:22:90:03:8b:04: 0a:e6:b2:54:dc:c9:3e:d7:0e:04:21:96:10:b3:a0: 61:07:cf:00:44:e9:9a:1d:fa:ea:76:b6:46:85:51: a2:10:49:32:74:7a:0d:87:4a:36:e1:34:9b:52:5c: cc:c7:aa:00:ce:b1:42:ab:57:79:72:54:7b:e9:7a: bd:a3:be:ed:4e:a3:1c:d8:60:73:e7:08:f8:2b:15: ca:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:70:03:D0:7B:A3:A5:98:1E:F6:E9:48:43:C2:79:F6:89:2D:26:BE X509v3 Authority Key Identifier: keyid:EA:8B:04:3E:86:8F:75:57:3B:CC:45:40:AD:49:54:10:2D:C9:22:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165772/04BD1A6C07C411EF852DCC7DC4F9AE02/6osEPoaPdVc7zEVArUlUEC3JIrg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6osEPoaPdVc7zEVArUlUEC3JIrg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165772/04BD1A6C07C411EF852DCC7DC4F9AE02/6osEPoaPdVc7zEVArUlUEC3JIrg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:e4:ba:e5:fd:1e:3e:e5:eb:30:0f:11:d3:98:ff:52:86:d7: 5c:27:9f:5b:fa:2c:c6:8c:58:3c:89:fe:90:ce:28:f2:9a:d8: f7:12:86:e9:b8:95:fd:b2:f5:33:82:2b:8d:92:c9:02:fd:db: fa:f5:e6:23:19:42:40:40:68:b1:03:ed:ff:26:26:31:e3:0a: 71:2e:e5:7e:e0:0d:99:47:f0:5d:6a:b9:bc:db:a8:02:da:1d: c4:29:e6:1f:e6:20:cc:88:fc:7a:24:34:4b:a2:a5:08:c6:b0: 8a:4b:3f:cc:22:af:47:5a:18:96:50:1d:46:2f:d3:24:0e:4d: 61:46:9c:78:6d:f1:49:a4:dc:9a:c6:2b:fb:fa:38:0e:b6:dc: 41:82:a6:f2:ef:b5:2c:6d:f7:95:a1:ea:80:b9:71:19:73:f8: df:63:3b:15:0d:d1:1c:17:04:48:b2:9f:5d:2c:29:da:ab:18: 05:d9:4c:3a:1d:43:50:8a:71:f5:11:13:a7:99:8f:63:de:b5: cf:6b:80:30:d5:5c:b2:0b:a4:39:aa:dc:d5:ed:17:56:c9:1b: 8b:ed:50:74:37:83:c1:3b:50:c5:4c:c8:a9:63:ed:ca:b8:db: 77:4f:1d:cb:65:6e:3d:55:11:7a:e5:be:fc:80:51:00:cc:c2: cf:fb:aa:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU3NzIxMTAvBgNVBAUTKEVBOEIwNDNFODY4Rjc1NTczQkNDNDU0MEFENDk1NDEw MkRDOTIyQjgwHhcNMjUwNTMxMDUxOTUzWhcNMjUwNjA3MDUxOTUzWjAYMRYwFAYD VQQDEw02ODNhOTE3OS00NzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzmtnUwftZlTREmRlQ6WiGpL2RsC1y8Oi3HK6UNEnfQ87suyx+Pq6T3mXvTp2 lDhCItvsbWgqk8X05E5IktxKvvGpJIjIa3M81+MSEqEcFM8iz7E9q6bPIz9Ndm1P mAgF+spnCY5I/BEOJByFKGAFFsFR7G48VlYJIYCS/XRqeSxRnKC3/eZVIicpxMIV dLbYiemrylPB6bauDhQbgrhE1XnpR+HVo3kXVXY88SWAIpADiwQK5rJU3Mk+1w4E IZYQs6BhB88AROmaHfrqdrZGhVGiEEkydHoNh0o24TSbUlzMx6oAzrFCq1d5clR7 6Xq9o77tTqMc2GBz5wj4KxXKqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNpwA9B7 o6WYHvbpSEPCefaJLSa+MB8GA1UdIwQYMBaAFOqLBD6Gj3VXO8xFQK1JVBAtySK4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTc3Mi8wNEJEMUE2QzA3 QzQxMUVGODUyRENDN0RDNEY5QUUwMi82b3NFUG9hUGRWYzd6RVZBclVsVUVDM0pJ cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZvc0VQb2FQZFZjN3pFVkFyVWxVRUMzSklyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTc3Mi8wNEJEMUE2QzA3QzQxMUVGODUyRENDN0RDNEY5QUUwMi82b3NFUG9hUGRW Yzd6RVZBclVsVUVDM0pJcmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAj5Lrl/R4+5eswDxHTmP9ShtdcJ59b+izGjFg8if6Qzijymtj3Eobp uJX9svUzgiuNkskC/dv69eYjGUJAQGixA+3/JiYx4wpxLuV+4A2ZR/Bdarm826gC 2h3EKeYf5iDMiPx6JDRLoqUIxrCKSz/MIq9HWhiWUB1GL9MkDk1hRpx4bfFJpNya xiv7+jgOttxBgqby77UsbfeVoeqAuXEZc/jfYzsVDdEcFwRIsp9dLCnaqxgF2Uw6 HUNQinH1EROnmY9j3rXPa4Aw1VyyC6Q5qtzV7RdWyRuL7VB0N4PBO1DFTMipY+3K uNt3Tx3LZW49VRF65b78gFEAzMLP+6oc -----END CERTIFICATE-----Generated at Sat May 31 17:16:19 2025 by rpki-client