$ rpki-client -vvf rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.mft File: sT6kk09B_Eg0zSpv-CGNQPepd4k.mft (raw, json) Hash identifier: f1eCG/7xa97LIozLa1g7ObkD3KXUCH17fHXY/qlciMo= Subject key identifier: B1:6E:16:DB:EF:34:32:E9:1D:AB:A4:E3:78:91:72:4F:5F:D2:A6:98 Authority key identifier: B1:3E:A4:93:4F:41:FC:48:34:CD:2A:6F:F8:21:8D:40:F7:A9:77:89 Certificate issuer: /CN=A9168494/serialNumber=B13EA4934F41FC4834CD2A6FF8218D40F7A97789 Certificate serial: 0268 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sT6kk09B_Eg0zSpv-CGNQPepd4k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.mft Manifest number: 025F Signing time: Thu 13 Mar 2025 01:21:47 +0000 Manifest this update: Thu 13 Mar 2025 01:21:46 +0000 Manifest next update: Thu 20 Mar 2025 01:21:46 +0000 Files and hashes: 1: sT6kk09B_Eg0zSpv-CGNQPepd4k.crl (hash: 53TraYqF7X2jQpWcZLXlHt7OwCU2WjktlhTRN/kSgy0=) 2: 941EE9A46BB911ED97343873C4F9AE02.roa (hash: 5ZbVoX8toC5MCMXRauyxLFjSv/lDIxp6UGtS1LazqGA=) 3: 932FE94E6BB911ED97343873C4F9AE02.roa (hash: hUG9zbqpZfh8Oh0Hkb9QWVdKId5Yw0YN3vAbtZe8GC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.crl rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sT6kk09B_Eg0zSpv-CGNQPepd4k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Mar 2025 01:21:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 616 (0x268) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168494 Validity Not Before: Mar 13 01:21:46 2025 GMT Not After : Mar 20 01:21:46 2025 GMT Subject: CN=67d2332a-dc8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6a:cf:b4:12:6b:d3:d7:2a:6f:5a:ec:b1:dc: c5:93:b7:5c:2e:f7:50:aa:3c:b5:c2:1f:6c:51:57: 39:0d:a2:8d:5b:ae:7f:6e:91:be:8b:b0:e7:5f:28: 64:f0:43:f2:16:7a:49:7a:e7:75:86:62:e4:db:79: fc:e5:61:1f:92:01:84:64:07:4e:40:1e:ba:fc:b3: 08:44:26:cd:31:6c:25:71:e1:df:45:ab:5d:f6:15: a2:0d:18:a8:4c:be:ea:91:93:41:33:23:d0:05:b9: f1:4e:9b:52:74:f6:06:f5:d8:72:66:49:de:2e:58: 5e:c9:48:75:59:d1:d5:9f:83:8a:aa:66:51:82:65: c8:36:e9:f5:83:1b:69:3c:1b:11:48:91:97:79:21: 10:52:8d:21:1d:14:70:72:72:b0:8c:f4:00:b7:c5: 01:a3:6d:af:92:d4:c4:0d:e0:a2:e6:1c:fd:07:d4: c5:c3:59:3d:bd:60:3f:de:fa:5d:4d:86:0b:a4:68: 78:7a:ed:bf:d9:c7:30:8a:fd:8c:e4:ff:14:d2:0f: b2:24:e3:d2:9f:b3:ce:08:3a:b0:65:61:bf:c6:e4: 03:31:3e:87:5b:1b:07:f0:d3:86:89:89:af:c3:a9: 0f:10:be:fc:a5:5a:d2:a5:79:70:3c:31:a4:b3:70: c1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:6E:16:DB:EF:34:32:E9:1D:AB:A4:E3:78:91:72:4F:5F:D2:A6:98 X509v3 Authority Key Identifier: keyid:B1:3E:A4:93:4F:41:FC:48:34:CD:2A:6F:F8:21:8D:40:F7:A9:77:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sT6kk09B_Eg0zSpv-CGNQPepd4k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:dd:6a:3c:f7:e7:e9:5d:fb:5d:f0:f4:70:d6:88:7d:a8:82: 91:7e:e7:a4:c0:08:24:5f:a4:43:bb:eb:a4:31:c3:89:fe:9b: ff:fd:ab:e3:c7:53:18:c0:1c:c2:5a:a1:ee:e7:86:19:94:e4: 78:86:aa:37:73:6f:29:70:17:19:52:89:b0:f2:3a:65:84:3d: 13:a4:ce:a0:20:7b:e0:f0:c9:72:86:a8:3c:82:a2:3c:47:80: 6c:f9:99:e3:97:74:7c:0e:de:f5:b4:fc:da:b7:61:7b:b7:71: bd:35:95:a2:be:cd:a4:3d:f1:01:e7:82:b7:b5:f9:7b:8c:56: 57:8a:6a:78:bd:3d:d2:b3:2b:a3:03:a2:0e:c0:d4:4a:45:ba: 5e:5b:12:2d:d0:7d:6a:f0:f5:d8:78:a0:09:b6:cc:27:37:b8: 59:b5:e4:95:df:46:ff:32:3c:96:d9:cc:d4:89:d0:14:a1:64: 66:cb:aa:50:93:01:95:6b:4b:d8:cd:e8:0a:44:f2:88:1d:25: 75:4c:e3:18:a9:52:8f:e1:d7:85:ef:23:c5:16:64:5d:70:ea: 97:eb:33:55:66:35:f7:2a:87:17:0c:c1:5b:84:a2:87:28:e1: d6:b5:75:a7:c6:8e:ad:82:a3:49:e4:f2:a1:b9:2f:bc:b4:67: 2c:f7:0b:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg0OTQxMTAvBgNVBAUTKEIxM0VBNDkzNEY0MUZDNDgzNENEMkE2RkY4MjE4RDQw RjdBOTc3ODkwHhcNMjUwMzEzMDEyMTQ2WhcNMjUwMzIwMDEyMTQ2WjAYMRYwFAYD VQQDEw02N2QyMzMyYS1kYzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw2rPtBJr09cqb1rssdzFk7dcLvdQqjy1wh9sUVc5DaKNW65/bpG+i7DnXyhk 8EPyFnpJeud1hmLk23n85WEfkgGEZAdOQB66/LMIRCbNMWwlceHfRatd9hWiDRio TL7qkZNBMyPQBbnxTptSdPYG9dhyZkneLlheyUh1WdHVn4OKqmZRgmXINun1gxtp PBsRSJGXeSEQUo0hHRRwcnKwjPQAt8UBo22vktTEDeCi5hz9B9TFw1k9vWA/3vpd TYYLpGh4eu2/2ccwiv2M5P8U0g+yJOPSn7POCDqwZWG/xuQDMT6HWxsH8NOGiYmv w6kPEL78pVrSpXlwPDGks3DBAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLFuFtvv NDLpHauk43iRck9f0qaYMB8GA1UdIwQYMBaAFLE+pJNPQfxINM0qb/ghjUD3qXeJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODQ5NC8zMUI4MjYzQzA5 OTMxMUVEQjIxQzlCNEJDNEY5QUUwMi9zVDZrazA5Ql9FZzB6U3B2LUNHTlFQZXBk NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3NUNmtrMDlCX0VnMHpTcHYtQ0dOUVBlcGQ0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODQ5NC8zMUI4MjYzQzA5OTMxMUVEQjIxQzlCNEJDNEY5QUUwMi9zVDZrazA5Ql9F ZzB6U3B2LUNHTlFQZXBkNGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAp3Wo89+fpXftd8PRw1oh9qIKRfuekwAgkX6RDu+ukMcOJ/pv//avj x1MYwBzCWqHu54YZlOR4hqo3c28pcBcZUomw8jplhD0TpM6gIHvg8Mlyhqg8gqI8 R4Bs+Znjl3R8Dt71tPzat2F7t3G9NZWivs2kPfEB54K3tfl7jFZXimp4vT3Ssyuj A6IOwNRKRbpeWxIt0H1q8PXYeKAJtswnN7hZteSV30b/MjyW2czUidAUoWRmy6pQ kwGVa0vYzegKRPKIHSV1TOMYqVKP4deF7yPFFmRdcOqX6zNVZjX3KocXDMFbhKKH KOHWtXWnxo6tgqNJ5PKhuS+8tGcs9wuX -----END CERTIFICATE-----Generated at Thu Mar 13 21:31:01 2025 by rpki-client