$ rpki-client -vvf rpki.apnic.net/member_repository/A911945B/3ACF70C017FD11EF8C083063C4F9AE02/6zLfknQ0rG06hoR937o9LoEAETE.mft File: 6zLfknQ0rG06hoR937o9LoEAETE.mft (raw, json) Hash identifier: fIAczP/sfq463eto1ZuAfQgiurzCS02bXvn1euqeUac= Subject key identifier: 1C:25:15:76:82:0C:2A:57:22:5B:CD:BD:4D:65:54:73:8D:36:AB:73 Authority key identifier: EB:32:DF:92:74:34:AC:6D:3A:86:84:7D:DF:BA:3D:2E:81:00:11:31 Certificate issuer: /CN=A911945B/serialNumber=EB32DF927434AC6D3A86847DDFBA3D2E81001131 Certificate serial: BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zLfknQ0rG06hoR937o9LoEAETE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911945B/3ACF70C017FD11EF8C083063C4F9AE02/6zLfknQ0rG06hoR937o9LoEAETE.mft Manifest number: BA Signing time: Sun 11 May 2025 04:43:57 +0000 Manifest this update: Sun 11 May 2025 04:43:56 +0000 Manifest next update: Sun 18 May 2025 04:43:56 +0000 Files and hashes: 1: 6zLfknQ0rG06hoR937o9LoEAETE.crl (hash: 8n3rNfPES0NsoYIcW4LKIZZjiinkVmtZgiaRL19zpRk=) 2: C562775017FD11EF9A320864C4F9AE02.roa (hash: mT/xhxJVAPolN6BiWxF1pYh0qrq0TTClAYLDrh0UW5A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911945B/3ACF70C017FD11EF8C083063C4F9AE02/6zLfknQ0rG06hoR937o9LoEAETE.crl rsync://rpki.apnic.net/member_repository/A911945B/3ACF70C017FD11EF8C083063C4F9AE02/6zLfknQ0rG06hoR937o9LoEAETE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zLfknQ0rG06hoR937o9LoEAETE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189 (0xbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911945B, serialNumber=EB32DF927434AC6D3A86847DDFBA3D2E81001131 Validity Not Before: May 11 04:43:56 2025 GMT Not After : May 18 04:43:56 2025 GMT Subject: CN=68202b0d-4f54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:86:ae:ca:4f:f4:fd:c7:f3:90:21:2a:e9:4d: 0a:49:98:57:73:0b:c0:a8:3d:27:c3:97:b0:e2:8c: d4:e5:9e:72:ba:08:bf:8c:e6:2e:71:76:b2:70:3d: b9:49:38:56:90:77:89:16:c6:2e:f4:c7:e3:ef:39: 12:46:a1:26:af:c4:7d:84:49:bd:6d:de:d3:8a:23: 71:14:06:e3:7c:ed:91:a4:3d:8c:91:6f:83:0b:dd: 7f:de:a3:f5:87:7d:dc:f4:eb:fa:38:40:5b:28:53: 4a:ec:01:1d:44:ca:51:7c:64:91:5f:9a:15:d5:1a: 24:c5:f3:92:0c:4c:b8:51:0b:9f:4a:33:90:49:5c: 98:7b:17:8e:a6:19:89:80:f3:90:e1:cb:e5:97:ec: da:d5:6f:99:53:04:c4:a1:c4:8e:39:54:09:99:14: 74:2a:06:e4:09:d5:b7:4d:e1:4a:9d:ff:88:8a:b2: 7e:31:be:62:18:9f:11:8d:2b:f5:8d:63:3e:76:ac: 31:c2:26:5d:f4:18:56:a3:af:dc:be:9c:2d:09:eb: 8d:ea:d8:a7:4e:89:03:39:01:46:d6:1a:69:4f:69: ae:4d:46:46:7c:ff:d1:ba:3b:c3:f9:83:45:af:e3: 92:03:fc:a3:5e:7b:c9:bc:ee:b8:f8:4f:fb:7f:98: a8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:25:15:76:82:0C:2A:57:22:5B:CD:BD:4D:65:54:73:8D:36:AB:73 X509v3 Authority Key Identifier: keyid:EB:32:DF:92:74:34:AC:6D:3A:86:84:7D:DF:BA:3D:2E:81:00:11:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911945B/3ACF70C017FD11EF8C083063C4F9AE02/6zLfknQ0rG06hoR937o9LoEAETE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zLfknQ0rG06hoR937o9LoEAETE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911945B/3ACF70C017FD11EF8C083063C4F9AE02/6zLfknQ0rG06hoR937o9LoEAETE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:13:14:ed:c5:c9:81:35:50:81:fd:10:4e:a8:47:51:b7:27: cb:d9:31:e7:56:31:4d:5d:2a:f6:21:be:71:af:6a:54:18:3b: c4:98:60:29:52:e7:67:d2:5b:e8:0b:d7:41:b0:54:b8:ac:3e: 3f:d5:d5:f6:ae:04:69:9d:f1:f1:6f:23:7c:68:4b:a8:1d:f1: 16:ee:fd:3a:47:5c:86:17:ab:58:7e:a8:dd:49:c8:a0:74:25: 2e:98:21:7d:25:9f:19:38:dd:e2:88:ec:7c:37:c5:05:6f:71: 14:13:ec:7a:d4:bb:d2:ef:c7:55:b0:21:f5:36:30:63:bb:7d: 0e:31:0c:18:79:d5:35:4c:03:c1:7d:4b:58:62:c3:c9:58:11: 51:4e:3a:52:8a:5f:47:b5:7f:10:56:e2:6f:96:0e:d2:4d:40: f1:d6:a0:03:a2:81:e7:1b:27:8b:3a:8e:79:a5:42:7b:6e:b4: 47:fc:ff:9c:b0:e1:1b:a0:f2:70:d5:45:5c:71:21:2b:ff:cf: 08:b0:dd:32:e6:1e:8f:66:7b:ff:93:30:d2:f5:5f:b8:df:d7: 32:2b:83:ba:ba:68:57:8e:46:cc:41:02:85:3c:21:a6:6f:1f: 24:56:f9:76:06:4d:5d:ed:c5:3c:85:9f:fb:72:bb:ae:2b:04: f9:35:90:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk0NUIxMTAvBgNVBAUTKEVCMzJERjkyNzQzNEFDNkQzQTg2ODQ3RERGQkEzRDJF ODEwMDExMzEwHhcNMjUwNTExMDQ0MzU2WhcNMjUwNTE4MDQ0MzU2WjAYMRYwFAYD VQQDEw02ODIwMmIwZC00ZjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp4auyk/0/cfzkCEq6U0KSZhXcwvAqD0nw5ew4ozU5Z5yugi/jOYucXaycD25 SThWkHeJFsYu9Mfj7zkSRqEmr8R9hEm9bd7TiiNxFAbjfO2RpD2MkW+DC91/3qP1 h33c9Ov6OEBbKFNK7AEdRMpRfGSRX5oV1RokxfOSDEy4UQufSjOQSVyYexeOphmJ gPOQ4cvll+za1W+ZUwTEocSOOVQJmRR0KgbkCdW3TeFKnf+IirJ+Mb5iGJ8RjSv1 jWM+dqwxwiZd9BhWo6/cvpwtCeuN6tinTokDOQFG1hppT2muTUZGfP/RujvD+YNF r+OSA/yjXnvJvO64+E/7f5iokQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBwlFXaC DCpXIlvNvU1lVHONNqtzMB8GA1UdIwQYMBaAFOsy35J0NKxtOoaEfd+6PS6BABEx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTQ1Qi8zQUNGNzBDMDE3 RkQxMUVGOEMwODMwNjNDNEY5QUUwMi82ekxma25RMHJHMDZob1I5MzdvOUxvRUFF VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ6TGZrblEwckcwNmhvUjkzN285TG9FQUVURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTQ1Qi8zQUNGNzBDMDE3RkQxMUVGOEMwODMwNjNDNEY5QUUwMi82ekxma25RMHJH MDZob1I5MzdvOUxvRUFFVEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXExTtxcmBNVCB/RBOqEdRtyfL2THnVjFNXSr2Ib5xr2pUGDvEmGAp Uudn0lvoC9dBsFS4rD4/1dX2rgRpnfHxbyN8aEuoHfEW7v06R1yGF6tYfqjdScig dCUumCF9JZ8ZON3iiOx8N8UFb3EUE+x61LvS78dVsCH1NjBju30OMQwYedU1TAPB fUtYYsPJWBFRTjpSil9HtX8QVuJvlg7STUDx1qADooHnGyeLOo55pUJ7brRH/P+c sOEboPJw1UVccSEr/88IsN0y5h6PZnv/kzDS9V+439cyK4O6umhXjkbMQQKFPCGm bx8kVvl2Bk1d7cU8hZ/7cruuKwT5NZCF -----END CERTIFICATE-----Generated at Sun May 11 15:57:48 2025 by rpki-client