$ rpki-client -vvf rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.mft File: 6XH_tEATQSECHGJem3DrGuWij2A.mft (raw, json) Hash identifier: mqfpHbbCWLZ7dgsf9qOeY78DxEF8WGwccfKNXtsX3pA= Subject key identifier: A3:BA:47:B9:50:AD:54:46:5C:2F:7E:01:47:61:DF:3C:21:85:C7:F8 Authority key identifier: E9:71:FF:B4:40:13:41:21:02:1C:62:5E:9B:70:EB:1A:E5:A2:8F:60 Certificate issuer: /CN=A911EDE5/serialNumber=E971FFB440134121021C625E9B70EB1AE5A28F60 Certificate serial: 0D3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XH_tEATQSECHGJem3DrGuWij2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.mft Manifest number: 0D31 Signing time: Mon 12 May 2025 17:54:52 +0000 Manifest this update: Mon 12 May 2025 17:54:51 +0000 Manifest next update: Mon 19 May 2025 17:54:51 +0000 Files and hashes: 1: 6XH_tEATQSECHGJem3DrGuWij2A.crl (hash: k6KZWwFnafi50lRfNSh9BvZMvQrvm4GyE1XdYVipl9g=) 2: 89D124B6D51311E98A41293BC4F9AE02.roa (hash: mbBxOC4AR4Py/kqSr6p/HUSw4E4voxLVh0FwxIMWx+Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.crl rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XH_tEATQSECHGJem3DrGuWij2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 17:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3386 (0xd3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911EDE5, serialNumber=E971FFB440134121021C625E9B70EB1AE5A28F60 Validity Not Before: May 12 17:54:51 2025 GMT Not After : May 19 17:54:51 2025 GMT Subject: CN=682235ec-d827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:03:0a:ea:d1:03:69:16:46:95:14:6c:9c:5a: 27:ef:01:c0:4b:db:da:7c:16:b5:5f:2c:a0:ae:be: de:2a:6c:de:43:bf:b7:c3:25:8a:d3:d9:ad:56:17: c9:18:70:de:77:57:6b:6a:1b:8d:63:9d:1f:eb:2f: f9:e8:7a:4c:b9:be:d1:1e:0b:2b:46:de:1d:ad:a9: 09:cd:50:4d:5c:db:fd:3e:11:a3:e7:a2:c5:fa:c6: 0a:06:17:c3:87:f7:7b:e6:d4:89:03:c6:10:20:94: ea:75:b0:54:20:d9:dc:2a:ac:72:d5:80:7f:ac:6b: 2b:f5:a1:37:2b:0c:ef:80:9c:ce:65:56:ea:88:df: f4:78:b0:61:31:a4:bd:40:0b:99:a9:26:97:0f:52: 6f:64:18:3c:33:29:39:65:cb:f9:74:9c:eb:f6:e4: 14:89:6f:29:5d:dd:ba:55:35:bc:d4:63:58:07:9f: e9:c1:97:5a:5f:6c:2d:1a:fc:f8:92:be:28:08:0f: 71:63:fe:22:86:67:e5:9a:2d:30:81:ca:ed:34:e1: c0:86:1e:ba:e6:5f:36:61:24:65:c9:30:0c:18:b6: 2e:5d:94:00:c9:38:3d:52:a7:b8:3f:3c:a1:e0:ae: 07:00:90:f3:ab:15:4f:8d:01:3d:fe:9c:09:a4:ae: a9:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:BA:47:B9:50:AD:54:46:5C:2F:7E:01:47:61:DF:3C:21:85:C7:F8 X509v3 Authority Key Identifier: keyid:E9:71:FF:B4:40:13:41:21:02:1C:62:5E:9B:70:EB:1A:E5:A2:8F:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XH_tEATQSECHGJem3DrGuWij2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:09:c2:52:82:8d:b1:75:f2:9e:44:b1:14:c9:d3:39:cb:fc: 76:72:ef:7c:0a:4d:bf:4e:0f:a8:87:f1:dd:96:dd:d9:a4:26: 5a:ca:ab:fe:76:db:80:9c:52:18:08:3a:ea:31:a8:52:06:c7: 9a:55:ae:71:38:09:df:7a:6c:0d:4e:16:ef:ca:2a:1b:0c:a5: 15:5c:67:65:a6:d0:1b:e4:18:c5:e5:92:e2:d0:b3:81:3b:38: 69:3a:7c:41:1a:5c:12:e9:8e:54:5a:13:32:fc:9e:01:02:61: 7f:57:04:da:a5:a2:4b:b0:73:b8:09:31:a6:c2:80:ee:68:e8: 6b:eb:08:84:01:4f:a8:5b:46:92:9d:8f:95:4d:c7:af:3c:c0: 3c:90:4e:a4:40:8f:e3:6c:c7:26:f6:4c:dd:19:c4:31:b2:7c: 41:b4:2f:91:b1:48:51:40:07:d0:e6:1e:a2:bb:f0:75:83:5e: cc:30:ca:77:49:0f:9e:b6:b9:ed:37:33:40:b4:1d:49:03:04: 8f:c2:50:00:09:5a:b7:22:ad:38:3c:92:dd:ad:d4:a4:a7:66: 21:37:06:69:32:41:c0:3e:63:5d:bf:c5:fc:ac:a1:dd:6a:11: ed:ff:19:a5:f4:02:07:97:da:f2:55:7b:5d:9d:f5:ad:86:a0: 03:10:87:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDTowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVERTUxMTAvBgNVBAUTKEU5NzFGRkI0NDAxMzQxMjEwMjFDNjI1RTlCNzBFQjFB RTVBMjhGNjAwHhcNMjUwNTEyMTc1NDUxWhcNMjUwNTE5MTc1NDUxWjAYMRYwFAYD VQQDEw02ODIyMzVlYy1kODI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAugMK6tEDaRZGlRRsnFon7wHAS9vafBa1Xyygrr7eKmzeQ7+3wyWK09mtVhfJ GHDed1drahuNY50f6y/56HpMub7RHgsrRt4drakJzVBNXNv9PhGj56LF+sYKBhfD h/d75tSJA8YQIJTqdbBUINncKqxy1YB/rGsr9aE3KwzvgJzOZVbqiN/0eLBhMaS9 QAuZqSaXD1JvZBg8Myk5Zcv5dJzr9uQUiW8pXd26VTW81GNYB5/pwZdaX2wtGvz4 kr4oCA9xY/4ihmflmi0wgcrtNOHAhh665l82YSRlyTAMGLYuXZQAyTg9Uqe4Pzyh 4K4HAJDzqxVPjQE9/pwJpK6pJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKO6R7lQ rVRGXC9+AUdh3zwhhcf4MB8GA1UdIwQYMBaAFOlx/7RAE0EhAhxiXptw6xrloo9g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRURFNS9CM0JGNzU4QUQ1 MTIxMUU5QjY0M0VEMzlDNEY5QUUwMi82WEhfdEVBVFFTRUNIR0plbTNEckd1V2lq MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZYSF90RUFUUVNFQ0hHSmVtM0RyR3VXaWoyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RURFNS9CM0JGNzU4QUQ1MTIxMUU5QjY0M0VEMzlDNEY5QUUwMi82WEhfdEVBVFFT RUNIR0plbTNEckd1V2lqMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUCcJSgo2xdfKeRLEUydM5y/x2cu98Ck2/Tg+oh/Hdlt3ZpCZayqv+ dtuAnFIYCDrqMahSBseaVa5xOAnfemwNThbvyiobDKUVXGdlptAb5BjF5ZLi0LOB OzhpOnxBGlwS6Y5UWhMy/J4BAmF/VwTapaJLsHO4CTGmwoDuaOhr6wiEAU+oW0aS nY+VTcevPMA8kE6kQI/jbMcm9kzdGcQxsnxBtC+RsUhRQAfQ5h6iu/B1g17MMMp3 SQ+etrntNzNAtB1JAwSPwlAACVq3Iq04PJLdrdSkp2YhNwZpMkHAPmNdv8X8rKHd ahHt/xml9AIHl9ryVXtdnfWthqADEIc/ -----END CERTIFICATE-----Generated at Wed May 14 17:36:40 2025 by rpki-client