$ rpki-client -vvf rpki.apnic.net/member_repository/A9127B24/15475D868F7611EF84EC7715C4F9AE02/TxgnPYhVbjodbtgXi4CVKNmQppE.mft File: TxgnPYhVbjodbtgXi4CVKNmQppE.mft (raw, json) Hash identifier: ZSZBPx7oamOSKoxzDSHcjIR9V/oWvkkrBJvZVQOnla0= Subject key identifier: 38:8A:82:7B:17:52:30:98:7A:D7:CD:EA:D0:A7:48:93:92:58:A6:AB Authority key identifier: 4F:18:27:3D:88:55:6E:3A:1D:6E:D8:17:8B:80:95:28:D9:90:A6:91 Certificate issuer: /CN=A9127B24/serialNumber=4F18273D88556E3A1D6ED8178B809528D990A691 Certificate serial: 6A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxgnPYhVbjodbtgXi4CVKNmQppE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127B24/15475D868F7611EF84EC7715C4F9AE02/TxgnPYhVbjodbtgXi4CVKNmQppE.mft Manifest number: 6A Signing time: Tue 13 May 2025 06:07:25 +0000 Manifest this update: Tue 13 May 2025 06:07:25 +0000 Manifest next update: Tue 20 May 2025 06:07:24 +0000 Files and hashes: 1: TxgnPYhVbjodbtgXi4CVKNmQppE.crl (hash: lwM+mVdzSy9JW+MOmyymnw7ZfuAzGbFiqHZFGLcH5jk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127B24/15475D868F7611EF84EC7715C4F9AE02/TxgnPYhVbjodbtgXi4CVKNmQppE.crl rsync://rpki.apnic.net/member_repository/A9127B24/15475D868F7611EF84EC7715C4F9AE02/TxgnPYhVbjodbtgXi4CVKNmQppE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxgnPYhVbjodbtgXi4CVKNmQppE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:07:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 106 (0x6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127B24, serialNumber=4F18273D88556E3A1D6ED8178B809528D990A691 Validity Not Before: May 13 06:07:25 2025 GMT Not After : May 20 06:07:24 2025 GMT Subject: CN=6822e19d-8c44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:84:88:6a:94:8d:fe:90:67:9d:b6:59:8c:d7: 08:fa:59:12:65:4c:1e:a3:bd:47:cb:13:a6:94:5d: 5e:d0:12:06:04:81:ee:62:89:02:2a:62:95:58:e7: e4:5a:95:00:32:75:7a:4c:3d:8c:dc:ae:49:00:68: 45:59:20:04:83:ac:9f:ee:2c:e2:6e:50:a1:6b:1e: ec:f1:7a:e9:7b:87:a4:79:6c:39:5a:8a:62:ba:e1: ea:e3:c5:7a:5b:ce:1e:93:dd:08:7d:6a:45:91:c2: b4:e4:53:13:ca:0a:b3:ad:7c:f3:b2:88:a6:d6:f6: 53:c8:82:e6:9c:45:bd:09:f5:94:28:c4:e9:a4:48: 74:ed:4c:cd:89:17:a3:92:c2:c8:df:c3:db:8e:d6: 94:4d:8c:23:d4:7f:05:c5:f6:9c:8f:52:5b:ec:e5: 15:51:24:fc:9f:c3:71:65:5e:67:05:a9:9c:29:8c: 10:43:85:1c:17:55:92:c9:b4:63:0d:12:ce:ff:5f: 9e:c1:ce:c3:13:50:3c:d7:f4:60:fa:e6:a8:c9:52: 45:5a:0b:2c:9e:f4:0a:3a:b9:9e:a3:b8:0b:98:2d: e9:b8:e2:58:45:a9:8e:0f:48:d9:44:04:c5:ba:2a: 56:1b:c2:da:25:93:02:bf:c4:39:e1:48:3a:b1:0c: 7a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:8A:82:7B:17:52:30:98:7A:D7:CD:EA:D0:A7:48:93:92:58:A6:AB X509v3 Authority Key Identifier: keyid:4F:18:27:3D:88:55:6E:3A:1D:6E:D8:17:8B:80:95:28:D9:90:A6:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127B24/15475D868F7611EF84EC7715C4F9AE02/TxgnPYhVbjodbtgXi4CVKNmQppE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxgnPYhVbjodbtgXi4CVKNmQppE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127B24/15475D868F7611EF84EC7715C4F9AE02/TxgnPYhVbjodbtgXi4CVKNmQppE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:a4:3f:f1:d0:f9:71:2e:e4:d3:8b:94:55:6e:da:f3:dd:9d: 28:42:65:12:52:7c:a7:75:4e:00:90:36:73:40:cd:2b:d6:8c: 1a:45:5e:94:79:f2:e9:74:0d:4d:23:2f:a9:39:cd:fb:4f:ce: 3b:c0:5c:db:39:b3:48:e5:cd:16:3d:bb:88:f8:00:fc:d9:9f: ff:ce:24:45:d6:e6:62:da:0e:52:1c:ff:e2:dc:be:b3:ad:e8: e4:8b:a3:dc:5e:15:05:32:ec:05:57:8f:89:4e:16:70:c4:88: 8f:3f:e8:75:f3:ad:76:ab:d3:41:eb:4d:64:b5:36:bd:f7:6d: dd:3f:c8:77:d1:ec:23:9d:0e:99:12:3c:eb:81:02:1b:27:e1: 7c:02:8b:98:1b:48:20:4f:90:a3:6b:a8:11:35:7f:4a:ac:63: 43:da:2e:c2:05:79:22:44:c0:c2:16:6f:48:5a:14:13:33:a3: 2f:89:fe:e6:b3:31:bb:8e:13:6f:4d:8d:b9:75:ef:2f:4a:ad: 63:5e:c3:ef:2b:48:07:3d:5a:24:30:38:a7:39:3a:61:8e:c5: fb:7d:88:bd:40:03:10:3c:87:61:31:bc:1f:aa:54:67:c9:56: 41:f1:a6:38:4b:39:62:a2:8c:9c:dc:54:73:5e:70:6c:40:e9: 71:d9:b3:69 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBajANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy N0IyNDExMC8GA1UEBRMoNEYxODI3M0Q4ODU1NkUzQTFENkVEODE3OEI4MDk1MjhE OTkwQTY5MTAeFw0yNTA1MTMwNjA3MjVaFw0yNTA1MjAwNjA3MjRaMBgxFjAUBgNV BAMTDTY4MjJlMTlkLThjNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJhIhqlI3+kGedtlmM1wj6WRJlTB6jvUfLE6aUXV7QEgYEge5iiQIqYpVY5+Ra lQAydXpMPYzcrkkAaEVZIASDrJ/uLOJuUKFrHuzxeul7h6R5bDlaimK64erjxXpb zh6T3Qh9akWRwrTkUxPKCrOtfPOyiKbW9lPIguacRb0J9ZQoxOmkSHTtTM2JF6OS wsjfw9uO1pRNjCPUfwXF9pyPUlvs5RVRJPyfw3FlXmcFqZwpjBBDhRwXVZLJtGMN Es7/X57BzsMTUDzX9GD65qjJUkVaCyye9Ao6uZ6juAuYLem44lhFqY4PSNlEBMW6 KlYbwtolkwK/xDnhSDqxDHqhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOIqCexdS MJh6183q0KdIk5JYpqswHwYDVR0jBBgwFoAUTxgnPYhVbjodbtgXi4CVKNmQppEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3QjI0LzE1NDc1RDg2OEY3 NjExRUY4NEVDNzcxNUM0RjlBRTAyL1R4Z25QWWhWYmpvZGJ0Z1hpNENWS05tUXBw RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVHhnblBZaFZiam9kYnRnWGk0Q1ZLTm1RcHBFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3 QjI0LzE1NDc1RDg2OEY3NjExRUY4NEVDNzcxNUM0RjlBRTAyL1R4Z25QWWhWYmpv ZGJ0Z1hpNENWS05tUXBwRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK2kP/HQ+XEu5NOLlFVu2vPdnShCZRJSfKd1TgCQNnNAzSvWjBpFXpR5 8ul0DU0jL6k5zftPzjvAXNs5s0jlzRY9u4j4APzZn//OJEXW5mLaDlIc/+LcvrOt 6OSLo9xeFQUy7AVXj4lOFnDEiI8/6HXzrXar00HrTWS1Nr33bd0/yHfR7COdDpkS POuBAhsn4XwCi5gbSCBPkKNrqBE1f0qsY0PaLsIFeSJEwMIWb0haFBMzoy+J/uaz MbuOE29Njbl17y9KrWNew+8rSAc9WiQwOKc5OmGOxft9iL1AAxA8h2ExvB+qVGfJ VkHxpjhLOWKijJzcVHNecGxA6XHZs2k= -----END CERTIFICATE-----Generated at Wed May 14 03:33:29 2025 by rpki-client