$ rpki-client -vvf rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.mft File: paap6sGs925VLHi914unT-3dP_k.mft (raw, json) Hash identifier: d9utO2nGw5ZFVZUe3COhHBlN8xVLqMcF+6yUEQXTLtY= Subject key identifier: 4F:E4:50:07:41:F3:09:48:E5:DC:0E:CF:F0:85:98:1A:FA:45:81:06 Authority key identifier: A5:A6:A9:EA:C1:AC:F7:6E:55:2C:78:BD:D7:8B:A7:4F:ED:DD:3F:F9 Certificate issuer: /CN=A9129AD6/serialNumber=A5A6A9EAC1ACF76E552C78BDD78BA74FEDDD3FF9 Certificate serial: 2BAB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/paap6sGs925VLHi914unT-3dP_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.mft Manifest number: 2B9B Signing time: Mon 12 May 2025 15:31:59 +0000 Manifest this update: Mon 12 May 2025 15:31:59 +0000 Manifest next update: Mon 19 May 2025 15:31:59 +0000 Files and hashes: 1: paap6sGs925VLHi914unT-3dP_k.crl (hash: 5M3IjPPtgtOljC329S9LXGNxKFdWmPieUwYpef7eYt8=) 2: 9AD04EAAD58A11EE9992494AC4F9AE02.roa (hash: Y+UHiw8c3eNlA0cJzRblwugtoQFPbU8OnmXnd1yx0dE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.crl rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/paap6sGs925VLHi914unT-3dP_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 15:31:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11179 (0x2bab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129AD6, serialNumber=A5A6A9EAC1ACF76E552C78BDD78BA74FEDDD3FF9 Validity Not Before: May 12 15:31:59 2025 GMT Not After : May 19 15:31:59 2025 GMT Subject: CN=6822146f-f131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d0:2f:7a:e4:13:3e:93:1c:84:a1:d4:d0:0c: 0d:01:30:5e:ab:d3:21:99:df:f6:80:30:91:dc:74: 64:5f:98:42:11:9c:bb:98:f9:15:08:c4:dc:79:ac: b4:74:d7:aa:bb:03:78:b3:31:11:9a:46:95:62:f7: 33:cd:d9:92:dc:84:7d:db:21:73:60:a4:49:47:3d: f5:fb:3d:62:56:a5:a9:4e:24:de:98:35:a8:9a:35: f5:9b:c8:48:75:bf:e6:ae:51:62:4a:ce:49:c5:5c: f9:b4:42:cd:9a:6b:1e:55:7a:05:9e:9e:24:9a:1a: 95:db:71:41:90:93:72:7f:52:27:48:8d:8d:0c:60: 51:81:39:11:8e:52:39:e9:95:ae:21:56:77:5e:9c: 0e:a9:ba:f1:f4:5f:ba:db:c5:65:22:25:1e:ca:49: 57:da:0c:8d:25:e7:e9:ee:48:1d:f1:fa:8e:0a:44: fa:15:ae:04:4b:fb:a1:7d:ae:26:1b:cd:0f:6b:e9: da:20:d0:d9:f0:e1:59:44:a2:67:a0:01:12:4c:92: be:99:5d:e5:00:d1:1a:0e:62:f1:83:26:f6:c8:9f: f9:d7:5c:ac:b9:2e:71:16:32:4b:04:d3:0b:94:98: a6:4f:69:8b:bf:f2:98:bb:85:fd:22:28:ae:73:7e: d0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:E4:50:07:41:F3:09:48:E5:DC:0E:CF:F0:85:98:1A:FA:45:81:06 X509v3 Authority Key Identifier: keyid:A5:A6:A9:EA:C1:AC:F7:6E:55:2C:78:BD:D7:8B:A7:4F:ED:DD:3F:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/paap6sGs925VLHi914unT-3dP_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:92:64:2e:15:fc:ec:31:c6:6c:37:ad:35:40:5c:1b:be:26: 38:a6:a0:3f:5d:6d:44:c9:87:4c:a0:90:f9:f1:16:25:93:22: d1:2b:cf:20:8d:3c:2d:73:d6:26:c3:2e:83:bf:04:6f:99:73: 91:27:c9:75:2f:9b:33:36:45:59:8e:7e:26:50:d2:a8:8a:6d: 77:4e:7d:65:cd:0b:38:36:39:72:7d:3d:13:15:eb:ae:83:c3: e3:a7:0b:79:c3:ae:6e:52:78:c3:81:b0:55:63:59:ac:f5:0b: 63:1d:78:bd:3d:dd:54:34:21:aa:3d:f9:ed:b7:2e:b4:66:fd: b3:e7:d6:37:1c:72:0b:c8:4f:b1:4d:0e:3b:9c:bb:87:54:ef: d7:30:7d:48:c2:f7:4f:59:3c:eb:16:5c:7c:d4:41:e1:fa:6a: 93:ea:c5:78:1c:26:7c:12:61:95:bc:a6:45:9f:f1:ff:ec:d7: 7a:e0:bf:4e:fe:2b:fe:8b:c7:4b:b1:ec:51:eb:8b:b2:2b:87: 46:8a:c7:90:08:5e:5c:75:86:f7:c1:63:f1:b2:8f:54:25:a9: b2:d8:bb:0a:a0:78:09:7d:be:6a:a7:7d:03:7f:07:2a:3e:8e: 13:4c:cd:4e:78:b1:be:38:05:91:5f:80:f9:7e:7b:ed:4f:24: ef:91:9f:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICK6swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlBRDYxMTAvBgNVBAUTKEE1QTZBOUVBQzFBQ0Y3NkU1NTJDNzhCREQ3OEJBNzRG RURERDNGRjkwHhcNMjUwNTEyMTUzMTU5WhcNMjUwNTE5MTUzMTU5WjAYMRYwFAYD VQQDEw02ODIyMTQ2Zi1mMTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx9AveuQTPpMchKHU0AwNATBeq9Mhmd/2gDCR3HRkX5hCEZy7mPkVCMTceay0 dNequwN4szERmkaVYvczzdmS3IR92yFzYKRJRz31+z1iVqWpTiTemDWomjX1m8hI db/mrlFiSs5JxVz5tELNmmseVXoFnp4kmhqV23FBkJNyf1InSI2NDGBRgTkRjlI5 6ZWuIVZ3XpwOqbrx9F+628VlIiUeyklX2gyNJefp7kgd8fqOCkT6Fa4ES/uhfa4m G80Pa+naINDZ8OFZRKJnoAESTJK+mV3lANEaDmLxgyb2yJ/511ysuS5xFjJLBNML lJimT2mLv/KYu4X9Iiiuc37QcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE/kUAdB 8wlI5dwOz/CFmBr6RYEGMB8GA1UdIwQYMBaAFKWmqerBrPduVSx4vdeLp0/t3T/5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUFENi9ENjc3REM5NERG RDAxMUUzOTNEQjc5NUY1OTExRUEzMi9wYWFwNnNHczkyNVZMSGk5MTR1blQtM2RQ X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BhYXA2c0dzOTI1VkxIaTkxNHVuVC0zZFBfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OUFENi9ENjc3REM5NERGRDAxMUUzOTNEQjc5NUY1OTExRUEzMi9wYWFwNnNHczky NVZMSGk5MTR1blQtM2RQX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAikmQuFfzsMcZsN601QFwbviY4pqA/XW1EyYdMoJD58RYlkyLRK88g jTwtc9Ymwy6DvwRvmXORJ8l1L5szNkVZjn4mUNKoim13Tn1lzQs4NjlyfT0TFeuu g8Pjpwt5w65uUnjDgbBVY1ms9QtjHXi9Pd1UNCGqPfntty60Zv2z59Y3HHILyE+x TQ47nLuHVO/XMH1IwvdPWTzrFlx81EHh+mqT6sV4HCZ8EmGVvKZFn/H/7Nd64L9O /iv+i8dLsexR64uyK4dGiseQCF5cdYb3wWPxso9UJamy2LsKoHgJfb5qp30Dfwcq Po4TTM1OeLG+OAWRX4D5fnvtTyTvkZ9E -----END CERTIFICATE-----Generated at Tue May 13 04:36:12 2025 by rpki-client