$ rpki-client -vvf rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/6BH2N9bdhj5cdPMuKbziePqyWPc.mft File: 6BH2N9bdhj5cdPMuKbziePqyWPc.mft (raw, json) Hash identifier: 2YYBIu7EvjcjzNkOi7uiYmkSPIw9QJsZang0HZmwDFo= Subject key identifier: 1C:41:15:5B:B3:94:EF:4D:C7:D9:10:B2:7C:70:0C:39:DB:F0:C0:3B Authority key identifier: E8:11:F6:37:D6:DD:86:3E:5C:74:F3:2E:29:BC:E2:78:FA:B2:58:F7 Certificate issuer: /CN=A912B751/serialNumber=E811F637D6DD863E5C74F32E29BCE278FAB258F7 Certificate serial: 02A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6BH2N9bdhj5cdPMuKbziePqyWPc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/6BH2N9bdhj5cdPMuKbziePqyWPc.mft Manifest number: 029C Signing time: Tue 13 May 2025 01:20:14 +0000 Manifest this update: Tue 13 May 2025 01:20:13 +0000 Manifest next update: Tue 20 May 2025 01:20:13 +0000 Files and hashes: 1: 6BH2N9bdhj5cdPMuKbziePqyWPc.crl (hash: Ps3HenQ168iwlWXPdBd6f+52nPfWQE3dl/NmDoOS8Co=) 2: 96BC85E8145711EF8ED9C174C4F9AE02.roa (hash: r9L4CmzavsqqBK92JPFfdFnoYkrBESFuwdtJEjg40XU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/6BH2N9bdhj5cdPMuKbziePqyWPc.crl rsync://rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/6BH2N9bdhj5cdPMuKbziePqyWPc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6BH2N9bdhj5cdPMuKbziePqyWPc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 01:20:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 674 (0x2a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B751, serialNumber=E811F637D6DD863E5C74F32E29BCE278FAB258F7 Validity Not Before: May 13 01:20:13 2025 GMT Not After : May 20 01:20:13 2025 GMT Subject: CN=68229e4e-5762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:04:a3:2b:86:e4:5d:49:18:d6:cb:ac:e3:a8: fd:83:e7:ad:13:21:10:b1:4e:f3:5f:ec:ac:fe:ec: 12:48:65:59:e6:bc:36:74:05:4a:05:ec:76:7c:28: a9:c1:61:e3:68:90:62:86:34:80:83:ab:98:71:3e: 37:f1:7c:d1:78:5a:9f:9c:44:ce:84:43:3c:af:9f: a0:08:5d:11:b0:98:b1:a7:32:ad:70:81:ee:9e:30: 73:02:1b:7d:71:08:84:ec:98:5a:3c:2d:e4:ae:55: 87:ee:21:4a:34:16:9f:1a:5f:7f:7d:b6:cf:76:0d: 3d:b2:38:b3:49:ea:a5:ff:28:87:b9:f7:90:96:57: 85:f2:54:08:55:b4:40:90:bd:f4:f4:4b:0e:70:cf: 26:7f:8b:64:8c:34:5d:23:76:ca:26:e0:eb:52:a0: 51:54:59:f0:6c:f1:79:6f:b7:9c:aa:3b:f1:af:ba: ef:fd:0a:e3:94:7b:1b:4c:8e:55:76:24:8d:5f:6e: e7:04:9f:61:97:fc:88:4f:2f:a0:07:35:44:62:43: 0f:88:9b:4e:16:6d:1e:87:4a:f8:29:d9:87:cd:6d: a4:ed:37:3a:f8:31:29:eb:9b:30:ac:e8:8c:44:77: 9a:4f:7b:66:2e:4f:d6:0e:85:ae:5e:59:fb:02:7a: a4:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:41:15:5B:B3:94:EF:4D:C7:D9:10:B2:7C:70:0C:39:DB:F0:C0:3B X509v3 Authority Key Identifier: keyid:E8:11:F6:37:D6:DD:86:3E:5C:74:F3:2E:29:BC:E2:78:FA:B2:58:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/6BH2N9bdhj5cdPMuKbziePqyWPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6BH2N9bdhj5cdPMuKbziePqyWPc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/6BH2N9bdhj5cdPMuKbziePqyWPc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:71:9b:31:4f:56:e0:3e:2c:7a:4a:f8:83:94:32:4d:24:73: 21:cd:bd:d7:2e:19:2d:b2:31:1f:99:7e:e8:89:c3:c8:4d:75: 3e:7d:bf:80:5a:08:6d:4c:6c:16:62:4c:01:60:6e:6e:de:5e: 34:75:a2:c8:f8:87:db:ac:44:04:6c:91:d4:28:58:ee:9b:cc: f9:6b:c5:48:9d:e3:10:7e:90:dc:af:a4:08:69:80:d4:17:61: f6:75:e5:e9:7c:a6:88:b5:be:3f:c0:03:05:27:fc:d1:84:cb: 0d:45:2c:3c:3a:b4:26:f3:60:65:9f:55:63:ca:57:25:38:fd: 69:c0:61:15:53:3f:f1:83:38:94:1e:b8:0f:56:05:bc:78:94: 65:08:b2:86:13:c2:cf:74:9c:60:59:74:65:6f:d1:aa:1e:1f: f7:2c:a4:72:90:a2:92:e9:4e:61:9a:f8:4c:de:59:67:f2:40: 6f:34:31:7e:ea:18:01:80:0a:0e:8e:14:d3:cd:1e:ad:6a:ba: 73:7c:32:fd:2d:98:73:75:e4:45:0e:aa:4e:fd:43:fa:85:ad: 18:2a:2f:42:8f:ac:c6:8a:d7:d0:46:7d:bf:39:b0:5e:9f:a1: 83:cc:07:f2:b5:55:e0:e8:6c:5e:41:ef:6d:b8:1b:79:e5:a3: 08:d7:99:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI3NTExMTAvBgNVBAUTKEU4MTFGNjM3RDZERDg2M0U1Qzc0RjMyRTI5QkNFMjc4 RkFCMjU4RjcwHhcNMjUwNTEzMDEyMDEzWhcNMjUwNTIwMDEyMDEzWjAYMRYwFAYD VQQDEw02ODIyOWU0ZS01NzYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4QSjK4bkXUkY1sus46j9g+etEyEQsU7zX+ys/uwSSGVZ5rw2dAVKBex2fCip wWHjaJBihjSAg6uYcT438XzReFqfnETOhEM8r5+gCF0RsJixpzKtcIHunjBzAht9 cQiE7JhaPC3krlWH7iFKNBafGl9/fbbPdg09sjizSeql/yiHufeQlleF8lQIVbRA kL309EsOcM8mf4tkjDRdI3bKJuDrUqBRVFnwbPF5b7ecqjvxr7rv/QrjlHsbTI5V diSNX27nBJ9hl/yITy+gBzVEYkMPiJtOFm0eh0r4KdmHzW2k7Tc6+DEp65swrOiM RHeaT3tmLk/WDoWuXln7AnqkPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBxBFVuz lO9Nx9kQsnxwDDnb8MA7MB8GA1UdIwQYMBaAFOgR9jfW3YY+XHTzLim84nj6slj3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjc1MS83MkQ3RDhCNEZE RDcxMUVDOTBDQUVGNENDNEY5QUUwMi82QkgyTjliZGhqNWNkUE11S2J6aWVQcXlX UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZCSDJOOWJkaGo1Y2RQTXVLYnppZVBxeVdQYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Qjc1MS83MkQ3RDhCNEZERDcxMUVDOTBDQUVGNENDNEY5QUUwMi82QkgyTjliZGhq NWNkUE11S2J6aWVQcXlXUGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvcZsxT1bgPix6SviDlDJNJHMhzb3XLhktsjEfmX7oicPITXU+fb+A WghtTGwWYkwBYG5u3l40daLI+IfbrEQEbJHUKFjum8z5a8VIneMQfpDcr6QIaYDU F2H2deXpfKaItb4/wAMFJ/zRhMsNRSw8OrQm82Bln1VjylclOP1pwGEVUz/xgziU HrgPVgW8eJRlCLKGE8LPdJxgWXRlb9GqHh/3LKRykKKS6U5hmvhM3lln8kBvNDF+ 6hgBgAoOjhTTzR6tarpzfDL9LZhzdeRFDqpO/UP6ha0YKi9Cj6zGitfQRn2/ObBe n6GDzAfytVXg6GxeQe9tuBt55aMI15k1 -----END CERTIFICATE-----Generated at Wed May 14 01:36:46 2025 by rpki-client