$ rpki-client -vvf rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/6bez7TFz3kD-TB_m2P5CucvpyDM.mft File: 6bez7TFz3kD-TB_m2P5CucvpyDM.mft (raw, json) Hash identifier: 6unhMubW5FiThy9NFcHSQKAL78VET9zbFgWHDevSFqk= Subject key identifier: 19:72:05:BD:37:E9:69:3D:6A:DD:22:F0:76:C7:7F:57:E1:27:EA:47 Authority key identifier: E9:B7:B3:ED:31:73:DE:40:FE:4C:1F:E6:D8:FE:42:B9:CB:E9:C8:33 Certificate issuer: /CN=A9137E12/serialNumber=E9B7B3ED3173DE40FE4C1FE6D8FE42B9CBE9C833 Certificate serial: 8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6bez7TFz3kD-TB_m2P5CucvpyDM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/6bez7TFz3kD-TB_m2P5CucvpyDM.mft Manifest number: 8A Signing time: Sun 11 May 2025 05:18:23 +0000 Manifest this update: Sun 11 May 2025 05:18:23 +0000 Manifest next update: Sun 18 May 2025 05:18:23 +0000 Files and hashes: 1: 6bez7TFz3kD-TB_m2P5CucvpyDM.crl (hash: z/fdyJtwN2YgjHflZ/3jPHJbqdbYmpvOi1zsjK1kSgc=) 2: 367EF0645F9B11EFB904A774C4F9AE02.roa (hash: 3W86JdspaifMIg33JDT0CjRhdsWrcUOOO2qpo/ordp4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/6bez7TFz3kD-TB_m2P5CucvpyDM.crl rsync://rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/6bez7TFz3kD-TB_m2P5CucvpyDM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6bez7TFz3kD-TB_m2P5CucvpyDM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 140 (0x8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137E12, serialNumber=E9B7B3ED3173DE40FE4C1FE6D8FE42B9CBE9C833 Validity Not Before: May 11 05:18:23 2025 GMT Not After : May 18 05:18:23 2025 GMT Subject: CN=6820331f-53d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:4b:85:1a:62:cf:c3:1b:71:56:6f:13:94:48: bf:9f:5c:c2:ee:b1:56:cc:f3:4e:01:e6:a5:16:96: 7c:d1:89:e9:95:32:90:e9:24:71:50:4a:af:ae:64: c9:d6:c4:00:ab:b6:44:a9:4e:40:7c:76:6b:f8:51: a3:4d:84:ff:3b:56:3c:a8:0a:6a:6c:8e:0c:b8:3e: e6:a3:4f:2a:84:12:43:62:90:1b:a4:0b:48:ab:6d: cf:aa:c4:e9:8b:2c:db:75:14:8a:9b:4a:5c:9b:7b: 3f:a7:50:99:a9:3a:1c:69:0c:bb:af:30:72:3a:50: 0d:c9:3a:26:ec:56:ff:25:88:ea:f9:fb:fc:5c:a7: aa:4b:ce:1d:68:fb:b2:dc:b5:a5:c1:8b:d2:c3:78: 6c:6a:f5:31:d7:5a:c7:97:19:fa:5d:f0:db:b8:be: ba:ae:28:13:28:c2:6e:aa:eb:03:28:4f:d6:fb:8b: 25:82:a1:c0:ce:85:8d:6d:95:4c:92:25:9d:db:dc: b6:a0:3d:23:63:63:8e:17:c6:f4:de:51:24:75:a8: d8:43:6a:a7:8c:08:6f:96:c2:1b:dd:5b:96:ae:2b: 47:37:65:0a:96:9d:03:51:c9:0c:80:46:11:15:73: 05:cf:aa:ac:1d:dd:8c:c9:28:9d:40:09:50:cd:c8: a1:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:72:05:BD:37:E9:69:3D:6A:DD:22:F0:76:C7:7F:57:E1:27:EA:47 X509v3 Authority Key Identifier: keyid:E9:B7:B3:ED:31:73:DE:40:FE:4C:1F:E6:D8:FE:42:B9:CB:E9:C8:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/6bez7TFz3kD-TB_m2P5CucvpyDM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6bez7TFz3kD-TB_m2P5CucvpyDM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/6bez7TFz3kD-TB_m2P5CucvpyDM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:b6:24:0c:3e:f6:2d:66:cb:cc:6c:30:0b:ac:dc:b7:29:3c: fe:4f:8d:76:e1:db:fa:2a:8a:1a:2a:e5:d9:b1:2d:86:e5:66: 66:a0:f2:0f:5a:1d:0e:00:a1:7b:2c:e2:31:05:03:77:ac:43: 88:02:6a:0d:93:4f:5d:fc:1c:61:b4:ba:53:ca:67:55:40:a6: 66:bb:aa:65:a6:34:d8:c1:5c:79:03:39:a9:08:c6:06:b2:10: d2:71:d8:f9:20:07:97:c5:2c:79:3f:bb:5b:0c:13:5d:f5:c1: de:19:11:7d:57:9a:25:81:71:34:59:39:5c:38:c7:ad:9a:b5: 58:5d:76:d6:5d:03:4d:08:f1:37:b7:1a:b8:04:43:60:e7:66: 20:d8:56:49:b2:82:f0:80:0b:d6:c0:ed:c8:5b:fc:26:27:b1: 8e:d1:df:8a:af:01:e4:00:5e:51:d2:4c:20:6a:26:ae:0f:3a: 68:c3:c8:b5:5c:70:d0:3c:9b:d7:3d:49:1a:6f:b8:63:0c:18: c4:5f:e6:c4:8b:cb:29:77:cd:4c:bb:cf:1f:73:48:58:34:8d: 92:7b:58:2b:cb:18:51:8c:11:fe:99:e9:ad:1a:84:65:93:c9: 66:01:6d:e6:a5:09:9b:08:bb:91:06:18:3e:93:42:a3:05:bd: 88:31:ae:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdFMTIxMTAvBgNVBAUTKEU5QjdCM0VEMzE3M0RFNDBGRTRDMUZFNkQ4RkU0MkI5 Q0JFOUM4MzMwHhcNMjUwNTExMDUxODIzWhcNMjUwNTE4MDUxODIzWjAYMRYwFAYD VQQDEw02ODIwMzMxZi01M2Q3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9EuFGmLPwxtxVm8TlEi/n1zC7rFWzPNOAealFpZ80YnplTKQ6SRxUEqvrmTJ 1sQAq7ZEqU5AfHZr+FGjTYT/O1Y8qApqbI4MuD7mo08qhBJDYpAbpAtIq23PqsTp iyzbdRSKm0pcm3s/p1CZqTocaQy7rzByOlANyTom7Fb/JYjq+fv8XKeqS84daPuy 3LWlwYvSw3hsavUx11rHlxn6XfDbuL66rigTKMJuqusDKE/W+4slgqHAzoWNbZVM kiWd29y2oD0jY2OOF8b03lEkdajYQ2qnjAhvlsIb3VuWritHN2UKlp0DUckMgEYR FXMFz6qsHd2MySidQAlQzcihNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBlyBb03 6Wk9at0i8HbHf1fhJ+pHMB8GA1UdIwQYMBaAFOm3s+0xc95A/kwf5tj+QrnL6cgz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0UxMi9DNzI4MEYzNDVG OUExMUVGQjQ0MkJGNzNDNEY5QUUwMi82YmV6N1RGejNrRC1UQl9tMlA1Q3VjdnB5 RE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZiZXo3VEZ6M2tELVRCX20yUDVDdWN2cHlETS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz N0UxMi9DNzI4MEYzNDVGOUExMUVGQjQ0MkJGNzNDNEY5QUUwMi82YmV6N1RGejNr RC1UQl9tMlA1Q3VjdnB5RE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAetiQMPvYtZsvMbDALrNy3KTz+T4124dv6KooaKuXZsS2G5WZmoPIP Wh0OAKF7LOIxBQN3rEOIAmoNk09d/BxhtLpTymdVQKZmu6plpjTYwVx5AzmpCMYG shDScdj5IAeXxSx5P7tbDBNd9cHeGRF9V5olgXE0WTlcOMetmrVYXXbWXQNNCPE3 txq4BENg52Yg2FZJsoLwgAvWwO3IW/wmJ7GO0d+KrwHkAF5R0kwgaiauDzpow8i1 XHDQPJvXPUkab7hjDBjEX+bEi8spd81Mu88fc0hYNI2Se1gryxhRjBH+memtGoRl k8lmAW3mpQmbCLuRBhg+k0KjBb2IMa7q -----END CERTIFICATE-----Generated at Sun May 11 12:51:19 2025 by rpki-client