$ rpki-client -vvf rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.mft File: C6HFLWJbsbnkQzglDaPWTYBoego.mft (raw, json) Hash identifier: g4SVF75R3jji5ExS8yZoTQPRYa6tHssbFkS7foelW6A= Subject key identifier: 2B:D7:CE:D8:B2:75:29:A2:7F:76:E6:EA:76:27:3E:AC:16:F8:51:FD Authority key identifier: 0B:A1:C5:2D:62:5B:B1:B9:E4:43:38:25:0D:A3:D6:4D:80:68:7A:0A Certificate issuer: /CN=A9140E48/serialNumber=0BA1C52D625BB1B9E44338250DA3D64D80687A0A Certificate serial: 0531 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6HFLWJbsbnkQzglDaPWTYBoego.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.mft Manifest number: 052C Signing time: Mon 12 May 2025 23:18:48 +0000 Manifest this update: Mon 12 May 2025 23:18:48 +0000 Manifest next update: Mon 19 May 2025 23:18:47 +0000 Files and hashes: 1: C6HFLWJbsbnkQzglDaPWTYBoego.crl (hash: +/qTioIesaU0VH0Gcdz5C+p84xV1XZ6YyZg3LlBZgx4=) 2: D5FFCB96F9D611EB8A9FCE34C4F9AE02.roa (hash: +yQIyhf/TyYpDcf0R24C9WjNNq39cWlJNp6OClFEIoI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.crl rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6HFLWJbsbnkQzglDaPWTYBoego.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 23:18:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1329 (0x531) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140E48, serialNumber=0BA1C52D625BB1B9E44338250DA3D64D80687A0A Validity Not Before: May 12 23:18:48 2025 GMT Not After : May 19 23:18:47 2025 GMT Subject: CN=682281d8-a814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:20:e3:a5:fb:86:0a:73:da:d6:e8:b1:90:6b: 37:56:5c:0a:6c:01:4f:ce:bc:81:e9:9d:30:07:70: 13:01:40:6e:00:2d:5a:15:f3:0e:22:13:8f:af:b0: d8:35:9e:92:b2:b2:d8:be:34:5e:d7:6d:3a:7a:0e: 69:52:53:d8:3b:ea:d4:02:90:7c:13:ef:94:63:25: 29:cc:d6:92:b8:0c:65:2e:bb:5d:f3:bc:db:2f:d4: eb:aa:dc:4e:12:d1:88:62:d0:c4:5c:cc:6c:7a:1f: 90:8b:ff:8d:da:64:02:5c:0b:a9:e4:c5:8a:fb:70: a6:7b:8b:27:2b:0c:cd:1b:aa:6b:e0:92:59:ff:5b: 75:5a:dc:c8:03:05:49:c4:cc:3e:6c:1b:66:04:7f: eb:63:38:71:32:f4:c7:7b:2c:13:35:16:99:13:79: eb:f1:cd:f0:e9:6e:9c:88:96:f6:99:86:2f:ab:fb: b1:20:63:15:df:42:40:38:ef:4f:62:c2:05:b1:90: c7:ea:da:03:0c:c8:9f:cc:87:63:b2:a4:a9:96:42: 9b:d0:50:94:2b:19:9b:8e:4a:f5:f5:76:ce:6f:de: da:b6:0e:bc:61:54:0d:ae:fd:8a:2a:5b:fd:bc:a6: d6:03:09:d1:1d:17:dc:67:c7:26:7a:74:04:99:fd: 82:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:D7:CE:D8:B2:75:29:A2:7F:76:E6:EA:76:27:3E:AC:16:F8:51:FD X509v3 Authority Key Identifier: keyid:0B:A1:C5:2D:62:5B:B1:B9:E4:43:38:25:0D:A3:D6:4D:80:68:7A:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6HFLWJbsbnkQzglDaPWTYBoego.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:99:21:4b:a1:88:55:db:df:b8:a8:fd:de:74:d5:88:8f:3a: c0:1a:1b:24:e2:0f:cd:b7:bf:e3:b4:c4:86:da:5d:48:dd:c8: b0:51:1b:ae:13:5e:ef:26:be:b9:f7:ec:2a:a2:3a:b1:a2:4f: 5d:81:3f:76:0b:a8:27:94:2b:8c:c0:6a:19:be:83:23:71:bc: dd:21:aa:d2:56:32:3b:c5:a0:69:6d:81:d3:dd:4d:1c:f7:f5: e5:c5:a8:d4:91:a4:81:02:62:97:56:0f:7a:ad:d7:5e:5f:4e: 7b:14:3a:41:08:8f:71:50:a6:8e:2d:8b:b0:41:84:ac:65:95: f8:d6:73:3d:d3:fc:95:c4:71:39:d8:60:ae:0b:48:62:8e:01: f2:de:cb:e2:45:5b:3e:72:b1:ed:28:e9:5c:1f:87:59:1f:46: d8:32:25:02:c4:a6:77:d0:3f:69:1f:44:f0:f2:66:a3:1d:06: 8c:80:94:81:6c:df:32:2b:75:27:68:36:ef:72:46:39:da:27: 1b:fa:8e:0c:ed:5a:38:62:32:97:dd:19:c5:5f:80:be:92:a9: 0c:7e:94:3b:ab:1e:41:aa:1a:13:a2:d4:a5:5c:cd:88:97:8e: c4:4b:a1:02:39:c0:6a:e8:81:6e:fc:03:99:9a:d4:c6:10:ef: 67:7c:d0:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBFNDgxMTAvBgNVBAUTKDBCQTFDNTJENjI1QkIxQjlFNDQzMzgyNTBEQTNENjRE ODA2ODdBMEEwHhcNMjUwNTEyMjMxODQ4WhcNMjUwNTE5MjMxODQ3WjAYMRYwFAYD VQQDEw02ODIyODFkOC1hODE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsSDjpfuGCnPa1uixkGs3VlwKbAFPzryB6Z0wB3ATAUBuAC1aFfMOIhOPr7DY NZ6SsrLYvjRe1206eg5pUlPYO+rUApB8E++UYyUpzNaSuAxlLrtd87zbL9TrqtxO EtGIYtDEXMxseh+Qi/+N2mQCXAup5MWK+3Cme4snKwzNG6pr4JJZ/1t1WtzIAwVJ xMw+bBtmBH/rYzhxMvTHeywTNRaZE3nr8c3w6W6ciJb2mYYvq/uxIGMV30JAOO9P YsIFsZDH6toDDMifzIdjsqSplkKb0FCUKxmbjkr19XbOb97atg68YVQNrv2KKlv9 vKbWAwnRHRfcZ8cmenQEmf2CjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCvXztiy dSmif3bm6nYnPqwW+FH9MB8GA1UdIwQYMBaAFAuhxS1iW7G55EM4JQ2j1k2AaHoK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEU0OC81MEVGRDg3NkY5 RDQxMUVCOTc5NDgzMTFDNEY5QUUwMi9DNkhGTFdKYnNibmtRemdsRGFQV1RZQm9l Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M2SEZMV0pic2Jua1F6Z2xEYVBXVFlCb2Vnby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEU0OC81MEVGRDg3NkY5RDQxMUVCOTc5NDgzMTFDNEY5QUUwMi9DNkhGTFdKYnNi bmtRemdsRGFQV1RZQm9lZ28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/mSFLoYhV29+4qP3edNWIjzrAGhsk4g/Nt7/jtMSG2l1I3ciwURuu E17vJr659+wqojqxok9dgT92C6gnlCuMwGoZvoMjcbzdIarSVjI7xaBpbYHT3U0c 9/XlxajUkaSBAmKXVg96rddeX057FDpBCI9xUKaOLYuwQYSsZZX41nM90/yVxHE5 2GCuC0hijgHy3sviRVs+crHtKOlcH4dZH0bYMiUCxKZ30D9pH0Tw8majHQaMgJSB bN8yK3UnaDbvckY52icb+o4M7Vo4YjKX3RnFX4C+kqkMfpQ7qx5BqhoTotSlXM2I l47ES6ECOcBq6IFu/AOZmtTGEO9nfNB0 -----END CERTIFICATE-----Generated at Wed May 14 09:39:07 2025 by rpki-client