$ rpki-client -vvf rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.mft File: C6B6i9U8Lh__9KJFBcQ0BFSVCf4.mft (raw, json) Hash identifier: 67NBlZWzAgl3lCA0DnHT41UpcahjndB9GZgWo75YoIk= Subject key identifier: 38:0F:9A:9C:AF:CD:4E:8F:5B:98:62:AA:EE:C6:7D:03:B3:06:04:5D Authority key identifier: 0B:A0:7A:8B:D5:3C:2E:1F:FF:F4:A2:45:05:C4:34:04:54:95:09:FE Certificate issuer: /CN=A9153944/serialNumber=0BA07A8BD53C2E1FFFF4A24505C43404549509FE Certificate serial: 70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.mft Manifest number: 6C Signing time: Sun 11 May 2025 05:43:34 +0000 Manifest this update: Sun 11 May 2025 05:43:33 +0000 Manifest next update: Sun 18 May 2025 05:43:33 +0000 Files and hashes: 1: C6B6i9U8Lh__9KJFBcQ0BFSVCf4.crl (hash: GrfeqOgA/PsakZIghjFrPneV0rx2LDzmaRXsU8XDBYs=) 2: 10C5553891FB11EFB901C22CC4F9AE02.roa (hash: v8TD9OsqqUAKPcuAZeMff5sjhWiIKpMzGXGCpndoG2I=) 3: FDC6BEA491FA11EFA4F0932CC4F9AE02.roa (hash: INAvAHudzPZT0eOcOkMlBnMLdZykePd0YOhNH7KxTi4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.crl rsync://rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 05:43:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 112 (0x70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153944, serialNumber=0BA07A8BD53C2E1FFFF4A24505C43404549509FE Validity Not Before: May 11 05:43:33 2025 GMT Not After : May 18 05:43:33 2025 GMT Subject: CN=68203905-0342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:48:1f:4b:91:80:20:20:ee:f0:1d:31:ee:46: f2:13:03:d9:90:de:e2:de:c2:2b:40:75:c6:dd:69: 84:4f:27:43:7b:31:d9:95:83:d7:6d:ef:20:29:3c: c5:28:f9:02:18:3f:c0:3f:79:65:bd:35:c1:04:3c: 00:94:ea:9e:a5:f9:67:3a:28:fa:3c:78:cb:26:85: 4f:76:93:a2:30:4f:e2:7b:1c:f1:3c:b8:3a:79:d4: bc:70:75:86:38:94:a4:5f:79:d5:ba:7c:a9:16:66: bd:e6:98:b5:36:ce:b3:f3:0c:16:d2:25:d7:09:8c: b4:69:d2:7a:48:e1:ff:72:6e:34:28:e2:45:5f:29: 7e:ac:d3:e5:13:24:d9:a5:4c:5d:62:9a:a0:22:a2: 5f:51:23:dc:c2:dc:8d:8e:68:36:b4:6f:59:83:98: 39:0a:fd:a3:8c:d2:f4:3c:9d:0f:25:b5:d3:16:a0: 58:df:ee:3c:e6:5d:6c:dd:c3:cf:fe:44:14:a1:9a: 57:34:4b:30:d4:d0:e6:6b:bb:82:b0:4d:a7:89:e9: 97:e0:7b:cf:bf:b3:84:a8:e2:9d:b0:0a:7a:e3:93: 99:c6:15:5c:b6:ef:a8:5f:15:77:e1:cb:8d:63:ca: e2:60:e3:1c:71:b7:c4:73:d3:eb:d1:ad:32:b6:fc: 96:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:0F:9A:9C:AF:CD:4E:8F:5B:98:62:AA:EE:C6:7D:03:B3:06:04:5D X509v3 Authority Key Identifier: keyid:0B:A0:7A:8B:D5:3C:2E:1F:FF:F4:A2:45:05:C4:34:04:54:95:09:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:77:b0:a1:11:eb:2f:fc:3d:7d:80:e9:06:aa:e6:f2:f6:b6: 2d:cf:77:dd:7d:44:ef:f5:36:a4:5f:84:85:c7:5e:57:af:ce: 73:5a:10:20:0d:40:1a:51:ce:27:40:c1:94:5d:d7:cf:6d:0f: 4b:a6:6e:2b:e5:67:a2:38:b7:a7:6f:fa:f4:68:9f:94:07:17: 02:f0:d4:19:4f:10:81:3d:dc:ce:b5:01:94:5a:41:3e:e7:e7: c3:3d:17:53:af:b1:5e:4d:c9:4e:68:6a:fe:31:33:24:3b:46: 4e:b6:32:5f:36:ba:c1:73:a2:1b:dd:33:e6:43:37:36:5d:de: 12:60:5f:ed:30:92:2f:08:9e:1f:dc:fe:5c:4a:b6:a0:b3:e6: 84:fd:c2:96:7d:d6:ab:9d:e6:73:b5:0b:ca:52:15:75:75:d3: 88:09:fb:58:87:e7:3d:91:80:0d:fc:c8:68:1e:36:1a:25:8c: 7b:4d:33:f9:01:ab:a9:33:87:0a:46:c1:cc:c5:da:9f:dd:dc: d5:52:ec:bb:4a:cc:bb:5a:56:42:a3:f2:c4:85:ca:56:30:6f: cc:10:f3:dd:87:6c:1a:1b:93:db:a1:fc:5a:13:e9:e2:d8:89: 4e:a8:d7:89:b8:ba:63:b7:25:a0:c7:a1:0d:bf:ff:8d:ac:43: f8:07:d9:01 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 Mzk0NDExMC8GA1UEBRMoMEJBMDdBOEJENTNDMkUxRkZGRjRBMjQ1MDVDNDM0MDQ1 NDk1MDlGRTAeFw0yNTA1MTEwNTQzMzNaFw0yNTA1MTgwNTQzMzNaMBgxFjAUBgNV BAMTDTY4MjAzOTA1LTAzNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXSB9LkYAgIO7wHTHuRvITA9mQ3uLewitAdcbdaYRPJ0N7MdmVg9dt7yApPMUo +QIYP8A/eWW9NcEEPACU6p6l+Wc6KPo8eMsmhU92k6IwT+J7HPE8uDp51LxwdYY4 lKRfedW6fKkWZr3mmLU2zrPzDBbSJdcJjLRp0npI4f9ybjQo4kVfKX6s0+UTJNml TF1imqAiol9RI9zC3I2OaDa0b1mDmDkK/aOM0vQ8nQ8ltdMWoFjf7jzmXWzdw8/+ RBShmlc0SzDU0OZru4KwTaeJ6Zfge8+/s4So4p2wCnrjk5nGFVy276hfFXfhy41j yuJg4xxxt8Rz0+vRrTK2/JbhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOA+anK/N To9bmGKq7sZ9A7MGBF0wHwYDVR0jBBgwFoAUC6B6i9U8Lh//9KJFBcQ0BFSVCf4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzOTQ0Lzk1MEMzRUJDOTFG OTExRUY4RTZFRUUyN0M0RjlBRTAyL0M2QjZpOVU4TGhfXzlLSkZCY1EwQkZTVkNm NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQzZCNmk5VThMaF9fOUtKRkJjUTBCRlNWQ2Y0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUz OTQ0Lzk1MEMzRUJDOTFGOTExRUY4RTZFRUUyN0M0RjlBRTAyL0M2QjZpOVU4TGhf XzlLSkZCY1EwQkZTVkNmNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG13sKER6y/8PX2A6Qaq5vL2ti3Pd919RO/1NqRfhIXHXlevznNaECAN QBpRzidAwZRd189tD0umbivlZ6I4t6dv+vRon5QHFwLw1BlPEIE93M61AZRaQT7n 58M9F1OvsV5NyU5oav4xMyQ7Rk62Ml82usFzohvdM+ZDNzZd3hJgX+0wki8Inh/c /lxKtqCz5oT9wpZ91qud5nO1C8pSFXV104gJ+1iH5z2RgA38yGgeNholjHtNM/kB q6kzhwpGwczF2p/d3NVS7LtKzLtaVkKj8sSFylYwb8wQ892HbBobk9uh/FoT6eLY iU6o14m4umO3JaDHoQ2//42sQ/gH2QE= -----END CERTIFICATE-----Generated at Mon May 12 22:51:22 2025 by rpki-client