$ rpki-client -vvf rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft File: 6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft (raw, json) Hash identifier: DF14bB98aeLGBhxdULhf4Baf/7Y9wCdSyJtu9C7fe7M= Subject key identifier: BE:90:6F:3A:67:50:F1:C8:A4:BD:C0:5F:F9:1F:5D:A8:07:D5:1E:DC Authority key identifier: E9:9F:F0:44:8B:0B:DA:37:71:CD:C4:A9:6C:59:F7:C9:F9:C8:79:44 Certificate issuer: /CN=A9157E9C/serialNumber=E99FF0448B0BDA3771CDC4A96C59F7C9F9C87944 Certificate serial: 03E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft Manifest number: 03E0 Signing time: Fri 09 May 2025 00:20:01 +0000 Manifest this update: Fri 09 May 2025 00:20:01 +0000 Manifest next update: Fri 16 May 2025 00:20:01 +0000 Files and hashes: 1: 6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.crl (hash: FTetmUEb4t21qcUTnzNGzuMzIEeZCxgwMemx19XXRlY=) 2: E3CD40BE7D6611ECBA65C232C4F9AE02.roa (hash: 0enjz6SIbauvQ9h6jwc2NEiXIAcjMM9tvz5AS5aCRh4=) 3: 438C7C387D6F11ECBCDC721DC4F9AE02.roa (hash: c2QsjvxJtydLLoad0ereLNJmmVF8IBQhrQgpfGdgdxI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.crl rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 00:20:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1001 (0x3e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157E9C, serialNumber=E99FF0448B0BDA3771CDC4A96C59F7C9F9C87944 Validity Not Before: May 9 00:20:01 2025 GMT Not After : May 16 00:20:01 2025 GMT Subject: CN=681d4a31-b210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:83:dc:0d:ca:9c:93:ee:43:da:b7:27:35:f6: 62:d5:33:d2:72:98:3d:47:b6:35:bb:87:d8:6b:d8: cc:6d:2f:a8:18:ba:f8:76:f3:ad:f2:3b:19:ee:28: c0:e5:b5:9e:f6:28:04:c4:72:7a:ed:6c:9b:a5:75: 86:5f:1c:a5:58:5c:c3:32:24:9b:d1:2a:f6:44:99: 64:e2:a6:e4:73:6f:b5:05:94:b5:20:7b:e8:6e:6b: 86:32:5a:2d:cf:8c:1a:87:3c:1c:aa:e6:cc:e4:d2: ea:d1:13:4b:8d:1e:f0:43:85:5a:07:33:4a:a2:28: 7e:79:44:aa:34:62:12:1d:ee:de:3a:db:7a:bc:d3: d0:a6:a8:50:78:04:18:01:0a:b4:57:8c:01:73:a3: 88:b6:f5:60:ac:0d:19:51:8c:db:4e:f9:30:ec:aa: 86:71:86:35:0e:6c:86:4d:20:d3:cc:d4:c1:80:35: 26:fa:69:83:a8:99:e9:4d:a1:9e:b2:a4:1e:10:fe: d4:6e:5d:56:81:9a:30:15:b1:cb:2b:a7:27:ef:90: fe:65:8e:52:ae:1a:c8:32:10:62:d9:07:94:7e:46: c2:07:b3:c0:0f:4f:f9:27:38:0f:76:b2:6e:91:5d: f6:54:b3:0d:24:6e:ea:d8:e6:dd:04:06:bc:6f:95: 74:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:90:6F:3A:67:50:F1:C8:A4:BD:C0:5F:F9:1F:5D:A8:07:D5:1E:DC X509v3 Authority Key Identifier: keyid:E9:9F:F0:44:8B:0B:DA:37:71:CD:C4:A9:6C:59:F7:C9:F9:C8:79:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:a7:6b:ff:60:1d:85:f8:1a:2b:2a:52:f6:1c:0e:08:a9:ea: 5f:89:31:5d:74:c5:d2:c6:1b:1c:a2:b6:ba:23:50:0a:ba:0d: 3c:82:10:23:dc:26:97:90:62:d1:06:64:6a:71:cd:c2:c6:5f: fa:d5:42:43:75:ab:2e:83:68:e7:32:e5:bf:f6:f6:ea:94:2e: 6f:db:54:72:80:f0:0e:41:3e:60:78:41:44:d8:4a:ab:1c:1f: d8:20:7f:1f:12:ab:fa:6e:55:f8:6a:78:0d:99:93:8d:3a:9e: d8:52:0a:92:36:53:87:b9:47:5d:1e:90:13:e7:94:d8:6d:f5: 77:be:3b:35:fa:6f:1a:f9:5d:94:0a:81:54:ce:82:e0:dc:c1: b8:4d:68:7d:a7:6d:70:5e:c4:4f:ca:38:03:13:be:8d:e3:ee: 74:73:fe:47:6b:6f:91:8d:fd:d8:c0:e6:09:9e:30:41:6e:b3: 97:5c:78:9f:3f:16:b4:b4:b0:fb:50:16:7e:f7:da:0b:04:08: 60:85:13:e2:79:2c:2f:06:38:a3:86:99:2b:12:5f:e7:7b:21: 42:50:2d:f7:a9:8b:4f:c1:67:16:4b:bb:23:19:bd:7d:4b:83: e8:ed:02:04:32:fe:b2:69:f1:de:3b:2e:25:f4:0b:20:85:e2: f8:3a:38:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdFOUMxMTAvBgNVBAUTKEU5OUZGMDQ0OEIwQkRBMzc3MUNEQzRBOTZDNTlGN0M5 RjlDODc5NDQwHhcNMjUwNTA5MDAyMDAxWhcNMjUwNTE2MDAyMDAxWjAYMRYwFAYD VQQDEw02ODFkNGEzMS1iMjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5IPcDcqck+5D2rcnNfZi1TPScpg9R7Y1u4fYa9jMbS+oGLr4dvOt8jsZ7ijA 5bWe9igExHJ67WybpXWGXxylWFzDMiSb0Sr2RJlk4qbkc2+1BZS1IHvobmuGMlot z4wahzwcqubM5NLq0RNLjR7wQ4VaBzNKoih+eUSqNGISHe7eOtt6vNPQpqhQeAQY AQq0V4wBc6OItvVgrA0ZUYzbTvkw7KqGcYY1DmyGTSDTzNTBgDUm+mmDqJnpTaGe sqQeEP7Ubl1WgZowFbHLK6cn75D+ZY5SrhrIMhBi2QeUfkbCB7PAD0/5JzgPdrJu kV32VLMNJG7q2ObdBAa8b5V0hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL6Qbzpn UPHIpL3AX/kfXagH1R7cMB8GA1UdIwQYMBaAFOmf8ESLC9o3cc3EqWxZ98n5yHlE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0U5Qy81MEM5OTNDRTdE NjMxMUVDQUM1QzdGMUVDNEY5QUUwMi82Wl93UklzTDJqZHh6Y1NwYkZuM3lmbkll VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZaX3dSSXNMMmpkeHpjU3BiRm4zeWZuSWVVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0U5Qy81MEM5OTNDRTdENjMxMUVDQUM1QzdGMUVDNEY5QUUwMi82Wl93UklzTDJq ZHh6Y1NwYkZuM3lmbkllVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3p2v/YB2F+BorKlL2HA4IqepfiTFddMXSxhscora6I1AKug08ghAj 3CaXkGLRBmRqcc3Cxl/61UJDdasug2jnMuW/9vbqlC5v21RygPAOQT5geEFE2Eqr HB/YIH8fEqv6blX4angNmZONOp7YUgqSNlOHuUddHpAT55TYbfV3vjs1+m8a+V2U CoFUzoLg3MG4TWh9p21wXsRPyjgDE76N4+50c/5Ha2+Rjf3YwOYJnjBBbrOXXHif Pxa0tLD7UBZ+99oLBAhghRPieSwvBjijhpkrEl/neyFCUC33qYtPwWcWS7sjGb19 S4Po7QIEMv6yafHeOy4l9AsgheL4OjjK -----END CERTIFICATE-----Generated at Sun May 11 01:12:13 2025 by rpki-client