$ rpki-client -vvf rpki.apnic.net/member_repository/A915B3AE/C2D054F6CA9311EEA726CC09C4F9AE02/g6pYiXoVH0rLc4TwtV8R7Z164X8.mft File: g6pYiXoVH0rLc4TwtV8R7Z164X8.mft (raw, json) Hash identifier: IUWzG0DVEFFl4t+dGVFI3g3+TOFLG3stD0lT+cBOmuQ= Subject key identifier: A6:30:1F:3F:47:D9:46:A4:66:C9:ED:8F:6C:E5:F4:75:B9:2E:9D:04 Authority key identifier: 83:AA:58:89:7A:15:1F:4A:CB:73:84:F0:B5:5F:11:ED:9D:7A:E1:7F Certificate issuer: /CN=A915B3AE/serialNumber=83AA58897A151F4ACB7384F0B55F11ED9D7AE17F Certificate serial: F1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g6pYiXoVH0rLc4TwtV8R7Z164X8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B3AE/C2D054F6CA9311EEA726CC09C4F9AE02/g6pYiXoVH0rLc4TwtV8R7Z164X8.mft Manifest number: EE Signing time: Thu 15 May 2025 04:42:47 +0000 Manifest this update: Thu 15 May 2025 04:42:47 +0000 Manifest next update: Thu 22 May 2025 04:42:47 +0000 Files and hashes: 1: g6pYiXoVH0rLc4TwtV8R7Z164X8.crl (hash: bOz4KxzGn2rOZpa1UeFxvtYGSM9oXLiT6yjgADBTKwk=) 2: 1AD9E28ECA9411EE9062590AC4F9AE02.roa (hash: ReL28hF+/x2h0RKcTZEQ3GcIbkXQcDw6s6esZ8caJwY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B3AE/C2D054F6CA9311EEA726CC09C4F9AE02/g6pYiXoVH0rLc4TwtV8R7Z164X8.crl rsync://rpki.apnic.net/member_repository/A915B3AE/C2D054F6CA9311EEA726CC09C4F9AE02/g6pYiXoVH0rLc4TwtV8R7Z164X8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g6pYiXoVH0rLc4TwtV8R7Z164X8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 04:42:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 241 (0xf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B3AE, serialNumber=83AA58897A151F4ACB7384F0B55F11ED9D7AE17F Validity Not Before: May 15 04:42:47 2025 GMT Not After : May 22 04:42:47 2025 GMT Subject: CN=682570c7-3d3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:83:4a:44:e3:20:ed:7c:55:c4:2e:6c:48:9f: c1:3d:da:10:29:29:e0:33:bc:1e:ed:b9:12:63:fe: 34:ee:46:3a:e9:f9:d9:0a:67:2e:3f:59:7c:54:3a: 79:29:13:ce:7b:b9:57:62:84:4e:a3:f1:e2:82:ae: 77:07:63:da:50:cd:eb:44:43:79:13:1d:7d:8e:5b: 7d:a6:3e:83:f7:03:2d:69:a1:b2:86:4c:e6:bd:ac: d0:a2:9a:65:74:c8:ed:3b:49:93:63:7c:61:e8:2a: 1d:22:0d:5d:9f:93:e6:cb:0b:cd:37:18:00:f6:c4: 2f:01:76:3b:64:66:3a:89:de:f7:ea:73:7e:b3:1a: 08:b4:c3:9d:68:8f:84:46:52:ca:96:cf:9d:ef:92: 50:df:13:ed:b3:22:b3:28:d3:b7:da:2d:6b:1f:75: b7:d1:db:1b:37:5c:f6:59:6d:78:72:1a:e3:52:06: 65:f0:60:85:8c:19:da:bf:94:d8:0e:18:60:fa:3a: 29:f4:4f:0a:4c:b0:18:46:78:f4:5c:ed:47:06:19: b8:9b:51:09:10:61:4c:8e:c2:a7:13:cc:6c:f6:0a: 48:34:12:8f:97:74:25:05:cf:34:df:af:d1:00:c3: ef:1a:65:45:e7:bc:46:0b:26:dc:ad:ba:e7:7b:26: ff:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:30:1F:3F:47:D9:46:A4:66:C9:ED:8F:6C:E5:F4:75:B9:2E:9D:04 X509v3 Authority Key Identifier: keyid:83:AA:58:89:7A:15:1F:4A:CB:73:84:F0:B5:5F:11:ED:9D:7A:E1:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B3AE/C2D054F6CA9311EEA726CC09C4F9AE02/g6pYiXoVH0rLc4TwtV8R7Z164X8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g6pYiXoVH0rLc4TwtV8R7Z164X8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B3AE/C2D054F6CA9311EEA726CC09C4F9AE02/g6pYiXoVH0rLc4TwtV8R7Z164X8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:46:db:6f:54:59:17:c9:02:0d:0d:96:64:66:04:d2:9c:85: d9:4f:8b:7e:6f:4f:c5:4e:d9:9c:c7:cb:93:41:e8:99:d0:fd: 33:33:c8:f9:ef:ac:41:85:fb:16:87:88:f0:82:f8:7d:c4:d7: 94:71:f3:b8:c3:43:6a:7d:7c:f1:9c:d9:1e:75:6c:d8:46:36: 6e:18:59:c2:df:ad:49:36:29:e5:06:63:62:5c:6d:f8:3d:19: 6e:54:2a:b7:7e:fd:41:07:38:72:21:f4:f6:d2:70:c6:dc:e6: f3:2d:32:31:8b:a4:84:f0:17:49:70:14:e5:cf:d0:2d:92:2d: 4c:79:97:ca:03:34:27:58:77:16:ec:a2:fc:ca:d0:34:1c:f8: be:6f:ae:d8:7b:51:44:d1:97:1a:e7:63:6c:0c:71:04:0b:37: bf:48:2b:38:21:3a:3d:2c:98:d5:da:b9:58:e8:4a:0a:b4:d0: e5:a1:a6:ed:95:a8:fd:ae:e9:95:47:3d:27:8a:94:38:5f:e3: 51:73:a8:36:b7:7c:d0:6e:1c:ab:92:a0:b2:af:6f:80:af:1b: a7:d3:cf:6d:f4:17:ac:8b:81:e3:5e:57:33:9a:60:89:6f:1f: c4:89:ee:bb:4c:b1:d3:f8:ed:95:b6:7b:7a:d4:7d:3e:bc:cf: 6f:6b:90:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUIzQUUxMTAvBgNVBAUTKDgzQUE1ODg5N0ExNTFGNEFDQjczODRGMEI1NUYxMUVE OUQ3QUUxN0YwHhcNMjUwNTE1MDQ0MjQ3WhcNMjUwNTIyMDQ0MjQ3WjAYMRYwFAYD VQQDEw02ODI1NzBjNy0zZDNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA34NKROMg7XxVxC5sSJ/BPdoQKSngM7we7bkSY/407kY66fnZCmcuP1l8VDp5 KRPOe7lXYoROo/Higq53B2PaUM3rREN5Ex19jlt9pj6D9wMtaaGyhkzmvazQoppl dMjtO0mTY3xh6CodIg1dn5PmywvNNxgA9sQvAXY7ZGY6id736nN+sxoItMOdaI+E RlLKls+d75JQ3xPtsyKzKNO32i1rH3W30dsbN1z2WW14chrjUgZl8GCFjBnav5TY Dhhg+jop9E8KTLAYRnj0XO1HBhm4m1EJEGFMjsKnE8xs9gpINBKPl3QlBc8036/R AMPvGmVF57xGCybcrbrneyb/YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKYwHz9H 2UakZsntj2zl9HW5Lp0EMB8GA1UdIwQYMBaAFIOqWIl6FR9Ky3OE8LVfEe2deuF/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjNBRS9DMkQwNTRGNkNB OTMxMUVFQTcyNkNDMDlDNEY5QUUwMi9nNnBZaVhvVkgwckxjNFR3dFY4UjdaMTY0 WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2c2cFlpWG9WSDByTGM0VHd0VjhSN1oxNjRYOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjNBRS9DMkQwNTRGNkNBOTMxMUVFQTcyNkNDMDlDNEY5QUUwMi9nNnBZaVhvVkgw ckxjNFR3dFY4UjdaMTY0WDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMRttvVFkXyQINDZZkZgTSnIXZT4t+b0/FTtmcx8uTQeiZ0P0zM8j5 76xBhfsWh4jwgvh9xNeUcfO4w0NqfXzxnNkedWzYRjZuGFnC361JNinlBmNiXG34 PRluVCq3fv1BBzhyIfT20nDG3ObzLTIxi6SE8BdJcBTlz9Atki1MeZfKAzQnWHcW 7KL8ytA0HPi+b67Ye1FE0Zca52NsDHEECze/SCs4ITo9LJjV2rlY6EoKtNDloabt laj9rumVRz0nipQ4X+NRc6g2t3zQbhyrkqCyr2+Arxun089t9Besi4HjXlczmmCJ bx/Eie67TLHT+O2Vtnt61H0+vM9va5Bw -----END CERTIFICATE-----Generated at Thu May 15 12:15:33 2025 by rpki-client