$ rpki-client -vvf rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.mft File: ET6g_81su3s89UWrzSyWLYbh7LA.mft (raw, json) Hash identifier: TjIrMJgoeaVU1fj69GUsOOlMsq/1RCs377yO7QG2h6k= Subject key identifier: 2D:6A:B6:E7:A3:D5:CE:60:35:EB:B0:79:45:09:1E:A3:A1:E9:92:30 Authority key identifier: 11:3E:A0:FF:CD:6C:BB:7B:3C:F5:45:AB:CD:2C:96:2D:86:E1:EC:B0 Certificate issuer: /CN=A915C6B7/serialNumber=113EA0FFCD6CBB7B3CF545ABCD2C962D86E1ECB0 Certificate serial: 0BBE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ET6g_81su3s89UWrzSyWLYbh7LA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.mft Manifest number: 0BB6 Signing time: Wed 14 May 2025 19:03:13 +0000 Manifest this update: Wed 14 May 2025 19:03:12 +0000 Manifest next update: Wed 21 May 2025 19:03:12 +0000 Files and hashes: 1: ET6g_81su3s89UWrzSyWLYbh7LA.crl (hash: 0FWDsSq8VNm/udBwPkPO/Sk/vR2AxrOU2q0Hbu3lgag=) 2: 69683D8CC64D11EABD8FD32DC4F9AE02.roa (hash: ndk7WBwAom+jNCFlVWgXYFCEOWN+x873QVE3wv4MHH8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.crl rsync://rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ET6g_81su3s89UWrzSyWLYbh7LA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 19:03:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3006 (0xbbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C6B7, serialNumber=113EA0FFCD6CBB7B3CF545ABCD2C962D86E1ECB0 Validity Not Before: May 14 19:03:12 2025 GMT Not After : May 21 19:03:12 2025 GMT Subject: CN=6824e8f1-e8fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:76:e0:7f:07:3f:85:0e:81:60:80:d3:88:2c: e3:c7:68:5c:41:73:4f:99:cd:7d:cb:e6:c4:89:72: d0:be:bf:da:70:c1:55:be:47:32:c9:d0:c0:77:35: 34:40:b6:58:10:12:ea:d1:71:8e:22:21:7e:d2:c2: 20:2e:47:ef:61:0f:bf:0a:ea:bc:01:f5:47:37:32: e7:72:2f:83:71:cc:61:a5:ac:c7:0e:a8:51:f4:94: ad:38:a2:71:28:b2:c6:b1:09:c6:74:2d:00:ee:55: 62:31:1a:67:47:3e:56:de:95:12:14:6a:0b:ad:f6: 31:3b:65:7e:45:70:e3:3f:e7:42:c5:a5:c9:a6:c2: 5d:d3:cc:0d:04:00:ae:a5:12:93:4d:47:82:ce:c3: 47:66:30:b1:26:56:55:aa:91:67:91:59:06:83:62: 1e:2b:41:76:13:be:b5:13:82:84:f2:08:cc:85:74: 27:61:60:93:21:69:15:80:61:2b:b0:c2:22:b4:e2: 55:8f:78:5b:dc:4e:a7:22:df:77:c7:4e:bc:ba:68: 4b:ce:a6:79:8f:e5:11:85:8d:c5:02:eb:42:1f:53: bc:ac:2c:4a:f3:88:a7:ea:77:12:11:71:98:fb:ee: 53:d6:e4:63:03:cb:80:c7:a7:61:eb:1a:0a:9d:d4: 39:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:6A:B6:E7:A3:D5:CE:60:35:EB:B0:79:45:09:1E:A3:A1:E9:92:30 X509v3 Authority Key Identifier: keyid:11:3E:A0:FF:CD:6C:BB:7B:3C:F5:45:AB:CD:2C:96:2D:86:E1:EC:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ET6g_81su3s89UWrzSyWLYbh7LA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:20:7b:a3:32:8b:31:86:d5:b2:76:8c:9c:ac:7d:a8:ab:71: be:a3:f3:b1:db:ea:ee:62:59:1b:73:26:8e:1b:71:ce:e2:c5: 60:f5:ee:9a:01:d8:8a:3d:bf:d6:f9:a7:7b:04:05:29:c4:ee: 9c:9e:a4:6b:38:b5:b0:7c:10:d1:43:98:46:60:d7:c6:b2:c2: e2:42:e0:c0:be:a8:dd:16:20:99:7e:03:b5:48:26:36:2d:07: 4d:b5:78:91:2e:e8:ad:02:cf:b4:10:76:dd:b1:1e:70:4f:bf: 93:e8:11:b2:37:a8:59:31:97:51:9e:94:8f:76:e0:69:1f:3e: ee:20:59:5e:3b:5b:11:de:07:18:cd:b0:57:b4:d9:d0:51:53: f9:91:96:d3:50:0b:48:4b:d6:e3:7b:56:04:37:6d:a9:45:0f: e8:bf:55:8f:f6:54:ce:8c:6a:8e:98:d5:aa:5f:a9:71:73:e2: 3b:99:a0:9b:97:7c:81:06:7a:24:ef:ec:48:de:c8:96:ca:61: 3a:7a:77:73:d2:52:df:2d:12:9a:e7:32:ac:bb:7d:68:af:8a: 8b:31:23:88:0a:18:35:bf:e9:2c:ed:a0:02:2e:bd:a1:6c:10: 86:0f:ac:1b:2f:74:f9:25:8c:aa:9b:03:a8:de:bd:8c:5c:5c: 9e:9c:0c:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC74wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUM2QjcxMTAvBgNVBAUTKDExM0VBMEZGQ0Q2Q0JCN0IzQ0Y1NDVBQkNEMkM5NjJE ODZFMUVDQjAwHhcNMjUwNTE0MTkwMzEyWhcNMjUwNTIxMTkwMzEyWjAYMRYwFAYD VQQDEw02ODI0ZThmMS1lOGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw3bgfwc/hQ6BYIDTiCzjx2hcQXNPmc19y+bEiXLQvr/acMFVvkcyydDAdzU0 QLZYEBLq0XGOIiF+0sIgLkfvYQ+/Cuq8AfVHNzLnci+DccxhpazHDqhR9JStOKJx KLLGsQnGdC0A7lViMRpnRz5W3pUSFGoLrfYxO2V+RXDjP+dCxaXJpsJd08wNBACu pRKTTUeCzsNHZjCxJlZVqpFnkVkGg2IeK0F2E761E4KE8gjMhXQnYWCTIWkVgGEr sMIitOJVj3hb3E6nIt93x068umhLzqZ5j+URhY3FAutCH1O8rCxK84in6ncSEXGY ++5T1uRjA8uAx6dh6xoKndQ52QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC1qtuej 1c5gNeuweUUJHqOh6ZIwMB8GA1UdIwQYMBaAFBE+oP/NbLt7PPVFq80sli2G4eyw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzZCNy84MDI1REQ3QTFF RjcxMUVBQUQ0NDQ5NUJDNEY5QUUwMi9FVDZnXzgxc3Uzczg5VVdyelN5V0xZYmg3 TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VUNmdfODFzdTNzODlVV3J6U3lXTFliaDdMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzZCNy84MDI1REQ3QTFFRjcxMUVBQUQ0NDQ5NUJDNEY5QUUwMi9FVDZnXzgxc3Uz czg5VVdyelN5V0xZYmg3TEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnIHujMosxhtWydoycrH2oq3G+o/Ox2+ruYlkbcyaOG3HO4sVg9e6a AdiKPb/W+ad7BAUpxO6cnqRrOLWwfBDRQ5hGYNfGssLiQuDAvqjdFiCZfgO1SCY2 LQdNtXiRLuitAs+0EHbdsR5wT7+T6BGyN6hZMZdRnpSPduBpHz7uIFleO1sR3gcY zbBXtNnQUVP5kZbTUAtIS9bje1YEN22pRQ/ov1WP9lTOjGqOmNWqX6lxc+I7maCb l3yBBnok7+xI3siWymE6endz0lLfLRKa5zKsu31or4qLMSOIChg1v+ks7aACLr2h bBCGD6wbL3T5JYyqmwOo3r2MXFyenAww -----END CERTIFICATE-----Generated at Wed May 14 22:50:41 2025 by rpki-client