$ rpki-client -vvf rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft File: 6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft (raw, json) Hash identifier: tdGKqTiOCLcEFiu5vxvrnhWflgfRRl0fRBvzkQE1bBw= Subject key identifier: DF:CA:E3:6A:85:27:5F:AC:81:34:72:F2:6E:5D:41:C5:EE:8F:09:65 Authority key identifier: E9:C4:10:C7:DD:D5:26:70:AB:8F:82:16:C8:76:14:B1:0E:C3:17:7A Certificate issuer: /CN=A9171560/serialNumber=E9C410C7DDD52670AB8F8216C87614B10EC3177A Certificate serial: 0CF8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft Manifest number: 0CED Signing time: Wed 14 May 2025 18:14:17 +0000 Manifest this update: Wed 14 May 2025 18:14:16 +0000 Manifest next update: Wed 21 May 2025 18:14:16 +0000 Files and hashes: 1: 6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl (hash: BmtTsQ+LEW4vAWO2c2HuRuB1NHwOg1Sq7c+JT3OqApU=) 2: 65AF30D422D211EAB3ABA447C4F9AE02.roa (hash: N5g6jdfkVyESUIZ9NbhjHN5A/zAKL0uPzj31oHqn/fU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 18:14:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3320 (0xcf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171560, serialNumber=E9C410C7DDD52670AB8F8216C87614B10EC3177A Validity Not Before: May 14 18:14:16 2025 GMT Not After : May 21 18:14:16 2025 GMT Subject: CN=6824dd79-e05f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1d:57:66:8c:94:1e:d9:62:cb:bc:f2:c7:89: 4b:f0:44:99:25:02:f9:d3:0b:c5:6b:ed:e5:73:06: 76:64:e7:88:9c:ff:8a:16:9e:8e:74:0b:33:e5:f3: 85:11:14:5f:9b:0e:fe:56:6a:e5:c1:d7:4b:55:7e: e0:88:4e:ca:3d:fa:bf:57:1b:16:e6:21:a6:1b:bd: 4f:9c:55:dc:a0:f0:26:46:8c:be:4e:f3:de:a1:18: f2:28:ea:6e:67:e7:5c:00:5e:31:c8:47:88:9e:84: 4b:91:ef:55:85:ad:89:16:82:48:20:b7:15:3c:16: f5:d5:d6:7c:6f:e9:5f:cf:5b:34:01:5b:27:cc:17: ed:9d:e6:54:d5:46:0b:74:95:39:0e:26:0d:0c:84: 5f:95:33:6e:ab:3e:73:f3:08:62:b6:7e:29:aa:1a: 32:f4:66:44:17:15:19:cd:77:1e:c3:f4:e5:76:0a: 4f:e8:c5:51:c1:7f:ae:3b:32:fc:81:fa:56:91:3b: cc:b0:3a:c7:e5:85:66:c2:9e:3c:ad:18:dc:b3:32: 29:56:07:55:b6:54:5e:2c:99:aa:eb:27:b7:ec:b7: ba:16:7d:be:99:1d:c6:80:40:3a:a1:82:e3:ef:5c: a4:a7:63:81:57:2e:0e:51:e9:f3:98:a8:b3:99:eb: 7e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:CA:E3:6A:85:27:5F:AC:81:34:72:F2:6E:5D:41:C5:EE:8F:09:65 X509v3 Authority Key Identifier: keyid:E9:C4:10:C7:DD:D5:26:70:AB:8F:82:16:C8:76:14:B1:0E:C3:17:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:f6:91:ee:6e:a2:ba:a6:26:fb:91:71:00:84:c7:00:69:06: 5b:39:38:9e:37:93:71:6e:3c:9e:19:a0:93:7d:e1:6a:91:2e: 6e:f2:7f:28:4e:7e:14:7c:61:54:d1:07:cc:cc:98:dd:2c:1b: af:eb:89:9f:00:57:23:44:76:90:80:2c:bf:4a:ac:11:2e:18: 57:15:40:bc:27:c8:45:c9:e3:07:56:8b:11:a0:6d:85:4f:4e: 5f:3d:0a:50:bf:1a:9e:23:1b:8f:80:d8:32:be:a8:4b:5d:cc: 6c:fa:03:2c:46:9b:4a:f2:d3:2b:8f:9e:a9:29:bf:f8:a3:0e: 29:87:e6:81:a9:a1:e6:cc:22:5c:a3:ee:a1:50:ca:da:93:52: 9e:07:89:46:c4:4d:a2:dd:4d:b8:b0:d5:c2:9a:f2:89:98:aa: 93:8e:ce:6a:83:db:01:8e:f1:2e:8d:ca:33:c6:95:4f:02:00: ae:70:60:4e:67:e6:7b:bc:2e:8b:0d:46:9b:38:f5:09:c6:0b: df:68:99:04:ff:7b:6f:75:67:ed:9b:a8:b7:bc:5b:3f:df:1b: 68:3a:07:bc:0a:e2:fd:83:e7:3a:dc:d9:36:36:b8:17:2f:96: 81:01:5b:2e:17:21:d6:6c:00:ee:f7:94:2b:14:83:4a:4a:1e: 70:05:6d:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE1NjAxMTAvBgNVBAUTKEU5QzQxMEM3RERENTI2NzBBQjhGODIxNkM4NzYxNEIx MEVDMzE3N0EwHhcNMjUwNTE0MTgxNDE2WhcNMjUwNTIxMTgxNDE2WjAYMRYwFAYD VQQDEw02ODI0ZGQ3OS1lMDVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvR1XZoyUHtliy7zyx4lL8ESZJQL50wvFa+3lcwZ2ZOeInP+KFp6OdAsz5fOF ERRfmw7+VmrlwddLVX7giE7KPfq/VxsW5iGmG71PnFXcoPAmRoy+TvPeoRjyKOpu Z+dcAF4xyEeInoRLke9Vha2JFoJIILcVPBb11dZ8b+lfz1s0AVsnzBftneZU1UYL dJU5DiYNDIRflTNuqz5z8whitn4pqhoy9GZEFxUZzXcew/TldgpP6MVRwX+uOzL8 gfpWkTvMsDrH5YVmwp48rRjcszIpVgdVtlReLJmq6ye37Le6Fn2+mR3GgEA6oYLj 71ykp2OBVy4OUenzmKizmet+rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN/K42qF J1+sgTRy8m5dQcXujwllMB8GA1UdIwQYMBaAFOnEEMfd1SZwq4+CFsh2FLEOwxd6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTU2MC9BNzcwM0U5RUU0 MUQxMUU5OEY1Qjk4MTlDNEY5QUUwMi82Y1FReDkzVkpuQ3JqNElXeUhZVXNRN0RG M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZjUVF4OTNWSm5Dcmo0SVd5SFlVc1E3REYzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTU2MC9BNzcwM0U5RUU0MUQxMUU5OEY1Qjk4MTlDNEY5QUUwMi82Y1FReDkzVkpu Q3JqNElXeUhZVXNRN0RGM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAG9pHubqK6pib7kXEAhMcAaQZbOTieN5NxbjyeGaCTfeFqkS5u8n8o Tn4UfGFU0QfMzJjdLBuv64mfAFcjRHaQgCy/SqwRLhhXFUC8J8hFyeMHVosRoG2F T05fPQpQvxqeIxuPgNgyvqhLXcxs+gMsRptK8tMrj56pKb/4ow4ph+aBqaHmzCJc o+6hUMrak1KeB4lGxE2i3U24sNXCmvKJmKqTjs5qg9sBjvEujcozxpVPAgCucGBO Z+Z7vC6LDUabOPUJxgvfaJkE/3tvdWftm6i3vFs/3xtoOge8CuL9g+c63Nk2NrgX L5aBAVsuFyHWbADu95QrFINKSh5wBW29 -----END CERTIFICATE-----Generated at Fri May 16 10:20:49 2025 by rpki-client