$ rpki-client -vvf rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft File: Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft (raw, json) Hash identifier: tukP3KfmyTnajfTu3aJUIDbCd0ci7IyAs15Il73tRIQ= Subject key identifier: C1:84:5E:AD:B9:9F:14:69:E8:AA:75:F7:6D:F2:0F:E5:97:61:ED:09 Authority key identifier: 21:BE:8C:8F:E9:53:F6:EC:97:B7:F1:21:61:7E:D9:10:47:DA:A5:A4 Certificate issuer: /CN=A9176302/serialNumber=21BE8C8FE953F6EC97B7F121617ED91047DAA5A4 Certificate serial: A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft Manifest number: A6 Signing time: Wed 14 May 2025 01:46:28 +0000 Manifest this update: Wed 14 May 2025 01:46:27 +0000 Manifest next update: Wed 21 May 2025 01:46:27 +0000 Files and hashes: 1: Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.crl (hash: CGqWTsBHdpI8nworv7laMrrUUBzOEGuN2TpBs5U58iI=) 2: 0EE57B38378F11EF88F9BF5AC4F9AE02.roa (hash: J7/kiN3L5QvG4wInB+6wlLOPrN0QJOnlQzSphywWm/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.crl rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 01:46:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 168 (0xa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176302, serialNumber=21BE8C8FE953F6EC97B7F121617ED91047DAA5A4 Validity Not Before: May 14 01:46:27 2025 GMT Not After : May 21 01:46:27 2025 GMT Subject: CN=6823f5f3-2ecd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4a:39:15:8b:1a:74:d9:93:5b:a0:c7:ed:f1: 92:39:78:eb:eb:3a:0f:78:30:5a:b2:63:ed:09:5d: 88:cf:38:7d:07:64:9f:3e:99:0b:ff:a8:3e:46:04: 11:8d:fe:1d:14:0f:19:70:2c:f7:54:70:75:a6:d3: 41:e3:d2:74:7c:01:42:4a:ad:80:4d:be:52:3b:1b: 98:da:3c:58:cb:b4:a1:7c:90:13:ff:ed:29:1a:59: 02:bc:a2:e9:99:00:7a:d4:38:e0:d3:90:9d:03:7a: 2b:14:1a:37:22:39:69:c0:9b:c8:96:95:d3:0e:76: 3e:ee:10:ee:bd:15:e1:8b:5b:b3:fb:af:fe:bc:05: 5c:82:22:74:b0:74:fe:50:77:46:c4:e6:de:07:1e: 68:58:5c:eb:84:00:f3:db:5f:8b:05:d2:81:71:a2: 57:25:d3:5e:7c:cd:75:0a:f6:56:5c:c8:3c:8c:3c: 8b:c4:34:31:91:5f:92:7d:c5:55:e0:85:3d:a6:f1: a4:3d:15:23:70:f3:95:59:de:5d:07:77:e3:57:0f: 9a:13:f5:4f:fe:c1:35:9b:d5:48:5f:8c:38:c6:dc: 1f:c0:21:91:ca:c5:a4:e6:d2:55:f8:e5:c0:74:0e: 42:b1:fa:83:85:1d:5d:5a:d3:4a:21:06:f4:dc:8d: d4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:84:5E:AD:B9:9F:14:69:E8:AA:75:F7:6D:F2:0F:E5:97:61:ED:09 X509v3 Authority Key Identifier: keyid:21:BE:8C:8F:E9:53:F6:EC:97:B7:F1:21:61:7E:D9:10:47:DA:A5:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:1f:76:51:46:2a:41:60:90:c8:10:8f:64:1a:85:9b:04:3e: 5d:d3:df:09:0b:7d:37:9a:8b:2b:80:6b:a1:f8:2c:0c:70:c6: 41:38:ac:dd:d0:9c:30:d9:13:fc:7e:94:6b:b3:c8:e7:df:fc: 2b:b9:3c:a7:5b:c2:45:b8:b7:64:f0:f9:2a:d2:da:fd:0c:66: 1e:da:80:f5:d1:9d:fc:37:82:9c:6c:e3:2f:c4:72:71:86:95: c3:5e:2e:81:9a:64:06:10:1a:04:d9:77:e6:36:48:98:40:cf: 19:b9:ac:26:d6:3b:59:26:c1:c8:31:69:9c:a0:73:f9:e1:cc: e0:56:0c:d4:69:96:ef:41:b4:cf:31:1a:aa:2d:9a:0a:7e:df: c4:9c:38:3f:84:64:4d:c9:c5:66:4b:b1:80:9e:6d:22:af:4f: 7f:dc:23:09:ec:93:72:b0:89:8d:83:19:aa:95:65:8d:a6:dc: 19:ef:a3:12:ed:f2:ab:4f:0e:bc:d9:dd:d0:81:34:92:c9:59: 30:b1:ec:1e:84:48:26:da:ea:62:bb:61:cd:61:4c:c5:57:5d: 8d:bb:36:cc:c1:02:86:d5:6e:af:2d:1d:fd:4a:0c:7c:fb:e1: d0:48:d4:ab:78:ee:ef:53:78:8b:81:44:ce:6b:33:9e:30:ea: 5d:f0:cd:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzYzMDIxMTAvBgNVBAUTKDIxQkU4QzhGRTk1M0Y2RUM5N0I3RjEyMTYxN0VEOTEw NDdEQUE1QTQwHhcNMjUwNTE0MDE0NjI3WhcNMjUwNTIxMDE0NjI3WjAYMRYwFAYD VQQDEw02ODIzZjVmMy0yZWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxUo5FYsadNmTW6DH7fGSOXjr6zoPeDBasmPtCV2Izzh9B2SfPpkL/6g+RgQR jf4dFA8ZcCz3VHB1ptNB49J0fAFCSq2ATb5SOxuY2jxYy7ShfJAT/+0pGlkCvKLp mQB61Djg05CdA3orFBo3IjlpwJvIlpXTDnY+7hDuvRXhi1uz+6/+vAVcgiJ0sHT+ UHdGxObeBx5oWFzrhADz21+LBdKBcaJXJdNefM11CvZWXMg8jDyLxDQxkV+SfcVV 4IU9pvGkPRUjcPOVWd5dB3fjVw+aE/VP/sE1m9VIX4w4xtwfwCGRysWk5tJV+OXA dA5CsfqDhR1dWtNKIQb03I3U9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMGEXq25 nxRp6Kp1923yD+WXYe0JMB8GA1UdIwQYMBaAFCG+jI/pU/bsl7fxIWF+2RBH2qWk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjMwMi9BMzJGREZERTM3 NDYxMUVGOTY2NTMzMjZDNEY5QUUwMi9JYjZNai1sVDl1eVh0X0VoWVg3WkVFZmFw YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0liNk1qLWxUOXV5WHRfRWhZWDdaRUVmYXBhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjMwMi9BMzJGREZERTM3NDYxMUVGOTY2NTMzMjZDNEY5QUUwMi9JYjZNai1sVDl1 eVh0X0VoWVg3WkVFZmFwYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmH3ZRRipBYJDIEI9kGoWbBD5d098JC303mosrgGuh+CwMcMZBOKzd 0Jww2RP8fpRrs8jn3/wruTynW8JFuLdk8Pkq0tr9DGYe2oD10Z38N4KcbOMvxHJx hpXDXi6BmmQGEBoE2XfmNkiYQM8Zuawm1jtZJsHIMWmcoHP54czgVgzUaZbvQbTP MRqqLZoKft/EnDg/hGRNycVmS7GAnm0ir09/3CMJ7JNysImNgxmqlWWNptwZ76MS 7fKrTw682d3QgTSSyVkwsewehEgm2upiu2HNYUzFV12NuzbMwQKG1W6vLR39Sgx8 ++HQSNSreO7vU3iLgUTOazOeMOpd8M2l -----END CERTIFICATE-----Generated at Wed May 14 13:29:27 2025 by rpki-client