$ rpki-client -vvf rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.mft File: 6q7GCbncI1xGucXxvKPNvsf_7ig.mft (raw, json) Hash identifier: TAvub9u5CL7yvsVUVLSb69SH6VWrK3zzKCdWM6iPn3s= Subject key identifier: 8C:A6:39:5B:E9:8A:2E:D6:26:17:86:54:2F:E1:BE:02:AA:3B:BE:25 Authority key identifier: EA:AE:C6:09:B9:DC:23:5C:46:B9:C5:F1:BC:A3:CD:BE:C7:FF:EE:28 Certificate issuer: /CN=A917A82D/serialNumber=EAAEC609B9DC235C46B9C5F1BCA3CDBEC7FFEE28 Certificate serial: 0C32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6q7GCbncI1xGucXxvKPNvsf_7ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.mft Manifest number: 0C14 Signing time: Sat 10 May 2025 18:31:42 +0000 Manifest this update: Sat 10 May 2025 18:31:42 +0000 Manifest next update: Sat 17 May 2025 18:31:42 +0000 Files and hashes: 1: 6q7GCbncI1xGucXxvKPNvsf_7ig.crl (hash: xuRXJZmqQJ1INDHkOS3+YDfKHGbt1YFpi61aVZb+t8o=) 2: 403FDDD0DF3511ED8FBA823DC4F9AE02.roa (hash: n02qcDfoz5xfgtE3pmF9DuTrufYGzGxNykq63R1mDas=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.crl rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6q7GCbncI1xGucXxvKPNvsf_7ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:31:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3122 (0xc32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A82D, serialNumber=EAAEC609B9DC235C46B9C5F1BCA3CDBEC7FFEE28 Validity Not Before: May 10 18:31:42 2025 GMT Not After : May 17 18:31:42 2025 GMT Subject: CN=681f9b8e-bd24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b9:be:77:a1:7e:cf:ae:44:e9:a1:45:5d:b5: 38:5d:45:76:23:af:de:8f:44:2a:c9:58:0b:8e:1a: 8a:32:f4:c9:6a:8c:56:ad:ef:7e:6f:68:ca:5c:b6: ee:25:16:74:8b:7f:2f:03:7e:c9:3b:81:f2:4d:1f: 64:9f:2a:84:8a:0f:d0:3b:86:61:e1:50:a9:87:68: ec:79:ac:00:3b:9e:16:6d:c9:6c:54:21:d3:1f:09: 01:04:06:0a:52:99:9d:3f:d1:d8:fc:a0:82:57:ab: fe:a5:ed:a5:2b:d3:dd:2c:95:1e:d7:15:e2:01:2c: 0e:d0:7a:5b:7d:c8:75:11:41:2f:28:e4:44:e7:d2: a4:15:0e:fa:be:f8:94:0f:f9:0f:78:4c:bb:43:74: c2:98:2d:cf:8b:06:c3:19:f4:26:61:1f:f4:bc:e3: f9:6c:49:d5:69:7d:c0:80:e6:71:d7:2c:d9:fc:2c: 55:87:c4:14:f9:13:37:3a:47:0a:0a:bd:be:c9:39: 71:95:5b:be:65:e4:25:00:8f:b3:39:da:90:f3:00: 98:4c:77:b8:6e:43:d0:62:14:14:14:26:9f:42:d0: 0b:b7:86:46:bd:2b:dd:b5:09:75:98:a3:65:9a:23: f3:1a:3e:27:b2:06:de:6f:83:b8:e3:23:28:b3:d9: 51:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:A6:39:5B:E9:8A:2E:D6:26:17:86:54:2F:E1:BE:02:AA:3B:BE:25 X509v3 Authority Key Identifier: keyid:EA:AE:C6:09:B9:DC:23:5C:46:B9:C5:F1:BC:A3:CD:BE:C7:FF:EE:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6q7GCbncI1xGucXxvKPNvsf_7ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:d2:d5:56:c5:d2:b3:13:b4:e5:b9:96:7b:4d:65:4b:a3:0e: 27:8d:6d:79:9d:ed:56:5e:9f:b1:78:f5:2c:db:dc:f1:d1:2b: 3d:57:30:1b:1e:ca:b2:6c:3c:9a:c2:e5:3e:4b:80:e1:37:ac: be:ae:02:d5:f2:a5:68:69:ab:1b:0b:84:60:cf:71:41:af:27: 1c:de:63:53:b0:4a:e2:64:57:88:93:f8:49:8b:eb:dd:c4:a5: 4a:4b:d9:a3:1e:0a:e2:18:1f:41:c2:6a:eb:cf:4f:bb:39:dd: ae:f2:55:fc:fd:d1:b1:ef:82:6a:64:f9:85:b4:59:be:51:71: 62:1f:7f:29:13:3a:02:67:a0:ba:a3:47:6f:5a:4a:35:05:c6: aa:49:10:c0:88:0b:1d:7d:ac:1b:2b:81:8f:2b:09:8a:82:ba: f7:f6:80:7b:b2:ca:04:98:7a:c6:a1:51:fd:46:46:8a:f1:f0: 1d:21:e8:ab:d6:60:cb:27:f2:d7:ea:26:e8:de:db:de:01:33: 82:d8:c0:97:48:f2:5d:b5:ad:f9:9e:70:56:1a:d1:0f:7f:44: 87:16:a5:c0:ad:9d:e1:14:6c:21:30:a2:b4:05:65:07:b6:b0: 7b:a7:53:81:9e:63:ce:82:3b:f9:b1:2e:0f:17:ec:52:6b:ed: 48:66:3c:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E4MkQxMTAvBgNVBAUTKEVBQUVDNjA5QjlEQzIzNUM0NkI5QzVGMUJDQTNDREJF QzdGRkVFMjgwHhcNMjUwNTEwMTgzMTQyWhcNMjUwNTE3MTgzMTQyWjAYMRYwFAYD VQQDEw02ODFmOWI4ZS1iZDI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0bm+d6F+z65E6aFFXbU4XUV2I6/ej0QqyVgLjhqKMvTJaoxWre9+b2jKXLbu JRZ0i38vA37JO4HyTR9knyqEig/QO4Zh4VCph2jseawAO54WbclsVCHTHwkBBAYK UpmdP9HY/KCCV6v+pe2lK9PdLJUe1xXiASwO0Hpbfch1EUEvKORE59KkFQ76vviU D/kPeEy7Q3TCmC3PiwbDGfQmYR/0vOP5bEnVaX3AgOZx1yzZ/CxVh8QU+RM3OkcK Cr2+yTlxlVu+ZeQlAI+zOdqQ8wCYTHe4bkPQYhQUFCafQtALt4ZGvSvdtQl1mKNl miPzGj4nsgbeb4O44yMos9lRzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIymOVvp ii7WJheGVC/hvgKqO74lMB8GA1UdIwQYMBaAFOquxgm53CNcRrnF8byjzb7H/+4o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTgyRC9BREY2NjVDMDEy NzgxMUVBOUI4RUQwMzRDNEY5QUUwMi82cTdHQ2JuY0kxeEd1Y1h4dktQTnZzZl83 aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZxN0dDYm5jSTF4R3VjWHh2S1BOdnNmXzdpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTgyRC9BREY2NjVDMDEyNzgxMUVBOUI4RUQwMzRDNEY5QUUwMi82cTdHQ2JuY0kx eEd1Y1h4dktQTnZzZl83aWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBz0tVWxdKzE7TluZZ7TWVLow4njW15ne1WXp+xePUs29zx0Ss9VzAb HsqybDyawuU+S4DhN6y+rgLV8qVoaasbC4Rgz3FBrycc3mNTsEriZFeIk/hJi+vd xKVKS9mjHgriGB9Bwmrrz0+7Od2u8lX8/dGx74JqZPmFtFm+UXFiH38pEzoCZ6C6 o0dvWko1BcaqSRDAiAsdfawbK4GPKwmKgrr39oB7ssoEmHrGoVH9RkaK8fAdIeir 1mDLJ/LX6ibo3tveATOC2MCXSPJdta35nnBWGtEPf0SHFqXArZ3hFGwhMKK0BWUH trB7p1OBnmPOgjv5sS4PF+xSa+1IZjwk -----END CERTIFICATE-----Generated at Mon May 12 04:02:53 2025 by rpki-client