$ rpki-client -vvf rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft File: T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft (raw, json) Hash identifier: hxziGD/qaFuzpvON5n8DmxNui1gv+IqebjsIsUGTok0= Subject key identifier: 42:C6:16:61:0F:68:0B:B3:E8:92:F7:4B:DB:54:28:E8:3E:3F:79:64 Authority key identifier: 4F:45:FA:69:D9:E5:F5:50:84:DD:C9:22:89:52:76:A6:40:23:9C:1C Certificate issuer: /CN=A9190818/serialNumber=4F45FA69D9E5F55084DDC922895276A640239C1C Certificate serial: 6D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T0X6adnl9VCE3ckiiVJ2pkAjnBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft Manifest number: 6B Signing time: Tue 13 May 2025 06:08:30 +0000 Manifest this update: Tue 13 May 2025 06:08:29 +0000 Manifest next update: Tue 20 May 2025 06:08:29 +0000 Files and hashes: 1: T0X6adnl9VCE3ckiiVJ2pkAjnBw.crl (hash: OFptpHmh5R0W5oumB+Fqh3Js1w9zOG0TO+qMUlcldp8=) 2: DE3EC424979411EF875EE369C4F9AE02.roa (hash: 5QE8zDybdgUA94Tpp6+guNsFhK7KXTxJ0yxg/2zsqZo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.crl rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T0X6adnl9VCE3ckiiVJ2pkAjnBw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:08:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190818, serialNumber=4F45FA69D9E5F55084DDC922895276A640239C1C Validity Not Before: May 13 06:08:29 2025 GMT Not After : May 20 06:08:29 2025 GMT Subject: CN=6822e1de-496c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:5a:ad:3c:47:62:7d:a4:79:08:a2:8b:1c:cf: a0:9f:f1:5d:e1:01:d1:6f:09:c1:f0:c5:66:ab:13: 9b:18:a8:96:27:7b:4b:4b:5c:bb:30:27:ab:57:10: 53:e9:01:c8:a4:54:cd:b6:4a:19:dd:33:bb:4c:28: c7:02:33:55:61:b0:37:91:ed:ec:e5:df:63:24:02: 54:c1:fe:b7:6f:cc:d1:78:e0:fe:7b:26:ff:60:c8: e8:73:80:45:b9:9e:d4:fc:44:89:03:3b:be:27:5b: a1:fe:1a:98:26:45:ee:00:1e:5b:37:91:f9:d9:af: 58:83:b1:47:53:fa:96:96:79:79:7c:b7:10:78:ad: a5:7b:4c:0c:68:b4:5e:02:fc:35:58:83:44:f1:61: 62:28:27:27:67:82:f6:c8:ea:69:4b:6e:6f:01:a4: d9:7c:5e:6b:65:97:e5:27:0b:5c:72:f5:4b:00:2d: 40:55:16:94:2f:b8:2d:48:4e:4c:28:f5:a5:29:d5: fd:44:6c:df:24:d3:ec:a7:cf:6d:80:65:7c:6a:f4: ab:f2:50:45:21:4b:c7:28:bc:43:1a:54:33:5a:25: f9:2b:dd:11:98:91:ba:1c:58:23:96:cc:9c:48:44: a5:db:97:f6:ea:40:e4:a7:49:5f:07:9c:e1:a9:6d: 4f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C6:16:61:0F:68:0B:B3:E8:92:F7:4B:DB:54:28:E8:3E:3F:79:64 X509v3 Authority Key Identifier: keyid:4F:45:FA:69:D9:E5:F5:50:84:DD:C9:22:89:52:76:A6:40:23:9C:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T0X6adnl9VCE3ckiiVJ2pkAjnBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:3b:22:ab:65:0c:9d:f1:e8:18:4c:b1:40:35:e7:71:26:f3: 1f:c8:34:84:56:41:5e:42:e6:f1:5a:08:44:3a:9e:44:1c:ab: fe:27:6b:33:97:cd:ee:7b:1d:38:f5:80:b8:3f:17:18:db:9e: 21:17:4a:51:b9:b1:f9:5b:c7:fd:11:8a:2a:9e:78:dc:60:17: f9:c3:27:4d:e6:c5:31:da:40:40:5a:08:14:32:c0:dc:63:a8: 64:de:2c:89:08:e0:69:81:e0:6b:42:10:52:22:5b:da:cf:72: 3e:bf:cc:74:02:9d:19:61:67:65:e6:d9:d2:c2:b7:33:53:a8: 3e:c6:9c:11:6b:01:97:60:4a:94:6e:02:f5:90:d6:0b:9a:71: 85:5b:83:17:2e:64:fc:73:c5:d5:c8:76:1e:90:0a:54:4a:93: 92:b0:e6:d0:f6:c7:2c:c2:7e:28:26:20:57:54:08:f6:b6:66: a7:a7:08:ad:2a:9a:7f:94:2d:39:fe:bc:93:cc:5f:ac:5b:b0: 78:a3:42:31:a1:d1:b3:93:3b:9d:b3:85:04:58:da:e6:a5:92: 32:5d:f2:7b:34:8f:2e:91:24:27:be:8e:67:41:42:79:5c:f5: af:ee:bd:ba:e8:e5:9d:ab:a4:6e:f9:bd:36:2c:b3:01:7d:98: 7b:7a:08:61 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MDgxODExMC8GA1UEBRMoNEY0NUZBNjlEOUU1RjU1MDg0RERDOTIyODk1Mjc2QTY0 MDIzOUMxQzAeFw0yNTA1MTMwNjA4MjlaFw0yNTA1MjAwNjA4MjlaMBgxFjAUBgNV BAMTDTY4MjJlMWRlLTQ5NmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfWq08R2J9pHkIooscz6Cf8V3hAdFvCcHwxWarE5sYqJYne0tLXLswJ6tXEFPp AcikVM22ShndM7tMKMcCM1VhsDeR7ezl32MkAlTB/rdvzNF44P57Jv9gyOhzgEW5 ntT8RIkDO74nW6H+GpgmRe4AHls3kfnZr1iDsUdT+paWeXl8txB4raV7TAxotF4C /DVYg0TxYWIoJydngvbI6mlLbm8BpNl8Xmtll+UnC1xy9UsALUBVFpQvuC1ITkwo 9aUp1f1EbN8k0+ynz22AZXxq9KvyUEUhS8covEMaVDNaJfkr3RGYkbocWCOWzJxI RKXbl/bqQOSnSV8HnOGpbU8FAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQsYWYQ9o C7PokvdL21Qo6D4/eWQwHwYDVR0jBBgwFoAUT0X6adnl9VCE3ckiiVJ2pkAjnBww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkwODE4Lzc1M0MzMDE4OTA5 RDExRUY5NzE3RjY1MEM0RjlBRTAyL1QwWDZhZG5sOVZDRTNja2lpVkoycGtBam5C dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVDBYNmFkbmw5VkNFM2NraWlWSjJwa0FqbkJ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkw ODE4Lzc1M0MzMDE4OTA5RDExRUY5NzE3RjY1MEM0RjlBRTAyL1QwWDZhZG5sOVZD RTNja2lpVkoycGtBam5Cdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIQ7IqtlDJ3x6BhMsUA153Em8x/INIRWQV5C5vFaCEQ6nkQcq/4nazOX ze57HTj1gLg/FxjbniEXSlG5sflbx/0RiiqeeNxgF/nDJ03mxTHaQEBaCBQywNxj qGTeLIkI4GmB4GtCEFIiW9rPcj6/zHQCnRlhZ2Xm2dLCtzNTqD7GnBFrAZdgSpRu AvWQ1guacYVbgxcuZPxzxdXIdh6QClRKk5Kw5tD2xyzCfigmIFdUCPa2ZqenCK0q mn+ULTn+vJPMX6xbsHijQjGh0bOTO52zhQRY2ualkjJd8ns0jy6RJCe+jmdBQnlc 9a/uvbro5Z2rpG75vTYsswF9mHt6CGE= -----END CERTIFICATE-----Generated at Wed May 14 17:30:14 2025 by rpki-client