$ rpki-client -vvf rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/se6IcQY6AQgzW9-qPjoT-cnHkN4.mft File: se6IcQY6AQgzW9-qPjoT-cnHkN4.mft (raw, json) Hash identifier: YQ3g4vL5JUg8nKvlnULHU62kpI3lKo/r2FQMyVl9U44= Subject key identifier: 8A:8D:5F:9E:EC:16:B6:62:A6:88:9A:ED:58:5F:B8:AE:C9:A3:68:B0 Authority key identifier: B1:EE:88:71:06:3A:01:08:33:5B:DF:AA:3E:3A:13:F9:C9:C7:90:DE Certificate issuer: /CN=A919EC2D/serialNumber=B1EE8871063A0108335BDFAA3E3A13F9C9C790DE Certificate serial: 01A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/se6IcQY6AQgzW9-qPjoT-cnHkN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/se6IcQY6AQgzW9-qPjoT-cnHkN4.mft Manifest number: 0326 Signing time: Tue 13 May 2025 02:38:34 +0000 Manifest this update: Tue 13 May 2025 02:38:34 +0000 Manifest next update: Tue 20 May 2025 02:38:34 +0000 Files and hashes: 1: se6IcQY6AQgzW9-qPjoT-cnHkN4.crl (hash: VUwOgsa0blDxumijuFiG+h4g7JQxk/FeB+bCAqzrlTc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/se6IcQY6AQgzW9-qPjoT-cnHkN4.crl rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/se6IcQY6AQgzW9-qPjoT-cnHkN4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/se6IcQY6AQgzW9-qPjoT-cnHkN4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:38:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 419 (0x1a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EC2D, serialNumber=B1EE8871063A0108335BDFAA3E3A13F9C9C790DE Validity Not Before: May 13 02:38:34 2025 GMT Not After : May 20 02:38:34 2025 GMT Subject: CN=6822b0aa-592d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:39:fb:3c:db:37:fe:a4:28:72:b4:3a:85:92: 89:7b:fd:7b:64:49:15:36:7b:cb:27:2c:a1:3f:76: a1:f8:83:8d:90:3c:00:cd:42:6b:ae:1a:cf:1c:6d: 60:d3:2b:01:98:10:a1:99:26:b5:80:fd:c5:06:34: 77:91:bd:0e:53:56:8b:cc:5d:22:8a:ac:c1:49:96: cd:e4:eb:ed:ba:50:c5:0f:cb:71:89:5b:16:4d:02: 0a:c5:9a:f7:43:2f:9a:de:d1:80:fa:ea:34:96:43: e3:4f:da:71:f5:23:08:12:b0:48:da:c9:1d:ca:57: 30:07:67:95:6d:1f:a0:ff:44:d3:fb:a2:f2:22:a9: ba:40:d9:86:c4:90:86:66:0a:83:c0:05:85:51:b5: 58:ef:38:fe:41:96:54:dc:f3:bf:17:10:73:48:4d: 0d:1f:64:b6:ed:0c:1a:4f:3c:40:61:28:e7:f5:71: 46:0f:78:e8:0d:92:fe:25:6b:87:9d:52:32:6f:c2: 45:5a:e3:28:12:91:9e:14:dc:44:cc:27:96:c6:78: 3e:fb:2f:0a:6a:ed:50:97:fe:6b:04:fa:0d:59:f0: 68:6b:37:e2:8e:2d:a3:33:09:da:b3:06:81:e4:d4: 4b:b5:6d:18:e3:8e:41:50:37:8c:aa:c4:f1:8e:c6: 1f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:8D:5F:9E:EC:16:B6:62:A6:88:9A:ED:58:5F:B8:AE:C9:A3:68:B0 X509v3 Authority Key Identifier: keyid:B1:EE:88:71:06:3A:01:08:33:5B:DF:AA:3E:3A:13:F9:C9:C7:90:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/se6IcQY6AQgzW9-qPjoT-cnHkN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/se6IcQY6AQgzW9-qPjoT-cnHkN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/se6IcQY6AQgzW9-qPjoT-cnHkN4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:41:57:51:a8:be:14:92:20:3a:35:5a:1b:07:e1:f4:45:cb: c5:a3:e1:38:83:ae:0c:36:f5:4f:12:ca:a8:05:17:3b:84:92: c5:ab:0f:15:f4:54:7a:ce:8d:c0:16:bc:33:e6:d3:6c:6e:98: 1e:5a:5e:2f:44:c7:f1:75:74:16:a2:c5:b9:e8:cc:ee:8d:5c: 75:ab:8f:7b:d1:35:45:90:57:83:7d:2d:42:32:92:1f:d6:0f: 2c:c2:e4:0a:e8:5b:87:a0:83:5e:a7:34:38:57:fb:e4:e4:8b: 97:1b:b7:4c:8f:ae:39:42:76:3d:00:da:b3:ee:ab:0c:2f:09: 30:2c:de:33:f0:a9:3f:8c:8e:38:f1:fb:d5:e8:7b:03:5a:77: 67:af:27:49:1b:4c:b0:a1:e9:d3:98:5b:82:05:ad:d7:0d:4e: f0:9f:c5:ca:9e:23:f2:15:24:af:33:29:65:d2:d5:28:97:5b: 44:55:97:e8:c6:f5:c7:fe:f0:52:cf:10:2e:e9:fe:38:9c:8d: 8f:c7:a5:ae:36:f3:59:c8:93:ab:42:df:6f:5e:ac:5e:20:cf: 13:3e:e7:13:e0:ed:23:f7:06:1a:7e:4a:27:72:a4:d1:a2:32: 24:d0:ec:b9:a2:90:05:99:0b:2c:51:39:92:7b:d0:98:1f:d5: 9d:82:3c:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVDMkQxMTAvBgNVBAUTKEIxRUU4ODcxMDYzQTAxMDgzMzVCREZBQTNFM0ExM0Y5 QzlDNzkwREUwHhcNMjUwNTEzMDIzODM0WhcNMjUwNTIwMDIzODM0WjAYMRYwFAYD VQQDEw02ODIyYjBhYS01OTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzjn7PNs3/qQocrQ6hZKJe/17ZEkVNnvLJyyhP3ah+IONkDwAzUJrrhrPHG1g 0ysBmBChmSa1gP3FBjR3kb0OU1aLzF0iiqzBSZbN5OvtulDFD8txiVsWTQIKxZr3 Qy+a3tGA+uo0lkPjT9px9SMIErBI2skdylcwB2eVbR+g/0TT+6LyIqm6QNmGxJCG ZgqDwAWFUbVY7zj+QZZU3PO/FxBzSE0NH2S27QwaTzxAYSjn9XFGD3joDZL+JWuH nVIyb8JFWuMoEpGeFNxEzCeWxng++y8Kau1Ql/5rBPoNWfBoazfiji2jMwnaswaB 5NRLtW0Y445BUDeMqsTxjsYfOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIqNX57s FrZipoia7VhfuK7Jo2iwMB8GA1UdIwQYMBaAFLHuiHEGOgEIM1vfqj46E/nJx5De MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUMyRC84MkI3MjVFOEJD RTMxMUVEODQ5RjkzMzFDNEY5QUUwMi9zZTZJY1FZNkFRZ3pXOS1xUGpvVC1jbkhr TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NlNkljUVk2QVFnelc5LXFQam9ULWNuSGtONC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUMyRC84MkI3MjVFOEJDRTMxMUVEODQ5RjkzMzFDNEY5QUUwMi9zZTZJY1FZNkFR Z3pXOS1xUGpvVC1jbkhrTjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIQVdRqL4UkiA6NVobB+H0RcvFo+E4g64MNvVPEsqoBRc7hJLFqw8V 9FR6zo3AFrwz5tNsbpgeWl4vRMfxdXQWosW56MzujVx1q4970TVFkFeDfS1CMpIf 1g8swuQK6FuHoINepzQ4V/vk5IuXG7dMj645QnY9ANqz7qsMLwkwLN4z8Kk/jI44 8fvV6HsDWndnrydJG0ywoenTmFuCBa3XDU7wn8XKniPyFSSvMyll0tUol1tEVZfo xvXH/vBSzxAu6f44nI2Px6WuNvNZyJOrQt9vXqxeIM8TPucT4O0j9wYafkoncqTR ojIk0Oy5opAFmQssUTmSe9CYH9Wdgjxj -----END CERTIFICATE-----Generated at Thu May 15 03:39:57 2025 by rpki-client