$ rpki-client -vvf rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.mft File: --G6XF5MRXTo6VEiWGdWCd9Ba7c.mft (raw, json) Hash identifier: ns/SVDG0ONLcU0qRkCZbIRjmu0a6GruNvYWd+lpVLHM= Subject key identifier: CD:7F:57:7D:8D:4B:F5:97:28:F7:8C:21:20:A1:85:A0:78:B3:5E:33 Authority key identifier: FB:E1:BA:5C:5E:4C:45:74:E8:E9:51:22:58:67:56:09:DF:41:6B:B7 Certificate issuer: /CN=A9172506/serialNumber=FBE1BA5C5E4C4574E8E9512258675609DF416BB7 Certificate serial: 78 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/--G6XF5MRXTo6VEiWGdWCd9Ba7c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.mft Manifest number: 78 Signing time: Fri 25 Apr 2025 05:46:20 +0000 Manifest this update: Fri 25 Apr 2025 05:46:20 +0000 Manifest next update: Fri 02 May 2025 05:46:20 +0000 Files and hashes: 1: --G6XF5MRXTo6VEiWGdWCd9Ba7c.crl (hash: ZLxNL5wCy6Pxo6ju2w/wXmRNreXSNUy6VdSYs9VbqLs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.crl rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/--G6XF5MRXTo6VEiWGdWCd9Ba7c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172506, serialNumber=FBE1BA5C5E4C4574E8E9512258675609DF416BB7 Validity Not Before: Apr 25 05:46:20 2025 GMT Not After : May 2 05:46:20 2025 GMT Subject: CN=680b21ac-c670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:52:70:01:45:db:bd:84:b8:0f:38:6c:c5:79: 67:ac:a8:9f:dc:32:52:dc:bb:b3:19:b1:bd:68:4d: 8c:78:cd:40:8e:64:99:0c:e1:0e:59:d6:06:38:8c: a7:1b:a2:d6:5b:0e:49:e4:93:86:6f:50:5e:d4:b6: c5:36:b9:90:b3:61:87:9d:76:de:8f:fb:f6:32:de: 2e:f4:bd:d8:75:f4:7e:c8:54:a4:84:4f:ec:aa:68: 9d:fe:24:fa:e6:71:6f:04:5c:e8:77:f8:0d:f7:d3: c6:73:5c:2b:ee:eb:09:d0:8f:21:6e:2b:7c:6f:b0: bf:f8:90:fe:f9:96:76:97:67:26:95:fe:21:2e:f5: 89:47:b7:6f:0c:04:23:55:03:93:19:11:2d:19:3a: c9:a5:1b:92:1c:44:a1:85:bf:cf:44:71:21:71:0c: cb:4c:0d:31:f3:d2:4e:c9:56:90:cc:23:cc:d8:94: b7:03:fb:3c:95:9b:55:17:4d:07:6a:96:42:39:a2: 2e:49:2f:0b:42:c7:c9:e0:b9:f4:24:76:18:1b:0e: ee:b7:d3:2f:45:a2:22:9a:dd:9f:4c:6f:59:67:ff: 50:23:09:3b:eb:53:ab:a6:c0:d1:3c:5f:46:79:12: a9:f5:2c:24:61:1f:4c:de:a4:46:fc:2a:71:1e:11: 28:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:7F:57:7D:8D:4B:F5:97:28:F7:8C:21:20:A1:85:A0:78:B3:5E:33 X509v3 Authority Key Identifier: keyid:FB:E1:BA:5C:5E:4C:45:74:E8:E9:51:22:58:67:56:09:DF:41:6B:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/--G6XF5MRXTo6VEiWGdWCd9Ba7c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:7d:64:14:85:1d:3e:48:02:10:17:c2:04:db:c1:02:05:56: f1:a9:17:fd:27:16:3e:8d:29:fd:32:15:18:0f:38:a7:db:78: ea:36:f6:d2:c7:49:fc:42:43:78:0b:ab:57:50:72:1c:15:60: e4:2c:71:23:ef:b1:4d:9d:13:f7:c5:cd:c2:44:6b:ca:bd:8f: d1:c9:a1:c7:bb:84:84:d4:22:d7:b9:9c:85:a9:6f:cd:59:44: 6b:8e:13:4d:2c:ce:24:ea:e9:82:f2:f5:fd:e4:da:52:18:1a: 2c:37:b3:48:44:e9:65:13:9d:8b:d0:ec:d5:e7:57:02:ff:5e: 7c:0c:25:96:c3:42:cb:9c:2f:3d:c5:35:4a:e9:1e:ee:3d:8d: 10:71:27:80:6a:a5:1d:d6:71:e6:a3:a2:b3:7c:c7:7a:cb:c6: 1f:76:1a:dc:a2:1a:df:28:2e:86:de:b5:dc:37:a9:db:ef:b3: 33:6a:7b:0a:34:c7:b8:a3:6e:1c:80:1c:11:a4:79:c3:f1:3e: c3:bb:7d:7d:03:0b:6b:0e:1a:72:a7:19:7f:05:fa:36:5d:b6: 96:2a:eb:12:41:9c:d5:8f:f6:a6:75:51:a0:85:70:29:74:dd: 72:cc:ce:16:8d:e3:72:f7:fc:bb:2a:02:dc:85:df:bf:84:79: e4:96:55:00 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MjUwNjExMC8GA1UEBRMoRkJFMUJBNUM1RTRDNDU3NEU4RTk1MTIyNTg2NzU2MDlE RjQxNkJCNzAeFw0yNTA0MjUwNTQ2MjBaFw0yNTA1MDIwNTQ2MjBaMBgxFjAUBgNV BAMTDTY4MGIyMWFjLWM2NzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFUnABRdu9hLgPOGzFeWesqJ/cMlLcu7MZsb1oTYx4zUCOZJkM4Q5Z1gY4jKcb otZbDknkk4ZvUF7UtsU2uZCzYYeddt6P+/Yy3i70vdh19H7IVKSET+yqaJ3+JPrm cW8EXOh3+A3308ZzXCvu6wnQjyFuK3xvsL/4kP75lnaXZyaV/iEu9YlHt28MBCNV A5MZES0ZOsmlG5IcRKGFv89EcSFxDMtMDTHz0k7JVpDMI8zYlLcD+zyVm1UXTQdq lkI5oi5JLwtCx8ngufQkdhgbDu630y9FoiKa3Z9Mb1ln/1AjCTvrU6umwNE8X0Z5 Eqn1LCRhH0zepEb8KnEeEShnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzX9XfY1L 9Zco94whIKGFoHizXjMwHwYDVR0jBBgwFoAU++G6XF5MRXTo6VEiWGdWCd9Ba7cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcyNTA2L0E1RTRDNDVFNkVE RTExRUZBQUMyQ0I1REM0RjlBRTAyLy0tRzZYRjVNUlhUbzZWRWlXR2RXQ2Q5QmE3 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvLS1HNlhGNU1SWFRvNlZFaVdHZFdDZDlCYTdjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcy NTA2L0E1RTRDNDVFNkVERTExRUZBQUMyQ0I1REM0RjlBRTAyLy0tRzZYRjVNUlhU bzZWRWlXR2RXQ2Q5QmE3Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI99ZBSFHT5IAhAXwgTbwQIFVvGpF/0nFj6NKf0yFRgPOKfbeOo29tLH SfxCQ3gLq1dQchwVYOQscSPvsU2dE/fFzcJEa8q9j9HJoce7hITUIte5nIWpb81Z RGuOE00sziTq6YLy9f3k2lIYGiw3s0hE6WUTnYvQ7NXnVwL/XnwMJZbDQsucLz3F NUrpHu49jRBxJ4BqpR3WceajorN8x3rLxh92GtyiGt8oLobetdw3qdvvszNqewo0 x7ijbhyAHBGkecPxPsO7fX0DC2sOGnKnGX8F+jZdtpYq6xJBnNWP9qZ1UaCFcCl0 3XLMzhaN43L3/LsqAtyF37+EeeSWVQA= -----END CERTIFICATE-----Generated at Fri Apr 25 08:23:59 2025 by rpki-client on console.sobornost.net