$ rpki-client -vvf rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.mft File: 6oOvSiHLwgcfVpVuXd1YTHY4-ls.mft (raw, json) Hash identifier: iB3jUXIHJMkbqAzlNnCkzyxrNS6F/qtOJFSWZi2Uc7g= Subject key identifier: 28:82:AB:A0:68:85:E9:F7:42:D4:AE:7A:B2:1F:2A:BE:24:16:61:99 Authority key identifier: EA:83:AF:4A:21:CB:C2:07:1F:56:95:6E:5D:DD:58:4C:76:38:FA:5B Certificate issuer: /CN=A911C362/serialNumber=EA83AF4A21CBC2071F56956E5DDD584C7638FA5B Certificate serial: EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.mft Manifest number: D3 Signing time: Sat 17 May 2025 05:32:44 +0000 Manifest this update: Sat 17 May 2025 05:32:44 +0000 Manifest next update: Sat 24 May 2025 05:32:44 +0000 Files and hashes: 1: 6oOvSiHLwgcfVpVuXd1YTHY4-ls.crl (hash: kSuUzjTbfVcaoe5GuoxuOr49/jLSJLw0HnOuq7QwQxM=) 2: 6492D4985B9011EF8DB48C24C4F9AE02.roa (hash: UPmCGARDDskezK4JcktOFu0RSSCwY7yg4+DuQZjC7iA=) 3: 90C05DD633A111EF862DBF10C4F9AE02.roa (hash: xnGbCBgPXY4F/fgFAEYRN9dsh6A0F9wHpHXallGErko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.crl rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 05:32:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 234 (0xea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C362, serialNumber=EA83AF4A21CBC2071F56956E5DDD584C7638FA5B Validity Not Before: May 17 05:32:44 2025 GMT Not After : May 24 05:32:44 2025 GMT Subject: CN=68281f7c-a180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:aa:19:e1:87:91:96:7c:18:11:b2:19:d7:6f: 63:c7:4e:62:2d:e7:17:aa:8d:73:8b:77:08:93:3f: 93:3c:36:ef:21:ba:a5:a7:93:d4:72:b0:18:da:14: b4:45:8a:a8:3e:a7:f2:ce:7d:33:2b:a1:f0:95:a4: 07:41:70:c4:a1:96:02:4a:8b:97:65:5e:d6:06:2d: 50:07:0d:97:15:27:e6:9f:9a:ee:e3:77:94:68:38: f4:ce:08:a8:0f:b5:3c:a4:ce:6a:5c:9b:fd:26:9d: e0:71:88:73:3e:53:52:14:82:f5:31:a4:d9:ca:97: a2:d7:41:b8:8f:20:74:df:d0:ac:d2:a4:83:df:99: 44:17:c5:6d:53:e0:80:c5:16:aa:08:9e:e0:62:1c: d6:0d:10:15:fd:d8:4c:f9:ee:84:d3:42:0a:eb:98: dc:ae:63:1c:27:0a:fe:8a:53:d8:31:5e:29:1d:58: 0f:53:c8:1f:72:b4:13:a7:fb:23:2a:95:3e:a1:92: 0b:74:84:d1:50:fb:33:d6:f6:b3:65:5b:00:cf:f0: 5f:c9:d9:a9:fc:50:ac:a3:d2:5e:69:b7:31:55:5e: 67:f1:b3:26:03:7a:ba:3b:14:e9:1d:9b:6c:8e:53: 3c:20:b9:fd:ec:64:92:0b:63:8f:2c:ee:32:0e:54: 22:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:82:AB:A0:68:85:E9:F7:42:D4:AE:7A:B2:1F:2A:BE:24:16:61:99 X509v3 Authority Key Identifier: keyid:EA:83:AF:4A:21:CB:C2:07:1F:56:95:6E:5D:DD:58:4C:76:38:FA:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:8e:94:a4:b6:81:a9:85:75:a6:54:ec:92:1c:0e:6c:2a:db: 78:b4:ca:f3:d7:27:5d:9c:0f:aa:6f:5a:98:d1:7b:02:bd:5d: e8:7a:30:8a:08:a7:d3:06:a9:e8:99:90:cb:4e:50:81:41:a8: 4c:6d:9d:90:ae:88:d5:ab:52:44:88:7c:c0:2e:f7:81:8b:d6: 4a:f1:f0:28:23:5c:26:6d:b4:a3:8d:f3:91:72:bf:bc:8f:c8: 98:cd:ab:65:aa:4e:f8:e7:9d:c0:72:cb:df:5f:c1:ad:fe:64: ee:43:6d:e2:59:48:3a:b1:4b:be:78:0d:ec:5e:f7:e4:39:fc: 33:1d:28:97:33:d9:99:04:4e:2c:55:b1:11:d9:6a:68:9f:c0: 12:39:7d:84:78:85:fc:73:18:eb:d6:92:cc:ea:73:68:96:56: bc:8e:c1:76:66:73:91:1d:de:a8:d6:29:7f:70:da:8d:51:4a: 74:81:c0:62:3f:48:08:51:34:68:f6:06:c3:98:20:dd:0f:b4: 23:ed:f2:83:d3:14:c8:70:4f:06:95:2c:68:98:e1:03:14:75: 38:7e:4f:d5:0e:5f:74:89:09:9f:f6:eb:a3:0c:bd:3f:80:a8: 21:99:11:cf:52:5e:6f:1f:e4:d6:b8:30:21:78:07:5f:78:8d: 11:4b:9c:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMzNjIxMTAvBgNVBAUTKEVBODNBRjRBMjFDQkMyMDcxRjU2OTU2RTVEREQ1ODRD NzYzOEZBNUIwHhcNMjUwNTE3MDUzMjQ0WhcNMjUwNTI0MDUzMjQ0WjAYMRYwFAYD VQQDEw02ODI4MWY3Yy1hMTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA56oZ4YeRlnwYEbIZ129jx05iLecXqo1zi3cIkz+TPDbvIbqlp5PUcrAY2hS0 RYqoPqfyzn0zK6HwlaQHQXDEoZYCSouXZV7WBi1QBw2XFSfmn5ru43eUaDj0zgio D7U8pM5qXJv9Jp3gcYhzPlNSFIL1MaTZypei10G4jyB039Cs0qSD35lEF8VtU+CA xRaqCJ7gYhzWDRAV/dhM+e6E00IK65jcrmMcJwr+ilPYMV4pHVgPU8gfcrQTp/sj KpU+oZILdITRUPsz1vazZVsAz/Bfydmp/FCso9JeabcxVV5n8bMmA3q6OxTpHZts jlM8ILn97GSSC2OPLO4yDlQihQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCiCq6Bo hen3QtSuerIfKr4kFmGZMB8GA1UdIwQYMBaAFOqDr0ohy8IHH1aVbl3dWEx2OPpb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzM2Mi82QTA4RjQ5MjI1 NzcxMUVGQkIwQjgyNTFDNEY5QUUwMi82b092U2lITHdnY2ZWcFZ1WGQxWVRIWTQt bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZvT3ZTaUhMd2djZlZwVnVYZDFZVEhZNC1scy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzM2Mi82QTA4RjQ5MjI1NzcxMUVGQkIwQjgyNTFDNEY5QUUwMi82b092U2lITHdn Y2ZWcFZ1WGQxWVRIWTQtbHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhjpSktoGphXWmVOySHA5sKtt4tMrz1yddnA+qb1qY0XsCvV3oejCK CKfTBqnomZDLTlCBQahMbZ2QrojVq1JEiHzALveBi9ZK8fAoI1wmbbSjjfORcr+8 j8iYzatlqk74553AcsvfX8Gt/mTuQ23iWUg6sUu+eA3sXvfkOfwzHSiXM9mZBE4s VbER2Wpon8ASOX2EeIX8cxjr1pLM6nNolla8jsF2ZnORHd6o1il/cNqNUUp0gcBi P0gIUTRo9gbDmCDdD7Qj7fKD0xTIcE8GlSxomOEDFHU4fk/VDl90iQmf9uujDL0/ gKghmRHPUl5vH+TWuDAheAdfeI0RS5yI -----END CERTIFICATE-----Generated at Sat May 17 11:27:11 2025 by rpki-client