$ rpki-client -vvf rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.mft File: 66pMRPJIk3FKHVs2Ci17LYYFsWM.mft (raw, json) Hash identifier: L6DhyAwL0sSQbtGDnQLeh7J1B6ACSDy9IV5N1Dg9x4Q= Subject key identifier: EA:06:B5:C8:7B:6E:CD:8F:56:8B:4D:00:4F:E0:32:E8:64:53:70:5C Authority key identifier: EB:AA:4C:44:F2:48:93:71:4A:1D:5B:36:0A:2D:7B:2D:86:05:B1:63 Certificate issuer: /CN=A91504D6/serialNumber=EBAA4C44F24893714A1D5B360A2D7B2D8605B163 Certificate serial: AB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/66pMRPJIk3FKHVs2Ci17LYYFsWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.mft Manifest number: A9 Signing time: Tue 13 May 2025 05:18:04 +0000 Manifest this update: Tue 13 May 2025 05:18:03 +0000 Manifest next update: Tue 20 May 2025 05:18:03 +0000 Files and hashes: 1: 66pMRPJIk3FKHVs2Ci17LYYFsWM.crl (hash: xATBSC/+XcGIO6je5D2lCpRnz0divuciZGsgwtFofmg=) 2: BE82B5AE31C911EFA31A8D3AC4F9AE02.roa (hash: 6SVIugHlnaJdlkKtpec/q8AF54HgJPVuchm8bN57MAM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.crl rsync://rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/66pMRPJIk3FKHVs2Ci17LYYFsWM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 05:18:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 171 (0xab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91504D6, serialNumber=EBAA4C44F24893714A1D5B360A2D7B2D8605B163 Validity Not Before: May 13 05:18:03 2025 GMT Not After : May 20 05:18:03 2025 GMT Subject: CN=6822d60c-d601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:af:4a:82:65:13:7c:60:30:6a:63:dd:25:e1: 8a:46:eb:0c:a4:a5:68:ee:ae:a5:4b:3d:94:8c:f9: c7:b7:08:ae:03:d6:34:af:d0:d9:cf:17:61:12:3a: c7:e5:9b:95:dc:3e:4a:32:2c:21:e3:a6:55:b5:6c: f0:f2:da:bc:ba:ec:03:f2:b1:45:19:02:f0:18:4e: e8:16:a6:f2:2f:f1:5f:a1:ff:83:53:57:fa:79:69: ba:c0:7b:41:35:03:33:13:54:78:a0:41:f4:64:1c: 58:81:06:bb:a6:24:e5:bb:b7:97:8b:f8:c5:be:72: ef:5b:be:36:8f:2c:c8:61:f2:87:eb:a0:9b:44:52: c0:4c:07:d0:f9:37:96:f5:b8:49:ef:a4:8c:66:07: 7e:15:5d:6a:f2:42:6a:9d:3b:e3:71:3b:32:78:32: 9f:29:19:5e:05:98:d4:e5:74:08:8f:d1:40:ba:c7: ad:9b:1b:c1:e8:7a:7a:c0:c8:2c:79:29:bf:d3:65: 29:76:90:e4:9b:7c:ab:a8:48:46:b4:bd:a7:58:fb: c1:3a:cd:46:d3:dd:92:00:50:f1:1b:c2:9d:42:4f: 66:03:2e:42:03:1c:d5:95:26:ac:79:1f:88:9f:71: 65:dc:d9:7a:66:f1:c7:10:1a:2a:19:56:ef:79:b5: 14:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:06:B5:C8:7B:6E:CD:8F:56:8B:4D:00:4F:E0:32:E8:64:53:70:5C X509v3 Authority Key Identifier: keyid:EB:AA:4C:44:F2:48:93:71:4A:1D:5B:36:0A:2D:7B:2D:86:05:B1:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/66pMRPJIk3FKHVs2Ci17LYYFsWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:dc:d7:0e:79:2a:fb:13:d6:47:68:46:e9:41:25:af:c8:a2: c2:ae:6c:e7:62:08:b4:36:5a:b1:a4:1d:2b:df:66:7b:91:9a: 31:95:a1:7b:9f:cf:2c:28:b9:f6:f2:bf:28:cd:89:89:2e:3b: 47:85:9b:93:59:20:67:c2:20:bd:ca:73:16:6b:e3:48:c5:00: 99:28:b8:c9:7f:20:47:9a:90:00:9c:69:3c:61:ec:f6:f3:06: a2:f3:2c:ec:7b:10:6d:7b:95:33:25:d2:2f:5e:7d:87:e7:36: 6a:cc:bc:47:64:64:4b:de:b1:b0:c1:16:a6:3d:a6:5c:ba:68: af:fa:2d:4f:66:9d:d4:95:59:66:55:f0:d7:1d:0f:32:11:b6: 51:9f:ab:ee:12:b3:0c:d2:73:a2:df:d9:e1:d9:42:c7:9d:f9: fb:40:9e:b3:86:03:1c:08:91:ff:3f:be:f0:9b:44:b2:e2:2c: e4:bf:21:51:f4:e2:49:78:45:e9:08:48:bf:2c:64:c2:59:ad: e5:cf:48:2e:a8:87:68:91:9d:27:56:d7:82:72:10:bd:5f:0b: db:7d:73:3e:19:9d:67:3c:b7:8a:a9:e0:6b:62:c8:29:b1:89: 14:bb:35:98:e4:7c:47:6c:36:13:ea:70:10:df:62:ba:fa:ee: 59:59:ee:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA0RDYxMTAvBgNVBAUTKEVCQUE0QzQ0RjI0ODkzNzE0QTFENUIzNjBBMkQ3QjJE ODYwNUIxNjMwHhcNMjUwNTEzMDUxODAzWhcNMjUwNTIwMDUxODAzWjAYMRYwFAYD VQQDEw02ODIyZDYwYy1kNjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1K9KgmUTfGAwamPdJeGKRusMpKVo7q6lSz2UjPnHtwiuA9Y0r9DZzxdhEjrH 5ZuV3D5KMiwh46ZVtWzw8tq8uuwD8rFFGQLwGE7oFqbyL/Ffof+DU1f6eWm6wHtB NQMzE1R4oEH0ZBxYgQa7piTlu7eXi/jFvnLvW742jyzIYfKH66CbRFLATAfQ+TeW 9bhJ76SMZgd+FV1q8kJqnTvjcTsyeDKfKRleBZjU5XQIj9FAusetmxvB6Hp6wMgs eSm/02UpdpDkm3yrqEhGtL2nWPvBOs1G092SAFDxG8KdQk9mAy5CAxzVlSaseR+I n3Fl3Nl6ZvHHEBoqGVbvebUUlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOoGtch7 bs2PVotNAE/gMuhkU3BcMB8GA1UdIwQYMBaAFOuqTETySJNxSh1bNgotey2GBbFj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDRENi9BRDBDQUMxRTMx QTkxMUVGQjZGQjFENjBDNEY5QUUwMi82NnBNUlBKSWszRktIVnMyQ2kxN0xZWUZz V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzY2cE1SUEpJazNGS0hWczJDaTE3TFlZRnNXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDRENi9BRDBDQUMxRTMxQTkxMUVGQjZGQjFENjBDNEY5QUUwMi82NnBNUlBKSWsz RktIVnMyQ2kxN0xZWUZzV00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJ3NcOeSr7E9ZHaEbpQSWvyKLCrmznYgi0NlqxpB0r32Z7kZoxlaF7 n88sKLn28r8ozYmJLjtHhZuTWSBnwiC9ynMWa+NIxQCZKLjJfyBHmpAAnGk8Yez2 8wai8yzsexBte5UzJdIvXn2H5zZqzLxHZGRL3rGwwRamPaZcumiv+i1PZp3UlVlm VfDXHQ8yEbZRn6vuErMM0nOi39nh2ULHnfn7QJ6zhgMcCJH/P77wm0Sy4izkvyFR 9OJJeEXpCEi/LGTCWa3lz0guqIdokZ0nVteCchC9XwvbfXM+GZ1nPLeKqeBrYsgp sYkUuzWY5HxHbDYT6nAQ32K6+u5ZWe4A -----END CERTIFICATE-----Generated at Wed May 14 03:45:10 2025 by rpki-client