$ rpki-client -vvf rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.mft File: M6eur6VSbc3FbPCHa71BEz49JHk.mft (raw, json) Hash identifier: l0yWUMQ5fZJvFTwuFKHeJpmLcQ9qzs7EpRp38P/jhbw= Subject key identifier: 5B:6C:CC:C7:CD:FA:37:25:0F:80:0D:03:79:B1:32:8F:6F:3F:64:C0 Authority key identifier: 33:A7:AE:AF:A5:52:6D:CD:C5:6C:F0:87:6B:BD:41:13:3E:3D:24:79 Certificate issuer: /CN=A917B9CB/serialNumber=33A7AEAFA5526DCDC56CF0876BBD41133E3D2479 Certificate serial: 3488 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6eur6VSbc3FbPCHa71BEz49JHk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.mft Manifest number: 3481 Signing time: Mon 12 May 2025 14:38:00 +0000 Manifest this update: Mon 12 May 2025 14:37:59 +0000 Manifest next update: Mon 19 May 2025 14:37:59 +0000 Files and hashes: 1: M6eur6VSbc3FbPCHa71BEz49JHk.crl (hash: O9L5k12/vTCvdQTlLuosb5yBRhb2U/ubtGY6aCBCxSQ=) 2: 054DC680CE7411EAA3A39A3EC4F9AE02.roa (hash: tOOpFlVehdre7+VYiGaBuYQR/Vo4EGkW1VHTBCn7RFE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.crl rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6eur6VSbc3FbPCHa71BEz49JHk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 14:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13448 (0x3488) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B9CB, serialNumber=33A7AEAFA5526DCDC56CF0876BBD41133E3D2479 Validity Not Before: May 12 14:37:59 2025 GMT Not After : May 19 14:37:59 2025 GMT Subject: CN=682207c8-eb80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e7:c8:3f:22:de:b1:31:ed:3e:65:41:0b:ee: f3:60:07:19:28:4c:b6:4f:c9:65:0b:d5:13:db:bb: aa:a0:70:82:29:fb:cd:fe:98:91:d5:91:e8:8f:ea: d8:a8:0a:f7:d6:09:73:97:b2:7f:06:ce:4d:1f:8c: 22:41:3f:58:8b:f7:5f:a9:d3:fa:38:95:6a:28:55: 7f:cd:e3:04:9a:93:e9:1d:1e:69:d4:49:b4:57:e5: 63:c6:18:9c:01:e6:59:5f:62:e4:b1:10:81:9d:33: a6:70:f2:ff:4e:b9:9d:a9:65:12:ae:2f:55:ad:68: 2d:28:82:85:78:8a:9b:d3:15:5e:8c:b1:92:1d:1b: 00:c6:ca:f2:d2:d8:66:e0:a7:df:ba:83:52:de:ff: 59:af:83:ac:e3:8c:6e:21:41:49:79:40:a5:05:72: a4:a9:b6:ba:c1:79:6d:76:36:ef:0d:e1:a5:7f:37: be:c7:10:9d:ce:c0:81:95:af:43:f0:1b:d0:80:5e: fd:dd:de:2c:0b:a7:04:98:6b:a1:76:56:27:87:d8: 22:00:1e:4f:f9:aa:8f:d4:3b:0c:18:fc:88:99:31: d2:24:77:3d:a8:34:42:6d:5f:7c:e2:8d:41:2b:6c: a8:cc:05:b8:36:c6:0f:26:96:a9:72:6b:7c:5e:50: 70:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:6C:CC:C7:CD:FA:37:25:0F:80:0D:03:79:B1:32:8F:6F:3F:64:C0 X509v3 Authority Key Identifier: keyid:33:A7:AE:AF:A5:52:6D:CD:C5:6C:F0:87:6B:BD:41:13:3E:3D:24:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6eur6VSbc3FbPCHa71BEz49JHk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:e8:be:fc:b3:dd:2e:de:c4:d3:40:08:c7:44:63:5f:e0:82: 8e:29:6a:27:f5:0c:3d:be:84:6d:8e:ed:c0:99:9a:70:67:19: 10:19:9d:10:3a:21:c1:73:60:32:7d:dc:07:ed:ec:7c:4a:29: d6:99:12:8e:5f:af:7f:1b:5c:25:8d:9f:29:f6:3e:c7:1b:8d: e8:ff:9e:7d:12:6e:45:38:a5:45:d4:d5:91:79:3f:bd:49:d7: 87:2d:ae:34:0b:59:bc:f7:8d:dd:38:ca:4c:49:f7:cb:09:4c: 7d:dd:02:9b:ae:d7:e7:0b:cc:f7:93:59:07:03:70:07:00:ca: c7:cc:cf:a0:9a:b3:48:ed:f6:06:69:85:87:49:a4:09:0e:a0: 54:18:e4:32:d6:67:3f:a2:e0:91:b6:46:af:a2:b1:ad:b6:a0: 14:c3:cb:b1:0d:7a:9f:6a:2f:38:1c:3d:b5:59:0a:e3:52:5f: 09:3a:53:dc:2d:06:1a:91:30:12:09:f9:f5:2e:b5:40:e4:76: 92:da:03:ac:a9:48:f1:c4:13:f9:08:a7:33:2f:1f:27:c8:98: 07:63:3b:5e:db:9e:ae:c5:8a:2d:7a:e0:a3:cf:3c:6b:ec:01: ba:79:1c:fa:7d:fc:a9:6e:32:6b:4d:dc:bb:2c:97:22:e5:cc: 5a:91:2e:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I5Q0IxMTAvBgNVBAUTKDMzQTdBRUFGQTU1MjZEQ0RDNTZDRjA4NzZCQkQ0MTEz M0UzRDI0NzkwHhcNMjUwNTEyMTQzNzU5WhcNMjUwNTE5MTQzNzU5WjAYMRYwFAYD VQQDEw02ODIyMDdjOC1lYjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu+fIPyLesTHtPmVBC+7zYAcZKEy2T8llC9UT27uqoHCCKfvN/piR1ZHoj+rY qAr31glzl7J/Bs5NH4wiQT9Yi/dfqdP6OJVqKFV/zeMEmpPpHR5p1Em0V+Vjxhic AeZZX2LksRCBnTOmcPL/TrmdqWUSri9VrWgtKIKFeIqb0xVejLGSHRsAxsry0thm 4KffuoNS3v9Zr4Os44xuIUFJeUClBXKkqba6wXltdjbvDeGlfze+xxCdzsCBla9D 8BvQgF793d4sC6cEmGuhdlYnh9giAB5P+aqP1DsMGPyImTHSJHc9qDRCbV984o1B K2yozAW4NsYPJpapcmt8XlBw2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFtszMfN +jclD4ANA3mxMo9vP2TAMB8GA1UdIwQYMBaAFDOnrq+lUm3NxWzwh2u9QRM+PSR5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjlDQi82RjZFREM2MDFE OEUxMUUyODg1Q0RGRUMwOEIwMkNEMi9NNmV1cjZWU2JjM0ZiUENIYTcxQkV6NDlK SGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL002ZXVyNlZTYmMzRmJQQ0hhNzFCRXo0OUpIay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjlDQi82RjZFREM2MDFEOEUxMUUyODg1Q0RGRUMwOEIwMkNEMi9NNmV1cjZWU2Jj M0ZiUENIYTcxQkV6NDlKSGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCR6L78s90u3sTTQAjHRGNf4IKOKWon9Qw9voRtju3AmZpwZxkQGZ0Q OiHBc2AyfdwH7ex8SinWmRKOX69/G1wljZ8p9j7HG43o/559Em5FOKVF1NWReT+9 SdeHLa40C1m8943dOMpMSffLCUx93QKbrtfnC8z3k1kHA3AHAMrHzM+gmrNI7fYG aYWHSaQJDqBUGOQy1mc/ouCRtkavorGttqAUw8uxDXqfai84HD21WQrjUl8JOlPc LQYakTASCfn1LrVA5HaS2gOsqUjxxBP5CKczLx8nyJgHYzte256uxYoteuCjzzxr 7AG6eRz6ffypbjJrTdy7LJci5cxakS5x -----END CERTIFICATE-----Generated at Wed May 14 01:10:08 2025 by rpki-client