$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft File: 6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft (raw, json) Hash identifier: zRe/v503Y5Ju/K+LgNRohAtlr/55tDps4EX/XSzV9CI= Subject key identifier: 16:4B:B5:C1:EB:F4:37:15:AB:06:D1:E8:19:CC:8D:BA:5B:7E:9F:7A Authority key identifier: E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5 Certificate issuer: /CN=A91A2359/serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5 Certificate serial: 0B28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft Manifest number: 0B09 Signing time: Sat 10 May 2025 19:03:13 +0000 Manifest this update: Sat 10 May 2025 19:03:12 +0000 Manifest next update: Sat 17 May 2025 19:03:12 +0000 Files and hashes: 1: 6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl (hash: 7DyATTgKJCK74LAHYj8kDbN98yAiI5q5tJxJApfDkZ0=) 2: 6DADCA1C2F1C11EDA3E29B09C4F9AE02.roa (hash: XVeZDTc69uGCDdXez9QUlyk7cBcd+qKHtk4lz+fH2Nk=) 3: 23BA9D7CBEEB11EDA7945F4BC4F9AE02.roa (hash: SZF4jNnIB2QVKz5/EX+jPuidzyWfheujHP0W7HxZhfM=) 4: 6B3307CE4D8411EFBAD45B86C4F9AE02.roa (hash: Q55EbY5POWYTdePCItnDLlFfKKISUoO3fBrl7W8p8yg=) 5: A39B24D2975511EF85448840C4F9AE02.roa (hash: BIsgdAgqtk3wodS0abcXx+V3UWlTiBSPXxRaU3Y5Enw=) 6: D5955AB6975511EF94255C5EC4F9AE02.roa (hash: WPJAjv2UMHwWfs/KA/8g2VypUekjjpz/btCbDPwTPLs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 19:03:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2856 (0xb28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2359, serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5 Validity Not Before: May 10 19:03:12 2025 GMT Not After : May 17 19:03:12 2025 GMT Subject: CN=681fa2f1-6e94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ac:a7:0c:9a:01:73:8f:27:3f:9d:1b:c8:c2: 9d:69:4a:e3:78:da:b3:cd:d9:f5:3d:37:c4:8b:0a: 44:9c:4d:5d:d2:67:76:66:9b:75:07:66:59:81:93: 38:ce:99:30:15:96:d9:e0:12:c8:be:00:f6:03:47: c4:a3:96:49:b2:f8:e9:21:88:ab:8b:f3:cf:55:23: 77:b0:92:87:34:15:26:19:1a:76:d5:99:05:c3:5e: 3a:44:f1:01:97:db:82:df:e3:ed:cc:f2:f6:27:2b: d0:eb:8f:b0:84:c2:b8:a1:d3:eb:b8:c9:c3:5c:dc: 06:59:77:f5:fa:b2:f6:0b:3e:77:39:20:ab:55:02: 1b:e5:90:81:62:2f:93:32:5a:75:43:48:48:42:c7: 2c:89:7e:da:7f:8c:a7:37:28:c1:3c:53:ec:2b:d2: a2:09:8a:70:31:47:5e:06:61:be:94:0a:fb:76:0e: 14:83:e3:58:1d:71:a1:88:0e:e3:5d:5f:f7:ad:21: 7b:37:7e:a6:ea:51:ab:49:e9:e4:71:c0:d6:82:e7: 26:a3:47:93:ee:02:0a:a6:70:5f:a9:07:6b:6a:f7: e3:f0:f5:8a:b0:a9:94:f0:4c:13:89:a3:23:87:ec: 92:2b:d8:f7:73:dd:53:08:3c:24:0d:8b:71:8e:d2: 80:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:4B:B5:C1:EB:F4:37:15:AB:06:D1:E8:19:CC:8D:BA:5B:7E:9F:7A X509v3 Authority Key Identifier: keyid:E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:8e:ae:45:56:15:38:3b:45:53:a4:08:55:5c:ee:4d:3e:51: a8:fb:c6:85:d9:65:ba:68:e9:79:45:60:50:07:23:de:1c:97: eb:33:af:79:8e:00:63:5d:97:b4:f8:5a:2d:59:0f:9c:75:1b: c7:cb:a3:50:70:09:41:f3:05:3f:31:a3:4c:39:2d:0e:c4:33: 06:d9:60:1a:1e:30:60:8c:b9:cf:c3:fa:d3:a6:b3:57:37:32: b1:c7:e5:41:ff:b4:a0:12:69:98:dc:17:4f:83:cc:12:56:7b: 79:2a:0d:83:2b:46:59:87:7d:43:d7:b3:a4:8f:af:2c:27:40: 54:37:f8:a8:f4:3b:a4:ed:3b:03:46:18:0d:df:a3:12:e7:60: b1:b2:f3:ba:c9:3e:20:23:19:b3:2b:ac:83:a0:f7:15:47:29: 31:07:c1:f4:b3:2b:59:6e:e6:5d:3c:eb:32:14:8f:40:2d:b0: 74:a2:fd:10:5c:3e:c9:3e:54:bb:fb:5b:34:b4:f4:6a:a5:8d: 3f:62:d8:cd:8a:cf:1e:c6:cc:36:6f:34:03:00:e7:46:39:f9: b6:2a:7c:46:c1:bc:11:71:87:f2:21:38:66:33:3d:9a:03:9c: 66:a5:da:aa:18:ed:c2:36:c8:8c:de:54:4f:d8:89:50:fb:d6: b6:73:9b:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCygwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTIzNTkxMTAvBgNVBAUTKEU5OTFBNUEyREQ5RDFGMkEyNDNERjZBQTI0QjlGNTBF MUNCOEZFRTUwHhcNMjUwNTEwMTkwMzEyWhcNMjUwNTE3MTkwMzEyWjAYMRYwFAYD VQQDEw02ODFmYTJmMS02ZTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr6ynDJoBc48nP50byMKdaUrjeNqzzdn1PTfEiwpEnE1d0md2Zpt1B2ZZgZM4 zpkwFZbZ4BLIvgD2A0fEo5ZJsvjpIYiri/PPVSN3sJKHNBUmGRp21ZkFw146RPEB l9uC3+PtzPL2JyvQ64+whMK4odPruMnDXNwGWXf1+rL2Cz53OSCrVQIb5ZCBYi+T Mlp1Q0hIQscsiX7af4ynNyjBPFPsK9KiCYpwMUdeBmG+lAr7dg4Ug+NYHXGhiA7j XV/3rSF7N36m6lGrSenkccDWgucmo0eT7gIKpnBfqQdravfj8PWKsKmU8EwTiaMj h+ySK9j3c91TCDwkDYtxjtKAiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBZLtcHr 9DcVqwbR6BnMjbpbfp96MB8GA1UdIwQYMBaAFOmRpaLdnR8qJD32qiS59Q4cuP7l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjM1OS9GQzI5OERFQTQx NzAxMUVBOThERTY1NkFDNEY5QUUwMi82Wkdsb3QyZEh5b2tQZmFxSkxuMURoeTRf dVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZaR2xvdDJkSHlva1BmYXFKTG4xRGh5NF91VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjM1OS9GQzI5OERFQTQxNzAxMUVBOThERTY1NkFDNEY5QUUwMi82Wkdsb3QyZEh5 b2tQZmFxSkxuMURoeTRfdVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGjq5FVhU4O0VTpAhVXO5NPlGo+8aF2WW6aOl5RWBQByPeHJfrM695 jgBjXZe0+FotWQ+cdRvHy6NQcAlB8wU/MaNMOS0OxDMG2WAaHjBgjLnPw/rTprNX NzKxx+VB/7SgEmmY3BdPg8wSVnt5Kg2DK0ZZh31D17Okj68sJ0BUN/io9Duk7TsD RhgN36MS52CxsvO6yT4gIxmzK6yDoPcVRykxB8H0sytZbuZdPOsyFI9ALbB0ov0Q XD7JPlS7+1s0tPRqpY0/YtjNis8exsw2bzQDAOdGOfm2KnxGwbwRcYfyIThmMz2a A5xmpdqqGO3CNsiM3lRP2IlQ+9a2c5vU -----END CERTIFICATE-----Generated at Mon May 12 13:28:12 2025 by rpki-client