$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.mft File: 6f7YwwxxXQSs4XWunL1wDBl3BgI.mft (raw, json) Hash identifier: p6BvIGYPEaM/2zjkbBbu3SB2XOTVo11ofNK8AGY9id0= Subject key identifier: 8D:A7:25:BB:92:2D:35:30:AA:67:7B:58:45:7A:F6:30:7D:5B:B7:28 Authority key identifier: E9:FE:D8:C3:0C:71:5D:04:AC:E1:75:AE:9C:BD:70:0C:19:77:06:02 Certificate issuer: /CN=A91C3EF6/serialNumber=E9FED8C30C715D04ACE175AE9CBD700C19770602 Certificate serial: 14C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f7YwwxxXQSs4XWunL1wDBl3BgI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.mft Manifest number: 14BD Signing time: Sat 10 May 2025 16:45:42 +0000 Manifest this update: Sat 10 May 2025 16:45:41 +0000 Manifest next update: Sat 17 May 2025 16:45:41 +0000 Files and hashes: 1: 6f7YwwxxXQSs4XWunL1wDBl3BgI.crl (hash: ngakc3eAV91JQ8kaQGdq/GoRsQAYNZFh75/vnSbf8ZQ=) 2: D056896E592A11E889035A70C4F9AE02.roa (hash: tFV3sDzQ0MzS9JiFtiotNFf8xUZyC7UxkWA8BrQBeiQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.crl rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f7YwwxxXQSs4XWunL1wDBl3BgI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 16:45:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5319 (0x14c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3EF6, serialNumber=E9FED8C30C715D04ACE175AE9CBD700C19770602 Validity Not Before: May 10 16:45:41 2025 GMT Not After : May 17 16:45:41 2025 GMT Subject: CN=681f82b5-3852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:39:5b:c0:de:9e:9b:63:2d:97:0b:6d:ef:2c: d5:e3:dc:c7:f1:34:7d:bd:42:c6:07:6c:ac:fc:86: 54:bc:ea:f8:bf:4d:16:e6:14:be:da:9e:82:7e:b0: b5:8b:98:a6:07:10:a6:75:ad:e0:aa:06:4b:b2:4d: 17:58:78:70:98:6c:cf:f0:fd:ab:3e:c4:6e:0d:94: 81:0a:a8:d6:a9:11:97:4b:2d:66:e2:69:51:99:67: 53:0a:b2:57:a1:6a:53:90:68:d1:5c:9f:af:0c:25: 6c:19:e9:d5:c4:da:ef:78:1c:d3:84:85:48:0d:1f: a1:1d:0a:43:d3:c9:95:be:f5:1b:ea:d9:2c:07:d1: 8c:6d:cc:9e:aa:bd:ab:61:08:fc:92:9e:6a:25:af: e2:fe:00:9f:5a:d2:23:56:d2:02:b4:89:a1:5e:4e: 20:9b:31:87:21:5c:01:49:0f:f9:57:8c:24:48:24: d6:ac:af:72:b9:e2:ad:0f:ac:dc:06:e3:08:be:69: 16:36:3d:d3:6d:fd:bf:60:25:30:d7:01:71:be:b3: 21:44:48:f9:31:75:6f:7f:e7:d4:be:01:43:2a:43: 7b:fc:c5:39:00:81:ac:1a:b8:cf:9f:60:8d:4a:02: 5e:1e:f0:4d:ce:e4:d6:cc:e8:7e:b5:99:0b:cf:30: f6:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:A7:25:BB:92:2D:35:30:AA:67:7B:58:45:7A:F6:30:7D:5B:B7:28 X509v3 Authority Key Identifier: keyid:E9:FE:D8:C3:0C:71:5D:04:AC:E1:75:AE:9C:BD:70:0C:19:77:06:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f7YwwxxXQSs4XWunL1wDBl3BgI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:2e:26:61:0e:cd:09:47:0b:3d:be:b6:dc:0a:ff:15:85:23: ae:07:ae:2d:d0:ce:10:59:c7:d0:38:e2:66:d6:b4:17:71:00: 53:1e:bf:c0:e2:0e:9f:aa:cc:e6:cb:4e:7a:bf:b6:f7:59:0a: 0e:eb:34:3e:24:a5:56:c9:61:65:b6:bc:0d:c0:68:a7:ad:71: ed:ff:b9:4f:f1:08:02:ac:57:ca:fc:97:a1:46:1c:ea:1b:ee: 5e:d8:fe:26:ae:56:fa:ce:df:18:9e:5d:52:40:79:01:ac:2d: 39:2f:f9:0b:38:fb:b8:f1:77:c8:e3:62:67:ac:60:24:e0:4c: 16:b7:fe:fa:81:11:94:c1:0e:35:e2:c9:3e:9e:72:8d:4b:b2: f5:f6:5f:16:c0:10:65:57:1c:68:58:94:0e:e0:f7:59:4e:e2: 05:6d:e4:0b:09:44:aa:80:69:e3:2c:20:d3:43:1a:61:2f:77: 1a:40:74:b6:3d:a9:e3:99:e2:14:f6:68:fa:6a:99:e9:a8:e9: 53:bf:89:af:c8:a0:3d:88:2d:f8:4a:ab:ac:3d:79:78:63:cd: 94:fd:dd:ed:b9:1b:bc:5c:ff:54:76:8c:ea:14:c3:18:80:84: d1:ed:c0:e5:ae:29:42:25:20:fc:d5:d0:80:a1:97:4c:43:80: 24:84:e7:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNFRjYxMTAvBgNVBAUTKEU5RkVEOEMzMEM3MTVEMDRBQ0UxNzVBRTlDQkQ3MDBD MTk3NzA2MDIwHhcNMjUwNTEwMTY0NTQxWhcNMjUwNTE3MTY0NTQxWjAYMRYwFAYD VQQDEw02ODFmODJiNS0zODUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0TlbwN6em2Mtlwtt7yzV49zH8TR9vULGB2ys/IZUvOr4v00W5hS+2p6CfrC1 i5imBxCmda3gqgZLsk0XWHhwmGzP8P2rPsRuDZSBCqjWqRGXSy1m4mlRmWdTCrJX oWpTkGjRXJ+vDCVsGenVxNrveBzThIVIDR+hHQpD08mVvvUb6tksB9GMbcyeqr2r YQj8kp5qJa/i/gCfWtIjVtICtImhXk4gmzGHIVwBSQ/5V4wkSCTWrK9yueKtD6zc BuMIvmkWNj3Tbf2/YCUw1wFxvrMhREj5MXVvf+fUvgFDKkN7/MU5AIGsGrjPn2CN SgJeHvBNzuTWzOh+tZkLzzD2nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI2nJbuS LTUwqmd7WEV69jB9W7coMB8GA1UdIwQYMBaAFOn+2MMMcV0ErOF1rpy9cAwZdwYC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0VGNi9BQzREQUJDNjU5 MjgxMUU4OEU1QjQ0NkJDNEY5QUUwMi82ZjdZd3d4eFhRU3M0WFd1bkwxd0RCbDNC Z0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZmN1l3d3h4WFFTczRYV3VuTDF3REJsM0JnSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0VGNi9BQzREQUJDNjU5MjgxMUU4OEU1QjQ0NkJDNEY5QUUwMi82ZjdZd3d4eFhR U3M0WFd1bkwxd0RCbDNCZ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNLiZhDs0JRws9vrbcCv8VhSOuB64t0M4QWcfQOOJm1rQXcQBTHr/A 4g6fqszmy056v7b3WQoO6zQ+JKVWyWFltrwNwGinrXHt/7lP8QgCrFfK/JehRhzq G+5e2P4mrlb6zt8Ynl1SQHkBrC05L/kLOPu48XfI42JnrGAk4EwWt/76gRGUwQ41 4sk+nnKNS7L19l8WwBBlVxxoWJQO4PdZTuIFbeQLCUSqgGnjLCDTQxphL3caQHS2 PanjmeIU9mj6apnpqOlTv4mvyKA9iC34SqusPXl4Y82U/d3tuRu8XP9UdozqFMMY gITR7cDlrilCJSD81dCAoZdMQ4AkhOdf -----END CERTIFICATE-----Generated at Mon May 12 07:25:47 2025 by rpki-client