$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6314/96FE3006E0D211E8A6313425C4F9AE02/6GwPcg6WodXwYNlgrkIiElVg3Eo.mft File: 6GwPcg6WodXwYNlgrkIiElVg3Eo.mft (raw, json) Hash identifier: zs4y7XqfaI4qG6et1JVelaRY2BW5h7OhGYfAKeamBNo= Subject key identifier: CF:52:93:48:D3:35:BA:0F:0F:13:5C:31:00:23:70:4E:AE:3E:BE:63 Authority key identifier: E8:6C:0F:72:0E:96:A1:D5:F0:60:D9:60:AE:42:22:12:55:60:DC:4A Certificate issuer: /CN=A91E6314/serialNumber=E86C0F720E96A1D5F060D960AE4222125560DC4A Certificate serial: 1213 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GwPcg6WodXwYNlgrkIiElVg3Eo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6314/96FE3006E0D211E8A6313425C4F9AE02/6GwPcg6WodXwYNlgrkIiElVg3Eo.mft Manifest number: 1208 Signing time: Fri 16 May 2025 17:23:14 +0000 Manifest this update: Fri 16 May 2025 17:23:13 +0000 Manifest next update: Fri 23 May 2025 17:23:13 +0000 Files and hashes: 1: 6GwPcg6WodXwYNlgrkIiElVg3Eo.crl (hash: kwnxVzNQ82aAw9fUQB87EIJEQGNzrW+lL0b/M3O7tnc=) 2: E1A56FBAE0D311E88A46432AC4F9AE02.roa (hash: x0pbE7Ea3sKXTfydYa2BTBmjtzbK1GRSFoSpJkmD3Ks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6314/96FE3006E0D211E8A6313425C4F9AE02/6GwPcg6WodXwYNlgrkIiElVg3Eo.crl rsync://rpki.apnic.net/member_repository/A91E6314/96FE3006E0D211E8A6313425C4F9AE02/6GwPcg6WodXwYNlgrkIiElVg3Eo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GwPcg6WodXwYNlgrkIiElVg3Eo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 17:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4627 (0x1213) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6314, serialNumber=E86C0F720E96A1D5F060D960AE4222125560DC4A Validity Not Before: May 16 17:23:13 2025 GMT Not After : May 23 17:23:13 2025 GMT Subject: CN=68277481-b332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c9:aa:f6:f4:f5:00:3d:e7:ea:49:c7:98:4e: 1d:1a:63:5b:19:45:2d:0e:36:ce:31:63:45:0b:0f: f6:e7:41:80:7f:9b:d5:ea:9e:6c:39:e2:57:16:e4: 7b:87:ab:b0:c4:81:c6:37:e8:09:1b:fb:0e:de:5c: d4:e0:ac:fa:41:14:23:7e:3f:60:74:c3:a6:91:8f: b4:35:e2:02:fd:62:4e:18:3f:56:96:bd:0d:03:94: ca:23:28:28:01:04:0d:08:e8:ab:cd:0a:b9:e6:73: 8c:3e:4a:c3:f7:1e:74:c6:ac:86:95:79:b0:94:d5: ac:10:8a:d0:90:ff:97:c0:de:5c:bd:b4:37:8d:29: 2d:30:6b:bd:06:b1:7d:d8:4b:ea:d6:91:5c:d8:52: 82:9b:ad:c8:60:07:0a:7d:3c:c4:50:92:b9:1d:37: 57:c1:ee:70:ab:cb:96:9a:94:3a:b7:1a:20:92:d6: 3f:5d:43:3a:00:51:51:3d:a3:a1:09:6a:3f:be:66: 95:5a:cf:0a:51:e1:29:4b:5f:5b:fd:4c:0a:e2:59: 24:7a:72:7a:ed:1a:97:ef:f1:68:2c:df:6d:02:90: d9:32:1e:b7:04:71:44:b4:fb:23:f7:8f:ad:b6:9a: cf:d1:63:e0:3f:0d:67:4c:e5:0f:5a:29:c8:36:4f: c6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:52:93:48:D3:35:BA:0F:0F:13:5C:31:00:23:70:4E:AE:3E:BE:63 X509v3 Authority Key Identifier: keyid:E8:6C:0F:72:0E:96:A1:D5:F0:60:D9:60:AE:42:22:12:55:60:DC:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6314/96FE3006E0D211E8A6313425C4F9AE02/6GwPcg6WodXwYNlgrkIiElVg3Eo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GwPcg6WodXwYNlgrkIiElVg3Eo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6314/96FE3006E0D211E8A6313425C4F9AE02/6GwPcg6WodXwYNlgrkIiElVg3Eo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:55:66:aa:3f:73:cb:32:31:41:4a:f3:dd:bc:b4:fe:a2:fa: 4b:12:88:f5:80:2c:d6:14:78:a4:ce:d2:56:b5:97:54:6e:30: ec:34:b8:37:fc:b3:6f:75:65:2c:88:9d:90:22:dc:18:b0:32: 8a:53:49:ad:f9:0e:93:f5:89:83:de:1f:4c:8d:d8:81:5f:ac: 5b:75:c7:76:53:a0:ff:35:c6:5a:2b:c1:a0:ae:69:2a:12:f1: c1:be:32:23:4e:ae:26:69:cc:80:a2:c5:df:5c:b1:6e:15:4a: cc:78:79:70:a7:ed:b7:fd:d0:0d:69:26:3c:8c:3f:14:b5:d6: 21:d2:7e:71:26:98:f0:e9:3f:ce:b7:5f:d2:c7:1b:e8:31:bb: 6f:03:30:a8:56:73:12:29:5f:9f:e3:61:5a:fc:3f:52:79:fb: 85:36:e5:dd:ed:d0:f2:ea:d9:cf:21:33:99:37:70:17:e5:a8: e3:29:3f:ad:b8:5a:8d:8d:c1:e0:14:42:50:0f:09:68:34:9e: ff:a8:77:aa:5a:08:af:a1:d1:9b:77:8d:95:3d:fa:35:b2:4f: d4:db:9c:d1:a9:da:14:a3:d2:66:f1:b9:1a:f0:20:4c:b7:96: 46:62:0c:ae:66:f4:c1:46:96:41:b5:f9:a0:0c:70:20:c8:b9: 4f:f6:1e:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYzMTQxMTAvBgNVBAUTKEU4NkMwRjcyMEU5NkExRDVGMDYwRDk2MEFFNDIyMjEy NTU2MERDNEEwHhcNMjUwNTE2MTcyMzEzWhcNMjUwNTIzMTcyMzEzWjAYMRYwFAYD VQQDEw02ODI3NzQ4MS1iMzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArcmq9vT1AD3n6knHmE4dGmNbGUUtDjbOMWNFCw/250GAf5vV6p5sOeJXFuR7 h6uwxIHGN+gJG/sO3lzU4Kz6QRQjfj9gdMOmkY+0NeIC/WJOGD9Wlr0NA5TKIygo AQQNCOirzQq55nOMPkrD9x50xqyGlXmwlNWsEIrQkP+XwN5cvbQ3jSktMGu9BrF9 2Evq1pFc2FKCm63IYAcKfTzEUJK5HTdXwe5wq8uWmpQ6txogktY/XUM6AFFRPaOh CWo/vmaVWs8KUeEpS19b/UwK4lkkenJ67RqX7/FoLN9tApDZMh63BHFEtPsj94+t tprP0WPgPw1nTOUPWinINk/GiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM9Sk0jT NboPDxNcMQAjcE6uPr5jMB8GA1UdIwQYMBaAFOhsD3IOlqHV8GDZYK5CIhJVYNxK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjMxNC85NkZFMzAwNkUw RDIxMUU4QTYzMTM0MjVDNEY5QUUwMi82R3dQY2c2V29kWHdZTmxncmtJaUVsVmcz RW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZHd1BjZzZXb2RYd1lObGdya0lpRWxWZzNFby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjMxNC85NkZFMzAwNkUwRDIxMUU4QTYzMTM0MjVDNEY5QUUwMi82R3dQY2c2V29k WHdZTmxncmtJaUVsVmczRW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFVWaqP3PLMjFBSvPdvLT+ovpLEoj1gCzWFHikztJWtZdUbjDsNLg3 /LNvdWUsiJ2QItwYsDKKU0mt+Q6T9YmD3h9MjdiBX6xbdcd2U6D/NcZaK8Ggrmkq EvHBvjIjTq4macyAosXfXLFuFUrMeHlwp+23/dANaSY8jD8UtdYh0n5xJpjw6T/O t1/SxxvoMbtvAzCoVnMSKV+f42Fa/D9SefuFNuXd7dDy6tnPITOZN3AX5ajjKT+t uFqNjcHgFEJQDwloNJ7/qHeqWgivodGbd42VPfo1sk/U25zRqdoUo9Jm8bka8CBM t5ZGYgyuZvTBRpZBtfmgDHAgyLlP9h6y -----END CERTIFICATE-----Generated at Sat May 17 05:53:03 2025 by rpki-client