$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft File: 1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft (raw, json) Hash identifier: p6VcOVauVjj+mNxa9zeMx6SeJwvTShNGuJzA5m4AbdM= Subject key identifier: 29:7C:64:F8:BA:F8:4A:61:EE:D7:56:4F:D3:54:E4:86:52:A5:84:3D Authority key identifier: D6:F2:BA:AE:7A:52:0F:AA:46:82:CA:DC:36:93:66:0B:9E:1F:F1:04 Certificate issuer: /CN=A91FC8B6/serialNumber=D6F2BAAE7A520FAA4682CADC3693660B9E1FF104 Certificate serial: 018F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vK6rnpSD6pGgsrcNpNmC54f8QQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft Manifest number: 018C Signing time: Sun 29 Jun 2025 02:38:20 +0000 Manifest this update: Sun 29 Jun 2025 02:38:20 +0000 Manifest next update: Sun 06 Jul 2025 02:38:20 +0000 Files and hashes: 1: 1vK6rnpSD6pGgsrcNpNmC54f8QQ.crl (hash: z47K60aUK3cV9E8Q/JTlsFnrwdH6m2ppClH0wk2W4AM=) 2: 37B81F7AF64511ED8C736D76C4F9AE02.roa (hash: ElQvBJV6B10UNvlVIlGas46V55/K9saRpZMoFdDMc0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.crl rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vK6rnpSD6pGgsrcNpNmC54f8QQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 02:38:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 399 (0x18f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC8B6, serialNumber=D6F2BAAE7A520FAA4682CADC3693660B9E1FF104 Validity Not Before: Jun 29 02:38:20 2025 GMT Not After : Jul 6 02:38:20 2025 GMT Subject: CN=6860a71c-e505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:35:50:1f:e4:68:c5:ff:f4:9d:98:97:ec:5f: 07:25:87:ee:3c:82:5a:bc:4a:a5:23:24:18:d2:67: f5:16:89:3c:75:0f:44:82:ca:0a:47:01:fd:e7:d0: 23:5e:fe:2e:db:c8:ca:68:91:00:5c:8c:94:6f:a7: 7f:3c:0e:f8:99:3e:4f:3b:9d:5c:1e:53:01:08:0e: a3:0a:45:83:54:18:50:68:2f:fd:87:2b:85:ae:8e: 01:c0:1b:df:ca:91:ec:c4:7d:cf:89:7c:8c:f3:61: 36:7a:72:74:d7:0b:04:41:61:4e:5b:ec:1f:f5:89: 2c:7d:5c:b8:e0:f5:71:46:71:c9:79:47:fd:34:11: 87:4a:c1:9f:54:d3:18:f0:9e:cc:81:f8:ab:fc:40: 17:54:5d:05:5c:fd:ec:96:ae:9c:c7:22:27:df:8d: 6a:77:41:f7:53:0e:a3:6a:e9:b2:ae:b5:f8:90:bd: 3d:d1:45:db:e2:2c:5c:f6:ef:8d:3b:d9:78:97:dc: 4a:47:fc:e4:77:6d:e2:99:dc:c1:3b:56:6c:10:96: e2:f7:c2:0f:d6:95:e0:6f:ee:be:fe:5a:e0:03:b6: 7d:c9:d1:69:f8:20:d3:dd:65:22:af:aa:89:5c:3c: db:35:3a:1a:4a:77:4d:33:67:b1:d9:54:6f:e6:a3: 03:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:7C:64:F8:BA:F8:4A:61:EE:D7:56:4F:D3:54:E4:86:52:A5:84:3D X509v3 Authority Key Identifier: keyid:D6:F2:BA:AE:7A:52:0F:AA:46:82:CA:DC:36:93:66:0B:9E:1F:F1:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vK6rnpSD6pGgsrcNpNmC54f8QQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:9b:b9:16:4d:31:01:01:5d:01:4a:d9:75:51:ec:92:b2:b3: de:42:f1:c5:4c:2d:dc:47:69:f9:46:f2:b3:c9:f3:59:2d:02: 7d:b2:a8:27:24:96:e9:a4:52:b4:a0:d5:0b:cd:a4:e5:33:e1: 14:e2:f2:75:d8:42:f5:6f:0d:f7:71:5e:49:9a:7e:81:1c:b7: c0:e2:53:9e:09:af:10:f0:c3:a4:05:93:82:cc:38:17:33:b5: f3:c0:71:ad:9d:e0:45:15:5c:9d:5d:e9:7e:a2:34:d9:e4:12: 83:09:33:fc:e0:69:e1:92:a3:40:ff:06:ad:1f:bf:04:aa:29: 1f:b8:15:1a:f5:47:18:95:fa:e1:ad:d0:7a:18:d1:bf:be:13: 63:c2:3e:0f:0a:29:c9:4c:a2:e8:cf:c3:c8:a0:f1:8d:bc:1b: 75:6c:33:fe:33:57:65:fb:d1:ac:e9:09:b1:a1:9d:b7:58:f7: db:33:88:79:06:33:be:e2:1e:bf:a5:08:37:2f:f6:86:8e:2c: a9:6d:11:4a:ba:f4:66:61:10:43:bc:87:65:47:18:bf:ca:77: 24:a6:a8:3f:9b:38:5b:f1:51:0e:ed:7e:e9:23:f1:38:15:39: ec:c1:cf:75:a9:36:92:98:df:42:c4:a3:fb:75:51:05:c8:69: 36:4e:a4:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM4QjYxMTAvBgNVBAUTKEQ2RjJCQUFFN0E1MjBGQUE0NjgyQ0FEQzM2OTM2NjBC OUUxRkYxMDQwHhcNMjUwNjI5MDIzODIwWhcNMjUwNzA2MDIzODIwWjAYMRYwFAYD VQQDEw02ODYwYTcxYy1lNTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6TVQH+Roxf/0nZiX7F8HJYfuPIJavEqlIyQY0mf1Fok8dQ9EgsoKRwH959Aj Xv4u28jKaJEAXIyUb6d/PA74mT5PO51cHlMBCA6jCkWDVBhQaC/9hyuFro4BwBvf ypHsxH3PiXyM82E2enJ01wsEQWFOW+wf9YksfVy44PVxRnHJeUf9NBGHSsGfVNMY 8J7Mgfir/EAXVF0FXP3slq6cxyIn341qd0H3Uw6jaumyrrX4kL090UXb4ixc9u+N O9l4l9xKR/zkd23imdzBO1ZsEJbi98IP1pXgb+6+/lrgA7Z9ydFp+CDT3WUir6qJ XDzbNToaSndNM2ex2VRv5qMDCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCl8ZPi6 +Eph7tdWT9NU5IZSpYQ9MB8GA1UdIwQYMBaAFNbyuq56Ug+qRoLK3DaTZgueH/EE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzhCNi9FQzYyMkIwNkY2 M0YxMUVEOTc4ODJDNzJDNEY5QUUwMi8xdks2cm5wU0Q2cEdnc3JjTnBObUM1NGY4 UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF2SzZybnBTRDZwR2dzcmNOcE5tQzU0ZjhRUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzhCNi9FQzYyMkIwNkY2M0YxMUVEOTc4ODJDNzJDNEY5QUUwMi8xdks2cm5wU0Q2 cEdnc3JjTnBObUM1NGY4UVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwm7kWTTEBAV0BStl1UeySsrPeQvHFTC3cR2n5RvKzyfNZLQJ9sqgn JJbppFK0oNULzaTlM+EU4vJ12EL1bw33cV5Jmn6BHLfA4lOeCa8Q8MOkBZOCzDgX M7XzwHGtneBFFVydXel+ojTZ5BKDCTP84GnhkqNA/watH78EqikfuBUa9UcYlfrh rdB6GNG/vhNjwj4PCinJTKLoz8PIoPGNvBt1bDP+M1dl+9Gs6QmxoZ23WPfbM4h5 BjO+4h6/pQg3L/aGjiypbRFKuvRmYRBDvIdlRxi/ynckpqg/mzhb8VEO7X7pI/E4 FTnswc91qTaSmN9CxKP7dVEFyGk2TqSY -----END CERTIFICATE-----Generated at Sun Jun 29 12:28:08 2025 by rpki-client