$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft File: 6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft (raw, json) Hash identifier: KigM6j4GcvXHEgUg7kxzfShQjyKyJ88iYBpxmScIeYA= Subject key identifier: D5:D5:01:56:C8:01:A9:87:C2:87:C8:3F:E2:2B:27:48:E0:C9:4E:6D Authority key identifier: E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5 Certificate issuer: /CN=A91A2359/serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5 Certificate serial: 0B19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft Manifest number: 0AFA Signing time: Thu 10 Apr 2025 19:14:41 +0000 Manifest this update: Thu 10 Apr 2025 19:14:41 +0000 Manifest next update: Thu 17 Apr 2025 19:14:41 +0000 Files and hashes: 1: 6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl (hash: /vp2aQDLMJvEJbgITIVGZcUCG8MhtRNuuvPPmvwX4/A=) 2: 6DADCA1C2F1C11EDA3E29B09C4F9AE02.roa (hash: XVeZDTc69uGCDdXez9QUlyk7cBcd+qKHtk4lz+fH2Nk=) 3: 23BA9D7CBEEB11EDA7945F4BC4F9AE02.roa (hash: SZF4jNnIB2QVKz5/EX+jPuidzyWfheujHP0W7HxZhfM=) 4: 6B3307CE4D8411EFBAD45B86C4F9AE02.roa (hash: Q55EbY5POWYTdePCItnDLlFfKKISUoO3fBrl7W8p8yg=) 5: A39B24D2975511EF85448840C4F9AE02.roa (hash: BIsgdAgqtk3wodS0abcXx+V3UWlTiBSPXxRaU3Y5Enw=) 6: D5955AB6975511EF94255C5EC4F9AE02.roa (hash: WPJAjv2UMHwWfs/KA/8g2VypUekjjpz/btCbDPwTPLs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 19:14:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2841 (0xb19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2359, serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5 Validity Not Before: Apr 10 19:14:41 2025 GMT Not After : Apr 17 19:14:41 2025 GMT Subject: CN=67f818a1-03e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:19:5d:63:1b:5b:4d:32:91:af:fc:d6:d1:9c: d4:99:81:5c:a8:ab:48:84:6f:6b:5b:08:01:f6:16: 45:29:4c:41:9c:91:18:5a:15:2d:f6:ec:02:b1:57: 5e:6a:72:d3:51:98:a6:2d:58:25:b8:37:08:66:0b: 85:6d:99:81:ac:09:4a:a8:ab:1d:36:97:f7:6c:ce: a7:9c:a2:c2:69:1a:38:ff:62:a1:8e:53:78:86:e0: d2:ac:0b:2c:52:ed:d6:88:2a:5b:57:0e:58:f6:8c: 7e:5f:eb:cf:a6:33:82:5d:94:1e:87:36:f3:50:bd: 06:26:45:c4:6d:eb:d7:34:dc:41:01:96:0c:0a:3c: 31:a7:fd:c8:99:a3:fc:6b:85:2f:d2:14:20:71:1f: 88:44:f3:07:6e:76:ae:92:3c:2d:1b:14:a4:b0:9d: af:5a:70:23:de:fc:f2:3d:3d:9e:da:80:a8:cc:61: 9e:4a:7f:0e:7b:84:7e:26:0a:3b:19:ed:ef:1f:93: 17:da:10:ba:6d:b2:5b:69:9e:cc:a7:8f:c4:6b:fc: be:6d:29:aa:17:24:3b:1d:52:56:98:05:1c:06:0f: 27:8a:bd:b7:55:c3:9c:d2:d9:52:69:ec:bc:d6:5d: 9b:69:1d:5b:6f:ad:9f:8c:c7:0d:07:26:55:53:e7: 90:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:D5:01:56:C8:01:A9:87:C2:87:C8:3F:E2:2B:27:48:E0:C9:4E:6D X509v3 Authority Key Identifier: keyid:E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:0d:88:65:c1:60:a1:27:76:48:ba:e4:78:2c:4d:4e:57:1f: 3a:5a:f3:3d:0b:09:1f:f8:64:44:72:5a:52:20:7c:5c:2d:b5: 47:35:bf:ab:28:64:f1:5b:a8:40:7c:90:e8:12:0e:f7:8e:6c: 16:2d:18:09:c4:e2:bd:8c:1e:0e:f4:24:ca:ab:ae:af:7e:e4: d8:92:72:a2:44:50:80:2a:ec:d9:ed:69:51:41:96:c2:ce:37: 07:45:dc:2d:4a:e1:ca:8c:7a:37:95:1f:d8:1b:4c:c9:b6:a9: 3f:8d:a6:77:c8:78:77:54:aa:2a:20:29:21:db:a6:29:14:45: 4e:51:7a:34:bb:9c:4f:b2:95:ef:04:24:d1:50:30:80:75:95: 8f:91:f8:b0:7a:02:8a:6a:98:24:f1:78:d0:c9:7f:e3:b1:d6: dc:1e:4d:20:83:2a:a3:80:3e:f9:9d:1f:5b:3c:af:c7:d1:ea: 40:50:e0:f0:aa:dc:15:52:13:cb:4e:23:37:fd:e7:ca:9b:da: 3f:5f:d5:00:14:9a:40:bc:14:cb:01:a8:c8:51:57:a7:c9:07: 4e:30:cb:48:37:2f:b5:34:ea:cc:09:9f:b4:6a:11:64:e1:2d: d5:dc:86:e6:43:8f:08:03:4d:52:a9:d3:38:0f:86:d7:da:03: a7:82:65:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTIzNTkxMTAvBgNVBAUTKEU5OTFBNUEyREQ5RDFGMkEyNDNERjZBQTI0QjlGNTBF MUNCOEZFRTUwHhcNMjUwNDEwMTkxNDQxWhcNMjUwNDE3MTkxNDQxWjAYMRYwFAYD VQQDEw02N2Y4MThhMS0wM2UzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxhldYxtbTTKRr/zW0ZzUmYFcqKtIhG9rWwgB9hZFKUxBnJEYWhUt9uwCsVde anLTUZimLVgluDcIZguFbZmBrAlKqKsdNpf3bM6nnKLCaRo4/2KhjlN4huDSrAss Uu3WiCpbVw5Y9ox+X+vPpjOCXZQehzbzUL0GJkXEbevXNNxBAZYMCjwxp/3ImaP8 a4Uv0hQgcR+IRPMHbnaukjwtGxSksJ2vWnAj3vzyPT2e2oCozGGeSn8Oe4R+Jgo7 Ge3vH5MX2hC6bbJbaZ7Mp4/Ea/y+bSmqFyQ7HVJWmAUcBg8nir23VcOc0tlSaey8 1l2baR1bb62fjMcNByZVU+eQ4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNXVAVbI AamHwofIP+IrJ0jgyU5tMB8GA1UdIwQYMBaAFOmRpaLdnR8qJD32qiS59Q4cuP7l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjM1OS9GQzI5OERFQTQx NzAxMUVBOThERTY1NkFDNEY5QUUwMi82Wkdsb3QyZEh5b2tQZmFxSkxuMURoeTRf dVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZaR2xvdDJkSHlva1BmYXFKTG4xRGh5NF91VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjM1OS9GQzI5OERFQTQxNzAxMUVBOThERTY1NkFDNEY5QUUwMi82Wkdsb3QyZEh5 b2tQZmFxSkxuMURoeTRfdVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIDYhlwWChJ3ZIuuR4LE1OVx86WvM9Cwkf+GREclpSIHxcLbVHNb+r KGTxW6hAfJDoEg73jmwWLRgJxOK9jB4O9CTKq66vfuTYknKiRFCAKuzZ7WlRQZbC zjcHRdwtSuHKjHo3lR/YG0zJtqk/jaZ3yHh3VKoqICkh26YpFEVOUXo0u5xPspXv BCTRUDCAdZWPkfiwegKKapgk8XjQyX/jsdbcHk0ggyqjgD75nR9bPK/H0epAUODw qtwVUhPLTiM3/efKm9o/X9UAFJpAvBTLAajIUVenyQdOMMtINy+1NOrMCZ+0ahFk 4S3V3IbmQ48IA01SqdM4D4bX2gOngmV/ -----END CERTIFICATE-----Generated at Sat Apr 12 16:46:59 2025 by rpki-client