$ rpki-client -vvf rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft File: 6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft (raw, json) Hash identifier: T7It2mSslka9x7/aU3oLgR5AZLzezoFiaIiIq1SG8O8= Subject key identifier: 5D:2F:1A:3C:B2:F1:9D:D8:B8:10:23:EE:CE:59:BD:CC:EB:41:23:92 Authority key identifier: E9:F2:CE:48:3F:1B:06:D2:9D:5E:A2:AB:E3:75:BD:1D:22:A9:E1:C4 Certificate issuer: /CN=A91C68AD/serialNumber=E9F2CE483F1B06D29D5EA2ABE375BD1D22A9E1C4 Certificate serial: 61 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft Manifest number: 60 Signing time: Wed 09 Apr 2025 05:52:24 +0000 Manifest this update: Wed 09 Apr 2025 05:52:24 +0000 Manifest next update: Wed 16 Apr 2025 05:52:24 +0000 Files and hashes: 1: 6fLOSD8bBtKdXqKr43W9HSKp4cQ.crl (hash: KaLvRD00LB+uDxYcDWaw/KTpZL9suymy9icORjfQTm8=) 2: FC3E29FC85E111EFB365E459C4F9AE02.roa (hash: 0DxgUjIqfTQVxs1j3QKSFbDtA+jK21POEd6C/CDA/hA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.crl rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 05:52:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 97 (0x61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C68AD Validity Not Before: Apr 9 05:52:24 2025 GMT Not After : Apr 16 05:52:24 2025 GMT Subject: CN=67f60b18-1f2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ae:5f:88:6d:52:73:35:b2:4f:8d:59:69:c1: cd:f3:49:b5:76:af:f7:89:4c:63:1c:9c:2c:0d:40: ad:68:18:a0:32:fd:0a:03:20:fa:b7:c3:3c:be:67: 81:9c:81:4b:99:f9:73:79:0c:11:5d:bb:c9:27:a5: 86:2d:d7:56:82:fa:d5:ae:df:a8:a5:75:39:45:18: 0e:23:cf:6e:e6:e1:47:2a:d1:17:a9:54:42:a9:3d: 2a:6b:00:60:dd:27:b0:8c:aa:8b:79:5f:20:ab:df: c7:c1:80:e0:d6:db:f5:1b:00:a1:d5:2c:ea:84:35: d9:d0:c5:54:f3:1b:d1:dd:32:c1:9d:16:13:58:11: 0a:38:dc:f4:0c:39:7e:cc:04:9f:6f:b6:18:96:61: cc:63:4b:25:28:71:2b:3a:b9:f3:b9:18:f0:5b:ea: b2:ca:e6:4d:1b:b5:16:fc:bf:e7:37:db:e0:75:ec: fc:34:c1:b5:e3:7b:d1:9d:a6:c6:7f:c3:92:1e:72: 15:db:9c:02:ad:28:43:cd:07:29:85:9d:05:81:cb: 0e:f0:ae:cd:2a:23:ce:58:a2:a4:92:44:52:4e:97: b9:6a:1b:91:fb:6b:af:78:9a:d4:59:00:14:8b:4a: 9f:25:de:10:7d:cf:50:cf:e3:a4:96:2e:ec:75:3f: 16:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:2F:1A:3C:B2:F1:9D:D8:B8:10:23:EE:CE:59:BD:CC:EB:41:23:92 X509v3 Authority Key Identifier: keyid:E9:F2:CE:48:3F:1B:06:D2:9D:5E:A2:AB:E3:75:BD:1D:22:A9:E1:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:67:5d:84:db:18:02:38:cd:e2:69:7b:1f:e3:93:85:9e:5d: 59:21:97:83:c0:14:22:18:cf:fd:98:8e:a0:ce:d0:ed:2c:cd: d4:a6:24:db:f8:2f:59:6f:e2:b3:01:ee:89:ff:1c:93:bd:88: 31:5d:5c:d7:df:73:05:67:9d:21:b1:7f:b9:09:7c:b4:34:3c: fa:8d:50:88:a8:96:7d:8e:d0:be:0a:a6:f0:5a:3d:df:69:43: 59:4c:24:2c:d9:50:1c:d0:4d:3b:cb:0b:37:4d:57:f2:43:ba: 1c:6e:8d:1f:bf:1a:ff:86:80:6f:20:fe:73:d2:f6:40:c1:fb: f3:15:76:07:90:fd:f7:ff:51:ff:57:0a:15:0e:c3:a4:31:d3: 80:8d:a2:4c:16:28:b9:38:fb:72:6b:6a:5e:27:97:f7:9b:76: 52:9d:3f:07:07:27:e1:5a:a2:df:b7:2d:98:2b:75:e4:83:a2: 56:04:45:39:4f:a6:8b:e7:ae:86:c7:49:75:42:16:6b:a2:62: 2f:25:1b:ab:c1:ba:cb:d8:06:a5:43:bd:e4:59:97:b9:c7:f0: c1:38:bf:53:cc:78:bd:7d:6e:f9:06:f9:6c:6c:f7:8d:f1:ed: 64:e8:d7:fa:2e:5e:36:22:7b:c0:5e:64:ff:b2:f3:59:55:71: 2d:84:60:8a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NjhBRDExMC8GA1UEBRMoRTlGMkNFNDgzRjFCMDZEMjlENUVBMkFCRTM3NUJEMUQy MkE5RTFDNDAeFw0yNTA0MDkwNTUyMjRaFw0yNTA0MTYwNTUyMjRaMBgxFjAUBgNV BAMTDTY3ZjYwYjE4LTFmMmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDArl+IbVJzNbJPjVlpwc3zSbV2r/eJTGMcnCwNQK1oGKAy/QoDIPq3wzy+Z4Gc gUuZ+XN5DBFdu8knpYYt11aC+tWu36ildTlFGA4jz27m4Ucq0RepVEKpPSprAGDd J7CMqot5XyCr38fBgODW2/UbAKHVLOqENdnQxVTzG9HdMsGdFhNYEQo43PQMOX7M BJ9vthiWYcxjSyUocSs6ufO5GPBb6rLK5k0btRb8v+c32+B17Pw0wbXje9GdpsZ/ w5IechXbnAKtKEPNBymFnQWByw7wrs0qI85YoqSSRFJOl7lqG5H7a694mtRZABSL Sp8l3hB9z1DP46SWLux1PxZZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXS8aPLLx ndi4ECPuzlm9zOtBI5IwHwYDVR0jBBgwFoAU6fLOSD8bBtKdXqKr43W9HSKp4cQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2OEFELzQ5REVFRTY0ODVF MDExRUZBNzU4NzY1NUM0RjlBRTAyLzZmTE9TRDhiQnRLZFhxS3I0M1c5SFNLcDRj US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNmZMT1NEOGJCdEtkWHFLcjQzVzlIU0twNGNRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2 OEFELzQ5REVFRTY0ODVFMDExRUZBNzU4NzY1NUM0RjlBRTAyLzZmTE9TRDhiQnRL ZFhxS3I0M1c5SFNLcDRjUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABdnXYTbGAI4zeJpex/jk4WeXVkhl4PAFCIYz/2YjqDO0O0szdSmJNv4 L1lv4rMB7on/HJO9iDFdXNffcwVnnSGxf7kJfLQ0PPqNUIioln2O0L4KpvBaPd9p Q1lMJCzZUBzQTTvLCzdNV/JDuhxujR+/Gv+GgG8g/nPS9kDB+/MVdgeQ/ff/Uf9X ChUOw6Qx04CNokwWKLk4+3Jral4nl/ebdlKdPwcHJ+Faot+3LZgrdeSDolYERTlP povnrobHSXVCFmuiYi8lG6vBusvYBqVDveRZl7nH8ME4v1PMeL19bvkG+Wxs943x 7WTo1/ouXjYie8BeZP+y81lVcS2EYIo= -----END CERTIFICATE-----Generated at Thu Apr 10 23:58:25 2025 by rpki-client