$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.mft File: 6wFhqozbHyTNf-E9XlzlIXulj4I.mft (raw, json) Hash identifier: Xb0zOVgU8epE7Z4FHeupnKBnbpgKYFMlCQu83NjI68o= Subject key identifier: AC:AD:66:52:C5:F7:4D:6B:F8:94:2E:67:02:7B:92:7B:FE:4D:F6:31 Authority key identifier: EB:01:61:AA:8C:DB:1F:24:CD:7F:E1:3D:5E:5C:E5:21:7B:A5:8F:82 Certificate issuer: /CN=A91FC77C/serialNumber=EB0161AA8CDB1F24CD7FE13D5E5CE5217BA58F82 Certificate serial: 1700 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wFhqozbHyTNf-E9XlzlIXulj4I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.mft Manifest number: 16F6 Signing time: Wed 16 Apr 2025 16:38:45 +0000 Manifest this update: Wed 16 Apr 2025 16:38:44 +0000 Manifest next update: Wed 23 Apr 2025 16:38:44 +0000 Files and hashes: 1: 6wFhqozbHyTNf-E9XlzlIXulj4I.crl (hash: ybUbb9NcLuQPU4CrVU+pAWbOk6hcAPBRbueNehxq5wY=) 2: AAAAE566E8AA11E78A615315C4F9AE02.roa (hash: IZm4bUn/JmIHtecsy8bw34L4o+Q1Xnkykngp8peDfE0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.crl rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wFhqozbHyTNf-E9XlzlIXulj4I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 16:38:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5888 (0x1700) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC77C, serialNumber=EB0161AA8CDB1F24CD7FE13D5E5CE5217BA58F82 Validity Not Before: Apr 16 16:38:44 2025 GMT Not After : Apr 23 16:38:44 2025 GMT Subject: CN=67ffdd14-5373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c6:e6:a9:24:71:ea:4b:b7:31:2f:43:54:ae: 12:3f:fd:5e:a0:ef:e0:b0:76:a3:c0:ab:da:74:66: 77:93:c0:67:82:ba:41:f4:af:77:75:bf:27:1e:0b: 97:30:cb:29:4f:d2:2c:d7:e5:09:cb:f0:91:5d:5a: 41:d5:f8:8f:27:ca:d6:81:5b:8c:ef:b7:6c:60:51: 79:9a:ec:b4:7b:f3:12:83:c1:80:d4:92:47:7b:13: cb:1e:9c:25:89:2f:b6:d8:52:aa:55:4d:a4:d1:57: 29:90:31:a1:c2:d7:71:5d:91:dc:59:34:87:33:96: f9:a0:cf:1b:dc:72:81:3e:bf:71:b7:9d:7a:2f:17: e4:3a:ab:d6:aa:37:96:ef:4a:93:1e:18:83:9b:c9: cb:2a:4f:18:29:d9:63:a4:55:32:c7:d0:32:6e:83: 34:c8:4f:44:0b:9a:e0:4a:15:8d:c7:5e:df:cf:8c: 78:31:67:b1:c1:15:57:7b:97:65:08:cf:e0:2f:3a: 1c:66:19:19:b5:a2:db:59:ca:44:2e:8d:6f:0c:e3: 39:bc:d8:8f:c3:e4:43:9a:9d:6c:82:47:20:89:80: af:8e:d9:39:24:2a:48:29:b8:5f:90:6e:94:c5:32: a5:c4:b2:1c:de:7e:e6:a9:2e:19:d7:8a:d5:4d:be: cc:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:AD:66:52:C5:F7:4D:6B:F8:94:2E:67:02:7B:92:7B:FE:4D:F6:31 X509v3 Authority Key Identifier: keyid:EB:01:61:AA:8C:DB:1F:24:CD:7F:E1:3D:5E:5C:E5:21:7B:A5:8F:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wFhqozbHyTNf-E9XlzlIXulj4I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:86:27:8a:f0:66:3e:af:c2:00:8e:c3:07:c5:34:5e:ae:b2: 97:bf:60:0f:85:fe:0d:60:a8:12:c6:36:b9:7f:ca:2e:c6:f5: f4:07:53:76:97:a2:2a:ac:a9:9e:33:21:46:21:b6:7d:9d:d8: 4b:26:0f:76:f5:eb:66:95:da:7d:73:2d:73:78:5d:db:35:d1: 6a:30:ad:ad:35:da:42:f6:9f:11:fd:ca:21:63:f9:c3:b8:de: c4:61:d1:02:88:37:ae:fc:22:8c:1e:76:5c:e4:ea:1e:58:27: 3f:e8:be:e1:91:f2:b1:07:14:99:e6:0d:b0:84:66:9d:73:ba: d1:65:2a:55:b5:a9:1a:47:df:eb:20:d4:82:c3:c3:6d:8a:18: ef:1e:fc:1c:68:b9:9d:73:c5:e4:fb:9c:bb:95:24:35:97:79: 89:b9:fe:d5:ec:60:a9:b5:b2:57:36:76:ce:5b:c6:76:be:a5: ac:eb:61:56:e1:70:72:7e:1c:e4:5e:3a:c2:f2:d7:f8:36:5d: 92:b6:e7:fb:ea:e1:bd:d5:98:bf:c0:96:a0:70:65:34:65:ac: 86:74:e7:77:12:95:ae:ce:bf:42:a7:66:21:60:ae:5c:36:fe: fc:27:e7:7f:e0:98:ae:ef:96:ae:fb:37:22:13:67:7b:05:bb: 5c:f2:62:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFwAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM3N0MxMTAvBgNVBAUTKEVCMDE2MUFBOENEQjFGMjRDRDdGRTEzRDVFNUNFNTIx N0JBNThGODIwHhcNMjUwNDE2MTYzODQ0WhcNMjUwNDIzMTYzODQ0WjAYMRYwFAYD VQQDEw02N2ZmZGQxNC01MzczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA48bmqSRx6ku3MS9DVK4SP/1eoO/gsHajwKvadGZ3k8BngrpB9K93db8nHguX MMspT9Is1+UJy/CRXVpB1fiPJ8rWgVuM77dsYFF5muy0e/MSg8GA1JJHexPLHpwl iS+22FKqVU2k0VcpkDGhwtdxXZHcWTSHM5b5oM8b3HKBPr9xt516LxfkOqvWqjeW 70qTHhiDm8nLKk8YKdljpFUyx9AyboM0yE9EC5rgShWNx17fz4x4MWexwRVXe5dl CM/gLzocZhkZtaLbWcpELo1vDOM5vNiPw+RDmp1sgkcgiYCvjtk5JCpIKbhfkG6U xTKlxLIc3n7mqS4Z14rVTb7MkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKytZlLF 901r+JQuZwJ7knv+TfYxMB8GA1UdIwQYMBaAFOsBYaqM2x8kzX/hPV5c5SF7pY+C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzc3Qy8xQzMyRDRCMEU4 QUExMUU3QTIzMERGMTRDNEY5QUUwMi82d0ZocW96Ykh5VE5mLUU5WGx6bElYdWxq NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ3Rmhxb3piSHlUTmYtRTlYbHpsSVh1bGo0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Qzc3Qy8xQzMyRDRCMEU4QUExMUU3QTIzMERGMTRDNEY5QUUwMi82d0ZocW96Ykh5 VE5mLUU5WGx6bElYdWxqNEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+hieK8GY+r8IAjsMHxTRerrKXv2APhf4NYKgSxja5f8ouxvX0B1N2 l6IqrKmeMyFGIbZ9ndhLJg929etmldp9cy1zeF3bNdFqMK2tNdpC9p8R/cohY/nD uN7EYdECiDeu/CKMHnZc5OoeWCc/6L7hkfKxBxSZ5g2whGadc7rRZSpVtakaR9/r INSCw8NtihjvHvwcaLmdc8Xk+5y7lSQ1l3mJuf7V7GCptbJXNnbOW8Z2vqWs62FW 4XByfhzkXjrC8tf4Nl2Stuf76uG91Zi/wJagcGU0ZayGdOd3EpWuzr9Cp2YhYK5c Nv78J+d/4Jiu75au+zciE2d7Bbtc8mKs -----END CERTIFICATE-----Generated at Fri Apr 18 06:56:46 2025 by rpki-client