$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.mft File: 6f6DqUwBuxPVNX83DHZZc-mX9NA.mft (raw, json) Hash identifier: QX9mQKSdH5suetglO9HffT7MPBiL+KdRBEBEsxycyQI= Subject key identifier: 13:46:C2:FF:43:4D:76:0E:3F:FA:70:A5:52:13:1A:A0:21:16:A6:65 Authority key identifier: E9:FE:83:A9:4C:01:BB:13:D5:35:7F:37:0C:76:59:73:E9:97:F4:D0 Certificate issuer: /CN=A911BDAE/serialNumber=E9FE83A94C01BB13D5357F370C765973E997F4D0 Certificate serial: 0280 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f6DqUwBuxPVNX83DHZZc-mX9NA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.mft Manifest number: 027B Signing time: Sat 31 May 2025 01:51:35 +0000 Manifest this update: Sat 31 May 2025 01:51:35 +0000 Manifest next update: Sat 07 Jun 2025 01:51:35 +0000 Files and hashes: 1: 6f6DqUwBuxPVNX83DHZZc-mX9NA.crl (hash: T76XMlNOkMRnbXFgkCMlW6QOw3WkBCF8kMZ1vbek0nc=) 2: 23803F800C9C11ED82C8955BC4F9AE02.roa (hash: Ny3HF6QiqyIBzWklmUHinHzimYgWUBmeHFmleIQ1/IQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.crl rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f6DqUwBuxPVNX83DHZZc-mX9NA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:51:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 640 (0x280) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BDAE, serialNumber=E9FE83A94C01BB13D5357F370C765973E997F4D0 Validity Not Before: May 31 01:51:35 2025 GMT Not After : Jun 7 01:51:35 2025 GMT Subject: CN=683a60a7-5337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:8d:5c:63:53:03:b1:ed:3c:1c:d4:02:15:64: 83:b1:93:fb:0a:a2:af:55:50:d7:52:35:e9:35:4c: 8f:71:d6:86:fe:90:bd:a4:fd:94:2e:de:2e:5f:37: b3:92:54:fc:2c:61:30:71:00:df:19:74:62:07:e4: 02:3f:06:e6:47:10:c7:b5:3c:6f:80:b5:cf:07:78: 5d:9c:ae:34:1d:e2:ac:a0:03:98:74:79:4f:29:88: 39:66:8a:1d:0a:15:33:b5:48:e9:a6:19:93:d5:02: 7d:33:f2:bc:39:eb:71:fa:79:79:23:18:a0:40:e2: 6b:38:d8:51:b9:1c:c8:4f:83:54:c5:52:97:0e:05: 3f:3d:73:15:e2:ed:4d:31:4b:7f:36:ed:53:8e:ff: fd:f4:a9:61:b7:b7:61:e8:55:19:7d:b6:79:0e:6a: 75:35:fc:8f:96:f4:83:19:bc:9a:86:ad:37:da:fa: c4:1d:a6:35:9e:04:de:f8:ef:90:7f:9f:4e:88:75: d3:19:88:65:cd:dd:b2:79:96:50:67:6e:08:0a:f3: d5:2a:1b:c4:2a:e7:b3:30:dd:8f:30:65:bf:bd:a1: 8b:cc:fb:cc:34:3f:8c:67:86:83:c9:03:6e:6f:c0: 3e:67:0b:e3:bd:e9:c1:0a:9e:d9:77:e0:be:54:3f: 62:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:46:C2:FF:43:4D:76:0E:3F:FA:70:A5:52:13:1A:A0:21:16:A6:65 X509v3 Authority Key Identifier: keyid:E9:FE:83:A9:4C:01:BB:13:D5:35:7F:37:0C:76:59:73:E9:97:F4:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f6DqUwBuxPVNX83DHZZc-mX9NA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:d4:99:ae:51:b7:19:b6:4b:0c:48:3a:0d:5d:c7:72:c7:34: 76:c7:83:10:6a:14:cc:37:b2:eb:1c:f7:22:94:6e:35:96:b4: 7f:42:0a:ac:7d:7d:ea:00:d8:27:49:21:c0:30:20:a6:1f:ff: e7:38:1d:df:da:3e:c6:3c:12:8a:8d:b1:81:12:be:00:ae:17: 0a:04:d0:c5:ab:8b:83:b6:50:9c:aa:8c:3e:1e:ca:b6:81:2d: 87:97:b2:8e:bd:70:08:5c:88:3a:a3:15:87:d4:23:a1:0b:42: f3:62:be:a8:e6:57:ad:42:95:a8:d8:db:a9:57:aa:34:29:70: c5:ff:56:88:4e:04:00:d0:23:83:96:4d:7e:d8:63:c3:88:d6: 58:d6:0c:6b:cc:60:36:50:b2:88:b5:19:d5:f2:5f:42:cf:6f: f6:71:d0:14:9e:33:f5:8e:d7:8d:af:83:c0:7f:9b:01:8d:1a: 61:97:73:1c:c6:d6:6c:48:b1:73:26:c3:42:7f:e1:bb:8c:26: 85:89:30:42:9b:d0:00:20:96:9a:79:cd:bd:ff:88:51:15:82: a2:40:63:f9:ce:a6:97:ee:8e:fd:f8:ab:70:61:c6:96:96:d1: e7:72:58:64:38:eb:8b:5c:2c:53:64:e3:39:7f:7c:b6:dc:ed: ea:1c:90:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJEQUUxMTAvBgNVBAUTKEU5RkU4M0E5NEMwMUJCMTNENTM1N0YzNzBDNzY1OTcz RTk5N0Y0RDAwHhcNMjUwNTMxMDE1MTM1WhcNMjUwNjA3MDE1MTM1WjAYMRYwFAYD VQQDEw02ODNhNjBhNy01MzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA641cY1MDse08HNQCFWSDsZP7CqKvVVDXUjXpNUyPcdaG/pC9pP2ULt4uXzez klT8LGEwcQDfGXRiB+QCPwbmRxDHtTxvgLXPB3hdnK40HeKsoAOYdHlPKYg5Zood ChUztUjpphmT1QJ9M/K8Oetx+nl5IxigQOJrONhRuRzIT4NUxVKXDgU/PXMV4u1N MUt/Nu1Tjv/99Klht7dh6FUZfbZ5Dmp1NfyPlvSDGbyahq032vrEHaY1ngTe+O+Q f59OiHXTGYhlzd2yeZZQZ24ICvPVKhvEKuezMN2PMGW/vaGLzPvMND+MZ4aDyQNu b8A+ZwvjvenBCp7Zd+C+VD9iDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBNGwv9D TXYOP/pwpVITGqAhFqZlMB8GA1UdIwQYMBaAFOn+g6lMAbsT1TV/Nwx2WXPpl/TQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkRBRS9FOEYxMjk5ODBD OTUxMUVEODg2MjU2MzRDNEY5QUUwMi82ZjZEcVV3QnV4UFZOWDgzREhaWmMtbVg5 TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZmNkRxVXdCdXhQVk5YODNESFpaYy1tWDlOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkRBRS9FOEYxMjk5ODBDOTUxMUVEODg2MjU2MzRDNEY5QUUwMi82ZjZEcVV3QnV4 UFZOWDgzREhaWmMtbVg5TkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBt1JmuUbcZtksMSDoNXcdyxzR2x4MQahTMN7LrHPcilG41lrR/Qgqs fX3qANgnSSHAMCCmH//nOB3f2j7GPBKKjbGBEr4ArhcKBNDFq4uDtlCcqow+Hsq2 gS2Hl7KOvXAIXIg6oxWH1COhC0LzYr6o5letQpWo2NupV6o0KXDF/1aITgQA0COD lk1+2GPDiNZY1gxrzGA2ULKItRnV8l9Cz2/2cdAUnjP1jteNr4PAf5sBjRphl3Mc xtZsSLFzJsNCf+G7jCaFiTBCm9AAIJaaec29/4hRFYKiQGP5zqaX7o79+KtwYcaW ltHnclhkOOuLXCxTZOM5f3y23O3qHJA6 -----END CERTIFICATE-----Generated at Sat May 31 16:35:51 2025 by rpki-client