$ rpki-client -vvf rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft File: a51l6unGl9ohy0vuv030zgpBkyE.mft (raw, json) Hash identifier: GaC/Ba1Uyw0EipeD0a30gj0AvNODSPbej5322KP3bVI= Subject key identifier: 03:6B:B1:D4:4B:8E:3B:2B:E1:C9:1C:75:A1:1F:D2:A3:30:16:6D:54 Authority key identifier: 6B:9D:65:EA:E9:C6:97:DA:21:CB:4B:EE:BF:4D:F4:CE:0A:41:93:21 Certificate issuer: /CN=A9141FD6/serialNumber=6B9D65EAE9C697DA21CB4BEEBF4DF4CE0A419321 Certificate serial: 34C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a51l6unGl9ohy0vuv030zgpBkyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft Manifest number: 34A6 Signing time: Sat 31 May 2025 14:42:10 +0000 Manifest this update: Sat 31 May 2025 14:42:10 +0000 Manifest next update: Sat 07 Jun 2025 14:42:10 +0000 Files and hashes: 1: a51l6unGl9ohy0vuv030zgpBkyE.crl (hash: oXEwlG42OquCD7VDV5i90MrdYnQ2fDj3u600PLhNekQ=) 2: 6215E9C089CF11ECA1DA1810C4F9AE02.roa (hash: o3Ceb2MSjRakfXXsxsrz1v3BRN+sMCeTig6Z0QGV2lg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.crl rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a51l6unGl9ohy0vuv030zgpBkyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 14:42:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13505 (0x34c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141FD6, serialNumber=6B9D65EAE9C697DA21CB4BEEBF4DF4CE0A419321 Validity Not Before: May 31 14:42:10 2025 GMT Not After : Jun 7 14:42:10 2025 GMT Subject: CN=683b1542-e7bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:cf:0a:d8:b8:03:57:34:ec:bd:2b:c6:f8:78: 73:72:f1:28:ba:2c:b0:9a:b9:75:ba:6b:a8:1b:a5: aa:3f:96:66:8b:ee:1c:61:0f:0f:5b:e5:f6:6a:24: 01:06:67:7b:3a:1b:0b:78:af:38:73:03:e7:d7:76: 2d:3f:8b:e3:5a:13:00:4c:52:e6:b6:8c:e4:f7:18: fc:57:59:74:d8:a1:08:99:6b:04:1b:8f:59:09:88: dd:09:54:18:2f:e3:a6:12:e5:3b:7c:12:7f:50:95: ff:03:c9:1d:16:78:61:bb:ce:97:90:13:c5:e4:a9: 2e:d5:10:af:1e:05:d6:a3:1e:71:c7:a2:3c:58:ae: 4d:ad:a2:3a:e6:b3:49:05:eb:a2:7a:30:a5:a8:2e: c3:4b:ba:7b:82:d1:58:da:a3:ec:b3:61:19:ef:d2: 7e:72:82:c4:23:ff:2e:e2:1f:17:94:39:10:62:2c: 2c:f9:7b:cf:6c:3a:80:5f:db:57:34:32:78:6e:c7: 5a:92:6b:b8:4d:a9:c3:97:45:ba:d4:13:85:d3:da: 3c:77:4f:de:88:5f:8e:d4:24:0a:96:91:f3:8a:11: 55:b4:09:cc:27:ec:aa:51:f2:ef:8f:48:aa:64:7b: a2:02:15:8b:f5:12:ff:77:f7:c8:68:60:5e:81:0b: 0a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:6B:B1:D4:4B:8E:3B:2B:E1:C9:1C:75:A1:1F:D2:A3:30:16:6D:54 X509v3 Authority Key Identifier: keyid:6B:9D:65:EA:E9:C6:97:DA:21:CB:4B:EE:BF:4D:F4:CE:0A:41:93:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a51l6unGl9ohy0vuv030zgpBkyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:c5:53:d4:3d:ee:51:42:22:0d:38:a1:c8:22:75:3a:43:f8: fc:ae:2d:98:9a:fd:91:7e:35:7a:df:ab:4b:ff:ea:de:f7:41: b8:4c:aa:c5:ab:84:37:34:08:93:ba:a4:1f:89:e3:08:50:42: 77:b9:c8:11:fe:15:19:f5:15:1e:6a:17:55:ec:ea:c8:4b:12: f7:ae:50:5a:cd:9a:ec:0b:d2:d4:4d:2f:18:d9:21:3a:7c:b7: 2f:6d:f1:4e:0c:ae:3b:2a:9c:f1:e3:0c:26:73:f8:60:b2:9d: c9:c2:9f:51:e8:97:27:1b:0b:68:0f:93:6c:de:1c:40:73:55: 03:8a:a2:24:43:53:5c:98:72:e9:2a:47:ba:3a:43:45:b6:f3: 84:6c:bf:b6:7c:30:1e:35:60:75:87:c4:ae:6c:f0:a0:df:7d: 7c:b1:6f:df:50:dc:10:5d:69:45:a1:e1:25:8a:73:8b:5a:06: 74:af:8d:0a:ba:56:9f:c3:43:82:a6:4d:a1:ba:f4:54:aa:4a: 56:d9:a0:6b:f9:26:d2:49:a6:5d:f4:b1:61:94:35:c1:3d:f8: 25:14:d2:9e:e1:be:53:4e:bf:e1:cf:f5:b8:32:b3:ad:e9:eb: 4b:90:5e:2a:99:3a:3a:a0:e1:12:2c:36:96:c2:2a:2a:b6:64: ad:75:73:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDFGRDYxMTAvBgNVBAUTKDZCOUQ2NUVBRTlDNjk3REEyMUNCNEJFRUJGNERGNENF MEE0MTkzMjEwHhcNMjUwNTMxMTQ0MjEwWhcNMjUwNjA3MTQ0MjEwWjAYMRYwFAYD VQQDEw02ODNiMTU0Mi1lN2JkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxs8K2LgDVzTsvSvG+HhzcvEouiywmrl1umuoG6WqP5Zmi+4cYQ8PW+X2aiQB Bmd7OhsLeK84cwPn13YtP4vjWhMATFLmtozk9xj8V1l02KEImWsEG49ZCYjdCVQY L+OmEuU7fBJ/UJX/A8kdFnhhu86XkBPF5Kku1RCvHgXWox5xx6I8WK5NraI65rNJ BeuiejClqC7DS7p7gtFY2qPss2EZ79J+coLEI/8u4h8XlDkQYiws+XvPbDqAX9tX NDJ4bsdakmu4TanDl0W61BOF09o8d0/eiF+O1CQKlpHzihFVtAnMJ+yqUfLvj0iq ZHuiAhWL9RL/d/fIaGBegQsKvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFANrsdRL jjsr4ckcdaEf0qMwFm1UMB8GA1UdIwQYMBaAFGudZerpxpfaIctL7r9N9M4KQZMh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUZENi82RUVDNjQzMDFE OTExMUUyQjY4N0E1RjMwOEIwMkNEMi9hNTFsNnVuR2w5b2h5MHZ1djAzMHpncEJr eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E1MWw2dW5HbDlvaHkwdnV2MDMwemdwQmt5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MUZENi82RUVDNjQzMDFEOTExMUUyQjY4N0E1RjMwOEIwMkNEMi9hNTFsNnVuR2w5 b2h5MHZ1djAzMHpncEJreUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUxVPUPe5RQiINOKHIInU6Q/j8ri2Ymv2RfjV636tL/+re90G4TKrF q4Q3NAiTuqQfieMIUEJ3ucgR/hUZ9RUeahdV7OrISxL3rlBazZrsC9LUTS8Y2SE6 fLcvbfFODK47Kpzx4wwmc/hgsp3Jwp9R6JcnGwtoD5Ns3hxAc1UDiqIkQ1NcmHLp Kke6OkNFtvOEbL+2fDAeNWB1h8SubPCg3318sW/fUNwQXWlFoeElinOLWgZ0r40K ulafw0OCpk2huvRUqkpW2aBr+SbSSaZd9LFhlDXBPfglFNKe4b5TTr/hz/W4MrOt 6etLkF4qmTo6oOESLDaWwioqtmStdXN9 -----END CERTIFICATE-----Generated at Sat May 31 17:04:56 2025 by rpki-client