$ rpki-client -vvf rpki.apnic.net/member_repository/A914541C/5D4398D8E72F11EEB72C6E68C4F9AE02/6ulU-U0bR7_7MxNLI6pqkQPo-5o.mft File: 6ulU-U0bR7_7MxNLI6pqkQPo-5o.mft (raw, json) Hash identifier: Pwk/B16Pvwc1pE0Mqn1fEHs0XhbpJI4xV8Mxiv4oLL8= Subject key identifier: 02:2A:44:4C:F7:DD:08:E1:C9:D1:B0:34:8B:05:1F:6C:91:A7:B1:AD Authority key identifier: EA:E9:54:F9:4D:1B:47:BF:FB:33:13:4B:23:AA:6A:91:03:E8:FB:9A Certificate issuer: /CN=A914541C/serialNumber=EAE954F94D1B47BFFB33134B23AA6A9103E8FB9A Certificate serial: DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ulU-U0bR7_7MxNLI6pqkQPo-5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914541C/5D4398D8E72F11EEB72C6E68C4F9AE02/6ulU-U0bR7_7MxNLI6pqkQPo-5o.mft Manifest number: DD Signing time: Sat 31 May 2025 05:06:12 +0000 Manifest this update: Sat 31 May 2025 05:06:12 +0000 Manifest next update: Sat 07 Jun 2025 05:06:12 +0000 Files and hashes: 1: 6ulU-U0bR7_7MxNLI6pqkQPo-5o.crl (hash: 8UO/djxyGG/YKdDUkUDGl4/SiPeIXe76HK/Ujwpdk10=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914541C/5D4398D8E72F11EEB72C6E68C4F9AE02/6ulU-U0bR7_7MxNLI6pqkQPo-5o.crl rsync://rpki.apnic.net/member_repository/A914541C/5D4398D8E72F11EEB72C6E68C4F9AE02/6ulU-U0bR7_7MxNLI6pqkQPo-5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ulU-U0bR7_7MxNLI6pqkQPo-5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:06:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 221 (0xdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914541C, serialNumber=EAE954F94D1B47BFFB33134B23AA6A9103E8FB9A Validity Not Before: May 31 05:06:12 2025 GMT Not After : Jun 7 05:06:12 2025 GMT Subject: CN=683a8e44-be2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:02:57:78:20:fd:05:eb:25:75:38:1d:37:2d: b1:ad:47:d3:a9:c6:c0:4c:b2:09:7c:cd:ab:fb:a6: c9:d0:fd:46:a4:e6:ee:d6:7f:b0:07:63:6a:0a:19: 14:fa:6a:9b:4a:3e:02:4e:c2:32:3f:3b:89:e6:c9: bd:bc:a5:18:a7:e4:fb:2a:d6:4a:f1:d9:d1:90:78: 55:fc:4c:e9:74:32:da:5a:d7:a7:38:48:1c:1d:a5: 07:44:0a:9c:8e:1d:57:9e:58:e4:43:fd:98:f5:4c: 43:9e:83:31:60:02:6b:e6:5e:d1:7d:98:a7:d7:1b: d0:a5:fe:71:21:08:24:5a:4d:b1:e8:5b:b4:5c:b2: a9:8e:cd:5a:e4:0b:a4:e9:25:06:f8:4f:1a:61:dd: 75:75:56:70:7e:b7:20:c6:8e:b8:3e:2b:a1:b6:0f: 82:43:59:2c:a4:53:c7:54:c8:f4:3a:e6:7d:1f:eb: cd:eb:7b:ef:36:ad:7c:b2:45:fd:cf:77:02:5d:84: 9d:7e:ea:61:28:18:41:cd:bb:ea:e6:75:a5:01:f7: db:8f:1a:17:8b:54:51:54:d1:ce:a7:48:19:0e:33: e2:46:28:05:69:13:f0:4a:a0:58:19:92:fa:77:1c: 12:03:4c:37:90:3e:ad:98:87:fc:b1:63:67:f6:54: 77:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:2A:44:4C:F7:DD:08:E1:C9:D1:B0:34:8B:05:1F:6C:91:A7:B1:AD X509v3 Authority Key Identifier: keyid:EA:E9:54:F9:4D:1B:47:BF:FB:33:13:4B:23:AA:6A:91:03:E8:FB:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914541C/5D4398D8E72F11EEB72C6E68C4F9AE02/6ulU-U0bR7_7MxNLI6pqkQPo-5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ulU-U0bR7_7MxNLI6pqkQPo-5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914541C/5D4398D8E72F11EEB72C6E68C4F9AE02/6ulU-U0bR7_7MxNLI6pqkQPo-5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:0a:b4:94:4e:f7:68:13:3d:eb:10:6f:af:b7:c3:f4:d5:a4: f1:71:93:7a:98:8e:b8:2b:bd:85:20:b4:d1:a3:06:fa:77:f6: 29:07:06:6d:ff:c0:26:13:ce:27:42:29:58:2e:ff:9a:04:84: a3:0a:14:23:6c:91:40:c1:a8:d8:04:b9:b6:7d:35:f1:f7:e7: 22:94:f2:c9:48:89:16:71:50:65:35:f2:0d:2a:a2:2f:33:94: 02:19:fa:60:6f:18:b8:e0:5b:62:74:64:f2:fc:13:8c:2a:8f: ee:e5:ad:de:2e:cb:4c:fd:2d:3b:42:d5:fe:2a:74:2e:76:7f: 65:d8:4a:33:fe:35:1c:e3:0e:94:af:d4:4a:40:ef:e3:4e:1a: 11:29:bd:ba:2b:57:53:f3:00:9c:22:c1:7f:e1:b7:65:96:0d: c1:50:09:b6:b9:94:7c:29:fa:30:3c:00:68:6a:c9:ea:ac:98: 6f:9b:d9:2c:88:a5:4e:2b:c3:80:79:2a:e8:ed:e2:60:d2:7d: a1:f4:35:96:f6:17:fb:3d:90:32:51:cd:0b:79:c1:da:7f:52: 2f:7c:88:47:6f:ef:c3:14:cf:9c:ef:87:ab:7b:e6:29:40:af: c6:38:10:07:90:6b:09:d1:ec:53:21:fa:83:9a:c5:93:cf:f2: 45:85:69:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU0MUMxMTAvBgNVBAUTKEVBRTk1NEY5NEQxQjQ3QkZGQjMzMTM0QjIzQUE2QTkx MDNFOEZCOUEwHhcNMjUwNTMxMDUwNjEyWhcNMjUwNjA3MDUwNjEyWjAYMRYwFAYD VQQDEw02ODNhOGU0NC1iZTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6wJXeCD9BesldTgdNy2xrUfTqcbATLIJfM2r+6bJ0P1GpObu1n+wB2NqChkU +mqbSj4CTsIyPzuJ5sm9vKUYp+T7KtZK8dnRkHhV/EzpdDLaWtenOEgcHaUHRAqc jh1XnljkQ/2Y9UxDnoMxYAJr5l7RfZin1xvQpf5xIQgkWk2x6Fu0XLKpjs1a5Auk 6SUG+E8aYd11dVZwfrcgxo64Piuhtg+CQ1kspFPHVMj0OuZ9H+vN63vvNq18skX9 z3cCXYSdfuphKBhBzbvq5nWlAffbjxoXi1RRVNHOp0gZDjPiRigFaRPwSqBYGZL6 dxwSA0w3kD6tmIf8sWNn9lR3VQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAIqREz3 3QjhydGwNIsFH2yRp7GtMB8GA1UdIwQYMBaAFOrpVPlNG0e/+zMTSyOqapED6Pua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTQxQy81RDQzOThEOEU3 MkYxMUVFQjcyQzZFNjhDNEY5QUUwMi82dWxVLVUwYlI3XzdNeE5MSTZwcWtRUG8t NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ1bFUtVTBiUjdfN014TkxJNnBxa1FQby01by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTQxQy81RDQzOThEOEU3MkYxMUVFQjcyQzZFNjhDNEY5QUUwMi82dWxVLVUwYlI3 XzdNeE5MSTZwcWtRUG8tNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2CrSUTvdoEz3rEG+vt8P01aTxcZN6mI64K72FILTRowb6d/YpBwZt /8AmE84nQilYLv+aBISjChQjbJFAwajYBLm2fTXx9+cilPLJSIkWcVBlNfINKqIv M5QCGfpgbxi44FtidGTy/BOMKo/u5a3eLstM/S07QtX+KnQudn9l2Eoz/jUc4w6U r9RKQO/jThoRKb26K1dT8wCcIsF/4bdllg3BUAm2uZR8KfowPABoasnqrJhvm9ks iKVOK8OAeSro7eJg0n2h9DWW9hf7PZAyUc0LecHaf1IvfIhHb+/DFM+c74ere+Yp QK/GOBAHkGsJ0exTIfqDmsWTz/JFhWlv -----END CERTIFICATE-----Generated at Sat May 31 17:40:56 2025 by rpki-client