$ rpki-client -vvf rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft File: Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft (raw, json) Hash identifier: Bl9prCaYnLlGLtIno9OSdmqqaqxyE5FHxLnqRGDjX2w= Subject key identifier: CE:61:8E:57:FF:4C:3B:CB:07:23:1B:27:6D:BA:98:B8:97:07:9C:63 Authority key identifier: 0A:CE:6F:6A:A6:A3:FA:E2:7A:08:5C:7A:12:7F:9B:C9:94:24:52:14 Certificate issuer: /CN=A91637FD/serialNumber=0ACE6F6AA6A3FAE27A085C7A127F9BC994245214 Certificate serial: 6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft Manifest number: 6A Signing time: Sat 07 Jun 2025 06:24:35 +0000 Manifest this update: Sat 07 Jun 2025 06:24:34 +0000 Manifest next update: Sat 14 Jun 2025 06:24:34 +0000 Files and hashes: 1: Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl (hash: adUvH214Nv5MN8LzvQqjCMjTur5Ic39RUOYWJlqhbzE=) 2: D1E78BC0A15D11EFBAE3332CC4F9AE02.roa (hash: 03/IZSSaWCkjD0t5R6IQf4NgtsFNdSzPU+q4DaqUlgg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Jun 2025 06:24:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 107 (0x6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91637FD, serialNumber=0ACE6F6AA6A3FAE27A085C7A127F9BC994245214 Validity Not Before: Jun 7 06:24:34 2025 GMT Not After : Jun 14 06:24:34 2025 GMT Subject: CN=6843db23-482b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1e:9d:af:34:a1:01:c9:15:29:29:52:5f:ae: 1f:de:fa:3f:df:28:a0:25:1b:e9:f4:c0:14:c9:e0: 7b:85:09:c1:a3:9c:b1:4c:36:ef:41:43:2a:81:91: 2b:29:b3:57:14:78:c5:8b:48:46:6f:a9:92:27:81: 16:4f:2a:23:d0:ef:b2:e9:b5:f5:6e:62:ae:7e:6d: 9d:52:48:fb:aa:b4:88:ba:6b:78:5d:26:23:ee:fb: 97:1e:7c:c9:81:b6:73:a6:20:4c:88:d3:11:40:2c: b5:5b:68:1c:f4:f5:a6:a3:f5:de:d5:26:71:f6:0a: 88:d6:58:0c:df:93:66:86:f2:16:4d:89:58:be:d7: e9:bb:5d:b0:40:54:07:69:f5:96:fd:2f:3c:a3:70: f6:bd:a5:95:87:a5:ee:14:1b:0c:87:32:61:9c:d1: 3e:73:d5:83:96:cc:ec:c6:7d:ea:19:8e:38:24:32: f6:4a:cf:86:58:37:a1:11:93:11:75:2b:cb:e8:a1: 31:40:69:e6:03:96:80:4c:91:94:59:f8:a6:7f:0b: 31:ab:5e:5c:a1:c3:98:8d:e4:24:9e:1c:72:7a:1f: 54:ea:31:fd:bf:f9:4d:17:35:da:6b:42:7c:06:cf: 3c:a7:b1:33:21:88:4b:93:8a:a5:6f:fe:19:0a:b3: d5:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:61:8E:57:FF:4C:3B:CB:07:23:1B:27:6D:BA:98:B8:97:07:9C:63 X509v3 Authority Key Identifier: keyid:0A:CE:6F:6A:A6:A3:FA:E2:7A:08:5C:7A:12:7F:9B:C9:94:24:52:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:90:bb:9d:73:b5:36:aa:ed:3c:b9:73:cc:d4:90:ae:5b:c1: 62:82:63:66:d8:22:75:fb:ba:f7:44:b1:34:f4:aa:73:d8:fb: 9f:4d:20:76:66:eb:2d:ca:ba:06:09:78:b5:54:ba:50:7a:9e: 64:dc:59:cd:97:42:46:8c:63:d5:64:11:eb:2f:e1:ae:b2:14: 71:b8:d4:41:d3:da:07:00:33:d8:2d:82:c3:4f:71:df:a6:0c: 6a:55:bd:2a:2b:eb:35:56:bc:af:a2:bf:8d:56:86:a2:33:39: 5e:87:b9:e0:f6:07:9c:1a:b3:48:12:4d:ce:1e:a9:a7:11:96: 89:e1:10:85:65:32:84:db:c2:c9:12:78:2e:3a:c8:98:b1:1c: 53:e5:f6:9d:5f:f8:37:b3:30:4a:d4:62:5c:9c:54:71:9b:0a: 61:2f:13:b5:1a:f7:9a:c4:b9:df:8e:73:3f:f6:59:dc:1b:8d: e4:da:0c:b8:9e:22:b8:d4:ff:b6:9e:d2:bb:de:a7:d0:fe:0b: 97:bc:ac:69:7a:4f:7e:55:b7:b2:15:a0:e2:aa:06:a0:e2:82: 2e:9a:11:ae:3b:ad:9c:c2:73:74:8a:33:83:5c:01:e8:a8:af: d7:ce:e5:ce:9c:0b:1f:5c:25:0b:5b:ce:67:0c:b3:fe:79:4b: 17:72:6c:d3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MzdGRDExMC8GA1UEBRMoMEFDRTZGNkFBNkEzRkFFMjdBMDg1QzdBMTI3RjlCQzk5 NDI0NTIxNDAeFw0yNTA2MDcwNjI0MzRaFw0yNTA2MTQwNjI0MzRaMBgxFjAUBgNV BAMTDTY4NDNkYjIzLTQ4MmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0Hp2vNKEByRUpKVJfrh/e+j/fKKAlG+n0wBTJ4HuFCcGjnLFMNu9BQyqBkSsp s1cUeMWLSEZvqZIngRZPKiPQ77LptfVuYq5+bZ1SSPuqtIi6a3hdJiPu+5cefMmB tnOmIEyI0xFALLVbaBz09aaj9d7VJnH2CojWWAzfk2aG8hZNiVi+1+m7XbBAVAdp 9Zb9LzyjcPa9pZWHpe4UGwyHMmGc0T5z1YOWzOzGfeoZjjgkMvZKz4ZYN6ERkxF1 K8vooTFAaeYDloBMkZRZ+KZ/CzGrXlyhw5iN5CSeHHJ6H1TqMf2/+U0XNdprQnwG zzynsTMhiEuTiqVv/hkKs9XlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzmGOV/9M O8sHIxsnbbqYuJcHnGMwHwYDVR0jBBgwFoAUCs5vaqaj+uJ6CFx6En+byZQkUhQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYzN0ZEL0UyNDVCNUIyQTE1 QTExRUZBMUVDMkI1RkM0RjlBRTAyL0NzNXZhcWFqLXVKNkNGeDZFbi1ieVpRa1Vo US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ3M1dmFxYWotdUo2Q0Z4NkVuLWJ5WlFrVWhRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYz N0ZEL0UyNDVCNUIyQTE1QTExRUZBMUVDMkI1RkM0RjlBRTAyL0NzNXZhcWFqLXVK NkNGeDZFbi1ieVpRa1VoUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFqQu51ztTaq7Ty5c8zUkK5bwWKCY2bYInX7uvdEsTT0qnPY+59NIHZm 6y3KugYJeLVUulB6nmTcWc2XQkaMY9VkEesv4a6yFHG41EHT2gcAM9gtgsNPcd+m DGpVvSor6zVWvK+iv41WhqIzOV6HueD2B5was0gSTc4eqacRlonhEIVlMoTbwskS eC46yJixHFPl9p1f+DezMErUYlycVHGbCmEvE7Ua95rEud+Ocz/2WdwbjeTaDLie IrjU/7ae0rvep9D+C5e8rGl6T35Vt7IVoOKqBqDigi6aEa47rZzCc3SKM4NcAeio r9fO5c6cCx9cJQtbzmcMs/55SxdybNM= -----END CERTIFICATE-----Generated at Mon Jun 9 00:33:29 2025 by rpki-client