$ rpki-client -vvf rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft File: 6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft (raw, json) Hash identifier: KjVKq1mJei1ONRvX4xrbthf3skb/HpSTZg7oxu61IZg= Subject key identifier: D6:B2:CD:0F:D7:DB:67:1F:D1:43:B7:5D:85:81:4D:38:5B:C8:26:EE Authority key identifier: E9:92:3B:AC:0F:5C:58:CA:BE:B9:32:86:CA:20:26:6F:1F:6E:FB:14 Certificate issuer: /CN=A917CBD7/serialNumber=E9923BAC0F5C58CABEB93286CA20266F1F6EFB14 Certificate serial: 0A89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft Manifest number: 0A6B Signing time: Fri 30 May 2025 19:51:17 +0000 Manifest this update: Fri 30 May 2025 19:51:16 +0000 Manifest next update: Fri 06 Jun 2025 19:51:16 +0000 Files and hashes: 1: 6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl (hash: DR3wTkn3I5fhZxPzrsMwwOVDwps8MvIWEaXWi35HwWA=) 2: BE633CD283A611EE804BB319C4F9AE02.roa (hash: NPIjvL++urku6C6DzlbI7Tjblbx8i4fhbfChdZsNErw=) 3: ACFA076483A611EE9C62DE0CC4F9AE02.roa (hash: iAsOrn+BfPbmaxKIym2huXek+8KrH7keNTNRSTAMeck=) 4: 8AD0E57C8FE311EB89767C78C4F9AE02.roa (hash: iGUFOWK6oRwPeEo+C87zciurGuoBwNOi2mVgrnihqBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:51:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2697 (0xa89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917CBD7, serialNumber=E9923BAC0F5C58CABEB93286CA20266F1F6EFB14 Validity Not Before: May 30 19:51:16 2025 GMT Not After : Jun 6 19:51:16 2025 GMT Subject: CN=683a0c34-0159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e5:7b:3c:c1:87:2c:7f:fa:b3:cb:56:dc:24: ab:2e:c9:6d:bb:10:6e:f5:50:59:d6:e9:20:14:d8: 29:9d:16:fb:60:a9:3c:42:f4:45:fd:56:2a:4a:aa: c8:df:48:35:6c:c1:7b:c0:d7:1a:58:95:ad:5b:97: aa:fb:92:d0:34:5a:cb:f8:c9:ef:3e:e0:42:09:ae: 70:4e:7d:41:4b:4e:68:4c:86:1d:e4:d4:e0:9a:0a: c4:32:c3:81:d7:59:cd:ab:8b:85:0e:57:50:0b:85: 35:25:8c:49:82:31:64:86:ff:80:3b:3a:8b:e4:d2: 7b:5f:04:d7:4e:99:f5:4f:bd:da:bf:d3:6a:49:61: e6:53:10:ab:32:62:e6:3a:6c:54:a2:9c:5c:0e:36: a1:c1:00:e2:82:e2:a6:2b:7c:e2:47:16:3d:80:af: 2a:bf:6e:11:da:c2:a5:7a:9c:3f:72:86:f7:a8:9e: ad:c9:96:16:1e:d0:db:19:0d:71:2e:53:40:c5:50: be:3d:d1:ba:7d:03:1d:a0:d0:eb:ec:c3:1b:84:f3: 31:e8:99:27:dd:56:e6:32:7c:5f:2a:a1:b4:29:e0: f7:32:8b:cc:cb:20:68:cd:97:b4:42:f4:62:ba:af: c8:51:bc:90:3d:02:f4:7a:40:2b:7b:8a:d6:1d:7c: b1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:B2:CD:0F:D7:DB:67:1F:D1:43:B7:5D:85:81:4D:38:5B:C8:26:EE X509v3 Authority Key Identifier: keyid:E9:92:3B:AC:0F:5C:58:CA:BE:B9:32:86:CA:20:26:6F:1F:6E:FB:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:91:88:5f:a0:0d:66:e0:2e:95:26:04:c7:84:b8:a8:65:9b: 03:36:c3:02:f6:c6:e5:87:9a:3f:a6:31:58:1b:c3:ad:f7:37: 49:48:58:39:7a:73:6a:70:6a:4b:57:1b:e2:40:ea:f8:aa:c2: b1:6e:7d:79:e1:f3:f6:16:67:8f:bc:5a:cf:b1:87:af:24:93: 14:6f:01:74:85:64:d4:49:57:d1:c8:56:9a:65:a4:36:22:fa: d9:0c:20:e7:e8:ec:33:a3:84:6a:07:47:a2:0c:12:e3:6e:12: 72:aa:d4:77:2f:f4:41:1c:35:8b:48:95:82:49:a4:8f:69:ee: 1b:90:2a:d7:00:fc:47:08:e2:90:01:03:36:a7:93:32:32:37: 79:23:4e:5b:45:39:83:3a:5d:1a:8a:1b:58:0f:2d:51:4c:5c: 54:08:d6:40:13:f2:5b:c4:99:d1:56:83:db:1b:09:ea:09:1c: f4:38:69:62:ae:b4:5a:d0:de:0e:c2:f1:eb:49:f1:9a:f9:6d: ad:76:c1:ec:51:6f:b9:f7:7f:49:bf:a0:25:6b:72:47:0f:a3: e8:8d:e0:ae:e9:1a:a5:27:40:3a:cb:1c:9a:30:08:f4:a0:f2: 91:56:b1:0e:26:8e:c5:58:2a:ce:dc:ff:45:ef:a3:4f:dc:e9: fb:a6:2f:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0NCRDcxMTAvBgNVBAUTKEU5OTIzQkFDMEY1QzU4Q0FCRUI5MzI4NkNBMjAyNjZG MUY2RUZCMTQwHhcNMjUwNTMwMTk1MTE2WhcNMjUwNjA2MTk1MTE2WjAYMRYwFAYD VQQDEw02ODNhMGMzNC0wMTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyOV7PMGHLH/6s8tW3CSrLsltuxBu9VBZ1ukgFNgpnRb7YKk8QvRF/VYqSqrI 30g1bMF7wNcaWJWtW5eq+5LQNFrL+MnvPuBCCa5wTn1BS05oTIYd5NTgmgrEMsOB 11nNq4uFDldQC4U1JYxJgjFkhv+AOzqL5NJ7XwTXTpn1T73av9NqSWHmUxCrMmLm OmxUopxcDjahwQDiguKmK3ziRxY9gK8qv24R2sKlepw/cob3qJ6tyZYWHtDbGQ1x LlNAxVC+PdG6fQMdoNDr7MMbhPMx6Jkn3VbmMnxfKqG0KeD3MovMyyBozZe0QvRi uq/IUbyQPQL0ekAre4rWHXyxfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNayzQ/X 22cf0UO3XYWBTThbyCbuMB8GA1UdIwQYMBaAFOmSO6wPXFjKvrkyhsogJm8fbvsU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0JENy8xOTIzQkY2ODY0 MjgxMUVBQTcwNDFENDhDNEY5QUUwMi82Wkk3ckE5Y1dNcS11VEtHeWlBbWJ4OXUt eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZaSTdyQTljV01xLXVUS0d5aUFtYng5dS14US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Q0JENy8xOTIzQkY2ODY0MjgxMUVBQTcwNDFENDhDNEY5QUUwMi82Wkk3ckE5Y1dN cS11VEtHeWlBbWJ4OXUteFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJkYhfoA1m4C6VJgTHhLioZZsDNsMC9sblh5o/pjFYG8Ot9zdJSFg5 enNqcGpLVxviQOr4qsKxbn154fP2FmePvFrPsYevJJMUbwF0hWTUSVfRyFaaZaQ2 IvrZDCDn6Owzo4RqB0eiDBLjbhJyqtR3L/RBHDWLSJWCSaSPae4bkCrXAPxHCOKQ AQM2p5MyMjd5I05bRTmDOl0aihtYDy1RTFxUCNZAE/JbxJnRVoPbGwnqCRz0OGli rrRa0N4OwvHrSfGa+W2tdsHsUW+5939Jv6Ala3JHD6PojeCu6RqlJ0A6yxyaMAj0 oPKRVrEOJo7FWCrO3P9F76NP3On7pi9g -----END CERTIFICATE-----Generated at Sat May 31 17:56:27 2025 by rpki-client