$ rpki-client -vvf rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.mft File: 6EKSkSMrng-5SFoKrUk9fgfH5NE.mft (raw, json) Hash identifier: sdXTqx6sljeeAkyQNUwENRDc3zS3PEvKcr3EyDuG1pI= Subject key identifier: 57:43:E2:EE:14:26:D2:61:B1:92:98:2A:D8:33:9F:AC:07:BF:A8:FD Authority key identifier: E8:42:92:91:23:2B:9E:0F:B9:48:5A:0A:AD:49:3D:7E:07:C7:E4:D1 Certificate issuer: /CN=A9199696/serialNumber=E8429291232B9E0FB9485A0AAD493D7E07C7E4D1 Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EKSkSMrng-5SFoKrUk9fgfH5NE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.mft Manifest number: 32 Signing time: Sat 31 May 2025 07:11:47 +0000 Manifest this update: Sat 31 May 2025 07:11:46 +0000 Manifest next update: Sat 07 Jun 2025 07:11:46 +0000 Files and hashes: 1: 6EKSkSMrng-5SFoKrUk9fgfH5NE.crl (hash: D9A4qk/QRtm0WlK/GGR5+wN+2PBrEkWDeLnBwn/wCIM=) 2: 1A44E27AF1A711EFA441E72CC4F9AE02.roa (hash: +T8xPEy3qOwqRDiq3fa/SHDl3cgx+ER91jGPjiK2GbE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.crl rsync://rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EKSkSMrng-5SFoKrUk9fgfH5NE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:11:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199696, serialNumber=E8429291232B9E0FB9485A0AAD493D7E07C7E4D1 Validity Not Before: May 31 07:11:46 2025 GMT Not After : Jun 7 07:11:46 2025 GMT Subject: CN=683aabb2-27d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:30:32:d7:3c:a8:b9:e4:80:11:9f:e9:74:3a: 88:2a:dd:52:f1:e6:86:aa:e9:d6:fc:fe:1d:7f:b3: ab:91:f9:87:16:8b:60:15:ef:8d:c5:db:74:09:07: c7:34:fb:8e:4e:82:b6:79:f5:30:3c:f3:29:40:85: b3:b4:a5:ea:84:0d:3e:e6:eb:b0:06:b8:f6:83:8c: ab:b9:56:9a:02:33:32:d0:f4:0c:37:f9:ce:fa:06: 94:d8:b7:c8:0d:8e:e2:b9:72:b2:65:10:c5:3f:f4: 5c:15:5a:fc:d3:d2:5d:85:4b:62:19:af:c9:3b:8b: ae:13:1a:f8:77:53:ee:3f:66:0c:6d:ea:32:55:63: a2:ef:4d:f0:fe:cb:9b:e9:c2:99:17:a4:d7:59:e6: 04:e5:10:cb:71:72:4e:33:89:c2:83:6f:11:83:6d: 30:a9:0d:f7:fc:38:f0:9a:91:e5:48:2b:d4:84:0b: ff:7e:71:eb:56:f6:3f:c8:51:fc:ea:be:03:7d:db: 09:e9:7d:45:c8:df:26:2b:39:7a:6e:be:22:66:0b: f1:e5:32:c3:49:7a:c3:90:2f:d6:ef:ba:49:f2:b1: 28:bd:94:f0:72:28:94:c2:04:d3:60:c1:00:fb:ac: 2f:22:ff:44:48:50:b8:f3:f0:f3:71:c1:de:f9:88: 2f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:43:E2:EE:14:26:D2:61:B1:92:98:2A:D8:33:9F:AC:07:BF:A8:FD X509v3 Authority Key Identifier: keyid:E8:42:92:91:23:2B:9E:0F:B9:48:5A:0A:AD:49:3D:7E:07:C7:E4:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EKSkSMrng-5SFoKrUk9fgfH5NE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:89:50:6f:6b:dc:fa:e9:1f:1e:cc:0b:82:31:6d:32:23:c0: c2:7e:88:15:a6:2e:a4:e5:7c:a5:bb:0b:af:f3:5a:dd:7b:20: 1a:f0:c9:5a:d4:d8:bc:8a:b6:62:f2:a5:96:93:90:9b:91:df: d4:ed:50:1a:d1:1f:60:06:81:83:31:08:66:c6:16:d2:cb:75: 29:40:1a:cb:c5:65:39:6c:79:aa:91:cf:6f:4c:61:07:a3:81: ed:71:72:12:78:93:ff:4b:aa:04:44:17:c5:bb:a9:ac:7f:e2: 27:ff:14:13:d3:d0:cf:58:07:0b:3b:ef:7d:55:55:0f:1d:cd: c5:d8:c0:28:66:75:d9:ef:cd:52:19:0b:99:43:d5:f0:bf:7d: 8a:b1:ee:4e:93:b8:12:1e:35:0f:a7:16:40:da:65:eb:78:2a: 1a:8e:98:bc:48:ba:b2:de:89:32:65:b5:b3:53:2f:52:38:d7: 00:8b:ac:9a:20:d7:00:d9:50:fb:3e:4c:c5:81:45:f0:45:66: d9:fe:8e:ff:54:5e:e1:dd:00:cb:29:9d:6f:39:cf:a9:b9:5a: 3f:70:3a:dc:cc:0f:9f:9b:a5:cc:30:a8:a8:fe:1c:0f:45:c7: 4e:e5:1c:25:19:b9:ba:b0:0c:ca:0d:51:da:ae:8c:41:03:8f: 7b:39:4c:0d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 OTY5NjExMC8GA1UEBRMoRTg0MjkyOTEyMzJCOUUwRkI5NDg1QTBBQUQ0OTNEN0Uw N0M3RTREMTAeFw0yNTA1MzEwNzExNDZaFw0yNTA2MDcwNzExNDZaMBgxFjAUBgNV BAMTDTY4M2FhYmIyLTI3ZDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHMDLXPKi55IARn+l0Oogq3VLx5oaq6db8/h1/s6uR+YcWi2AV743F23QJB8c0 +45OgrZ59TA88ylAhbO0peqEDT7m67AGuPaDjKu5VpoCMzLQ9Aw3+c76BpTYt8gN juK5crJlEMU/9FwVWvzT0l2FS2IZr8k7i64TGvh3U+4/Zgxt6jJVY6LvTfD+y5vp wpkXpNdZ5gTlEMtxck4zicKDbxGDbTCpDff8OPCakeVIK9SEC/9+cetW9j/IUfzq vgN92wnpfUXI3yYrOXpuviJmC/HlMsNJesOQL9bvuknysSi9lPByKJTCBNNgwQD7 rC8i/0RIULjz8PNxwd75iC+9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUV0Pi7hQm 0mGxkpgq2DOfrAe/qP0wHwYDVR0jBBgwFoAU6EKSkSMrng+5SFoKrUk9fgfH5NEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5Njk2LzJCODExNjU2RjFB NDExRUY4NDQ4RUIyMkM0RjlBRTAyLzZFS1NrU01ybmctNVNGb0tyVWs5ZmdmSDVO RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNkVLU2tTTXJuZy01U0ZvS3JVazlmZ2ZINU5FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5 Njk2LzJCODExNjU2RjFBNDExRUY4NDQ4RUIyMkM0RjlBRTAyLzZFS1NrU01ybmct NVNGb0tyVWs5ZmdmSDVORS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACiJUG9r3PrpHx7MC4IxbTIjwMJ+iBWmLqTlfKW7C6/zWt17IBrwyVrU 2LyKtmLypZaTkJuR39TtUBrRH2AGgYMxCGbGFtLLdSlAGsvFZTlseaqRz29MYQej ge1xchJ4k/9LqgREF8W7qax/4if/FBPT0M9YBws7731VVQ8dzcXYwChmddnvzVIZ C5lD1fC/fYqx7k6TuBIeNQ+nFkDaZet4KhqOmLxIurLeiTJltbNTL1I41wCLrJog 1wDZUPs+TMWBRfBFZtn+jv9UXuHdAMspnW85z6m5Wj9wOtzMD5+bpcwwqKj+HA9F x07lHCUZubqwDMoNUdqujEEDj3s5TA0= -----END CERTIFICATE-----Generated at Sat May 31 17:37:42 2025 by rpki-client