$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0847/33B23F7E8C8E11EFA2DC5360C4F9AE02/6GFAAj8MoF8XFLinDcmVX_eXvbE.mft File: 6GFAAj8MoF8XFLinDcmVX_eXvbE.mft (raw, json) Hash identifier: ySksGXCfgMCU7zcqzqbj8fjgQNlW4VYAfh2H3CQqoZQ= Subject key identifier: BA:F2:49:EA:4F:06:DF:DE:04:37:7B:93:D0:5F:36:03:37:70:8F:03 Authority key identifier: E8:61:40:02:3F:0C:A0:5F:17:14:B8:A7:0D:C9:95:5F:F7:97:BD:B1 Certificate issuer: /CN=A91A0847/serialNumber=E86140023F0CA05F1714B8A70DC9955FF797BDB1 Certificate serial: 7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GFAAj8MoF8XFLinDcmVX_eXvbE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0847/33B23F7E8C8E11EFA2DC5360C4F9AE02/6GFAAj8MoF8XFLinDcmVX_eXvbE.mft Manifest number: 7D Signing time: Tue 10 Jun 2025 03:04:22 +0000 Manifest this update: Tue 10 Jun 2025 03:04:21 +0000 Manifest next update: Tue 17 Jun 2025 03:04:21 +0000 Files and hashes: 1: 6GFAAj8MoF8XFLinDcmVX_eXvbE.crl (hash: fWtkcfCbydeyfd1xSEtEzz9+YQJYsJhzsTXqs5lMdPM=) 2: 9A36771A8C8E11EF86852961C4F9AE02.roa (hash: 9OuRCyTKARyxu0HVGwX+7EOD8zJcO3DB6HwcIsyXsFM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0847/33B23F7E8C8E11EFA2DC5360C4F9AE02/6GFAAj8MoF8XFLinDcmVX_eXvbE.crl rsync://rpki.apnic.net/member_repository/A91A0847/33B23F7E8C8E11EFA2DC5360C4F9AE02/6GFAAj8MoF8XFLinDcmVX_eXvbE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GFAAj8MoF8XFLinDcmVX_eXvbE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 03:04:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0847, serialNumber=E86140023F0CA05F1714B8A70DC9955FF797BDB1 Validity Not Before: Jun 10 03:04:21 2025 GMT Not After : Jun 17 03:04:21 2025 GMT Subject: CN=6847a0b6-9688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:63:50:b7:24:67:70:b8:d8:25:a4:55:be:40: 0f:04:f6:b9:c2:e3:70:aa:c7:22:fd:ea:57:d2:89: cf:f7:31:f4:59:ce:48:10:e8:e3:e0:77:6d:e4:70: b5:2e:af:2b:82:2c:e1:dd:f8:8a:08:88:c2:ba:c6: 59:7d:0b:2d:d7:67:2f:05:4d:36:55:b0:1e:16:02: 96:97:1b:c1:93:96:ee:58:a1:ed:0e:7c:39:a1:65: a7:90:67:30:48:ce:b9:22:8c:33:7e:68:d1:9c:d0: f6:f2:b2:4c:9c:45:ff:01:56:ee:e9:08:d7:37:dd: 7f:64:cb:a7:28:59:cf:cd:1d:50:5a:31:79:7b:79: 6c:c3:95:e0:12:07:69:10:9f:c6:11:e9:6c:66:1d: a5:0a:6f:48:44:d5:8f:31:08:78:08:ef:b1:96:e7: 83:8b:8d:f3:47:27:0d:79:d1:a8:41:d7:7c:fa:73: 7a:b2:ec:a2:da:2a:0f:13:d3:85:8e:00:c6:e1:49: 3b:0f:55:4c:1e:00:f5:6a:ed:87:6a:17:f3:62:6a: 69:86:3f:7e:da:db:8d:da:d2:95:41:66:bd:4a:f0: 64:4e:1a:fe:97:70:90:36:3e:4c:39:28:96:52:0e: 1b:4b:79:6a:4a:0a:1b:10:ba:81:ca:ce:3f:13:fd: 7d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:F2:49:EA:4F:06:DF:DE:04:37:7B:93:D0:5F:36:03:37:70:8F:03 X509v3 Authority Key Identifier: keyid:E8:61:40:02:3F:0C:A0:5F:17:14:B8:A7:0D:C9:95:5F:F7:97:BD:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0847/33B23F7E8C8E11EFA2DC5360C4F9AE02/6GFAAj8MoF8XFLinDcmVX_eXvbE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GFAAj8MoF8XFLinDcmVX_eXvbE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0847/33B23F7E8C8E11EFA2DC5360C4F9AE02/6GFAAj8MoF8XFLinDcmVX_eXvbE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:5e:42:bd:60:91:76:a3:e4:98:4e:17:a2:55:c2:11:67:dd: b8:18:bb:9b:bc:82:d8:4c:66:6c:71:f1:0f:92:a3:ab:d9:01: 1b:13:79:46:c0:c8:92:c7:78:62:e2:85:ff:71:02:0c:96:f3: 8c:b5:e8:01:d6:d8:20:e7:a1:ba:75:a1:07:ae:9d:ba:50:86: e8:30:1a:6b:22:dc:da:b2:41:16:0d:01:df:4b:bf:fa:a1:ed: 88:9c:82:b1:4f:d1:cf:e3:5d:7b:ee:09:48:01:a0:19:f5:2e: 9a:9c:4a:f0:3b:36:55:fc:d0:b5:c9:94:1e:8c:90:77:5e:7a: 42:bc:4a:ef:19:91:62:42:ce:a1:29:19:15:89:0a:cf:73:a4: d2:7e:57:dc:6c:d9:a4:b7:d9:d8:e5:8e:de:98:d6:2c:46:5b: 75:31:a6:dd:6f:0f:e6:32:94:18:41:9b:2b:9e:a0:e9:63:84: ee:94:eb:a5:97:32:1d:e0:69:59:b6:20:5c:0b:29:88:f4:4d: 8b:35:ba:c3:6b:d3:a8:75:e5:83:c3:dd:31:5b:53:cc:9c:41: 61:3a:3d:c9:d2:16:8e:ce:0e:07:1f:13:22:b0:46:0a:71:48: 9d:64:10:ef:85:6c:89:57:20:c6:bf:64:5e:7f:6d:08:af:4b: 4b:16:bc:35 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MDg0NzExMC8GA1UEBRMoRTg2MTQwMDIzRjBDQTA1RjE3MTRCOEE3MERDOTk1NUZG Nzk3QkRCMTAeFw0yNTA2MTAwMzA0MjFaFw0yNTA2MTcwMzA0MjFaMBgxFjAUBgNV BAMTDTY4NDdhMGI2LTk2ODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD2Y1C3JGdwuNglpFW+QA8E9rnC43CqxyL96lfSic/3MfRZzkgQ6OPgd23kcLUu ryuCLOHd+IoIiMK6xll9Cy3XZy8FTTZVsB4WApaXG8GTlu5Yoe0OfDmhZaeQZzBI zrkijDN+aNGc0PbyskycRf8BVu7pCNc33X9ky6coWc/NHVBaMXl7eWzDleASB2kQ n8YR6WxmHaUKb0hE1Y8xCHgI77GW54OLjfNHJw150ahB13z6c3qy7KLaKg8T04WO AMbhSTsPVUweAPVq7YdqF/NiammGP37a243a0pVBZr1K8GROGv6XcJA2Pkw5KJZS DhtLeWpKChsQuoHKzj8T/X33AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuvJJ6k8G 394EN3uT0F82AzdwjwMwHwYDVR0jBBgwFoAU6GFAAj8MoF8XFLinDcmVX/eXvbEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEwODQ3LzMzQjIzRjdFOEM4 RTExRUZBMkRDNTM2MEM0RjlBRTAyLzZHRkFBajhNb0Y4WEZMaW5EY21WWF9lWHZi RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNkdGQUFqOE1vRjhYRkxpbkRjbVZYX2VYdmJFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEw ODQ3LzMzQjIzRjdFOEM4RTExRUZBMkRDNTM2MEM0RjlBRTAyLzZHRkFBajhNb0Y4 WEZMaW5EY21WWF9lWHZiRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFJeQr1gkXaj5JhOF6JVwhFn3bgYu5u8gthMZmxx8Q+So6vZARsTeUbA yJLHeGLihf9xAgyW84y16AHW2CDnobp1oQeunbpQhugwGmsi3NqyQRYNAd9Lv/qh 7YicgrFP0c/jXXvuCUgBoBn1LpqcSvA7NlX80LXJlB6MkHdeekK8Su8ZkWJCzqEp GRWJCs9zpNJ+V9xs2aS32djljt6Y1ixGW3Uxpt1vD+YylBhBmyueoOljhO6U66WX Mh3gaVm2IFwLKYj0TYs1usNr06h15YPD3TFbU8ycQWE6PcnSFo7ODgcfEyKwRgpx SJ1kEO+FbIlXIMa/ZF5/bQivS0sWvDU= -----END CERTIFICATE-----Generated at Tue Jun 10 20:47:57 2025 by rpki-client