$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft File: 6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft (raw, json) Hash identifier: IFHU6m+xoQb54fMgSGCaCBmnevYesf8M4UmKiEZ7vSU= Subject key identifier: 20:D4:E2:8F:33:98:D7:A3:E0:3C:B0:60:C4:7D:34:CE:B2:3B:93:0F Authority key identifier: E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5 Certificate issuer: /CN=A91A2359/serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5 Certificate serial: 0B31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft Manifest number: 0B12 Signing time: Fri 30 May 2025 19:28:06 +0000 Manifest this update: Fri 30 May 2025 19:28:04 +0000 Manifest next update: Fri 06 Jun 2025 19:28:04 +0000 Files and hashes: 1: 6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl (hash: I7OMZJgo3fTSSkM2rJlNEuYTrOQKdOFs8vvs81SkBes=) 2: 6DADCA1C2F1C11EDA3E29B09C4F9AE02.roa (hash: XVeZDTc69uGCDdXez9QUlyk7cBcd+qKHtk4lz+fH2Nk=) 3: 23BA9D7CBEEB11EDA7945F4BC4F9AE02.roa (hash: SZF4jNnIB2QVKz5/EX+jPuidzyWfheujHP0W7HxZhfM=) 4: 6B3307CE4D8411EFBAD45B86C4F9AE02.roa (hash: Q55EbY5POWYTdePCItnDLlFfKKISUoO3fBrl7W8p8yg=) 5: A39B24D2975511EF85448840C4F9AE02.roa (hash: BIsgdAgqtk3wodS0abcXx+V3UWlTiBSPXxRaU3Y5Enw=) 6: D5955AB6975511EF94255C5EC4F9AE02.roa (hash: WPJAjv2UMHwWfs/KA/8g2VypUekjjpz/btCbDPwTPLs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2865 (0xb31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2359, serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5 Validity Not Before: May 30 19:28:04 2025 GMT Not After : Jun 6 19:28:04 2025 GMT Subject: CN=683a06c6-7a3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:04:6f:3e:ac:f8:c4:2b:e5:ad:9a:9f:f3:55: 89:02:f3:b2:e3:a5:62:3e:bc:a1:11:4f:82:2c:5e: 79:76:e3:09:5e:f4:8e:bf:15:ba:4f:44:e9:2c:c2: 23:c2:da:99:d3:91:de:14:c3:b5:0b:94:33:1d:51: 15:14:c2:b5:17:db:32:4d:b1:9d:d7:9d:65:87:ad: db:0c:32:80:53:b2:fd:16:4f:16:92:e4:bc:f3:37: 5e:9b:97:15:42:4a:89:24:eb:e7:b6:af:4a:d3:2a: d9:bc:10:8e:05:7a:b4:1a:9b:d0:27:dc:c9:aa:bd: 54:c5:fe:0b:31:84:e1:e7:e6:98:73:84:e5:0b:fc: 8d:ee:24:79:82:7d:48:37:b9:b9:56:5d:0e:41:ad: bd:60:19:2a:b8:e8:19:cb:63:cc:a9:da:d5:a1:26: d5:11:62:d5:3e:1d:f3:b3:17:8d:fd:29:8a:5a:20: d5:19:3f:a0:73:cd:9c:4b:ce:ab:dc:78:ea:7e:ce: 30:8d:0d:80:2b:16:30:ac:0b:cd:c8:c4:23:29:6d: dd:6e:5e:7c:11:24:b4:0f:78:d4:19:c2:59:d3:56: 3d:6f:c0:94:46:60:38:88:67:40:34:93:c0:53:bf: aa:db:c9:db:97:04:f4:2e:92:db:b9:18:52:52:1e: 05:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:D4:E2:8F:33:98:D7:A3:E0:3C:B0:60:C4:7D:34:CE:B2:3B:93:0F X509v3 Authority Key Identifier: keyid:E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:f9:47:7f:db:57:9c:cd:c6:e8:70:d7:a2:f1:80:5a:ab:b7: 2f:c6:2c:a8:d2:cf:53:b4:6b:81:e8:87:5c:3b:b0:87:c8:28: 6a:63:ea:b8:73:c3:9e:24:1f:a6:15:85:14:33:26:a2:34:72: 7c:3d:cc:d6:70:81:d0:ef:5c:b0:50:5f:77:93:6b:b8:53:fe: 13:10:98:33:6b:b2:8e:76:9c:ea:e6:1f:00:40:24:e5:da:34: c5:60:5e:53:6a:0f:14:69:10:f3:c3:68:9d:97:b1:5e:06:f3: 7d:82:d0:a8:dc:ce:3b:76:6d:7f:80:c4:57:84:d2:94:69:76: 49:06:ef:26:4b:f9:b1:af:25:fd:fd:8f:92:19:16:39:fc:e3: 83:06:71:a4:ec:71:e3:02:b5:bd:08:d8:d6:3c:d8:d9:f0:10: ab:d5:51:9e:82:8b:4c:16:33:19:55:b2:f7:e7:c7:cc:4d:e3: 8a:c7:37:f8:8a:7e:41:6d:a1:67:ed:26:a7:cc:ee:74:ac:21: 18:49:f3:e7:3b:b0:ed:c7:62:cd:c5:e5:68:4b:6b:f6:bc:8b: a9:92:e2:07:02:35:87:88:32:c0:e9:bf:1c:00:65:c6:29:d8: 06:8d:c9:93:f2:e9:da:6c:a3:97:19:bd:3f:72:b0:d7:70:a3: 8a:66:b3:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTIzNTkxMTAvBgNVBAUTKEU5OTFBNUEyREQ5RDFGMkEyNDNERjZBQTI0QjlGNTBF MUNCOEZFRTUwHhcNMjUwNTMwMTkyODA0WhcNMjUwNjA2MTkyODA0WjAYMRYwFAYD VQQDEw02ODNhMDZjNi03YTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtgRvPqz4xCvlrZqf81WJAvOy46ViPryhEU+CLF55duMJXvSOvxW6T0TpLMIj wtqZ05HeFMO1C5QzHVEVFMK1F9syTbGd151lh63bDDKAU7L9Fk8WkuS88zdem5cV QkqJJOvntq9K0yrZvBCOBXq0GpvQJ9zJqr1Uxf4LMYTh5+aYc4TlC/yN7iR5gn1I N7m5Vl0OQa29YBkquOgZy2PMqdrVoSbVEWLVPh3zsxeN/SmKWiDVGT+gc82cS86r 3Hjqfs4wjQ2AKxYwrAvNyMQjKW3dbl58ESS0D3jUGcJZ01Y9b8CURmA4iGdANJPA U7+q28nblwT0LpLbuRhSUh4F0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCDU4o8z mNej4DywYMR9NM6yO5MPMB8GA1UdIwQYMBaAFOmRpaLdnR8qJD32qiS59Q4cuP7l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjM1OS9GQzI5OERFQTQx NzAxMUVBOThERTY1NkFDNEY5QUUwMi82Wkdsb3QyZEh5b2tQZmFxSkxuMURoeTRf dVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZaR2xvdDJkSHlva1BmYXFKTG4xRGh5NF91VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjM1OS9GQzI5OERFQTQxNzAxMUVBOThERTY1NkFDNEY5QUUwMi82Wkdsb3QyZEh5 b2tQZmFxSkxuMURoeTRfdVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCl+Ud/21eczcbocNei8YBaq7cvxiyo0s9TtGuB6IdcO7CHyChqY+q4 c8OeJB+mFYUUMyaiNHJ8PczWcIHQ71ywUF93k2u4U/4TEJgza7KOdpzq5h8AQCTl 2jTFYF5Tag8UaRDzw2idl7FeBvN9gtCo3M47dm1/gMRXhNKUaXZJBu8mS/mxryX9 /Y+SGRY5/OODBnGk7HHjArW9CNjWPNjZ8BCr1VGegotMFjMZVbL358fMTeOKxzf4 in5BbaFn7SanzO50rCEYSfPnO7Dtx2LNxeVoS2v2vIupkuIHAjWHiDLA6b8cAGXG KdgGjcmT8unabKOXGb0/crDXcKOKZrMx -----END CERTIFICATE-----Generated at Sat May 31 15:33:55 2025 by rpki-client