$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1C73/C491BA4EAC0D11EF9879926EC4F9AE02/64mHxSCv7Nwk9ByG_Gut08Fvpio.mft File: 64mHxSCv7Nwk9ByG_Gut08Fvpio.mft (raw, json) Hash identifier: xzXzzlc5WiHkJAqoWwzytqNM6d7PaXtpSchpTJ2CmxI= Subject key identifier: 6C:76:BA:D8:18:00:40:A9:05:9B:DB:7C:89:A8:5A:B9:20:CF:F4:62 Authority key identifier: EB:89:87:C5:20:AF:EC:DC:24:F4:1C:86:FC:6B:AD:D3:C1:6F:A6:2A Certificate issuer: /CN=A91B1C73/serialNumber=EB8987C520AFECDC24F41C86FC6BADD3C16FA62A Certificate serial: 60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64mHxSCv7Nwk9ByG_Gut08Fvpio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1C73/C491BA4EAC0D11EF9879926EC4F9AE02/64mHxSCv7Nwk9ByG_Gut08Fvpio.mft Manifest number: 60 Signing time: Sat 31 May 2025 06:39:12 +0000 Manifest this update: Sat 31 May 2025 06:39:11 +0000 Manifest next update: Sat 07 Jun 2025 06:39:11 +0000 Files and hashes: 1: 64mHxSCv7Nwk9ByG_Gut08Fvpio.crl (hash: 0jAAOJXErkzbIP8o5/b9kh4KSoc8L5Dxs35Qa4MUiJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1C73/C491BA4EAC0D11EF9879926EC4F9AE02/64mHxSCv7Nwk9ByG_Gut08Fvpio.crl rsync://rpki.apnic.net/member_repository/A91B1C73/C491BA4EAC0D11EF9879926EC4F9AE02/64mHxSCv7Nwk9ByG_Gut08Fvpio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64mHxSCv7Nwk9ByG_Gut08Fvpio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:39:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1C73, serialNumber=EB8987C520AFECDC24F41C86FC6BADD3C16FA62A Validity Not Before: May 31 06:39:11 2025 GMT Not After : Jun 7 06:39:11 2025 GMT Subject: CN=683aa40f-6184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:a1:bc:c6:c6:73:23:aa:74:fc:2b:75:9d:e8: fa:71:b8:31:75:e6:9d:f0:d6:ad:d5:fd:ab:91:cc: d7:52:2a:4a:c2:f4:51:b6:c3:ee:8b:bb:60:06:28: 06:4a:6a:24:ed:0e:91:19:30:fe:a6:6e:17:c5:f5: 80:30:09:92:af:bf:1c:a6:cf:bc:7c:90:1f:85:5a: a9:79:71:1e:d7:fb:8d:48:57:de:c6:77:90:d3:01: a4:e7:9e:b2:dd:8e:30:54:40:72:b1:db:eb:c8:de: 52:b6:03:8f:78:86:3a:be:91:36:22:fc:ab:df:2b: db:0d:8f:fd:11:fc:ef:f9:79:c9:83:ae:f9:c4:95: 9d:15:9b:48:33:19:e7:05:ce:85:2a:91:66:b1:ea: b4:e8:a6:53:53:04:09:f9:3c:cc:3b:a2:7f:f6:01: bf:b0:bb:24:2f:2a:96:2b:fc:ab:2d:64:26:25:b1: 62:0c:e5:24:f8:22:2a:d2:bd:81:fe:e2:f1:39:3e: ae:6a:8f:1b:0f:16:e1:3a:3b:8e:30:bf:d8:6d:9b: 83:02:94:6d:31:2c:9f:af:a4:3f:dc:2a:ad:99:f8: 80:a6:30:fc:6e:bc:81:89:21:e5:3e:c4:a0:71:72: fb:57:e3:1e:5f:8f:ad:74:00:31:1e:28:f9:58:82: 03:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:76:BA:D8:18:00:40:A9:05:9B:DB:7C:89:A8:5A:B9:20:CF:F4:62 X509v3 Authority Key Identifier: keyid:EB:89:87:C5:20:AF:EC:DC:24:F4:1C:86:FC:6B:AD:D3:C1:6F:A6:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1C73/C491BA4EAC0D11EF9879926EC4F9AE02/64mHxSCv7Nwk9ByG_Gut08Fvpio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64mHxSCv7Nwk9ByG_Gut08Fvpio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1C73/C491BA4EAC0D11EF9879926EC4F9AE02/64mHxSCv7Nwk9ByG_Gut08Fvpio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:4c:0f:34:73:00:8c:84:d6:16:cb:a3:16:ca:cf:92:c1:9e: 67:44:f4:03:a3:9f:0d:b9:b0:7d:2d:19:31:4c:fb:aa:2e:ae: 89:3e:27:1f:b5:12:a4:63:9e:05:68:f9:0e:1b:f9:8a:51:b9: 5a:0b:18:48:74:16:48:28:d7:cb:2f:9f:9e:b2:49:68:51:7d: 2d:80:71:56:bb:cd:f3:52:b5:b1:e9:2c:48:26:84:d5:c7:83: 4c:90:65:43:f6:50:ab:bc:23:67:b9:39:f0:c8:8f:fc:26:ff: c9:88:01:12:01:99:22:fa:de:a2:85:15:e8:c9:bd:df:80:e7: 8c:80:96:a6:ed:fc:6c:ca:ac:79:18:1f:31:2d:c4:94:d2:9e: a7:a8:cc:67:bd:2e:28:e2:fd:e7:32:aa:e2:21:09:cf:2c:76: 10:8a:35:5f:fc:46:78:8d:a6:a0:4c:38:93:b7:4f:f9:cb:6b: f1:d1:b5:11:55:ef:d5:6d:00:90:d4:d4:22:5c:87:7f:f2:15: 6f:db:63:3a:44:cd:9a:b3:22:f6:b6:f5:08:ca:cc:42:65:06: 81:1c:84:5e:1a:18:9b:5f:8f:1e:04:10:66:f5:d4:2b:1e:2c: 1a:39:b2:b1:26:5e:35:d2:96:d4:17:0a:09:a4:2f:02:ce:5e: 47:03:16:53 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MUM3MzExMC8GA1UEBRMoRUI4OTg3QzUyMEFGRUNEQzI0RjQxQzg2RkM2QkFERDND MTZGQTYyQTAeFw0yNTA1MzEwNjM5MTFaFw0yNTA2MDcwNjM5MTFaMBgxFjAUBgNV BAMTDTY4M2FhNDBmLTYxODQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD0obzGxnMjqnT8K3Wd6PpxuDF15p3w1q3V/auRzNdSKkrC9FG2w+6Lu2AGKAZK aiTtDpEZMP6mbhfF9YAwCZKvvxymz7x8kB+FWql5cR7X+41IV97Gd5DTAaTnnrLd jjBUQHKx2+vI3lK2A494hjq+kTYi/KvfK9sNj/0R/O/5ecmDrvnElZ0Vm0gzGecF zoUqkWax6rToplNTBAn5PMw7on/2Ab+wuyQvKpYr/KstZCYlsWIM5ST4IirSvYH+ 4vE5Pq5qjxsPFuE6O44wv9htm4MClG0xLJ+vpD/cKq2Z+ICmMPxuvIGJIeU+xKBx cvtX4x5fj610ADEeKPlYggOZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbHa62BgA QKkFm9t8iahauSDP9GIwHwYDVR0jBBgwFoAU64mHxSCv7Nwk9ByG/Gut08Fvpiow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxQzczL0M0OTFCQTRFQUMw RDExRUY5ODc5OTI2RUM0RjlBRTAyLzY0bUh4U0N2N053azlCeUdfR3V0MDhGdnBp by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNjRtSHhTQ3Y3TndrOUJ5R19HdXQwOEZ2cGlvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIx QzczL0M0OTFCQTRFQUMwRDExRUY5ODc5OTI2RUM0RjlBRTAyLzY0bUh4U0N2N053 azlCeUdfR3V0MDhGdnBpby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGZMDzRzAIyE1hbLoxbKz5LBnmdE9AOjnw25sH0tGTFM+6ourok+Jx+1 EqRjngVo+Q4b+YpRuVoLGEh0Fkgo18svn56ySWhRfS2AcVa7zfNStbHpLEgmhNXH g0yQZUP2UKu8I2e5OfDIj/wm/8mIARIBmSL63qKFFejJvd+A54yAlqbt/GzKrHkY HzEtxJTSnqeozGe9Liji/ecyquIhCc8sdhCKNV/8RniNpqBMOJO3T/nLa/HRtRFV 79VtAJDU1CJch3/yFW/bYzpEzZqzIva29QjKzEJlBoEchF4aGJtfjx4EEGb11Cse LBo5srEmXjXSltQXCgmkLwLOXkcDFlM= -----END CERTIFICATE-----Generated at Sat May 31 17:30:20 2025 by rpki-client