$ rpki-client -vvf rpki.apnic.net/member_repository/A91C882A/B9C0C97A21A211EFB9069A6AC4F9AE02/b6Yr4K15obTDhpuhmQ8hTfazzic.mft File: b6Yr4K15obTDhpuhmQ8hTfazzic.mft (raw, json) Hash identifier: BPHsZ0lKgYMRWd8+CXF1QAC7l/iX2/ECJPxajZEoy70= Subject key identifier: BA:67:E8:70:8A:6B:2A:BC:25:7A:4E:9D:A5:EA:62:84:99:F5:CA:E1 Authority key identifier: 6F:A6:2B:E0:AD:79:A1:B4:C3:86:9B:A1:99:0F:21:4D:F6:B3:CE:27 Certificate issuer: /CN=A91C882A/serialNumber=6FA62BE0AD79A1B4C3869BA1990F214DF6B3CE27 Certificate serial: C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b6Yr4K15obTDhpuhmQ8hTfazzic.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C882A/B9C0C97A21A211EFB9069A6AC4F9AE02/b6Yr4K15obTDhpuhmQ8hTfazzic.mft Manifest number: C0 Signing time: Sat 31 May 2025 05:30:00 +0000 Manifest this update: Sat 31 May 2025 05:29:59 +0000 Manifest next update: Sat 07 Jun 2025 05:29:59 +0000 Files and hashes: 1: b6Yr4K15obTDhpuhmQ8hTfazzic.crl (hash: WTBoxrtmM/deUCx0ALmlp2Y6Ik8c9e+z6OaAyndcye8=) 2: 24C853F2AE6411EF9E94822AC4F9AE02.roa (hash: JDZyv3s2Qwc3bu83urEP0uEoNAGKRBqIwwX8qTLx3RQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C882A/B9C0C97A21A211EFB9069A6AC4F9AE02/b6Yr4K15obTDhpuhmQ8hTfazzic.crl rsync://rpki.apnic.net/member_repository/A91C882A/B9C0C97A21A211EFB9069A6AC4F9AE02/b6Yr4K15obTDhpuhmQ8hTfazzic.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b6Yr4K15obTDhpuhmQ8hTfazzic.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:29:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 196 (0xc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C882A, serialNumber=6FA62BE0AD79A1B4C3869BA1990F214DF6B3CE27 Validity Not Before: May 31 05:29:59 2025 GMT Not After : Jun 7 05:29:59 2025 GMT Subject: CN=683a93d7-98bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a7:7f:97:1e:4a:07:5e:5c:23:e0:3e:f2:e7: 49:fe:14:41:b0:1e:0f:58:5a:a7:1a:0c:9f:df:c1: 3b:53:3a:2b:53:52:59:34:37:82:01:bf:c3:f7:48: df:07:f5:6f:bf:42:63:dd:dd:3e:81:51:7b:d5:1a: fe:9a:31:f1:40:01:c1:37:f3:83:a8:9d:14:bb:02: f7:9b:86:86:d2:7a:eb:c0:25:ad:21:5c:53:74:7d: 4d:27:8b:b6:96:fb:97:af:d1:53:94:f5:a0:5c:d0: b4:d2:3c:4a:0d:7c:8a:51:b1:b1:42:00:e2:31:44: c8:08:17:f1:ca:05:8f:9a:76:ae:fe:c8:ca:f9:a1: 7f:09:35:60:65:27:17:c9:99:84:f0:a0:eb:b5:fe: 83:d9:bf:03:04:4f:86:61:34:9b:2b:fc:cd:40:be: 93:0e:e4:1d:44:b7:69:cd:d4:6c:f9:be:48:c0:73: 3b:45:e3:7f:fe:61:3c:4f:20:f9:a3:8e:38:30:b5: 30:fd:4c:cb:59:89:5c:e6:df:c4:fc:c1:ec:e0:43: 5a:38:4d:e8:54:98:6c:21:04:e0:d1:90:c3:c0:27: 02:e1:3e:ca:43:8c:db:0a:29:48:22:f3:38:bf:cd: d8:03:ad:8b:c2:1a:a0:55:13:7a:f7:a5:93:e5:c9: 10:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:67:E8:70:8A:6B:2A:BC:25:7A:4E:9D:A5:EA:62:84:99:F5:CA:E1 X509v3 Authority Key Identifier: keyid:6F:A6:2B:E0:AD:79:A1:B4:C3:86:9B:A1:99:0F:21:4D:F6:B3:CE:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C882A/B9C0C97A21A211EFB9069A6AC4F9AE02/b6Yr4K15obTDhpuhmQ8hTfazzic.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b6Yr4K15obTDhpuhmQ8hTfazzic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C882A/B9C0C97A21A211EFB9069A6AC4F9AE02/b6Yr4K15obTDhpuhmQ8hTfazzic.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:04:86:70:b7:fa:e0:7f:fc:5f:34:3f:2f:b4:ca:ba:07:79: 2b:7e:19:2d:4b:5d:7a:7b:a4:8f:75:a9:3e:fd:fa:d8:7b:9b: 69:52:5f:82:d2:4f:8e:f1:09:8a:6e:62:62:33:29:79:48:8d: c6:46:47:64:73:5b:c9:3f:fb:e4:37:ec:f5:cf:77:2e:1b:e6: de:3f:2d:e7:10:5e:76:96:e3:e5:c2:9d:ee:52:30:11:ca:c1: 89:b8:b3:df:8f:8e:0a:0e:ab:50:bc:a7:66:cd:64:79:ca:2e: 76:52:97:fb:85:3e:25:6f:53:05:aa:e6:0d:b9:c7:27:cb:b7: 56:5f:25:80:8b:92:40:d1:f9:42:38:18:da:fd:cf:9e:36:36: 01:e2:42:83:7f:b0:85:f3:48:a8:d1:a8:4b:eb:67:38:73:e3: b1:2f:c4:9d:c1:83:e8:1c:55:e7:43:c6:59:91:3c:ea:29:00: c9:37:5e:23:61:f8:fa:f1:fb:46:09:1d:be:20:90:3f:d2:bd: 4f:b9:77:8c:5e:8b:90:7b:e9:3f:f9:ff:13:96:dc:e9:50:4f: 8a:c1:a7:a1:40:3a:90:33:b1:a6:2f:60:62:e6:58:ac:5b:70: a8:c9:3a:0a:0f:55:c7:02:5e:a4:e8:e0:17:3d:11:a6:e5:c5: 2d:24:9b:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzg4MkExMTAvBgNVBAUTKDZGQTYyQkUwQUQ3OUExQjRDMzg2OUJBMTk5MEYyMTRE RjZCM0NFMjcwHhcNMjUwNTMxMDUyOTU5WhcNMjUwNjA3MDUyOTU5WjAYMRYwFAYD VQQDEw02ODNhOTNkNy05OGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuqd/lx5KB15cI+A+8udJ/hRBsB4PWFqnGgyf38E7UzorU1JZNDeCAb/D90jf B/Vvv0Jj3d0+gVF71Rr+mjHxQAHBN/ODqJ0UuwL3m4aG0nrrwCWtIVxTdH1NJ4u2 lvuXr9FTlPWgXNC00jxKDXyKUbGxQgDiMUTICBfxygWPmnau/sjK+aF/CTVgZScX yZmE8KDrtf6D2b8DBE+GYTSbK/zNQL6TDuQdRLdpzdRs+b5IwHM7ReN//mE8TyD5 o444MLUw/UzLWYlc5t/E/MHs4ENaOE3oVJhsIQTg0ZDDwCcC4T7KQ4zbCilIIvM4 v83YA62LwhqgVRN696WT5ckQ2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLpn6HCK ayq8JXpOnaXqYoSZ9crhMB8GA1UdIwQYMBaAFG+mK+CteaG0w4aboZkPIU32s84n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODgyQS9COUMwQzk3QTIx QTIxMUVGQjkwNjlBNkFDNEY5QUUwMi9iNllyNEsxNW9iVERocHVobVE4aFRmYXp6 aWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I2WXI0SzE1b2JURGhwdWhtUThoVGZhenppYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODgyQS9COUMwQzk3QTIxQTIxMUVGQjkwNjlBNkFDNEY5QUUwMi9iNllyNEsxNW9i VERocHVobVE4aFRmYXp6aWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEBIZwt/rgf/xfND8vtMq6B3krfhktS116e6SPdak+/frYe5tpUl+C 0k+O8QmKbmJiMyl5SI3GRkdkc1vJP/vkN+z1z3cuG+bePy3nEF52luPlwp3uUjAR ysGJuLPfj44KDqtQvKdmzWR5yi52Upf7hT4lb1MFquYNuccny7dWXyWAi5JA0flC OBja/c+eNjYB4kKDf7CF80io0ahL62c4c+OxL8SdwYPoHFXnQ8ZZkTzqKQDJN14j Yfj68ftGCR2+IJA/0r1PuXeMXouQe+k/+f8TltzpUE+KwaehQDqQM7GmL2Bi5lis W3CoyToKD1XHAl6k6OAXPRGm5cUtJJt8 -----END CERTIFICATE-----Generated at Sat May 31 16:30:37 2025 by rpki-client