$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7FB1/AAD69040543811ED938C6628C4F9AE02/6Mzcv70o1xGQ6JN_PapZWP1IFUE.mft File: 6Mzcv70o1xGQ6JN_PapZWP1IFUE.mft (raw, json) Hash identifier: kn+8klwzT3mq7YZKFqvNPgsoHTGI+dgAV2ppPGVRdoQ= Subject key identifier: F2:C4:47:B2:30:8F:C5:28:3B:6F:28:B5:70:A6:A9:CF:4F:25:87:85 Authority key identifier: E8:CC:DC:BF:BD:28:D7:11:90:E8:93:7F:3D:AA:59:58:FD:48:15:41 Certificate issuer: /CN=A91E7FB1/serialNumber=E8CCDCBFBD28D71190E8937F3DAA5958FD481541 Certificate serial: 01EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Mzcv70o1xGQ6JN_PapZWP1IFUE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7FB1/AAD69040543811ED938C6628C4F9AE02/6Mzcv70o1xGQ6JN_PapZWP1IFUE.mft Manifest number: 01E7 Signing time: Sat 31 May 2025 02:20:58 +0000 Manifest this update: Sat 31 May 2025 02:20:57 +0000 Manifest next update: Sat 07 Jun 2025 02:20:57 +0000 Files and hashes: 1: 6Mzcv70o1xGQ6JN_PapZWP1IFUE.crl (hash: ATC092VFdUJr/kNL/UJbhvGQ6MpL9Vs8m4zhJ9/IsZg=) 2: FE79EA9A543C11ED972CDD2FC4F9AE02.roa (hash: TXPIWerNT1GXv7TyCQJNbBBoD6VtScjOMdZFAdd3h8A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7FB1/AAD69040543811ED938C6628C4F9AE02/6Mzcv70o1xGQ6JN_PapZWP1IFUE.crl rsync://rpki.apnic.net/member_repository/A91E7FB1/AAD69040543811ED938C6628C4F9AE02/6Mzcv70o1xGQ6JN_PapZWP1IFUE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Mzcv70o1xGQ6JN_PapZWP1IFUE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:20:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 492 (0x1ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7FB1, serialNumber=E8CCDCBFBD28D71190E8937F3DAA5958FD481541 Validity Not Before: May 31 02:20:57 2025 GMT Not After : Jun 7 02:20:57 2025 GMT Subject: CN=683a6789-c40f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:cd:30:41:02:1b:2f:4d:7f:13:e6:bb:1e:cb: 17:9a:95:42:98:8d:23:22:53:2a:96:43:cb:dc:0c: bf:0f:e6:9e:fc:e4:b8:92:d7:fa:4c:d0:2e:b7:5f: a7:25:8a:be:94:c0:e0:f1:2d:b6:b6:31:f2:64:92: 73:0d:72:70:84:16:27:09:63:63:c4:b2:90:a2:e4: d2:cf:0d:79:a0:b9:47:2d:1c:1c:2a:1a:cf:c1:b0: 9d:c2:de:53:d7:30:8f:14:19:0f:e5:9e:72:7d:ae: 2d:9a:a4:2f:67:90:5e:b2:d8:87:d4:34:58:de:bc: 04:b0:72:dd:e5:d5:3f:d2:39:6f:1b:d0:c1:3f:87: d5:bf:21:6f:92:ee:c8:df:4b:ce:2a:55:8a:84:78: 7a:70:b9:04:cf:b1:75:50:54:2e:2a:57:d1:51:e6: 92:c4:45:33:b9:e4:da:98:32:de:0f:cc:9a:a5:31: 75:fe:b3:91:9a:be:1f:86:80:f3:24:e6:5f:e9:55: cc:0d:08:01:4c:83:9e:32:c4:20:5c:ce:ae:16:3e: 6b:88:eb:29:2d:b6:1e:5f:42:ae:5f:c7:f8:57:41: 57:c1:2b:35:45:77:62:5a:d9:ef:c3:3a:a4:f2:5e: 66:cd:61:a4:e0:01:37:fb:42:19:3c:b7:71:7d:b4: 33:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:C4:47:B2:30:8F:C5:28:3B:6F:28:B5:70:A6:A9:CF:4F:25:87:85 X509v3 Authority Key Identifier: keyid:E8:CC:DC:BF:BD:28:D7:11:90:E8:93:7F:3D:AA:59:58:FD:48:15:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7FB1/AAD69040543811ED938C6628C4F9AE02/6Mzcv70o1xGQ6JN_PapZWP1IFUE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Mzcv70o1xGQ6JN_PapZWP1IFUE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7FB1/AAD69040543811ED938C6628C4F9AE02/6Mzcv70o1xGQ6JN_PapZWP1IFUE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:30:94:a6:d1:70:e6:d4:3c:6b:5e:01:14:a8:d0:24:5f:3a: 4a:f3:d7:d2:b2:29:ad:1c:98:dc:2c:60:a2:d2:bd:6b:6a:f9: 50:68:83:3e:7c:50:c7:e9:70:46:a1:f9:40:8c:dc:0a:47:ff: 8e:8f:18:ac:4c:06:b4:da:e8:fa:12:12:39:eb:d1:fb:e0:92: 60:f5:29:28:13:fa:5d:42:8d:aa:68:e1:30:33:9a:7e:75:ea: 0b:fc:32:5b:fa:bc:92:20:b2:f0:71:93:83:d4:03:9b:ac:4e: 2b:3d:50:e0:01:ec:07:75:20:24:4c:ee:b0:35:f2:bf:b2:f4: 14:71:ee:f2:0f:fb:20:8c:7f:11:20:bf:b4:38:83:21:20:27: c6:da:fa:19:64:eb:61:be:15:af:b8:3a:28:84:45:30:c3:4b: 4a:74:15:05:c6:d0:c9:bf:4d:58:15:ef:f3:b9:0e:59:a3:f0: 76:35:d3:29:4d:c4:6f:89:be:d8:01:16:4a:48:c5:50:84:0b: 88:7c:92:64:fa:1c:b3:c7:72:e3:2d:90:13:1c:83:e2:ab:c7: 4f:c1:b9:f5:af:5e:be:8d:34:f9:1e:4f:68:d2:da:97:78:f4: e8:7a:88:26:e6:a9:34:5e:f8:42:c4:6e:d6:11:00:10:0f:9d: c9:ad:f2:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdGQjExMTAvBgNVBAUTKEU4Q0NEQ0JGQkQyOEQ3MTE5MEU4OTM3RjNEQUE1OTU4 RkQ0ODE1NDEwHhcNMjUwNTMxMDIyMDU3WhcNMjUwNjA3MDIyMDU3WjAYMRYwFAYD VQQDEw02ODNhNjc4OS1jNDBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAys0wQQIbL01/E+a7HssXmpVCmI0jIlMqlkPL3Ay/D+ae/OS4ktf6TNAut1+n JYq+lMDg8S22tjHyZJJzDXJwhBYnCWNjxLKQouTSzw15oLlHLRwcKhrPwbCdwt5T 1zCPFBkP5Z5yfa4tmqQvZ5BestiH1DRY3rwEsHLd5dU/0jlvG9DBP4fVvyFvku7I 30vOKlWKhHh6cLkEz7F1UFQuKlfRUeaSxEUzueTamDLeD8yapTF1/rORmr4fhoDz JOZf6VXMDQgBTIOeMsQgXM6uFj5riOspLbYeX0KuX8f4V0FXwSs1RXdiWtnvwzqk 8l5mzWGk4AE3+0IZPLdxfbQz4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPLER7Iw j8UoO28otXCmqc9PJYeFMB8GA1UdIwQYMBaAFOjM3L+9KNcRkOiTfz2qWVj9SBVB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0ZCMS9BQUQ2OTA0MDU0 MzgxMUVEOTM4QzY2MjhDNEY5QUUwMi82TXpjdjcwbzF4R1E2Sk5fUGFwWldQMUlG VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZNemN2NzBvMXhHUTZKTl9QYXBaV1AxSUZVRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0ZCMS9BQUQ2OTA0MDU0MzgxMUVEOTM4QzY2MjhDNEY5QUUwMi82TXpjdjcwbzF4 R1E2Sk5fUGFwWldQMUlGVUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0MJSm0XDm1DxrXgEUqNAkXzpK89fSsimtHJjcLGCi0r1ravlQaIM+ fFDH6XBGoflAjNwKR/+OjxisTAa02uj6EhI569H74JJg9SkoE/pdQo2qaOEwM5p+ deoL/DJb+rySILLwcZOD1AObrE4rPVDgAewHdSAkTO6wNfK/svQUce7yD/sgjH8R IL+0OIMhICfG2voZZOthvhWvuDoohEUww0tKdBUFxtDJv01YFe/zuQ5Zo/B2NdMp TcRvib7YARZKSMVQhAuIfJJk+hyzx3LjLZATHIPiq8dPwbn1r16+jTT5Hk9o0tqX ePToeogm5qk0XvhCxG7WEQAQD53JrfKj -----END CERTIFICATE-----Generated at Sat May 31 16:59:19 2025 by rpki-client