$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft File: M6AXSkpLAJwBFRWWkTbzAQidtbU.mft (raw, json) Hash identifier: mVSH9TH7kSGGG7Ny+F29ZJ3gImqC8e739yTyD1HcVtI= Subject key identifier: 98:3F:C4:C5:CD:92:D9:D4:61:B3:A1:5D:6F:52:C6:19:F7:AA:1F:2E Authority key identifier: 33:A0:17:4A:4A:4B:00:9C:01:15:15:96:91:36:F3:01:08:9D:B5:B5 Certificate issuer: /CN=A91FF1CC/serialNumber=33A0174A4A4B009C011515969136F301089DB5B5 Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6AXSkpLAJwBFRWWkTbzAQidtbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft Manifest number: 34 Signing time: Sat 31 May 2025 07:11:22 +0000 Manifest this update: Sat 31 May 2025 07:11:22 +0000 Manifest next update: Sat 07 Jun 2025 07:11:21 +0000 Files and hashes: 1: M6AXSkpLAJwBFRWWkTbzAQidtbU.crl (hash: cHJ5inwrirwGfhupFLjIUNW1uGbse6+0mGiDHsm5yLI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.crl rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6AXSkpLAJwBFRWWkTbzAQidtbU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:11:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF1CC, serialNumber=33A0174A4A4B009C011515969136F301089DB5B5 Validity Not Before: May 31 07:11:22 2025 GMT Not After : Jun 7 07:11:21 2025 GMT Subject: CN=683aab9a-f023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:96:fa:8f:c9:63:ec:8b:fb:5e:3b:65:39:b0: 8a:47:e0:6d:ab:4f:12:7a:ab:41:1f:b0:e1:45:20: 41:b6:40:d1:1f:35:90:31:35:36:1a:5f:d0:c7:a6: 68:a3:35:c8:fd:1a:39:b2:d4:72:5b:bd:44:fd:f0: 3f:e6:5c:66:ae:3d:de:2e:1a:45:d7:02:e1:1c:0e: 7e:df:18:9a:01:89:3b:37:3e:13:41:1a:2a:3b:fe: 9c:97:12:05:ad:28:a4:40:62:67:06:6c:c8:21:1e: 9b:1f:22:6b:81:e3:48:70:6e:07:bb:5e:73:59:5f: 43:5d:92:15:05:43:c1:26:f7:7a:c8:9b:5b:d1:06: 29:5c:c0:e2:d8:a0:9a:e6:e1:cc:3b:e9:0c:13:53: 8a:fb:c6:1a:e6:6a:12:28:99:36:24:2f:e7:81:06: 7b:80:fd:20:f3:b9:79:e1:54:e9:fe:be:5d:29:82: bd:b6:02:77:b5:63:37:4c:17:d4:96:7b:ec:c8:8b: e4:b3:0d:99:87:1b:e0:23:e3:f1:c3:75:f9:00:77: 09:97:07:81:6e:1d:ec:2c:15:a9:a5:87:5c:89:27: ce:5b:76:82:e2:df:2a:12:1b:b7:f7:75:50:e1:a6: 8b:54:64:2a:7e:c3:cd:c4:6b:f5:3e:7f:b4:80:62: af:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:3F:C4:C5:CD:92:D9:D4:61:B3:A1:5D:6F:52:C6:19:F7:AA:1F:2E X509v3 Authority Key Identifier: keyid:33:A0:17:4A:4A:4B:00:9C:01:15:15:96:91:36:F3:01:08:9D:B5:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6AXSkpLAJwBFRWWkTbzAQidtbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:61:f3:1f:9f:fd:6f:11:b4:2e:21:46:a3:28:f9:67:ce:1b: 96:47:ca:18:83:89:ef:45:5a:97:55:12:1e:06:cf:01:40:ab: fe:59:ff:aa:97:93:8e:f3:28:a9:6c:5e:c0:b9:64:b4:23:5a: ca:f1:b9:36:37:12:1b:06:25:6b:27:a5:62:9e:cf:fd:d8:b8: 3c:af:4c:54:a4:ac:2f:d3:6a:9f:79:8b:f9:db:f2:18:45:74: cf:b5:84:d4:f6:54:8c:40:54:cd:72:f6:e7:67:5c:34:a8:1c: 0e:3b:99:c9:98:95:b5:ab:d5:22:5d:5f:f0:1b:d1:83:bb:88: 9c:1d:a5:b2:14:8c:94:e6:46:4f:b7:a2:1b:97:df:71:6a:a4: 29:3a:01:e7:64:d7:a1:23:50:db:12:0a:2a:24:64:68:07:c0: 7b:82:af:f5:12:7c:8a:14:99:ef:e2:7c:40:29:4d:4e:a3:6b: a7:72:5c:1e:ce:b7:5e:3b:01:5a:43:63:8b:08:c8:4c:53:3b: 74:15:20:70:99:56:99:5f:f2:2a:55:96:84:5a:35:92:ee:a4: ee:d9:ae:4c:f7:1c:11:d4:35:07:80:a8:b0:51:75:bf:30:26: fd:68:5a:b1:04:fb:20:6f:27:45:e7:7f:28:a8:1c:64:80:7a: 4e:e3:0c:e5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RjFDQzExMC8GA1UEBRMoMzNBMDE3NEE0QTRCMDA5QzAxMTUxNTk2OTEzNkYzMDEw ODlEQjVCNTAeFw0yNTA1MzEwNzExMjJaFw0yNTA2MDcwNzExMjFaMBgxFjAUBgNV BAMTDTY4M2FhYjlhLWYwMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxlvqPyWPsi/teO2U5sIpH4G2rTxJ6q0EfsOFFIEG2QNEfNZAxNTYaX9DHpmij Ncj9Gjmy1HJbvUT98D/mXGauPd4uGkXXAuEcDn7fGJoBiTs3PhNBGio7/pyXEgWt KKRAYmcGbMghHpsfImuB40hwbge7XnNZX0NdkhUFQ8Em93rIm1vRBilcwOLYoJrm 4cw76QwTU4r7xhrmahIomTYkL+eBBnuA/SDzuXnhVOn+vl0pgr22Ane1YzdMF9SW e+zIi+SzDZmHG+Aj4/HDdfkAdwmXB4FuHewsFamlh1yJJ85bdoLi3yoSG7f3dVDh potUZCp+w83Ea/U+f7SAYq/3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmD/Exc2S 2dRhs6Fdb1LGGfeqHy4wHwYDVR0jBBgwFoAUM6AXSkpLAJwBFRWWkTbzAQidtbUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZGMUNDLzQzRUE2QjE4RUY2 MzExRUZCRjY0QUI2QUM0RjlBRTAyL002QVhTa3BMQUp3QkZSV1drVGJ6QVFpZHRi VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTTZBWFNrcExBSndCRlJXV2tUYnpBUWlkdGJVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZG MUNDLzQzRUE2QjE4RUY2MzExRUZCRjY0QUI2QUM0RjlBRTAyL002QVhTa3BMQUp3 QkZSV1drVGJ6QVFpZHRiVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHhh8x+f/W8RtC4hRqMo+WfOG5ZHyhiDie9FWpdVEh4GzwFAq/5Z/6qX k47zKKlsXsC5ZLQjWsrxuTY3EhsGJWsnpWKez/3YuDyvTFSkrC/Tap95i/nb8hhF dM+1hNT2VIxAVM1y9udnXDSoHA47mcmYlbWr1SJdX/Ab0YO7iJwdpbIUjJTmRk+3 ohuX33FqpCk6Aedk16EjUNsSCiokZGgHwHuCr/USfIoUme/ifEApTU6ja6dyXB7O t147AVpDY4sIyExTO3QVIHCZVplf8ipVloRaNZLupO7Zrkz3HBHUNQeAqLBRdb8w Jv1oWrEE+yBvJ0XnfyioHGSAek7jDOU= -----END CERTIFICATE-----Generated at Sat May 31 17:31:53 2025 by rpki-client