$ rpki-client -vvf rpki.apnic.net/member_repository/A913E504/A08A2C76983D11E7A37FD478C4F9AE02/6w67ZlG90AYnOWdC_xoLTqD94uU.mft File: 6w67ZlG90AYnOWdC_xoLTqD94uU.mft (raw, json) Hash identifier: bb6t1UfBs100HSi0bbMcSOcTQ0tzEYdQOTRqg6p0PiA= Subject key identifier: 00:2C:6D:B6:FE:4E:9E:AD:EF:40:60:26:84:A9:36:4D:FD:EE:36:09 Authority key identifier: EB:0E:BB:66:51:BD:D0:06:27:39:67:42:FF:1A:0B:4E:A0:FD:E2:E5 Certificate issuer: /CN=A913E504/serialNumber=EB0EBB6651BDD00627396742FF1A0B4EA0FDE2E5 Certificate serial: 189F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6w67ZlG90AYnOWdC_xoLTqD94uU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E504/A08A2C76983D11E7A37FD478C4F9AE02/6w67ZlG90AYnOWdC_xoLTqD94uU.mft Manifest number: 1891 Signing time: Thu 24 Apr 2025 16:31:00 +0000 Manifest this update: Thu 24 Apr 2025 16:30:59 +0000 Manifest next update: Thu 01 May 2025 16:30:59 +0000 Files and hashes: 1: 6w67ZlG90AYnOWdC_xoLTqD94uU.crl (hash: Va/e3Dq82IQ07OhemiJ1KGuNncd8+nksscuw6IJ0Iwk=) 2: C00CB30A87A711EA94E5CF22C4F9AE02.roa (hash: aB/oE2OnnyN0W6HaDv8npp8QZbqOPeG0ULRgF9RjBlg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E504/A08A2C76983D11E7A37FD478C4F9AE02/6w67ZlG90AYnOWdC_xoLTqD94uU.crl rsync://rpki.apnic.net/member_repository/A913E504/A08A2C76983D11E7A37FD478C4F9AE02/6w67ZlG90AYnOWdC_xoLTqD94uU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6w67ZlG90AYnOWdC_xoLTqD94uU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:30:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6303 (0x189f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E504, serialNumber=EB0EBB6651BDD00627396742FF1A0B4EA0FDE2E5 Validity Not Before: Apr 24 16:30:59 2025 GMT Not After : May 1 16:30:59 2025 GMT Subject: CN=680a6743-2402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:21:f6:91:df:34:d5:ea:28:e5:f7:b3:0e:60: 04:e8:77:e7:a8:7f:58:e1:9c:3a:07:1f:ab:15:67: 26:99:10:27:e0:37:f8:e2:58:e3:de:a2:35:59:d2: f1:b1:5d:2e:b0:44:b6:5d:e5:7a:ee:2a:28:28:1e: 4a:43:30:11:0a:a8:5d:bf:d4:fe:22:a7:1b:a4:36: d5:fc:ee:c2:b9:c8:fb:e5:35:e3:a1:28:f3:28:77: 88:eb:0d:90:c6:4d:b2:d0:17:14:a8:8c:24:3e:2c: 72:8c:9b:f0:2b:2d:9e:d8:14:ea:e1:0b:e0:39:40: 3b:c3:b4:03:34:72:db:5c:4e:ee:60:75:46:81:57: 73:2b:7f:47:6f:15:0f:43:48:a7:16:60:ae:b0:86: 86:7a:66:02:d7:c4:a6:02:09:d1:69:f0:7f:96:06: 2a:f1:4b:fe:7c:0e:a4:03:55:3e:60:c9:43:f6:0f: 7b:76:1c:ca:7a:88:3d:1a:6c:0c:0a:a0:8f:8e:c3: 22:7d:9d:16:a3:a8:63:42:f2:1a:2c:3f:db:70:77: 1b:9b:1a:26:34:49:54:a9:e7:8c:1f:d8:d4:8b:9d: e8:4c:bf:57:8b:53:ff:78:78:9b:dc:7a:81:55:02: 0b:a1:ba:38:ea:a0:a1:b5:75:ec:f1:28:70:4e:26: 3b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:2C:6D:B6:FE:4E:9E:AD:EF:40:60:26:84:A9:36:4D:FD:EE:36:09 X509v3 Authority Key Identifier: keyid:EB:0E:BB:66:51:BD:D0:06:27:39:67:42:FF:1A:0B:4E:A0:FD:E2:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E504/A08A2C76983D11E7A37FD478C4F9AE02/6w67ZlG90AYnOWdC_xoLTqD94uU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6w67ZlG90AYnOWdC_xoLTqD94uU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E504/A08A2C76983D11E7A37FD478C4F9AE02/6w67ZlG90AYnOWdC_xoLTqD94uU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:e9:93:09:ed:70:9f:ff:2c:9f:c3:fb:0c:21:d7:0f:78:02: 5e:d2:35:d7:4f:39:c7:d6:8e:25:62:d8:da:94:43:18:89:ac: c1:cf:c6:7b:d4:fd:9c:f5:96:c8:63:a1:cc:e7:46:5d:7b:5e: 56:4b:6a:bb:16:e0:75:67:24:70:31:00:c5:42:ce:10:d6:d3: 78:e7:ce:95:1d:ee:fd:25:17:e9:b6:71:77:95:ec:43:2f:2a: d2:20:66:89:43:cc:49:bd:49:9d:a0:53:02:3b:64:d2:0c:2e: a6:00:a9:60:21:da:ab:65:62:45:76:50:b5:1a:bb:b9:25:93: dd:1c:5d:c1:8c:d9:08:f4:af:2c:a1:6b:1b:5e:c3:40:32:80: c7:ea:94:a8:2d:4f:01:07:f5:51:35:a4:04:0a:31:00:9f:79: e8:f4:8b:cd:83:e4:45:ac:f2:84:2f:45:33:79:25:10:96:12: fa:22:d8:fb:98:0f:d7:1b:72:e4:32:be:0f:83:87:70:98:30: d3:ca:9b:db:bb:92:40:e4:bf:e7:34:16:db:73:ec:3b:c3:d4: 85:b2:a0:44:79:26:c4:30:ae:86:0f:30:b2:df:35:fa:b6:d3: 39:8b:0a:9d:21:0d:05:10:08:14:5d:7c:2a:fe:c1:8b:9a:79: 94:be:44:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U1MDQxMTAvBgNVBAUTKEVCMEVCQjY2NTFCREQwMDYyNzM5Njc0MkZGMUEwQjRF QTBGREUyRTUwHhcNMjUwNDI0MTYzMDU5WhcNMjUwNTAxMTYzMDU5WjAYMRYwFAYD VQQDEw02ODBhNjc0My0yNDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzCH2kd801eoo5fezDmAE6HfnqH9Y4Zw6Bx+rFWcmmRAn4Df44ljj3qI1WdLx sV0usES2XeV67iooKB5KQzARCqhdv9T+IqcbpDbV/O7Cucj75TXjoSjzKHeI6w2Q xk2y0BcUqIwkPixyjJvwKy2e2BTq4QvgOUA7w7QDNHLbXE7uYHVGgVdzK39HbxUP Q0inFmCusIaGemYC18SmAgnRafB/lgYq8Uv+fA6kA1U+YMlD9g97dhzKeog9GmwM CqCPjsMifZ0Wo6hjQvIaLD/bcHcbmxomNElUqeeMH9jUi53oTL9Xi1P/eHib3HqB VQILobo46qChtXXs8ShwTiY74QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAAsbbb+ Tp6t70BgJoSpNk397jYJMB8GA1UdIwQYMBaAFOsOu2ZRvdAGJzlnQv8aC06g/eLl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTUwNC9BMDhBMkM3Njk4 M0QxMUU3QTM3RkQ0NzhDNEY5QUUwMi82dzY3WmxHOTBBWW5PV2RDX3hvTFRxRDk0 dVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ3NjdabEc5MEFZbk9XZENfeG9MVHFEOTR1VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTUwNC9BMDhBMkM3Njk4M0QxMUU3QTM3RkQ0NzhDNEY5QUUwMi82dzY3WmxHOTBB WW5PV2RDX3hvTFRxRDk0dVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBp6ZMJ7XCf/yyfw/sMIdcPeAJe0jXXTznH1o4lYtjalEMYiazBz8Z7 1P2c9ZbIY6HM50Zde15WS2q7FuB1ZyRwMQDFQs4Q1tN4586VHe79JRfptnF3lexD LyrSIGaJQ8xJvUmdoFMCO2TSDC6mAKlgIdqrZWJFdlC1Gru5JZPdHF3BjNkI9K8s oWsbXsNAMoDH6pSoLU8BB/VRNaQECjEAn3no9IvNg+RFrPKEL0UzeSUQlhL6Itj7 mA/XG3LkMr4Pg4dwmDDTypvbu5JA5L/nNBbbc+w7w9SFsqBEeSbEMK6GDzCy3zX6 ttM5iwqdIQ0FEAgUXXwq/sGLmnmUvkQq -----END CERTIFICATE-----Generated at Sat Apr 26 04:37:32 2025 by rpki-client