$ rpki-client -vvf rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.mft File: b35Y0Iljiffn_k6HlapVXVxVUYg.mft (raw, json) Hash identifier: eZNutogYDWWw3TFgwe1CGoJDT9WePP41OKPanCAiRJc= Subject key identifier: AC:B9:13:20:35:6F:35:38:0A:81:8F:BF:55:70:2B:DA:38:99:5E:83 Authority key identifier: 6F:7E:58:D0:89:63:89:F7:E7:FE:4E:87:95:AA:55:5D:5C:55:51:88 Certificate issuer: /CN=A91706E4/serialNumber=6F7E58D0896389F7E7FE4E8795AA555D5C555188 Certificate serial: 6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b35Y0Iljiffn_k6HlapVXVxVUYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.mft Manifest number: 6C Signing time: Sun 15 Jun 2025 06:01:58 +0000 Manifest this update: Sun 15 Jun 2025 06:01:57 +0000 Manifest next update: Sun 22 Jun 2025 06:01:57 +0000 Files and hashes: 1: b35Y0Iljiffn_k6HlapVXVxVUYg.crl (hash: hFk4Urdr4xVscRuN9LrdlL0twkMCRF7NQnwedayuy4A=) 2: 31E9AEC6E30411EFBC0C3B2CC4F9AE02.roa (hash: iUCXkP/k8vFDK+xe4w0gGSkxJOnd/FNj32EaA1KJbt4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.crl rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b35Y0Iljiffn_k6HlapVXVxVUYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91706E4, serialNumber=6F7E58D0896389F7E7FE4E8795AA555D5C555188 Validity Not Before: Jun 15 06:01:57 2025 GMT Not After : Jun 22 06:01:57 2025 GMT Subject: CN=684e61d5-1e27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:23:1c:60:31:c3:70:09:80:36:34:31:1b:37: 3f:c1:8d:7f:6d:f2:aa:03:5b:18:74:0c:99:c5:19: 34:c2:b2:43:81:d3:aa:fd:19:90:a1:cc:74:5b:27: f4:4d:1c:d7:11:e1:6f:43:39:6e:ee:31:30:b1:07: eb:69:48:75:79:cb:ad:ae:26:78:ad:c1:42:2f:f6: 21:6c:fb:52:3d:b9:c4:f7:f0:66:07:a1:8e:8e:ab: 97:ab:28:3b:6c:6f:15:56:69:ab:fc:1d:6a:e1:2a: 75:07:a7:e9:ec:92:54:df:40:6a:32:00:11:21:43: 84:06:be:c4:93:fb:8b:91:ac:33:16:b4:8e:0f:9d: a3:fa:3e:24:69:bb:90:90:f3:66:cd:9c:18:c2:6f: c4:b2:7f:cb:47:d2:a4:98:15:d4:97:da:bf:55:c5: 5a:f5:8b:2b:6c:95:b1:ad:84:16:ec:2c:1c:23:c3: 13:1d:8c:20:80:c1:8b:3c:d5:93:9d:47:60:59:85: 2c:87:7b:30:c2:36:6a:88:90:f0:1a:0f:42:36:29: d3:c1:62:bc:03:c8:e9:13:ee:ef:f6:fa:64:a1:f3: 98:45:60:1d:21:a0:56:b3:3b:fe:e3:dc:6e:4f:db: 41:0b:1f:18:07:ee:3b:98:bf:de:d6:00:a3:46:d6: 8b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:B9:13:20:35:6F:35:38:0A:81:8F:BF:55:70:2B:DA:38:99:5E:83 X509v3 Authority Key Identifier: keyid:6F:7E:58:D0:89:63:89:F7:E7:FE:4E:87:95:AA:55:5D:5C:55:51:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b35Y0Iljiffn_k6HlapVXVxVUYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:46:26:44:07:1c:f4:cb:e8:5f:ea:93:39:3b:bd:8f:45:6d: f1:76:35:b8:9a:50:56:16:a1:7d:91:47:8f:42:5b:f5:1e:66: e5:8e:4a:75:b2:8f:2b:6a:97:06:36:23:2d:e7:46:08:80:2f: 39:bb:a4:91:de:12:d5:88:02:0d:5e:8d:e5:73:b5:d1:aa:32: 08:b2:0b:a1:bb:e2:bd:ed:71:77:03:c7:59:99:53:28:22:7d: d2:09:1e:6f:21:90:0c:bf:92:98:8b:a6:fb:af:cd:52:2e:9e: 0c:a9:b2:f8:1e:e8:06:6a:04:3c:ac:29:20:33:5d:81:44:35: 4f:4b:32:29:b0:23:47:19:b6:7f:33:aa:06:05:4e:ab:dc:1b: 62:7e:00:0a:92:d5:07:10:06:ea:1d:d1:d3:01:e6:f4:6f:76: b8:cd:86:77:31:b7:d7:03:b3:25:76:35:ac:fe:92:59:74:87: 6c:92:3b:5f:25:d3:ad:91:ee:33:1d:29:9f:36:5a:a7:fe:fd: b9:2b:e6:24:cd:66:3a:cc:2b:7a:6d:9b:e9:5a:26:69:05:a4: 83:a3:9e:7e:ae:5a:26:e3:b4:e1:b1:34:f8:99:f9:3c:a6:a3: 65:4e:03:32:b7:47:b9:b0:5f:df:0d:e5:37:84:5e:1c:4a:fa: 81:3e:14:db -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MDZFNDExMC8GA1UEBRMoNkY3RTU4RDA4OTYzODlGN0U3RkU0RTg3OTVBQTU1NUQ1 QzU1NTE4ODAeFw0yNTA2MTUwNjAxNTdaFw0yNTA2MjIwNjAxNTdaMBgxFjAUBgNV BAMTDTY4NGU2MWQ1LTFlMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsIxxgMcNwCYA2NDEbNz/BjX9t8qoDWxh0DJnFGTTCskOB06r9GZChzHRbJ/RN HNcR4W9DOW7uMTCxB+tpSHV5y62uJnitwUIv9iFs+1I9ucT38GYHoY6Oq5erKDts bxVWaav8HWrhKnUHp+nsklTfQGoyABEhQ4QGvsST+4uRrDMWtI4PnaP6PiRpu5CQ 82bNnBjCb8Syf8tH0qSYFdSX2r9VxVr1iytslbGthBbsLBwjwxMdjCCAwYs81ZOd R2BZhSyHezDCNmqIkPAaD0I2KdPBYrwDyOkT7u/2+mSh85hFYB0hoFazO/7j3G5P 20ELHxgH7juYv97WAKNG1otfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrLkTIDVv NTgKgY+/VXAr2jiZXoMwHwYDVR0jBBgwFoAUb35Y0Iljiffn/k6HlapVXVxVUYgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwNkU0LzNBQkE4MEFBQTY4 NDExRUY4RjVFRDM3RkM0RjlBRTAyL2IzNVkwSWxqaWZmbl9rNkhsYXBWWFZ4VlVZ Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYjM1WTBJbGppZmZuX2s2SGxhcFZYVnhWVVlnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw NkU0LzNBQkE4MEFBQTY4NDExRUY4RjVFRDM3RkM0RjlBRTAyL2IzNVkwSWxqaWZm bl9rNkhsYXBWWFZ4VlVZZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJFGJkQHHPTL6F/qkzk7vY9FbfF2NbiaUFYWoX2RR49CW/UeZuWOSnWy jytqlwY2Iy3nRgiALzm7pJHeEtWIAg1ejeVztdGqMgiyC6G74r3tcXcDx1mZUygi fdIJHm8hkAy/kpiLpvuvzVIungypsvge6AZqBDysKSAzXYFENU9LMimwI0cZtn8z qgYFTqvcG2J+AAqS1QcQBuod0dMB5vRvdrjNhncxt9cDsyV2Naz+kll0h2ySO18l 062R7jMdKZ82Wqf+/bkr5iTNZjrMK3ptm+laJmkFpIOjnn6uWibjtOGxNPiZ+Tym o2VOAzK3R7mwX98N5TeEXhxK+oE+FNs= -----END CERTIFICATE-----Generated at Sun Jun 15 08:48:29 2025 by rpki-client