$ rpki-client -vvf rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.mft File: M6eur6VSbc3FbPCHa71BEz49JHk.mft (raw, json) Hash identifier: PMhyLVKttlVk54kGwpfWtyeVhdVd+ldZ+lDQpH9TmxQ= Subject key identifier: 93:1E:82:35:DE:07:CB:38:80:3D:78:4F:A3:A5:49:9A:09:54:72:1D Authority key identifier: 33:A7:AE:AF:A5:52:6D:CD:C5:6C:F0:87:6B:BD:41:13:3E:3D:24:79 Certificate issuer: /CN=A917B9CB/serialNumber=33A7AEAFA5526DCDC56CF0876BBD41133E3D2479 Certificate serial: 349C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6eur6VSbc3FbPCHa71BEz49JHk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.mft Manifest number: 3494 Signing time: Sat 14 Jun 2025 14:38:20 +0000 Manifest this update: Sat 14 Jun 2025 14:38:20 +0000 Manifest next update: Sat 21 Jun 2025 14:38:20 +0000 Files and hashes: 1: M6eur6VSbc3FbPCHa71BEz49JHk.crl (hash: sKlPhjutONEBMit73IjDJfzAv4h2Dx9niffTBoD5+5o=) 2: 054DC680CE7411EAA3A39A3EC4F9AE02.roa (hash: 9+z7Zr10qHwp2Ri1PL9EErNNesIzycGYH/5jju84Tvg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.crl rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6eur6VSbc3FbPCHa71BEz49JHk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 14:38:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13468 (0x349c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B9CB, serialNumber=33A7AEAFA5526DCDC56CF0876BBD41133E3D2479 Validity Not Before: Jun 14 14:38:20 2025 GMT Not After : Jun 21 14:38:20 2025 GMT Subject: CN=684d895c-3cac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:93:3f:43:7c:94:2c:fe:eb:8d:38:e3:62:f1: 56:75:d2:f4:61:1c:73:c6:af:38:23:6f:7e:7d:21: f7:71:8e:f0:ae:5f:56:35:06:b2:b5:a9:a1:2f:99: e6:a9:18:94:a1:bf:d9:22:14:80:71:14:84:cd:e5: 45:90:e8:1c:8a:d8:10:02:0e:33:f8:bc:62:ad:3d: f2:db:71:d8:b3:ba:55:36:69:4f:64:55:f4:44:88: 3a:0e:6e:2b:f3:01:1f:66:26:ff:90:59:50:5b:0a: fb:89:31:e6:21:17:33:67:3e:f6:fb:8b:94:72:c1: f8:34:d5:ef:5a:c3:0d:95:b8:9b:ef:f6:a9:08:6d: a2:c9:db:a4:66:e3:ac:b0:9a:f5:c9:0b:3d:b0:ac: e8:1f:ba:7e:5d:2a:d2:92:64:ec:ee:f2:26:a3:fe: 1f:8c:cf:80:e6:95:ec:c2:7f:df:1c:d2:bc:84:b9: d8:c8:b1:81:47:03:cf:8f:8c:8c:b0:26:99:90:d8: 56:9f:f2:d1:68:d3:2e:13:86:b9:f0:75:1c:5b:c6: c7:fb:d7:70:a4:16:35:d7:3c:0c:55:79:6f:53:44: 5f:53:69:db:55:82:55:cd:31:cf:67:67:ec:f2:d0: f6:0f:c2:7e:2f:74:3e:d8:0f:67:b0:62:bc:01:ed: 99:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:1E:82:35:DE:07:CB:38:80:3D:78:4F:A3:A5:49:9A:09:54:72:1D X509v3 Authority Key Identifier: keyid:33:A7:AE:AF:A5:52:6D:CD:C5:6C:F0:87:6B:BD:41:13:3E:3D:24:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6eur6VSbc3FbPCHa71BEz49JHk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:1b:31:68:5d:a9:d8:36:e5:cd:dd:16:ce:fb:37:29:d1:a9: 8c:6c:22:e7:83:11:be:78:08:58:3a:4f:3a:bd:b6:b6:5c:9b: b9:26:0f:0f:a2:92:95:9f:43:5e:4b:c4:e2:20:54:66:36:ea: 71:74:1d:e9:25:c2:5a:e8:a3:14:17:2f:af:df:57:5b:ad:f6: ec:c1:c6:1e:74:8b:cc:7a:96:bb:d9:e4:35:f9:59:b7:8d:2f: c8:1c:e0:8e:73:2d:86:c8:cc:d8:b9:5b:8e:48:23:09:95:da: bb:7b:57:66:fc:db:5c:75:1d:30:f2:06:5f:78:f8:56:7b:e5: 08:f9:19:98:3a:88:be:8a:4d:12:0e:a2:02:7e:07:d3:1e:f4: 29:e8:d1:c2:ff:4c:28:68:5c:d4:61:64:b2:fb:5d:7f:65:a0: 77:4a:ae:42:e7:8a:b2:28:8f:95:f5:54:6a:da:7a:1d:d1:27: cd:61:44:64:9a:8c:2d:68:e5:c7:b6:40:51:55:1b:ca:91:d3: 7e:81:ba:fa:5b:2e:04:2e:8c:e1:89:22:aa:a9:14:1a:2f:64: 3e:c4:94:07:08:83:5f:e0:09:95:06:7a:17:52:1a:d1:71:12: 5f:b0:5c:1f:e2:b7:d2:71:af:ed:6e:4d:0c:2b:7c:ef:ae:39: c7:5a:40:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I5Q0IxMTAvBgNVBAUTKDMzQTdBRUFGQTU1MjZEQ0RDNTZDRjA4NzZCQkQ0MTEz M0UzRDI0NzkwHhcNMjUwNjE0MTQzODIwWhcNMjUwNjIxMTQzODIwWjAYMRYwFAYD VQQDEw02ODRkODk1Yy0zY2FjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv5M/Q3yULP7rjTjjYvFWddL0YRxzxq84I29+fSH3cY7wrl9WNQaytamhL5nm qRiUob/ZIhSAcRSEzeVFkOgcitgQAg4z+LxirT3y23HYs7pVNmlPZFX0RIg6Dm4r 8wEfZib/kFlQWwr7iTHmIRczZz72+4uUcsH4NNXvWsMNlbib7/apCG2iydukZuOs sJr1yQs9sKzoH7p+XSrSkmTs7vImo/4fjM+A5pXswn/fHNK8hLnYyLGBRwPPj4yM sCaZkNhWn/LRaNMuE4a58HUcW8bH+9dwpBY11zwMVXlvU0RfU2nbVYJVzTHPZ2fs 8tD2D8J+L3Q+2A9nsGK8Ae2ZYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJMegjXe B8s4gD14T6OlSZoJVHIdMB8GA1UdIwQYMBaAFDOnrq+lUm3NxWzwh2u9QRM+PSR5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjlDQi82RjZFREM2MDFE OEUxMUUyODg1Q0RGRUMwOEIwMkNEMi9NNmV1cjZWU2JjM0ZiUENIYTcxQkV6NDlK SGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL002ZXVyNlZTYmMzRmJQQ0hhNzFCRXo0OUpIay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjlDQi82RjZFREM2MDFEOEUxMUUyODg1Q0RGRUMwOEIwMkNEMi9NNmV1cjZWU2Jj M0ZiUENIYTcxQkV6NDlKSGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoGzFoXanYNuXN3RbO+zcp0amMbCLngxG+eAhYOk86vba2XJu5Jg8P opKVn0NeS8TiIFRmNupxdB3pJcJa6KMUFy+v31dbrfbswcYedIvMepa72eQ1+Vm3 jS/IHOCOcy2GyMzYuVuOSCMJldq7e1dm/NtcdR0w8gZfePhWe+UI+RmYOoi+ik0S DqICfgfTHvQp6NHC/0woaFzUYWSy+11/ZaB3Sq5C54qyKI+V9VRq2nod0SfNYURk mowtaOXHtkBRVRvKkdN+gbr6Wy4ELozhiSKqqRQaL2Q+xJQHCINf4AmVBnoXUhrR cRJfsFwf4rfSca/tbk0MK3zvrjnHWkB4 -----END CERTIFICATE-----Generated at Sat Jun 14 19:12:47 2025 by rpki-client