$ rpki-client -vvf rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft File: 6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft (raw, json) Hash identifier: hGIuD39Xfq58qF70xKOZ7xImJyz9Trdoc6K0poKW98U= Subject key identifier: 6A:C1:79:3B:09:A8:DA:4A:53:51:74:08:1F:15:2B:94:00:09:1E:E1 Authority key identifier: E9:36:74:B1:F3:B6:91:6B:2B:63:63:B8:61:D6:B7:7B:39:05:DD:D8 Certificate issuer: /CN=A91889B6/serialNumber=E93674B1F3B6916B2B6363B861D6B77B3905DDD8 Certificate serial: 347C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft Manifest number: 3478 Signing time: Thu 24 Apr 2025 14:49:01 +0000 Manifest this update: Thu 24 Apr 2025 14:49:01 +0000 Manifest next update: Thu 01 May 2025 14:49:01 +0000 Files and hashes: 1: 6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl (hash: 8me2yA9DpfW4Q7mIRH0TnGHObECvG11WfjxCzuRNChc=) 2: 8D57E1664D0911EEA9837D4AC4F9AE02.roa (hash: ANRth1hLqzWtOuNRps1oUpwLuw2TshWbOFj4QYFgW9U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13436 (0x347c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91889B6, serialNumber=E93674B1F3B6916B2B6363B861D6B77B3905DDD8 Validity Not Before: Apr 24 14:49:01 2025 GMT Not After : May 1 14:49:01 2025 GMT Subject: CN=680a4f5d-b83c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:83:99:a3:94:04:a0:be:f1:73:49:ed:ab:d3: 0f:c7:cb:13:fa:1c:f1:ce:f8:2f:d3:36:f9:25:db: dd:e3:7e:69:3a:f4:4d:01:5a:24:46:99:a5:2c:5b: 74:ad:c4:c9:43:8a:34:87:95:e8:e0:36:a9:8a:56: 30:61:85:0f:d5:51:5b:07:ee:45:ee:df:d1:70:09: 9a:41:f5:a5:23:e0:6c:00:18:64:e0:2b:bb:10:b6: 1d:e4:4f:fb:90:d8:22:0a:ef:ee:e2:08:55:bc:f8: 39:51:1c:a7:0c:05:be:cd:ac:b7:fd:c4:b8:a7:00: 64:87:eb:d5:17:2c:20:99:c1:bd:76:c3:b1:c0:aa: 18:6d:b8:7d:23:c6:ff:a1:1e:0e:19:72:6d:70:00: f2:9a:aa:32:f8:da:6c:b4:4a:40:ba:33:6a:34:11: d3:8f:d5:9c:31:ad:67:31:89:5b:f3:89:b0:9d:fe: 38:11:07:55:67:c0:04:0e:5e:d7:2e:2d:7e:c1:2e: a7:44:ef:97:fa:15:d2:de:e6:bc:7d:a8:4c:67:45: 1d:f5:b6:84:e5:b0:bf:ff:1a:16:7b:b1:46:c4:df: 0a:8f:34:54:17:38:c6:52:b0:a4:e3:ad:aa:5f:ba: 5b:46:45:00:f7:a4:77:86:2f:a5:8f:1f:38:78:27: 86:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:C1:79:3B:09:A8:DA:4A:53:51:74:08:1F:15:2B:94:00:09:1E:E1 X509v3 Authority Key Identifier: keyid:E9:36:74:B1:F3:B6:91:6B:2B:63:63:B8:61:D6:B7:7B:39:05:DD:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:8b:0f:c2:dc:e1:89:71:24:0e:15:7e:b0:51:e7:9b:6b:fd: 71:80:11:8d:ae:32:5c:0f:c9:f9:4c:c2:6a:c4:5c:2f:c0:34: 82:bc:6f:82:8e:44:ff:f0:c5:28:0b:a0:99:d7:64:fd:89:28: ee:5f:5e:a5:c8:d9:7f:91:53:6e:ff:0d:20:77:41:09:eb:6f: bf:1b:64:28:bc:78:72:d8:6b:d9:8a:ad:cc:c0:4e:3b:1a:87: d4:86:18:7d:7e:86:a1:9b:f8:aa:a0:36:39:3c:65:8e:74:25: ee:e0:f8:83:5a:58:f1:0c:ca:ef:50:73:81:75:66:92:99:92: 79:f6:00:22:14:4e:64:d6:01:75:f7:19:9b:a9:29:93:46:ec: 1b:75:73:09:57:94:7d:70:da:4e:f1:42:a4:7b:23:f9:60:98: 0f:5e:22:ce:3b:6e:e3:5b:be:88:26:43:23:85:7c:8e:7b:77: 96:a4:15:b8:64:39:31:6f:c6:a7:7a:10:8d:21:3a:b6:13:3c: 1d:bf:b9:94:78:b1:8b:69:5b:93:64:fe:7b:e4:78:98:6e:28: 5a:7e:6b:f3:78:5f:5f:e8:d7:58:fe:36:0f:ce:b7:ee:78:a3: f2:c8:e8:3f:1d:01:70:10:dd:5c:5c:65:58:da:21:36:35:40: 3d:75:60:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5QjYxMTAvBgNVBAUTKEU5MzY3NEIxRjNCNjkxNkIyQjYzNjNCODYxRDZCNzdC MzkwNURERDgwHhcNMjUwNDI0MTQ0OTAxWhcNMjUwNTAxMTQ0OTAxWjAYMRYwFAYD VQQDEw02ODBhNGY1ZC1iODNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAroOZo5QEoL7xc0ntq9MPx8sT+hzxzvgv0zb5Jdvd435pOvRNAVokRpmlLFt0 rcTJQ4o0h5Xo4DapilYwYYUP1VFbB+5F7t/RcAmaQfWlI+BsABhk4Cu7ELYd5E/7 kNgiCu/u4ghVvPg5URynDAW+zay3/cS4pwBkh+vVFywgmcG9dsOxwKoYbbh9I8b/ oR4OGXJtcADymqoy+NpstEpAujNqNBHTj9WcMa1nMYlb84mwnf44EQdVZ8AEDl7X Li1+wS6nRO+X+hXS3ua8fahMZ0Ud9baE5bC//xoWe7FGxN8KjzRUFzjGUrCk462q X7pbRkUA96R3hi+ljx84eCeGwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGrBeTsJ qNpKU1F0CB8VK5QACR7hMB8GA1UdIwQYMBaAFOk2dLHztpFrK2NjuGHWt3s5Bd3Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODlCNi8yQzRFRjk3NjFE OTYxMUUyQTY1NDhFN0UwOEIwMkNEMi82VFowc2ZPMmtXc3JZMk80WWRhM2V6a0Yz ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZUWjBzZk8ya1dzclkyTzRZZGEzZXprRjNkZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODlCNi8yQzRFRjk3NjFEOTYxMUUyQTY1NDhFN0UwOEIwMkNEMi82VFowc2ZPMmtX c3JZMk80WWRhM2V6a0YzZGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3iw/C3OGJcSQOFX6wUeeba/1xgBGNrjJcD8n5TMJqxFwvwDSCvG+C jkT/8MUoC6CZ12T9iSjuX16lyNl/kVNu/w0gd0EJ62+/G2QovHhy2GvZiq3MwE47 GofUhhh9foahm/iqoDY5PGWOdCXu4PiDWljxDMrvUHOBdWaSmZJ59gAiFE5k1gF1 9xmbqSmTRuwbdXMJV5R9cNpO8UKkeyP5YJgPXiLOO27jW76IJkMjhXyOe3eWpBW4 ZDkxb8anehCNITq2Ezwdv7mUeLGLaVuTZP575HiYbihafmvzeF9f6NdY/jYPzrfu eKPyyOg/HQFwEN1cXGVY2iE2NUA9dWCN -----END CERTIFICATE-----Generated at Sat Apr 26 14:13:01 2025 by rpki-client