$ rpki-client -vvf rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft File: 6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft (raw, json) Hash identifier: +znWYf2VnancHygqH43pTm/+I+z+I9LLOG+vtJpvd7E= Subject key identifier: 41:7B:4C:42:5E:BA:C3:15:72:D3:80:BE:8A:30:A3:70:00:7E:D6:DC Authority key identifier: E9:36:74:B1:F3:B6:91:6B:2B:63:63:B8:61:D6:B7:7B:39:05:DD:D8 Certificate issuer: /CN=A91889B6/serialNumber=E93674B1F3B6916B2B6363B861D6B77B3905DDD8 Certificate serial: 3498 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft Manifest number: 3494 Signing time: Wed 18 Jun 2025 14:48:15 +0000 Manifest this update: Wed 18 Jun 2025 14:48:15 +0000 Manifest next update: Wed 25 Jun 2025 14:48:15 +0000 Files and hashes: 1: 6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl (hash: E8/VsEK2UiPJLsd4XzT7usWH7CnrngnMo/fn4OviRzs=) 2: 8D57E1664D0911EEA9837D4AC4F9AE02.roa (hash: ANRth1hLqzWtOuNRps1oUpwLuw2TshWbOFj4QYFgW9U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 14:48:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13464 (0x3498) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91889B6, serialNumber=E93674B1F3B6916B2B6363B861D6B77B3905DDD8 Validity Not Before: Jun 18 14:48:15 2025 GMT Not After : Jun 25 14:48:15 2025 GMT Subject: CN=6852d1af-2a4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2a:47:4f:bd:ed:a0:62:fb:65:8c:63:f1:55: de:d2:ac:e5:8f:f0:9d:7c:0a:55:b7:27:09:9f:80: b2:be:fd:82:22:b6:5e:59:de:54:87:f4:ef:87:e1: 5c:32:47:86:85:9f:b0:6f:3d:b0:83:6f:99:1f:93: 6c:52:63:b1:34:f7:5a:a3:b7:4e:da:4e:22:0a:f5: 5c:4d:ea:c2:ad:11:a8:58:24:46:13:20:e8:c8:b6: df:ab:dc:6a:08:23:cc:92:71:2d:e5:5b:eb:e7:94: 31:e0:95:52:7e:ff:7b:3f:54:60:15:1d:eb:1d:e4: dd:de:28:fc:7c:6e:70:51:22:89:5f:12:fd:83:bb: 9e:d6:86:9d:2d:28:88:08:c2:79:eb:56:bf:8a:56: 0e:d7:a4:cf:ae:b9:b7:17:3b:f0:96:dc:2f:f6:44: 9d:f9:db:fa:a3:65:cd:e9:1d:13:67:98:67:15:e3: d1:31:7d:54:9b:ab:a1:a0:1a:f5:e8:de:0a:7e:60: b1:31:cc:6b:6f:10:a3:31:e2:0c:2f:73:b9:5d:bf: d5:aa:37:15:2e:bf:b2:86:21:17:a2:0e:02:83:09: 29:35:7e:d1:f1:88:c6:fa:05:3f:99:73:95:92:ff: 6a:60:54:69:a3:e3:50:3b:5b:5c:f8:cd:c9:a6:9e: 4f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:7B:4C:42:5E:BA:C3:15:72:D3:80:BE:8A:30:A3:70:00:7E:D6:DC X509v3 Authority Key Identifier: keyid:E9:36:74:B1:F3:B6:91:6B:2B:63:63:B8:61:D6:B7:7B:39:05:DD:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:09:b4:52:4f:f6:6d:87:df:b8:93:c9:99:93:86:23:a2:d9: ba:77:11:e1:10:af:05:35:a3:1d:c1:9b:c5:36:80:5b:93:7a: a9:1c:35:b2:bf:e2:5f:2b:fa:32:1a:5f:ff:80:be:00:d1:3d: fa:bb:a2:80:c6:f3:30:ef:51:85:b4:20:56:c1:2c:99:b6:e1: 50:93:19:db:81:7f:9c:a7:66:ef:9e:f9:6c:7c:2d:de:af:37: 82:25:19:fa:ee:13:bf:3a:a6:25:86:46:49:08:33:3d:82:c9: 4b:be:e8:58:8e:20:ba:dc:24:5b:0f:8e:6f:8a:cd:fe:fe:87: f1:1c:87:23:86:9b:2c:96:30:b1:5b:30:e4:1f:a0:41:62:20: db:10:23:b3:15:72:d7:66:d1:b5:88:b0:d1:80:ec:02:54:f7: 4a:e0:24:00:5b:c7:18:53:96:ae:5a:5c:61:7c:70:98:4f:3a: 10:97:9b:97:fc:93:28:29:b2:0d:6f:b1:4e:a9:1c:09:26:f9: 9b:14:9d:94:d7:e4:a6:10:32:4e:4c:d3:62:aa:bd:82:fd:3c: 52:b6:f7:d8:04:10:2a:d4:b7:90:bc:77:5b:cd:61:4a:1d:12: ea:35:0b:f0:fe:ca:74:48:36:3d:b0:1d:6d:3a:44:f7:f7:67: 32:79:02:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5QjYxMTAvBgNVBAUTKEU5MzY3NEIxRjNCNjkxNkIyQjYzNjNCODYxRDZCNzdC MzkwNURERDgwHhcNMjUwNjE4MTQ0ODE1WhcNMjUwNjI1MTQ0ODE1WjAYMRYwFAYD VQQDEw02ODUyZDFhZi0yYTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuSpHT73toGL7ZYxj8VXe0qzlj/CdfApVtycJn4Cyvv2CIrZeWd5Uh/Tvh+Fc MkeGhZ+wbz2wg2+ZH5NsUmOxNPdao7dO2k4iCvVcTerCrRGoWCRGEyDoyLbfq9xq CCPMknEt5Vvr55Qx4JVSfv97P1RgFR3rHeTd3ij8fG5wUSKJXxL9g7ue1oadLSiI CMJ561a/ilYO16TPrrm3Fzvwltwv9kSd+dv6o2XN6R0TZ5hnFePRMX1Um6uhoBr1 6N4KfmCxMcxrbxCjMeIML3O5Xb/VqjcVLr+yhiEXog4CgwkpNX7R8YjG+gU/mXOV kv9qYFRpo+NQO1tc+M3Jpp5PQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEF7TEJe usMVctOAvoowo3AAftbcMB8GA1UdIwQYMBaAFOk2dLHztpFrK2NjuGHWt3s5Bd3Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODlCNi8yQzRFRjk3NjFE OTYxMUUyQTY1NDhFN0UwOEIwMkNEMi82VFowc2ZPMmtXc3JZMk80WWRhM2V6a0Yz ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZUWjBzZk8ya1dzclkyTzRZZGEzZXprRjNkZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODlCNi8yQzRFRjk3NjFEOTYxMUUyQTY1NDhFN0UwOEIwMkNEMi82VFowc2ZPMmtX c3JZMk80WWRhM2V6a0YzZGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrCbRST/Zth9+4k8mZk4Yjotm6dxHhEK8FNaMdwZvFNoBbk3qpHDWy v+JfK/oyGl//gL4A0T36u6KAxvMw71GFtCBWwSyZtuFQkxnbgX+cp2bvnvlsfC3e rzeCJRn67hO/OqYlhkZJCDM9gslLvuhYjiC63CRbD45vis3+/ofxHIcjhpssljCx WzDkH6BBYiDbECOzFXLXZtG1iLDRgOwCVPdK4CQAW8cYU5auWlxhfHCYTzoQl5uX /JMoKbINb7FOqRwJJvmbFJ2U1+SmEDJOTNNiqr2C/TxStvfYBBAq1LeQvHdbzWFK HRLqNQvw/sp0SDY9sB1tOkT392cyeQJ1 -----END CERTIFICATE-----Generated at Thu Jun 19 21:37:47 2025 by rpki-client