$ rpki-client -vvf rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.mft File: a6me1jkaZ8ymEOVl9FPrCRJRTw4.mft (raw, json) Hash identifier: 8sarQmJAUgJEf+Jmqb4x1pf/YKHEvEUC+J/lZXiYaVA= Subject key identifier: 8D:56:1C:26:AC:39:19:3F:76:6A:01:CD:1C:D1:B3:E3:65:1C:FD:1C Authority key identifier: 6B:A9:9E:D6:39:1A:67:CC:A6:10:E5:65:F4:53:EB:09:12:51:4F:0E Certificate issuer: /CN=A91977B8/serialNumber=6BA99ED6391A67CCA610E565F453EB0912514F0E Certificate serial: FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6me1jkaZ8ymEOVl9FPrCRJRTw4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.mft Manifest number: F5 Signing time: Fri 13 Jun 2025 04:34:53 +0000 Manifest this update: Fri 13 Jun 2025 04:34:53 +0000 Manifest next update: Fri 20 Jun 2025 04:34:53 +0000 Files and hashes: 1: a6me1jkaZ8ymEOVl9FPrCRJRTw4.crl (hash: kkkR4Al14JPopCZhTPkhGrRYZDE/IWIBJsD4oZtXsdA=) 2: B35DF2B8FBA211EEA8D1C351C4F9AE02.roa (hash: zfwutZduKqp+OFtvgPQ9BbGwso4D1FrRlH6RE6jDpUM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.crl rsync://rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6me1jkaZ8ymEOVl9FPrCRJRTw4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 04:34:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 253 (0xfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91977B8, serialNumber=6BA99ED6391A67CCA610E565F453EB0912514F0E Validity Not Before: Jun 13 04:34:53 2025 GMT Not After : Jun 20 04:34:53 2025 GMT Subject: CN=684baa6d-0b3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:85:43:ad:43:d4:85:c0:4e:ea:da:e9:72:61: eb:2d:ee:15:1b:06:81:a8:d1:4c:12:fc:1c:96:29: fa:bb:af:5d:c7:4e:c2:05:80:32:ac:a6:92:91:ec: 0f:05:bc:f5:b6:d3:75:85:ea:6d:07:1e:58:f7:14: d5:c1:dd:08:98:82:cc:f5:49:9e:d9:62:dd:2d:6f: 3c:9b:fa:c7:46:22:9b:bb:9a:78:a3:1e:ec:2e:09: 8e:84:69:3e:78:39:fd:45:f1:f8:f3:a7:1c:c7:64: 6e:62:8c:10:43:90:e6:d1:a4:07:85:e0:ef:7a:54: 59:b3:ec:48:13:f5:77:24:76:12:03:f0:36:8a:27: 5c:b4:77:1a:3d:67:11:52:3e:85:78:b7:ab:a9:20: 92:08:92:a9:f7:0d:55:8a:98:d4:fa:04:e9:d0:da: f4:42:f0:ea:79:6d:c2:21:53:6d:8e:72:97:31:22: d6:61:9d:a4:d2:66:53:a2:9c:eb:c8:38:5d:5c:a7: 04:43:8b:93:b9:67:23:99:74:62:95:8a:93:63:ce: 8c:c8:18:6b:77:49:c2:24:3c:9d:f5:75:bf:63:29: 84:6e:b8:4d:7f:a4:82:25:55:73:3f:91:40:2d:a0: 25:8c:92:2f:bd:76:17:b3:9d:98:ef:3d:41:b3:d5: 58:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:56:1C:26:AC:39:19:3F:76:6A:01:CD:1C:D1:B3:E3:65:1C:FD:1C X509v3 Authority Key Identifier: keyid:6B:A9:9E:D6:39:1A:67:CC:A6:10:E5:65:F4:53:EB:09:12:51:4F:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6me1jkaZ8ymEOVl9FPrCRJRTw4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:98:5c:59:3c:22:a7:43:d5:b4:7a:85:e4:5b:be:50:42:48: 92:93:22:1e:f0:ec:5f:f0:e2:4e:71:55:21:9d:30:01:21:2d: 07:3c:86:b4:88:3b:7e:11:6e:5b:5e:d4:df:5e:fd:b8:72:90: 6f:22:bc:b6:4f:1e:58:9c:be:34:13:60:35:11:3b:f4:c7:e3: 5d:33:6b:ee:6c:ba:4b:97:1c:0a:10:1c:52:d5:93:0c:86:62: 14:ad:b9:fa:b7:b8:5d:34:57:3c:a7:94:44:10:b3:7c:87:0b: b0:45:01:b5:a2:d6:2d:90:11:51:a8:aa:32:10:b3:83:a1:83: 05:50:f1:00:eb:51:0c:41:ef:5f:e3:91:aa:eb:32:82:ec:b7: aa:f2:15:76:08:5f:41:62:e3:9a:9b:9c:d3:ee:94:8a:67:38: c6:6e:ba:83:5a:0f:64:22:c5:05:21:25:9f:41:f7:7c:56:0f: ba:87:bc:54:07:b2:4e:a9:c0:f8:47:6b:e4:f6:0d:9b:e3:98: df:7d:7e:a4:cb:e5:24:85:00:cf:92:3c:48:3e:ec:81:b8:05: 2f:3d:4a:de:f2:8d:c3:5a:30:c7:7f:96:94:bb:00:af:0d:b1: 2f:52:87:23:99:3c:54:3c:04:e1:0b:d2:63:57:8d:0d:62:a6: 7a:d3:21:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc3QjgxMTAvBgNVBAUTKDZCQTk5RUQ2MzkxQTY3Q0NBNjEwRTU2NUY0NTNFQjA5 MTI1MTRGMEUwHhcNMjUwNjEzMDQzNDUzWhcNMjUwNjIwMDQzNDUzWjAYMRYwFAYD VQQDEw02ODRiYWE2ZC0wYjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1IVDrUPUhcBO6trpcmHrLe4VGwaBqNFMEvwclin6u69dx07CBYAyrKaSkewP Bbz1ttN1heptBx5Y9xTVwd0ImILM9Ume2WLdLW88m/rHRiKbu5p4ox7sLgmOhGk+ eDn9RfH486ccx2RuYowQQ5Dm0aQHheDvelRZs+xIE/V3JHYSA/A2iidctHcaPWcR Uj6FeLerqSCSCJKp9w1VipjU+gTp0Nr0QvDqeW3CIVNtjnKXMSLWYZ2k0mZTopzr yDhdXKcEQ4uTuWcjmXRilYqTY86MyBhrd0nCJDyd9XW/YymEbrhNf6SCJVVzP5FA LaAljJIvvXYXs52Y7z1Bs9VYMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI1WHCas ORk/dmoBzRzRs+NlHP0cMB8GA1UdIwQYMBaAFGupntY5GmfMphDlZfRT6wkSUU8O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzdCOC8wQUIwNzQwNEUx RjAxMUVFOTAxQTYwODVDNEY5QUUwMi9hNm1lMWprYVo4eW1FT1ZsOUZQckNSSlJU dzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E2bWUxamthWjh5bUVPVmw5RlByQ1JKUlR3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzdCOC8wQUIwNzQwNEUxRjAxMUVFOTAxQTYwODVDNEY5QUUwMi9hNm1lMWprYVo4 eW1FT1ZsOUZQckNSSlJUdzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPmFxZPCKnQ9W0eoXkW75QQkiSkyIe8Oxf8OJOcVUhnTABIS0HPIa0 iDt+EW5bXtTfXv24cpBvIry2Tx5YnL40E2A1ETv0x+NdM2vubLpLlxwKEBxS1ZMM hmIUrbn6t7hdNFc8p5REELN8hwuwRQG1otYtkBFRqKoyELODoYMFUPEA61EMQe9f 45Gq6zKC7Leq8hV2CF9BYuOam5zT7pSKZzjGbrqDWg9kIsUFISWfQfd8Vg+6h7xU B7JOqcD4R2vk9g2b45jffX6ky+UkhQDPkjxIPuyBuAUvPUre8o3DWjDHf5aUuwCv DbEvUocjmTxUPAThC9JjV40NYqZ60yHC -----END CERTIFICATE-----Generated at Sat Jun 14 19:27:40 2025 by rpki-client