$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft File: a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft (raw, json) Hash identifier: lcwziW0Cb8fDFQfs1VuFq3Yt8BO3eKK086f0NSoq5S4= Subject key identifier: 12:51:E2:38:0E:27:18:12:62:EA:38:A1:14:6A:9A:40:1E:AF:C2:76 Authority key identifier: 6B:5E:BF:E9:8A:37:87:64:C1:B1:2D:CB:69:04:E4:61:0B:50:AC:57 Certificate issuer: /CN=A91B5418/serialNumber=6B5EBFE98A378764C1B12DCB6904E4610B50AC57 Certificate serial: 0CC6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft Manifest number: 0C95 Signing time: Thu 24 Apr 2025 18:12:27 +0000 Manifest this update: Thu 24 Apr 2025 18:12:26 +0000 Manifest next update: Thu 01 May 2025 18:12:26 +0000 Files and hashes: 1: a16_6Yo3h2TBsS3LaQTkYQtQrFc.crl (hash: 9FnheCieTaEAo87C6TGZT/XwwPIFwAVsoNViOfDQCZA=) 2: D3EC028C2AF511EE90800A65C4F9AE02.roa (hash: +hALYP3fmXiUu1g2+UCKikl1Y9WM+rKXEqvZUSDNE8I=) 3: 990D779897A211EF8F258761C4F9AE02.roa (hash: 7rnRdj6F+HEg+i7aB4aUe+GD+60bEZJEJnTlO3LVi6E=) 4: 0D036EB680BC11EBAF2A1C0EC4F9AE02.roa (hash: 1TLr5oM7v/qdbXCuWglO9MT2WfClZILhcDQljm7O2lk=) 5: 919D74562AF511EEA2663F52C4F9AE02.roa (hash: h0QhuXjDa5LUS0ETeRi4LQZ7+udZrItG82FhW+NYc/0=) 6: FD2A54D8DD6311EA9EFD035CC4F9AE02.roa (hash: 9m0UQLhCfmSnooX3c/o+r8ndL1ume0rI54qO9D+eF4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.crl rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:12:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3270 (0xcc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5418, serialNumber=6B5EBFE98A378764C1B12DCB6904E4610B50AC57 Validity Not Before: Apr 24 18:12:26 2025 GMT Not After : May 1 18:12:26 2025 GMT Subject: CN=680a7f0a-f8ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:49:8c:26:df:0b:1c:50:4e:1d:1f:ff:3b:29: f9:4e:bc:bc:d5:89:87:67:c7:e2:3b:e5:1e:cd:ff: 59:b0:a0:c3:23:3f:b7:a7:1f:b8:24:0e:f9:d5:22: f3:25:a8:71:51:6f:03:0b:c1:96:54:8c:50:fa:d3: d7:c4:7f:48:eb:06:32:63:9f:1c:70:5c:c6:c5:b3: d1:39:06:41:5c:1f:2d:a1:20:48:14:4b:7d:30:29: 5a:f3:6f:f2:76:0a:15:59:cb:12:50:7e:91:02:b9: 82:6d:83:92:b9:a5:39:50:91:52:47:74:d9:72:47: 46:b9:55:6f:f9:38:a5:75:65:2c:7c:35:67:34:4e: f3:18:99:f3:04:72:f3:fe:ee:52:09:b0:ba:b0:c6: e9:6a:28:60:59:29:c7:5e:fb:4a:05:69:1d:2d:59: 7a:2e:2c:37:8f:a1:d5:94:d8:fa:5d:a9:8b:69:b3: ff:3c:07:3b:c4:c8:91:d1:f1:8a:a3:c8:c7:80:61: 7c:cc:5d:c0:78:f3:18:57:28:9d:1d:d6:5d:91:07: 37:af:7b:d8:0a:f2:6f:64:04:6c:28:f7:a9:99:88: f6:bc:bb:0b:9c:41:8e:90:8d:39:1c:24:ee:e6:77: d9:a3:1d:9f:de:60:5c:b1:69:2b:61:b5:ea:d0:94: 35:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:51:E2:38:0E:27:18:12:62:EA:38:A1:14:6A:9A:40:1E:AF:C2:76 X509v3 Authority Key Identifier: keyid:6B:5E:BF:E9:8A:37:87:64:C1:B1:2D:CB:69:04:E4:61:0B:50:AC:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:c6:26:cd:87:58:c2:a8:6f:65:a6:0a:b4:bf:3f:fb:41:9d: dc:f7:d7:2d:88:76:8a:67:4a:e1:5a:01:8e:e3:62:bd:04:e9: ba:36:f0:c0:68:c4:a7:6d:7e:46:66:41:e9:97:bd:87:35:27: 6c:13:ae:c4:5c:09:dd:98:22:53:67:43:07:39:7e:d6:9c:90: 5d:ce:ee:e8:fc:b7:52:1a:91:2f:36:c9:5e:71:5d:38:3c:59: fd:34:ff:f7:be:b4:20:d4:14:c9:60:f3:b2:37:8a:c8:e3:30: ad:da:ab:1d:be:3d:e9:46:73:c3:f7:dd:00:4e:f5:9e:fa:1d: f0:26:41:16:12:8c:28:99:05:a2:69:0f:81:bb:1b:c3:a7:55: c1:fd:c0:7f:21:3f:9f:24:58:44:ab:2d:ce:02:a0:3a:77:45: a9:1d:fc:d7:95:4b:36:73:e8:d6:48:83:3c:e5:c7:ad:b5:b2: 8a:72:c6:07:1d:00:09:91:b9:99:91:76:d2:b2:a6:b9:cf:2b: d7:6c:25:21:fb:d5:a6:95:e0:e0:6e:2b:a8:d6:22:ac:bd:14: 8b:5f:a9:bf:12:52:e3:35:9e:ea:cd:ef:73:14:b4:40:5b:46: fa:d7:d6:9f:ee:a9:58:23:72:64:fa:30:9b:44:35:05:72:32: 2e:5b:ef:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU0MTgxMTAvBgNVBAUTKDZCNUVCRkU5OEEzNzg3NjRDMUIxMkRDQjY5MDRFNDYx MEI1MEFDNTcwHhcNMjUwNDI0MTgxMjI2WhcNMjUwNTAxMTgxMjI2WjAYMRYwFAYD VQQDEw02ODBhN2YwYS1mOGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzkmMJt8LHFBOHR//Oyn5Try81YmHZ8fiO+Uezf9ZsKDDIz+3px+4JA751SLz JahxUW8DC8GWVIxQ+tPXxH9I6wYyY58ccFzGxbPROQZBXB8toSBIFEt9MCla82/y dgoVWcsSUH6RArmCbYOSuaU5UJFSR3TZckdGuVVv+TildWUsfDVnNE7zGJnzBHLz /u5SCbC6sMbpaihgWSnHXvtKBWkdLVl6Liw3j6HVlNj6XamLabP/PAc7xMiR0fGK o8jHgGF8zF3AePMYVyidHdZdkQc3r3vYCvJvZARsKPepmYj2vLsLnEGOkI05HCTu 5nfZox2f3mBcsWkrYbXq0JQ1jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBJR4jgO JxgSYuo4oRRqmkAer8J2MB8GA1UdIwQYMBaAFGtev+mKN4dkwbEty2kE5GELUKxX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTQxOC8wQzBCODAwRUY2 ODIxMUU5QTg5OTYxNDZDNEY5QUUwMi9hMTZfNllvM2gyVEJzUzNMYVFUa1lRdFFy RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ExNl82WW8zaDJUQnNTM0xhUVRrWVF0UXJGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTQxOC8wQzBCODAwRUY2ODIxMUU5QTg5OTYxNDZDNEY5QUUwMi9hMTZfNllvM2gy VEJzUzNMYVFUa1lRdFFyRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaxibNh1jCqG9lpgq0vz/7QZ3c99ctiHaKZ0rhWgGO42K9BOm6NvDA aMSnbX5GZkHpl72HNSdsE67EXAndmCJTZ0MHOX7WnJBdzu7o/LdSGpEvNslecV04 PFn9NP/3vrQg1BTJYPOyN4rI4zCt2qsdvj3pRnPD990ATvWe+h3wJkEWEowomQWi aQ+BuxvDp1XB/cB/IT+fJFhEqy3OAqA6d0WpHfzXlUs2c+jWSIM85cettbKKcsYH HQAJkbmZkXbSsqa5zyvXbCUh+9WmleDgbiuo1iKsvRSLX6m/ElLjNZ7qze9zFLRA W0b619af7qlYI3Jk+jCbRDUFcjIuW++E -----END CERTIFICATE-----Generated at Sat Apr 26 03:31:50 2025 by rpki-client