$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA790/129B3D5C1DA811E2B94830A208B02CD2/6hMWJXP0YIe5C7dfdIJbMSjKF6c.mft File: 6hMWJXP0YIe5C7dfdIJbMSjKF6c.mft (raw, json) Hash identifier: 4zHSHVg0qO+LgWa26RQdBajpk8YwqAcAU4U9MyKxifE= Subject key identifier: DB:37:83:B2:32:10:07:53:70:F6:1A:F4:FE:56:1A:2F:47:50:C0:77 Authority key identifier: EA:13:16:25:73:F4:60:87:B9:0B:B7:5F:74:82:5B:31:28:CA:17:A7 Certificate issuer: /CN=A91BA790/serialNumber=EA13162573F46087B90BB75F74825B3128CA17A7 Certificate serial: 348A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6hMWJXP0YIe5C7dfdIJbMSjKF6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA790/129B3D5C1DA811E2B94830A208B02CD2/6hMWJXP0YIe5C7dfdIJbMSjKF6c.mft Manifest number: 348A Signing time: Sat 14 Jun 2025 15:13:14 +0000 Manifest this update: Sat 14 Jun 2025 15:13:14 +0000 Manifest next update: Sat 21 Jun 2025 15:13:14 +0000 Files and hashes: 1: 6hMWJXP0YIe5C7dfdIJbMSjKF6c.crl (hash: QUxPIjetnH8AlVXOcUrtj8Jz2gQTZKCf/+XmpkFa2/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA790/129B3D5C1DA811E2B94830A208B02CD2/6hMWJXP0YIe5C7dfdIJbMSjKF6c.crl rsync://rpki.apnic.net/member_repository/A91BA790/129B3D5C1DA811E2B94830A208B02CD2/6hMWJXP0YIe5C7dfdIJbMSjKF6c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6hMWJXP0YIe5C7dfdIJbMSjKF6c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 15:13:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13450 (0x348a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA790, serialNumber=EA13162573F46087B90BB75F74825B3128CA17A7 Validity Not Before: Jun 14 15:13:14 2025 GMT Not After : Jun 21 15:13:14 2025 GMT Subject: CN=684d918a-2f38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7c:54:5e:86:8a:4c:51:c2:ea:b4:7f:13:b5: 51:03:e5:03:f2:f7:44:44:19:aa:44:20:6c:9e:67: ad:2d:81:65:b8:63:bb:5d:2b:66:6f:e1:27:29:d7: d4:d5:d5:1a:5d:f6:2f:d6:d2:8f:e9:7d:ce:35:93: 84:6f:ce:00:9b:78:a9:10:a5:03:5f:79:fe:ab:1e: e3:ef:7d:c8:84:dc:f6:97:e3:a2:59:e1:f5:53:3a: 0a:ba:82:30:f9:ac:02:6d:45:ba:34:75:4c:17:1c: 78:5a:04:56:ed:1f:6d:75:2c:99:50:4d:74:b1:7d: c4:06:63:b9:5b:7a:af:7e:08:de:92:f1:c2:c7:66: 25:9c:19:7c:31:76:8e:31:81:b4:0f:75:5b:ed:a9: ac:3d:a0:ca:3d:7e:01:35:c2:af:8d:9c:c5:a2:f3: 27:d9:5a:d6:00:bb:da:14:8e:cc:06:44:dd:f2:ef: a4:68:8e:f9:62:8c:12:d9:d4:ea:ab:52:44:bc:11: 6f:0f:02:01:95:28:3f:45:72:d2:bf:c9:43:f1:c7: 4c:0e:08:bc:39:6b:4f:2f:d1:e0:51:2e:49:22:bf: 19:a0:4d:a1:ea:85:6f:54:3b:51:6a:26:62:7f:5c: fb:d0:7f:8b:ad:25:03:36:25:3a:b0:3c:e1:5d:06: 24:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:37:83:B2:32:10:07:53:70:F6:1A:F4:FE:56:1A:2F:47:50:C0:77 X509v3 Authority Key Identifier: keyid:EA:13:16:25:73:F4:60:87:B9:0B:B7:5F:74:82:5B:31:28:CA:17:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA790/129B3D5C1DA811E2B94830A208B02CD2/6hMWJXP0YIe5C7dfdIJbMSjKF6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6hMWJXP0YIe5C7dfdIJbMSjKF6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA790/129B3D5C1DA811E2B94830A208B02CD2/6hMWJXP0YIe5C7dfdIJbMSjKF6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:20:bb:73:c5:d0:2c:14:55:83:56:8b:01:93:64:9e:87:ee: 0e:82:c5:32:b7:e2:b9:3f:7d:31:d0:53:d3:34:e7:9b:07:98: a5:3a:c3:33:94:cf:ea:08:62:b9:81:b7:7f:76:d8:13:8d:fc: 6e:e4:9a:bb:42:ce:2d:00:e9:aa:ce:d5:a9:5f:4d:90:38:69: 53:d2:ee:f7:e5:da:5e:be:1f:5c:0b:55:2b:98:20:33:dc:64: 6d:e1:8a:f6:a7:68:c9:13:f9:da:02:4a:85:9c:70:da:b8:03: 76:4e:0f:48:1b:8b:11:57:43:c8:d7:8a:e2:79:9b:fb:20:c3: 8b:b9:0d:53:d0:8f:66:4f:24:4d:e1:81:18:1a:d3:56:30:a7: 1a:a1:b1:52:fd:c3:68:d5:f8:af:e1:e9:a8:29:62:c6:cf:2f: c0:5c:01:7b:1c:03:c3:92:74:21:2c:f4:4a:f5:3a:aa:95:71: 34:b1:8d:d2:ed:4c:ae:e7:0f:d0:9c:d2:7e:9e:fa:4d:03:6d: fa:73:61:c8:a9:bd:48:38:00:3e:1a:f9:b2:27:4a:3f:5c:e3: 49:13:72:fa:ab:0f:25:48:12:9a:a4:68:44:8a:26:20:38:3a: 6c:bc:73:a5:c3:18:ed:fd:ca:1e:3d:13:df:c8:ea:e4:30:cb: f5:d0:c5:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE3OTAxMTAvBgNVBAUTKEVBMTMxNjI1NzNGNDYwODdCOTBCQjc1Rjc0ODI1QjMx MjhDQTE3QTcwHhcNMjUwNjE0MTUxMzE0WhcNMjUwNjIxMTUxMzE0WjAYMRYwFAYD VQQDEw02ODRkOTE4YS0yZjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvnxUXoaKTFHC6rR/E7VRA+UD8vdERBmqRCBsnmetLYFluGO7XStmb+EnKdfU 1dUaXfYv1tKP6X3ONZOEb84Am3ipEKUDX3n+qx7j733IhNz2l+OiWeH1UzoKuoIw +awCbUW6NHVMFxx4WgRW7R9tdSyZUE10sX3EBmO5W3qvfgjekvHCx2YlnBl8MXaO MYG0D3Vb7amsPaDKPX4BNcKvjZzFovMn2VrWALvaFI7MBkTd8u+kaI75YowS2dTq q1JEvBFvDwIBlSg/RXLSv8lD8cdMDgi8OWtPL9HgUS5JIr8ZoE2h6oVvVDtRaiZi f1z70H+LrSUDNiU6sDzhXQYk8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNs3g7Iy EAdTcPYa9P5WGi9HUMB3MB8GA1UdIwQYMBaAFOoTFiVz9GCHuQu3X3SCWzEoyhen MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTc5MC8xMjlCM0Q1QzFE QTgxMUUyQjk0ODMwQTIwOEIwMkNEMi82aE1XSlhQMFlJZTVDN2RmZElKYk1TaktG NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZoTVdKWFAwWUllNUM3ZGZkSUpiTVNqS0Y2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTc5MC8xMjlCM0Q1QzFEQTgxMUUyQjk0ODMwQTIwOEIwMkNEMi82aE1XSlhQMFlJ ZTVDN2RmZElKYk1TaktGNmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYILtzxdAsFFWDVosBk2Seh+4OgsUyt+K5P30x0FPTNOebB5ilOsMz lM/qCGK5gbd/dtgTjfxu5Jq7Qs4tAOmqztWpX02QOGlT0u735dpevh9cC1UrmCAz 3GRt4Yr2p2jJE/naAkqFnHDauAN2Tg9IG4sRV0PI14rieZv7IMOLuQ1T0I9mTyRN 4YEYGtNWMKcaobFS/cNo1fiv4emoKWLGzy/AXAF7HAPDknQhLPRK9TqqlXE0sY3S 7Uyu5w/QnNJ+nvpNA236c2HIqb1IOAA+GvmyJ0o/XONJE3L6qw8lSBKapGhEiiYg ODpsvHOlwxjt/coePRPfyOrkMMv10MXC -----END CERTIFICATE-----Generated at Sat Jun 14 18:51:04 2025 by rpki-client