$ rpki-client -vvf rpki.apnic.net/member_repository/A91D22E7/103C8A14465511F0B7CC1C3AC4F9AE02/6qgUe81-WERO-2P8KsfVqRy_oCE.mft File: 6qgUe81-WERO-2P8KsfVqRy_oCE.mft (raw, json) Hash identifier: VttdVtqogI0qv98lvh3/zi/gpMf44C/5MN5gvjuI85g= Subject key identifier: 89:CC:49:07:E2:15:BC:4C:20:88:C9:BF:D1:C4:13:DE:90:42:C0:C6 Authority key identifier: EA:A8:14:7B:CD:7E:58:44:4E:FB:63:FC:2A:C7:D5:A9:1C:BF:A0:21 Certificate issuer: /CN=A91D22E7/serialNumber=EAA8147BCD7E58444EFB63FC2AC7D5A91CBFA021 Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qgUe81-WERO-2P8KsfVqRy_oCE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D22E7/103C8A14465511F0B7CC1C3AC4F9AE02/6qgUe81-WERO-2P8KsfVqRy_oCE.mft Manifest number: 04 Signing time: Sun 15 Jun 2025 07:16:20 +0000 Manifest this update: Sun 15 Jun 2025 07:16:20 +0000 Manifest next update: Sun 22 Jun 2025 07:16:19 +0000 Files and hashes: 1: 6qgUe81-WERO-2P8KsfVqRy_oCE.crl (hash: LHcbGOxLoIzeNgZt8Gze8M/IPORWbl0DaXBRMgHIblk=) 2: 9EA99558465511F08EDD9E3EC4F9AE02.roa (hash: cWoNQ8oC/1Wsplva0paV3Wc+NwujWAt5ZzODK9sNbiM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D22E7/103C8A14465511F0B7CC1C3AC4F9AE02/6qgUe81-WERO-2P8KsfVqRy_oCE.crl rsync://rpki.apnic.net/member_repository/A91D22E7/103C8A14465511F0B7CC1C3AC4F9AE02/6qgUe81-WERO-2P8KsfVqRy_oCE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qgUe81-WERO-2P8KsfVqRy_oCE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D22E7, serialNumber=EAA8147BCD7E58444EFB63FC2AC7D5A91CBFA021 Validity Not Before: Jun 15 07:16:20 2025 GMT Not After : Jun 22 07:16:19 2025 GMT Subject: CN=684e7344-c5da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:10:11:76:d6:9e:14:4b:58:66:d2:45:f1:c3: 75:fa:f6:ec:5f:8c:e1:4c:11:70:0a:da:a6:7d:69: 53:42:a6:a2:fe:97:00:ec:ae:3d:6c:25:80:06:d3: 6e:c6:03:ab:aa:b2:47:cb:2b:04:2b:36:c2:f4:b7: ff:d6:1c:7c:f2:1f:39:d0:0c:ab:1f:02:96:11:c2: 2b:2e:1a:e5:d6:f0:27:42:07:b1:d9:87:e6:d1:aa: f0:c3:1b:55:73:76:33:84:24:d0:11:c0:f7:b4:a3: 3d:73:2b:a7:60:36:54:e4:0c:aa:6e:ef:41:6d:16: d1:3f:d8:ea:fa:f0:9b:83:14:7a:61:7f:12:09:36: 29:cc:9f:33:f7:f9:a3:47:86:fd:d9:fa:df:dd:75: 06:65:f1:04:95:db:ea:01:bf:69:0b:5c:b2:92:c9: 9f:91:15:d6:55:00:54:e0:7c:6a:fe:1f:03:94:0e: 0e:89:f4:df:47:e0:6c:31:26:3f:93:0d:7f:53:cd: 4d:fa:2d:fb:64:f6:8d:e5:a1:cd:6a:78:03:de:b9: 11:0a:95:84:1b:97:24:03:a7:82:db:92:d7:1c:43: a6:15:e6:17:1e:0f:06:55:aa:a2:88:0d:2b:cf:96: f0:13:7e:57:89:18:a0:17:4e:5f:45:8a:1d:57:10: 15:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:CC:49:07:E2:15:BC:4C:20:88:C9:BF:D1:C4:13:DE:90:42:C0:C6 X509v3 Authority Key Identifier: keyid:EA:A8:14:7B:CD:7E:58:44:4E:FB:63:FC:2A:C7:D5:A9:1C:BF:A0:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D22E7/103C8A14465511F0B7CC1C3AC4F9AE02/6qgUe81-WERO-2P8KsfVqRy_oCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qgUe81-WERO-2P8KsfVqRy_oCE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D22E7/103C8A14465511F0B7CC1C3AC4F9AE02/6qgUe81-WERO-2P8KsfVqRy_oCE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:35:f2:8b:ec:00:6f:17:70:d2:22:7d:0a:1c:a8:f6:90:59: 16:3c:c6:e5:20:2b:68:03:92:5e:51:0b:0b:6b:43:d1:81:e7: bb:05:5d:61:94:13:d0:16:c5:6d:bd:20:c6:0e:09:0b:90:d3: ed:f1:62:ba:b4:66:8e:9f:26:a1:03:75:e1:58:8c:5b:18:da: 91:67:d2:2b:7b:c5:40:af:8e:a6:53:82:67:db:d9:90:ef:4a: a9:f8:57:f5:18:9a:44:e6:7a:db:6a:70:43:33:2e:f0:fc:01: 96:36:a6:cf:c2:a8:a0:6c:76:97:99:a8:80:e2:89:6e:a2:47: cc:4e:60:cf:ec:b0:41:83:4f:ad:9b:36:82:5b:b3:57:23:a1: f7:98:69:58:f1:c6:e6:fe:30:ad:8f:e6:e6:00:a9:fc:b4:cd: bc:dd:16:12:fb:56:ed:49:47:27:a2:40:ef:bd:91:ce:59:1a: 64:5a:a2:26:60:77:56:37:2c:ed:0c:11:af:63:11:42:9d:91: 1a:3d:85:a3:9e:49:4d:f7:e5:a1:a3:c0:2b:32:2c:cd:8c:0a: ab:1e:d2:50:a9:aa:7c:11:70:50:ac:3a:cf:b8:c8:47:a7:bc: e0:e0:0c:fd:f9:c8:16:99:61:d6:97:af:3b:0a:8a:87:7c:be: d0:56:2a:46 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MjJFNzExMC8GA1UEBRMoRUFBODE0N0JDRDdFNTg0NDRFRkI2M0ZDMkFDN0Q1QTkx Q0JGQTAyMTAeFw0yNTA2MTUwNzE2MjBaFw0yNTA2MjIwNzE2MTlaMBgxFjAUBgNV BAMTDTY4NGU3MzQ0LWM1ZGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTEBF21p4US1hm0kXxw3X69uxfjOFMEXAK2qZ9aVNCpqL+lwDsrj1sJYAG027G A6uqskfLKwQrNsL0t//WHHzyHznQDKsfApYRwisuGuXW8CdCB7HZh+bRqvDDG1Vz djOEJNARwPe0oz1zK6dgNlTkDKpu70FtFtE/2Or68JuDFHphfxIJNinMnzP3+aNH hv3Z+t/ddQZl8QSV2+oBv2kLXLKSyZ+RFdZVAFTgfGr+HwOUDg6J9N9H4GwxJj+T DX9TzU36Lftk9o3loc1qeAPeuREKlYQblyQDp4LbktccQ6YV5hceDwZVqqKIDSvP lvATfleJGKAXTl9Fih1XEBVFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUicxJB+IV vEwgiMm/0cQT3pBCwMYwHwYDVR0jBBgwFoAU6qgUe81+WERO+2P8KsfVqRy/oCEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyMkU3LzEwM0M4QTE0NDY1 NTExRjBCN0NDMUMzQUM0RjlBRTAyLzZxZ1VlODEtV0VSTy0yUDhLc2ZWcVJ5X29D RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNnFnVWU4MS1XRVJPLTJQOEtzZlZxUnlfb0NFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQy MkU3LzEwM0M4QTE0NDY1NTExRjBCN0NDMUMzQUM0RjlBRTAyLzZxZ1VlODEtV0VS Ty0yUDhLc2ZWcVJ5X29DRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHw18ovsAG8XcNIifQocqPaQWRY8xuUgK2gDkl5RCwtrQ9GB57sFXWGU E9AWxW29IMYOCQuQ0+3xYrq0Zo6fJqEDdeFYjFsY2pFn0it7xUCvjqZTgmfb2ZDv Sqn4V/UYmkTmettqcEMzLvD8AZY2ps/CqKBsdpeZqIDiiW6iR8xOYM/ssEGDT62b NoJbs1cjofeYaVjxxub+MK2P5uYAqfy0zbzdFhL7Vu1JRyeiQO+9kc5ZGmRaoiZg d1Y3LO0MEa9jEUKdkRo9haOeSU335aGjwCsyLM2MCqse0lCpqnwRcFCsOs+4yEen vODgDP35yBaZYdaXrzsKiod8vtBWKkY= -----END CERTIFICATE-----Generated at Sun Jun 15 09:53:22 2025 by rpki-client