$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.mft File: 6LCK3PScYMutkdHtbTe9hEOtvUw.mft (raw, json) Hash identifier: l6wav2t8BhNqFONRUEHmHLTLRgDVNTBxC2NoL0N/h9I= Subject key identifier: 3D:95:20:56:36:11:7C:1F:E5:F3:B5:FE:BD:2F:4E:32:35:6B:BD:85 Authority key identifier: E8:B0:8A:DC:F4:9C:60:CB:AD:91:D1:ED:6D:37:BD:84:43:AD:BD:4C Certificate issuer: /CN=A91D6C2E/serialNumber=E8B08ADCF49C60CBAD91D1ED6D37BD8443ADBD4C Certificate serial: 010C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6LCK3PScYMutkdHtbTe9hEOtvUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.mft Manifest number: 0108 Signing time: Fri 25 Apr 2025 04:08:08 +0000 Manifest this update: Fri 25 Apr 2025 04:08:08 +0000 Manifest next update: Fri 02 May 2025 04:08:08 +0000 Files and hashes: 1: 6LCK3PScYMutkdHtbTe9hEOtvUw.crl (hash: uoiR9flpBJ+tNF+wQET5A2EWzB6EkF6qwx5hAtHeVzo=) 2: 5FB99B82934511EE87C1BE7EC4F9AE02.roa (hash: 8pKe3+4xRyiS1MHB1KBCyB6GyZL8OjDx7TX9aT1ieFo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.crl rsync://rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6LCK3PScYMutkdHtbTe9hEOtvUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:08:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 268 (0x10c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6C2E, serialNumber=E8B08ADCF49C60CBAD91D1ED6D37BD8443ADBD4C Validity Not Before: Apr 25 04:08:08 2025 GMT Not After : May 2 04:08:08 2025 GMT Subject: CN=680b0aa8-5c77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d1:b7:3b:ce:42:64:1f:b7:54:85:77:3a:58: 15:cc:8c:96:0e:a2:ca:3a:d2:19:19:68:a0:26:7b: 46:a9:6f:ec:db:da:96:32:7e:fe:96:94:fb:77:4f: ed:09:b9:c2:a0:84:21:60:72:2a:23:38:df:cc:d0: df:b5:ad:d1:d5:32:bc:8a:05:4f:d5:e3:2b:4b:04: df:d2:39:26:92:0f:49:71:15:3e:79:d0:b1:dc:e0: 1f:a5:07:b2:18:6b:f8:19:9c:6b:d1:27:96:90:9a: 1b:54:b1:c4:72:52:03:c1:6e:ee:44:2e:82:22:1d: 5e:31:72:8d:6b:51:22:80:11:f5:86:5e:e4:52:75: f6:02:74:5c:b5:4a:6d:87:0f:35:55:36:d9:ca:63: 58:ff:78:b0:4e:b7:21:79:35:3d:66:54:80:f5:93: 90:47:b3:c2:c4:a6:3e:52:4d:0d:5f:17:8a:db:bf: 3f:0e:ee:0b:a2:5b:5a:25:55:c3:9c:14:e2:d2:c8: a1:a3:a3:07:4d:9e:58:c7:cb:b0:99:4d:3f:5c:16: a7:bc:a9:1d:db:0c:cf:7d:9c:c0:e3:6e:e3:a8:fc: fb:8d:b1:b8:77:62:d6:0d:d4:8c:d7:8d:33:fd:62: dd:19:36:75:2e:f8:e2:2c:bd:43:14:d6:71:6d:c9: dc:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:95:20:56:36:11:7C:1F:E5:F3:B5:FE:BD:2F:4E:32:35:6B:BD:85 X509v3 Authority Key Identifier: keyid:E8:B0:8A:DC:F4:9C:60:CB:AD:91:D1:ED:6D:37:BD:84:43:AD:BD:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6LCK3PScYMutkdHtbTe9hEOtvUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:0c:0a:29:08:bb:4c:00:9e:08:b9:f4:f7:b6:f9:24:17:d4: 5d:27:4e:b7:60:ec:eb:2f:01:da:20:1e:90:dd:c2:10:86:a3: 96:48:7b:10:4b:6f:10:69:ce:1d:92:97:51:28:0a:5b:ea:39: 9d:63:1b:4c:5a:02:76:68:cc:63:04:30:5f:03:3f:2e:cc:c6: 14:af:8c:53:e2:75:9f:4e:82:94:0c:80:8c:6b:25:9e:e6:a7: 6f:78:2a:25:09:19:a3:e2:3e:1d:cc:b5:4e:eb:0d:cf:e3:f5: f6:bf:d2:47:2f:5b:07:fc:0b:64:d8:d0:14:47:54:ec:4b:5b: ab:56:a8:0b:5d:ca:c5:5d:a3:31:5a:1d:00:b3:a2:bb:2e:d9: 71:58:2d:a2:3f:30:99:cd:63:fc:42:02:be:ff:0f:ba:bd:de: e0:28:fb:ac:26:f4:f7:63:65:7f:fc:8a:26:19:ed:3e:0e:a2: 86:7d:ca:7a:c5:ed:4d:54:12:af:36:d4:0f:dc:9d:e4:6b:33: 12:c1:fa:b6:1a:24:b2:63:63:3e:af:0e:1e:8f:02:a3:ff:a5: 7a:f2:8a:04:92:ef:8d:12:d1:58:bb:73:98:b0:20:04:db:d2: 20:b6:e3:01:3b:4c:90:3e:f0:03:ea:36:c0:42:23:d9:55:f6: 40:a9:ae:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZDMkUxMTAvBgNVBAUTKEU4QjA4QURDRjQ5QzYwQ0JBRDkxRDFFRDZEMzdCRDg0 NDNBREJENEMwHhcNMjUwNDI1MDQwODA4WhcNMjUwNTAyMDQwODA4WjAYMRYwFAYD VQQDEw02ODBiMGFhOC01Yzc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw9G3O85CZB+3VIV3OlgVzIyWDqLKOtIZGWigJntGqW/s29qWMn7+lpT7d0/t CbnCoIQhYHIqIzjfzNDfta3R1TK8igVP1eMrSwTf0jkmkg9JcRU+edCx3OAfpQey GGv4GZxr0SeWkJobVLHEclIDwW7uRC6CIh1eMXKNa1EigBH1hl7kUnX2AnRctUpt hw81VTbZymNY/3iwTrcheTU9ZlSA9ZOQR7PCxKY+Uk0NXxeK278/Du4LoltaJVXD nBTi0siho6MHTZ5Yx8uwmU0/XBanvKkd2wzPfZzA427jqPz7jbG4d2LWDdSM140z /WLdGTZ1LvjiLL1DFNZxbcnchQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD2VIFY2 EXwf5fO1/r0vTjI1a72FMB8GA1UdIwQYMBaAFOiwitz0nGDLrZHR7W03vYRDrb1M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkMyRS84MThGREE0Njkz NDAxMUVFODQzRjgzNzRDNEY5QUUwMi82TENLM1BTY1lNdXRrZEh0YlRlOWhFT3R2 VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZMQ0szUFNjWU11dGtkSHRiVGU5aEVPdHZVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkMyRS84MThGREE0NjkzNDAxMUVFODQzRjgzNzRDNEY5QUUwMi82TENLM1BTY1lN dXRrZEh0YlRlOWhFT3R2VXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsDAopCLtMAJ4IufT3tvkkF9RdJ063YOzrLwHaIB6Q3cIQhqOWSHsQ S28Qac4dkpdRKApb6jmdYxtMWgJ2aMxjBDBfAz8uzMYUr4xT4nWfToKUDICMayWe 5qdveColCRmj4j4dzLVO6w3P4/X2v9JHL1sH/Atk2NAUR1TsS1urVqgLXcrFXaMx Wh0As6K7LtlxWC2iPzCZzWP8QgK+/w+6vd7gKPusJvT3Y2V//IomGe0+DqKGfcp6 xe1NVBKvNtQP3J3kazMSwfq2GiSyY2M+rw4ejwKj/6V68ooEku+NEtFYu3OYsCAE 29IgtuMBO0yQPvAD6jbAQiPZVfZAqa7f -----END CERTIFICATE-----Generated at Sat Apr 26 16:39:42 2025 by rpki-client