$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/s6HqYHo_df54qoQuuJCSWZEQ_cY.mft File: s6HqYHo_df54qoQuuJCSWZEQ_cY.mft (raw, json) Hash identifier: CtxJr/Es9BMbuZZqz9cbunKebq017oK2zN3QuVUiPdY= Subject key identifier: 4F:4C:AB:2D:2C:FC:8D:E6:36:B6:A6:73:19:73:00:2E:02:86:41:FD Authority key identifier: B3:A1:EA:60:7A:3F:75:FE:78:AA:84:2E:B8:90:92:59:91:10:FD:C6 Certificate issuer: /CN=A91F5BCC/serialNumber=B3A1EA607A3F75FE78AA842EB89092599110FDC6 Certificate serial: 57 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s6HqYHo_df54qoQuuJCSWZEQ_cY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/s6HqYHo_df54qoQuuJCSWZEQ_cY.mft Manifest number: 55 Signing time: Tue 17 Jun 2025 06:07:16 +0000 Manifest this update: Tue 17 Jun 2025 06:07:15 +0000 Manifest next update: Tue 24 Jun 2025 06:07:15 +0000 Files and hashes: 1: s6HqYHo_df54qoQuuJCSWZEQ_cY.crl (hash: bs67o8W/mGF+DHSlHeoMsjqSOd76OrPBdELaIDuXtow=) 2: 5FEB0DA8E90611EFA74B611DC4F9AE02.roa (hash: hwuul9zOvXSQLDdgabC6PgRyfpY9SzpmngkkmJxvu+k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/s6HqYHo_df54qoQuuJCSWZEQ_cY.crl rsync://rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/s6HqYHo_df54qoQuuJCSWZEQ_cY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s6HqYHo_df54qoQuuJCSWZEQ_cY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 06:07:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87 (0x57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5BCC, serialNumber=B3A1EA607A3F75FE78AA842EB89092599110FDC6 Validity Not Before: Jun 17 06:07:15 2025 GMT Not After : Jun 24 06:07:15 2025 GMT Subject: CN=68510613-545e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1c:9c:37:83:07:33:c6:81:60:9d:b7:19:57: ef:dc:4a:0e:f3:e8:ed:5b:46:59:38:42:21:28:8b: 54:f4:5f:11:97:3c:5a:88:f8:87:99:dc:c9:bc:4f: f4:18:7e:c1:1a:17:6f:d3:d7:f9:08:25:1a:ef:0b: f7:e0:fa:9d:9c:78:fd:ea:5d:b9:72:a2:8f:82:37: bd:a2:a9:a8:74:cf:60:de:8d:d6:35:6b:8e:18:19: 1d:72:b7:fd:f7:66:a6:65:f1:07:40:7b:cf:eb:20: 9b:51:23:f4:ec:26:08:fb:84:77:fa:b9:f9:c2:b9: 0b:19:f3:2a:22:e3:96:34:e0:15:b1:f1:87:a7:e5: f7:5c:b8:a3:5f:fd:17:e5:e4:5f:f0:83:ad:92:fd: f7:b9:c5:51:77:b6:d2:a7:09:6a:ad:22:2e:9f:df: f1:c8:0e:35:be:be:ce:a3:72:c0:be:6d:cf:64:2d: 06:b8:b9:42:58:03:e3:f1:b8:cc:58:bf:1d:e7:77: 38:d2:20:3b:94:08:bc:96:37:68:44:e6:46:62:57: ac:29:8e:36:d7:0c:9d:e7:01:1a:67:56:83:67:95: e7:bc:70:1b:3b:46:14:78:7d:69:66:70:84:ab:35: ea:dd:da:b4:8f:0a:e7:65:2b:b8:ff:68:94:13:e6: 5e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:4C:AB:2D:2C:FC:8D:E6:36:B6:A6:73:19:73:00:2E:02:86:41:FD X509v3 Authority Key Identifier: keyid:B3:A1:EA:60:7A:3F:75:FE:78:AA:84:2E:B8:90:92:59:91:10:FD:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/s6HqYHo_df54qoQuuJCSWZEQ_cY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s6HqYHo_df54qoQuuJCSWZEQ_cY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/s6HqYHo_df54qoQuuJCSWZEQ_cY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:4c:c9:0f:e6:43:f6:9b:cb:b9:7a:eb:99:8f:89:15:61:b9: 7e:0f:e9:e5:44:e6:38:d7:c9:d3:b2:73:ef:63:b8:27:8f:93: 06:55:f7:0e:16:d8:9c:ee:0d:b7:3c:09:2f:07:b8:73:e7:4c: 03:c3:4a:4f:33:05:9e:f1:b9:55:1f:d2:89:fc:6f:ab:30:c7: b5:1b:4d:ed:38:9e:14:86:b7:59:57:f7:7c:97:ed:2e:d0:44: e1:aa:b6:2b:3b:6e:57:c9:88:18:a8:b8:6e:5f:33:0b:4f:b4: 7d:73:a8:7d:4f:b2:ba:c7:21:2b:43:c6:c2:ac:d3:39:18:a8: 73:94:b9:5a:dc:2e:62:9d:06:4b:47:b5:77:7c:3c:c7:ce:7b: 85:72:c8:71:bf:5d:85:f0:10:59:47:81:36:21:b7:f7:9f:d5: cd:73:6a:4a:6f:10:81:95:d8:e9:45:e9:25:ed:d4:a3:ac:c4: 87:87:89:53:3e:0e:9a:6f:0a:72:8f:1e:78:27:d9:22:4c:35: 53:ec:6d:55:30:76:e2:7b:02:03:c7:f1:05:d9:38:4b:f3:e2: f2:1e:fd:90:00:40:de:52:39:83:cc:0e:79:23:06:b9:f1:a4: b9:f1:3b:14:48:54:02:e8:fd:69:2d:4b:35:9d:33:42:68:d3: db:0d:55:98 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NUJDQzExMC8GA1UEBRMoQjNBMUVBNjA3QTNGNzVGRTc4QUE4NDJFQjg5MDkyNTk5 MTEwRkRDNjAeFw0yNTA2MTcwNjA3MTVaFw0yNTA2MjQwNjA3MTVaMBgxFjAUBgNV BAMTDTY4NTEwNjEzLTU0NWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDaHJw3gwczxoFgnbcZV+/cSg7z6O1bRlk4QiEoi1T0XxGXPFqI+IeZ3Mm8T/QY fsEaF2/T1/kIJRrvC/fg+p2ceP3qXblyoo+CN72iqah0z2DejdY1a44YGR1yt/33 ZqZl8QdAe8/rIJtRI/TsJgj7hHf6ufnCuQsZ8yoi45Y04BWx8Yen5fdcuKNf/Rfl 5F/wg62S/fe5xVF3ttKnCWqtIi6f3/HIDjW+vs6jcsC+bc9kLQa4uUJYA+PxuMxY vx3ndzjSIDuUCLyWN2hE5kZiV6wpjjbXDJ3nARpnVoNnlee8cBs7RhR4fWlmcISr Nerd2rSPCudlK7j/aJQT5l5BAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUT0yrLSz8 jeY2tqZzGXMALgKGQf0wHwYDVR0jBBgwFoAUs6HqYHo/df54qoQuuJCSWZEQ/cYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1QkNDL0IxMTgxQjEwQ0U3 ODExRUY4MEVGNEQ0NEM0RjlBRTAyL3M2SHFZSG9fZGY1NHFvUXV1SkNTV1pFUV9j WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvczZIcVlIb19kZjU0cW9RdXVKQ1NXWkVRX2NZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1 QkNDL0IxMTgxQjEwQ0U3ODExRUY4MEVGNEQ0NEM0RjlBRTAyL3M2SHFZSG9fZGY1 NHFvUXV1SkNTV1pFUV9jWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE9MyQ/mQ/aby7l665mPiRVhuX4P6eVE5jjXydOyc+9juCePkwZV9w4W 2JzuDbc8CS8HuHPnTAPDSk8zBZ7xuVUf0on8b6swx7UbTe04nhSGt1lX93yX7S7Q ROGqtis7blfJiBiouG5fMwtPtH1zqH1PsrrHIStDxsKs0zkYqHOUuVrcLmKdBktH tXd8PMfOe4VyyHG/XYXwEFlHgTYht/ef1c1zakpvEIGV2OlF6SXt1KOsxIeHiVM+ DppvCnKPHngn2SJMNVPsbVUwduJ7AgPH8QXZOEvz4vIe/ZAAQN5SOYPMDnkjBrnx pLnxOxRIVALo/WktSzWdM0Jo09sNVZg= -----END CERTIFICATE-----Generated at Wed Jun 18 03:09:53 2025 by rpki-client