$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCF7C/CD3B748C87CC11EB984FA748C4F9AE02/61l_6N8H6peZiwP4KDQ7yIda7Qg.mft File: 61l_6N8H6peZiwP4KDQ7yIda7Qg.mft (raw, json) Hash identifier: e4D7ZmGKrvtqoQ/x0FB/qJb3/+IuVNgFubUhbyZZ/18= Subject key identifier: A6:F2:C0:16:F0:F3:33:1B:3C:C9:E1:95:E0:A5:6D:9A:0A:31:91:97 Authority key identifier: EB:59:7F:E8:DF:07:EA:97:99:8B:03:F8:28:34:3B:C8:87:5A:ED:08 Certificate issuer: /CN=A91FCF7C/serialNumber=EB597FE8DF07EA97998B03F828343BC8875AED08 Certificate serial: 0646 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61l_6N8H6peZiwP4KDQ7yIda7Qg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCF7C/CD3B748C87CC11EB984FA748C4F9AE02/61l_6N8H6peZiwP4KDQ7yIda7Qg.mft Manifest number: 0641 Signing time: Thu 24 Apr 2025 22:22:44 +0000 Manifest this update: Thu 24 Apr 2025 22:22:44 +0000 Manifest next update: Thu 01 May 2025 22:22:44 +0000 Files and hashes: 1: 61l_6N8H6peZiwP4KDQ7yIda7Qg.crl (hash: dEpuuhDkiIpZyk589YxL4xnU2DCcKSN8mxAAQBPtEgs=) 2: EF31C4CC87CE11EBAA016A4BC4F9AE02.roa (hash: Lx0/5acw/rTT+uCYraQZRnT94tjJt0V2khH4PhiByaw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCF7C/CD3B748C87CC11EB984FA748C4F9AE02/61l_6N8H6peZiwP4KDQ7yIda7Qg.crl rsync://rpki.apnic.net/member_repository/A91FCF7C/CD3B748C87CC11EB984FA748C4F9AE02/61l_6N8H6peZiwP4KDQ7yIda7Qg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61l_6N8H6peZiwP4KDQ7yIda7Qg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:22:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1606 (0x646) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCF7C, serialNumber=EB597FE8DF07EA97998B03F828343BC8875AED08 Validity Not Before: Apr 24 22:22:44 2025 GMT Not After : May 1 22:22:44 2025 GMT Subject: CN=680ab9b4-529d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:9c:b7:cd:12:6b:e8:c3:85:8c:9b:d4:1f:f3: 8c:b3:2b:1a:9c:49:f9:b4:fb:1f:4d:fb:57:83:7b: 87:b1:ad:f7:49:41:7c:6d:61:a7:2f:1b:8f:47:0a: 43:f9:83:67:f8:8c:4f:bb:33:41:ea:66:62:ac:bd: e3:e4:ce:21:e9:7e:22:da:84:5c:b2:92:4f:45:30: 94:dc:62:a2:ee:b8:e5:ad:e2:93:1a:44:fe:02:b5: 7f:b7:f1:79:d6:c6:e0:f8:20:b3:d4:f5:2c:b3:7a: 04:33:b4:f9:93:51:de:9e:3d:24:54:05:9a:95:a9: b7:79:77:8a:22:1b:5f:f3:52:91:8f:a0:9c:60:64: 9c:78:4e:f0:e1:85:76:59:68:f6:00:3a:9c:7a:54: d8:e5:1c:98:82:1d:6c:5a:c5:80:b2:ca:14:d1:97: 56:3f:78:d1:5e:65:95:71:64:91:9b:bb:a9:13:33: d6:a6:2f:02:b2:02:78:34:b9:79:65:f2:4e:ae:e8: 1c:79:2f:59:27:d7:54:6f:ca:1f:54:f5:25:66:78: 23:ff:f7:49:f0:38:12:ea:8f:5d:ed:17:32:11:76: 59:9d:93:63:f1:35:84:e7:13:f2:41:ff:f3:d7:37: 2b:1e:3b:65:ff:80:ca:eb:e8:ff:bf:dc:b5:0b:0c: 7e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:F2:C0:16:F0:F3:33:1B:3C:C9:E1:95:E0:A5:6D:9A:0A:31:91:97 X509v3 Authority Key Identifier: keyid:EB:59:7F:E8:DF:07:EA:97:99:8B:03:F8:28:34:3B:C8:87:5A:ED:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCF7C/CD3B748C87CC11EB984FA748C4F9AE02/61l_6N8H6peZiwP4KDQ7yIda7Qg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61l_6N8H6peZiwP4KDQ7yIda7Qg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCF7C/CD3B748C87CC11EB984FA748C4F9AE02/61l_6N8H6peZiwP4KDQ7yIda7Qg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:9f:0d:a2:73:b4:34:da:d9:96:f1:f7:3d:38:6c:1e:2f:2c: ee:48:86:84:0e:6c:45:3f:dc:0c:53:8d:6c:2f:70:03:36:15: d4:1e:12:6d:24:db:1d:3d:87:77:57:ca:7c:89:5c:38:33:21: 05:63:b4:fd:de:c0:3e:c2:d9:5d:d4:3c:b3:3e:39:13:f6:f8: fb:35:83:2c:1b:b5:f0:e3:76:21:14:08:31:20:c3:e5:63:ba: 70:b1:d6:72:2d:6a:d6:ee:a2:a6:17:c8:3e:f7:a0:96:49:7f: 50:f0:4e:7e:6c:f8:46:07:82:ee:b6:d7:61:27:c0:71:33:06: 46:70:95:a9:20:90:f5:7e:80:46:10:ca:c3:25:3b:d0:c5:24: 82:ec:0b:87:bf:89:10:6c:27:8c:2d:88:69:91:b6:d5:61:03: 51:a1:a1:a5:ae:8a:80:6f:a4:8c:ab:2f:52:4d:e2:de:1a:77: db:4a:58:a8:e7:e3:19:3b:27:f7:9d:ce:df:23:7d:b4:bf:9f: a3:8f:a4:5a:a5:23:ba:75:28:6e:84:09:b6:20:35:1b:1a:34: a2:1d:80:a4:63:4f:17:ae:58:3f:d4:0c:80:73:e0:20:40:db: 7a:4d:23:5f:72:86:a8:97:4c:51:a2:59:ca:ff:f4:97:11:24: 15:18:2d:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNGN0MxMTAvBgNVBAUTKEVCNTk3RkU4REYwN0VBOTc5OThCMDNGODI4MzQzQkM4 ODc1QUVEMDgwHhcNMjUwNDI0MjIyMjQ0WhcNMjUwNTAxMjIyMjQ0WjAYMRYwFAYD VQQDEw02ODBhYjliNC01MjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA15y3zRJr6MOFjJvUH/OMsysanEn5tPsfTftXg3uHsa33SUF8bWGnLxuPRwpD +YNn+IxPuzNB6mZirL3j5M4h6X4i2oRcspJPRTCU3GKi7rjlreKTGkT+ArV/t/F5 1sbg+CCz1PUss3oEM7T5k1Henj0kVAWalam3eXeKIhtf81KRj6CcYGSceE7w4YV2 WWj2ADqcelTY5RyYgh1sWsWAssoU0ZdWP3jRXmWVcWSRm7upEzPWpi8CsgJ4NLl5 ZfJOrugceS9ZJ9dUb8ofVPUlZngj//dJ8DgS6o9d7RcyEXZZnZNj8TWE5xPyQf/z 1zcrHjtl/4DK6+j/v9y1Cwx+0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKbywBbw 8zMbPMnhleClbZoKMZGXMB8GA1UdIwQYMBaAFOtZf+jfB+qXmYsD+Cg0O8iHWu0I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0Y3Qy9DRDNCNzQ4Qzg3 Q0MxMUVCOTg0RkE3NDhDNEY5QUUwMi82MWxfNk44SDZwZVppd1A0S0RRN3lJZGE3 UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzYxbF82TjhINnBlWml3UDRLRFE3eUlkYTdRZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0Y3Qy9DRDNCNzQ4Qzg3Q0MxMUVCOTg0RkE3NDhDNEY5QUUwMi82MWxfNk44SDZw ZVppd1A0S0RRN3lJZGE3UWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBanw2ic7Q02tmW8fc9OGweLyzuSIaEDmxFP9wMU41sL3ADNhXUHhJt JNsdPYd3V8p8iVw4MyEFY7T93sA+wtld1DyzPjkT9vj7NYMsG7Xw43YhFAgxIMPl Y7pwsdZyLWrW7qKmF8g+96CWSX9Q8E5+bPhGB4LuttdhJ8BxMwZGcJWpIJD1foBG EMrDJTvQxSSC7AuHv4kQbCeMLYhpkbbVYQNRoaGlroqAb6SMqy9STeLeGnfbSlio 5+MZOyf3nc7fI320v5+jj6RapSO6dShuhAm2IDUbGjSiHYCkY08Xrlg/1AyAc+Ag QNt6TSNfcoaol0xRolnK//SXESQVGC0g -----END CERTIFICATE-----Generated at Sat Apr 26 04:19:50 2025 by rpki-client