$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft File: M6AXSkpLAJwBFRWWkTbzAQidtbU.mft (raw, json) Hash identifier: I9GMgEzauI7ISHh8A9fesvYbwWLw8u/XjEMRsAz9MMI= Subject key identifier: 42:3A:EE:4B:74:3F:BE:3A:90:87:D5:B3:50:68:1B:90:57:67:13:F8 Authority key identifier: 33:A0:17:4A:4A:4B:00:9C:01:15:15:96:91:36:F3:01:08:9D:B5:B5 Certificate issuer: /CN=A91FF1CC/serialNumber=33A0174A4A4B009C011515969136F301089DB5B5 Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6AXSkpLAJwBFRWWkTbzAQidtbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft Manifest number: 3B Signing time: Fri 13 Jun 2025 06:26:45 +0000 Manifest this update: Fri 13 Jun 2025 06:26:44 +0000 Manifest next update: Fri 20 Jun 2025 06:26:44 +0000 Files and hashes: 1: M6AXSkpLAJwBFRWWkTbzAQidtbU.crl (hash: tqgD++LQXRB0OsmMtE3PLEhMhjHxEIBuRiA3Bf62AV0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.crl rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6AXSkpLAJwBFRWWkTbzAQidtbU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:26:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF1CC, serialNumber=33A0174A4A4B009C011515969136F301089DB5B5 Validity Not Before: Jun 13 06:26:44 2025 GMT Not After : Jun 20 06:26:44 2025 GMT Subject: CN=684bc4a4-ab41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ec:22:cf:98:7b:ac:92:4a:2b:21:34:ec:79: 38:bf:e9:35:32:f0:8b:d9:24:62:ca:3b:79:9a:a0: 90:0e:cc:ef:f4:9b:f4:7d:11:6d:dc:c3:cf:b6:b9: 91:af:6e:51:62:53:36:15:3c:18:d1:fa:48:4f:58: c2:fb:26:41:ea:10:18:9c:00:25:46:34:5a:61:25: c3:92:b8:cd:be:4f:d6:80:c7:aa:c8:c4:0d:d8:8f: f8:dd:33:e3:eb:fd:13:e7:64:4b:1e:97:ce:37:3e: 0f:54:13:48:2d:23:fd:6c:cf:42:53:77:d0:68:b7: 73:30:b7:4b:2d:ae:ca:db:63:d1:d7:60:5a:ee:ea: fd:d7:56:59:8f:b0:89:ec:b8:d4:45:b0:55:8a:10: 48:bb:60:3f:cb:bd:28:1e:a1:c5:d7:bb:d8:f4:34: 70:5f:59:f5:09:8e:5b:d1:bc:ed:37:14:e4:ac:57: 9c:49:08:60:3f:cb:c7:a2:92:6a:77:38:a8:5e:3a: e1:c8:73:17:e4:19:5c:1c:f8:7e:bc:7b:27:d7:2c: 25:24:dc:a7:34:84:e2:cd:89:66:dd:15:6e:89:76: 77:97:d3:f4:d0:be:22:c6:66:f1:4a:4f:84:fe:e2: eb:d3:60:ec:68:c7:92:c4:e0:30:9e:79:3a:76:d5: fb:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:3A:EE:4B:74:3F:BE:3A:90:87:D5:B3:50:68:1B:90:57:67:13:F8 X509v3 Authority Key Identifier: keyid:33:A0:17:4A:4A:4B:00:9C:01:15:15:96:91:36:F3:01:08:9D:B5:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6AXSkpLAJwBFRWWkTbzAQidtbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:ea:64:5c:cc:a4:28:c5:fd:14:4c:e5:47:59:72:d6:66:bf: 95:e7:7b:6a:3b:39:75:13:1b:62:68:a9:f1:7c:fe:e8:25:37: ff:25:4d:bb:d2:75:81:c7:c2:fd:fd:b4:5f:38:d1:80:7f:30: c8:81:ab:aa:2f:48:c3:12:e4:30:00:81:98:ae:cf:d6:ca:25: 84:b0:b6:33:ca:f9:b9:a6:9b:38:38:af:bd:2a:fd:fd:90:c4: 2b:78:cf:74:e2:0b:e2:87:3e:8d:8b:e0:81:fc:4f:a0:cf:3b: f8:63:98:f2:2a:36:bd:d1:a3:7a:48:37:35:d0:7b:6d:4f:f6: 5e:13:9f:6d:40:b5:df:5a:fa:24:f5:6d:cf:c8:e1:ed:c0:3c: c7:78:e8:79:8b:35:c6:4e:24:b9:36:b8:0b:1e:81:05:86:aa: 49:59:b7:52:0d:98:77:75:ac:45:65:82:4e:80:6b:23:85:1a: 15:b4:97:71:96:b9:c5:03:5b:5a:12:1d:91:d8:4f:5d:2a:8b: 55:0f:b6:d1:29:74:7e:f0:35:91:5e:f7:44:bb:03:3e:b1:e2: 96:a6:f0:d8:8c:56:b3:d4:65:7d:cf:2b:e0:52:f9:ed:cf:b0: 73:53:00:1d:19:ca:cf:80:80:71:bd:9f:f2:ab:ab:26:14:2c: ae:7c:41:e2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RjFDQzExMC8GA1UEBRMoMzNBMDE3NEE0QTRCMDA5QzAxMTUxNTk2OTEzNkYzMDEw ODlEQjVCNTAeFw0yNTA2MTMwNjI2NDRaFw0yNTA2MjAwNjI2NDRaMBgxFjAUBgNV BAMTDTY4NGJjNGE0LWFiNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCh7CLPmHuskkorITTseTi/6TUy8IvZJGLKO3maoJAOzO/0m/R9EW3cw8+2uZGv blFiUzYVPBjR+khPWML7JkHqEBicACVGNFphJcOSuM2+T9aAx6rIxA3Yj/jdM+Pr /RPnZEsel843Pg9UE0gtI/1sz0JTd9Bot3Mwt0strsrbY9HXYFru6v3XVlmPsIns uNRFsFWKEEi7YD/LvSgeocXXu9j0NHBfWfUJjlvRvO03FOSsV5xJCGA/y8eikmp3 OKheOuHIcxfkGVwc+H68eyfXLCUk3Kc0hOLNiWbdFW6JdneX0/TQviLGZvFKT4T+ 4uvTYOxox5LE4DCeeTp21fv5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQjruS3Q/ vjqQh9WzUGgbkFdnE/gwHwYDVR0jBBgwFoAUM6AXSkpLAJwBFRWWkTbzAQidtbUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZGMUNDLzQzRUE2QjE4RUY2 MzExRUZCRjY0QUI2QUM0RjlBRTAyL002QVhTa3BMQUp3QkZSV1drVGJ6QVFpZHRi VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTTZBWFNrcExBSndCRlJXV2tUYnpBUWlkdGJVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZG MUNDLzQzRUE2QjE4RUY2MzExRUZCRjY0QUI2QUM0RjlBRTAyL002QVhTa3BMQUp3 QkZSV1drVGJ6QVFpZHRiVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAArqZFzMpCjF/RRM5UdZctZmv5Xne2o7OXUTG2JoqfF8/uglN/8lTbvS dYHHwv39tF840YB/MMiBq6ovSMMS5DAAgZiuz9bKJYSwtjPK+bmmmzg4r70q/f2Q xCt4z3TiC+KHPo2L4IH8T6DPO/hjmPIqNr3Ro3pINzXQe21P9l4Tn21Atd9a+iT1 bc/I4e3APMd46HmLNcZOJLk2uAsegQWGqklZt1INmHd1rEVlgk6AayOFGhW0l3GW ucUDW1oSHZHYT10qi1UPttEpdH7wNZFe90S7Az6x4pam8NiMVrPUZX3PK+BS+e3P sHNTAB0Zys+AgHG9n/KrqyYULK58QeI= -----END CERTIFICATE-----Generated at Sat Jun 14 19:26:28 2025 by rpki-client