$ rpki-client -vvf rpki.apnic.net/member_repository/A911D415/64B7762E67BA11EEA912DE37C4F9AE02/baLnsgc31v3aKTEYAyM4Tcf4AXI.mft File: baLnsgc31v3aKTEYAyM4Tcf4AXI.mft (raw, json) Hash identifier: XavndpNWE6MdGpPtJJb99EZzqO+L7UHxAVXY5F5SN1k= Subject key identifier: 96:FC:07:38:E1:28:12:B6:40:47:9C:99:FA:89:69:FB:46:95:A3:D3 Authority key identifier: 6D:A2:E7:B2:07:37:D6:FD:DA:29:31:18:03:23:38:4D:C7:F8:01:72 Certificate issuer: /CN=A911D415/serialNumber=6DA2E7B20737D6FDDA2931180323384DC7F80172 Certificate serial: 0147 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baLnsgc31v3aKTEYAyM4Tcf4AXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D415/64B7762E67BA11EEA912DE37C4F9AE02/baLnsgc31v3aKTEYAyM4Tcf4AXI.mft Manifest number: 0144 Signing time: Tue 01 Jul 2025 04:48:07 +0000 Manifest this update: Tue 01 Jul 2025 04:48:06 +0000 Manifest next update: Tue 08 Jul 2025 04:48:06 +0000 Files and hashes: 1: baLnsgc31v3aKTEYAyM4Tcf4AXI.crl (hash: 1h3aGiGfzrL93V1STz6+UAxO7BDMrI9zkEZQtvJ2QT4=) 2: B2B7B96067BA11EE99370352C4F9AE02.roa (hash: P/WWt5eI8v2C+zoec4Zd9OnVnDcSJ3bbXF6r7+A0KgE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D415/64B7762E67BA11EEA912DE37C4F9AE02/baLnsgc31v3aKTEYAyM4Tcf4AXI.crl rsync://rpki.apnic.net/member_repository/A911D415/64B7762E67BA11EEA912DE37C4F9AE02/baLnsgc31v3aKTEYAyM4Tcf4AXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baLnsgc31v3aKTEYAyM4Tcf4AXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:48:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 327 (0x147) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D415, serialNumber=6DA2E7B20737D6FDDA2931180323384DC7F80172 Validity Not Before: Jul 1 04:48:06 2025 GMT Not After : Jul 8 04:48:06 2025 GMT Subject: CN=68636887-fdd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:28:a3:dc:61:0b:a0:bb:90:b1:fb:6c:75:d3: 54:00:ff:76:9b:af:89:c9:79:84:a4:6a:15:18:0d: ff:fd:a4:47:e4:90:8b:3b:36:68:cd:ed:01:77:aa: 0d:de:ba:c6:a3:15:75:d4:85:a3:02:2c:10:ae:f1: 3b:aa:f6:e4:a9:96:02:05:c4:23:45:d4:7e:cf:f5: 8e:de:70:6a:a0:d5:a1:80:b7:3a:a7:a4:e6:63:f4: bd:5a:48:f7:1c:d4:cf:3f:0d:9e:e4:c9:a5:58:34: a5:09:46:c8:c9:c0:94:cb:6c:ac:e9:f1:a2:95:e0: 45:a3:d4:4c:3e:63:1b:6e:9e:69:1c:ef:49:09:ef: 8b:70:d9:00:02:74:47:7e:c4:c8:51:b2:38:f6:2b: 92:a7:e5:b3:58:9c:a2:c5:61:7f:fa:71:e3:72:34: a6:07:1b:07:9c:be:d6:60:79:28:73:d3:b4:56:59: cb:4f:ba:e3:e1:58:be:51:df:2e:70:7c:4b:22:5e: d5:b1:4f:e2:fd:9a:88:aa:0d:64:8d:33:47:32:c2: 8b:72:67:5b:3b:c1:d2:e5:9e:5f:96:86:b7:99:9b: dd:8d:f5:d6:f9:6c:80:92:90:31:e1:3f:77:8c:97: e0:7f:45:22:cb:d6:2c:4f:6e:af:37:ad:64:27:e2: e8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:FC:07:38:E1:28:12:B6:40:47:9C:99:FA:89:69:FB:46:95:A3:D3 X509v3 Authority Key Identifier: keyid:6D:A2:E7:B2:07:37:D6:FD:DA:29:31:18:03:23:38:4D:C7:F8:01:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D415/64B7762E67BA11EEA912DE37C4F9AE02/baLnsgc31v3aKTEYAyM4Tcf4AXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baLnsgc31v3aKTEYAyM4Tcf4AXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D415/64B7762E67BA11EEA912DE37C4F9AE02/baLnsgc31v3aKTEYAyM4Tcf4AXI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:40:6a:7f:9f:c7:98:ab:2b:84:ce:4b:81:5d:b4:8e:79:3d: 08:bc:b2:f1:2c:87:df:0b:13:89:d5:cc:74:eb:e0:45:11:dc: e2:99:2a:f9:6d:df:bb:d3:4b:3d:94:ef:36:40:de:66:3b:77: 03:32:46:88:2b:61:ae:f5:ab:10:57:e7:be:26:42:66:9e:ad: 56:cb:71:b2:6e:72:af:32:10:b3:8d:b7:1b:66:ee:ee:13:55: 52:4b:b9:76:b7:d3:17:88:8a:31:35:fd:65:1b:3b:77:e5:78: f4:f9:8b:cb:83:52:cd:8a:18:61:b0:3d:66:04:33:5a:f9:17: 1f:9e:6e:90:3b:4b:a2:de:20:63:07:b3:b1:93:e3:a5:6a:c0: ae:d7:ed:6d:39:2a:41:6e:d0:3a:02:9c:cf:31:12:b7:9b:dc: 8d:71:fd:78:a0:c7:ee:a8:f7:e0:c8:3f:00:b2:75:05:83:16: 6c:9e:50:c7:83:39:60:b7:f6:ad:47:1b:de:3c:ba:b9:22:1f: b9:e9:98:e3:24:fb:a9:dd:7f:cf:58:ca:6b:18:dc:3a:fc:82: 47:1d:f9:fe:1e:a2:1b:32:9a:b0:fa:47:df:4d:78:e4:60:c9: 95:5b:a5:8a:8d:6e:de:f9:2b:65:5a:da:64:97:e6:47:c3:c8: 40:16:60:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ0MTUxMTAvBgNVBAUTKDZEQTJFN0IyMDczN0Q2RkREQTI5MzExODAzMjMzODRE QzdGODAxNzIwHhcNMjUwNzAxMDQ0ODA2WhcNMjUwNzA4MDQ0ODA2WjAYMRYwFAYD VQQDEw02ODYzNjg4Ny1mZGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Cij3GELoLuQsftsddNUAP92m6+JyXmEpGoVGA3//aRH5JCLOzZoze0Bd6oN 3rrGoxV11IWjAiwQrvE7qvbkqZYCBcQjRdR+z/WO3nBqoNWhgLc6p6TmY/S9Wkj3 HNTPPw2e5MmlWDSlCUbIycCUy2ys6fGileBFo9RMPmMbbp5pHO9JCe+LcNkAAnRH fsTIUbI49iuSp+WzWJyixWF/+nHjcjSmBxsHnL7WYHkoc9O0VlnLT7rj4Vi+Ud8u cHxLIl7VsU/i/ZqIqg1kjTNHMsKLcmdbO8HS5Z5floa3mZvdjfXW+WyAkpAx4T93 jJfgf0Uiy9YsT26vN61kJ+LouwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJb8Bzjh KBK2QEecmfqJaftGlaPTMB8GA1UdIwQYMBaAFG2i57IHN9b92ikxGAMjOE3H+AFy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDQxNS82NEI3NzYyRTY3 QkExMUVFQTkxMkRFMzdDNEY5QUUwMi9iYUxuc2djMzF2M2FLVEVZQXlNNFRjZjRB WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JhTG5zZ2MzMXYzYUtURVlBeU00VGNmNEFYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDQxNS82NEI3NzYyRTY3QkExMUVFQTkxMkRFMzdDNEY5QUUwMi9iYUxuc2djMzF2 M2FLVEVZQXlNNFRjZjRBWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGQGp/n8eYqyuEzkuBXbSOeT0IvLLxLIffCxOJ1cx06+BFEdzimSr5 bd+700s9lO82QN5mO3cDMkaIK2Gu9asQV+e+JkJmnq1Wy3GybnKvMhCzjbcbZu7u E1VSS7l2t9MXiIoxNf1lGzt35Xj0+YvLg1LNihhhsD1mBDNa+Rcfnm6QO0ui3iBj B7Oxk+OlasCu1+1tOSpBbtA6ApzPMRK3m9yNcf14oMfuqPfgyD8AsnUFgxZsnlDH gzlgt/atRxvePLq5Ih+56ZjjJPup3X/PWMprGNw6/IJHHfn+HqIbMpqw+kffTXjk YMmVW6WKjW7e+StlWtpkl+ZHw8hAFmAT -----END CERTIFICATE-----Generated at Wed Jul 2 23:54:31 2025 by rpki-client