$ rpki-client -vvf rpki.apnic.net/member_repository/A91232C2/1E7FFF9AF0CD11EE881D3C16C4F9AE02/b-jBYY_6_7LM_1aejqkV2vpNTjY.mft File: b-jBYY_6_7LM_1aejqkV2vpNTjY.mft (raw, json) Hash identifier: sdFCTxTRACA3p+yrjlNzdM5havXPfx5rvq+t+3qzefU= Subject key identifier: B2:A0:E9:03:73:D1:26:81:B4:11:55:11:DC:39:42:24:83:CF:5E:04 Authority key identifier: 6F:E8:C1:61:8F:FA:FF:B2:CC:FF:56:9E:8E:A9:15:DA:FA:4D:4E:36 Certificate issuer: /CN=A91232C2/serialNumber=6FE8C1618FFAFFB2CCFF569E8EA915DAFA4D4E36 Certificate serial: D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-jBYY_6_7LM_1aejqkV2vpNTjY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91232C2/1E7FFF9AF0CD11EE881D3C16C4F9AE02/b-jBYY_6_7LM_1aejqkV2vpNTjY.mft Manifest number: CF Signing time: Sun 11 May 2025 04:29:21 +0000 Manifest this update: Sun 11 May 2025 04:29:20 +0000 Manifest next update: Sun 18 May 2025 04:29:20 +0000 Files and hashes: 1: b-jBYY_6_7LM_1aejqkV2vpNTjY.crl (hash: SP9x2O5ZFH9uIQT1KlWPDrmN2O92ldeao+Wid8BQS0s=) 2: 85035A64F0CD11EE8CC1FC16C4F9AE02.roa (hash: 9ZKq+nwt9P9nCI+BvZS/E6A1E5sodaBd/S4ZxhUXp0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91232C2/1E7FFF9AF0CD11EE881D3C16C4F9AE02/b-jBYY_6_7LM_1aejqkV2vpNTjY.crl rsync://rpki.apnic.net/member_repository/A91232C2/1E7FFF9AF0CD11EE881D3C16C4F9AE02/b-jBYY_6_7LM_1aejqkV2vpNTjY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-jBYY_6_7LM_1aejqkV2vpNTjY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 04:29:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91232C2, serialNumber=6FE8C1618FFAFFB2CCFF569E8EA915DAFA4D4E36 Validity Not Before: May 11 04:29:20 2025 GMT Not After : May 18 04:29:20 2025 GMT Subject: CN=682027a0-3488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:31:58:1d:73:da:33:1a:d2:db:bb:74:59:19: 33:cf:60:c9:50:12:46:d8:9f:53:8e:01:33:8b:ee: 78:18:b5:50:87:80:81:75:78:ce:e7:3d:12:11:70: a6:8e:ec:fa:4d:51:d4:f3:13:ec:b9:0a:ca:fc:d4: 41:7b:84:26:ea:82:d5:29:65:33:26:9a:5b:fc:64: 97:97:c5:57:8d:e5:1f:ae:04:25:89:1e:d6:c7:e8: 7e:b4:2f:64:71:ca:6d:9e:8b:7e:3c:19:63:ee:77: 5f:ee:18:65:c5:87:97:be:74:03:69:fc:c0:35:e9: e9:dc:fd:41:12:4a:d4:2a:2c:15:c3:ff:40:a4:4a: 09:27:95:12:9c:41:3e:79:bf:3b:b0:c0:22:dc:d8: af:66:b6:cd:43:8d:fa:c1:9b:c1:6c:1a:bb:42:88: 12:87:01:e4:03:98:15:5c:b5:68:67:56:de:44:aa: c4:d9:c4:16:c6:40:b1:b5:6e:fb:f8:09:6e:d9:7b: 2b:c4:7d:72:bc:e0:ea:a0:80:d9:94:2f:dd:ee:99: de:58:d2:7f:91:ff:b6:a1:90:fe:04:77:78:90:2a: 7b:d6:6d:ec:39:69:7a:a8:27:97:63:ef:66:a5:9a: 4f:e8:d8:a1:80:7b:61:5a:92:de:dd:a9:6d:c4:d6: a0:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:A0:E9:03:73:D1:26:81:B4:11:55:11:DC:39:42:24:83:CF:5E:04 X509v3 Authority Key Identifier: keyid:6F:E8:C1:61:8F:FA:FF:B2:CC:FF:56:9E:8E:A9:15:DA:FA:4D:4E:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91232C2/1E7FFF9AF0CD11EE881D3C16C4F9AE02/b-jBYY_6_7LM_1aejqkV2vpNTjY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-jBYY_6_7LM_1aejqkV2vpNTjY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91232C2/1E7FFF9AF0CD11EE881D3C16C4F9AE02/b-jBYY_6_7LM_1aejqkV2vpNTjY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:89:cb:62:96:f5:d2:ec:4d:c6:57:d0:8f:a7:4a:21:5a:54: cb:76:62:15:85:80:c7:09:4f:04:e6:a6:b4:e9:bb:1e:06:20: a5:f2:b6:25:fc:0e:c6:a0:30:8b:23:90:50:65:4e:ec:93:0b: fc:06:75:ac:23:41:d6:6f:22:4e:9c:9a:49:6c:de:1c:e8:61: 18:66:0f:69:f0:a0:f8:de:b2:f9:a3:30:00:ad:36:6a:82:cf: 48:be:d3:36:5e:8c:65:46:f5:32:35:e6:da:ac:b6:a3:54:62: cf:d4:f5:ac:2a:08:7d:81:06:23:fa:4a:e4:ba:98:a1:10:19: b6:65:3e:b9:08:3b:96:2d:b6:5e:e8:aa:99:49:9c:a6:6c:89: 4c:ce:b4:cd:20:39:a8:71:e6:f3:20:ba:98:0f:a2:2a:c0:cc: 56:68:e4:b6:b6:cd:40:80:a7:e1:55:e9:b3:eb:99:69:d1:bc: e4:b1:ff:c6:b9:be:6d:2d:eb:98:9b:4e:e8:3f:f4:8a:c8:ef: 27:50:09:1b:ab:e3:cc:2d:52:d0:5d:28:d3:0c:10:18:20:88: c2:98:9c:2a:3b:e8:47:ac:ce:20:02:8f:d6:79:41:fd:8a:70: 4e:4f:33:ec:19:f3:eb:cd:d5:bc:9d:43:a0:71:09:62:46:4b: 97:5b:79:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMyQzIxMTAvBgNVBAUTKDZGRThDMTYxOEZGQUZGQjJDQ0ZGNTY5RThFQTkxNURB RkE0RDRFMzYwHhcNMjUwNTExMDQyOTIwWhcNMjUwNTE4MDQyOTIwWjAYMRYwFAYD VQQDEw02ODIwMjdhMC0zNDg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2TFYHXPaMxrS27t0WRkzz2DJUBJG2J9TjgEzi+54GLVQh4CBdXjO5z0SEXCm juz6TVHU8xPsuQrK/NRBe4Qm6oLVKWUzJppb/GSXl8VXjeUfrgQliR7Wx+h+tC9k ccptnot+PBlj7ndf7hhlxYeXvnQDafzANenp3P1BEkrUKiwVw/9ApEoJJ5USnEE+ eb87sMAi3NivZrbNQ436wZvBbBq7QogShwHkA5gVXLVoZ1beRKrE2cQWxkCxtW77 +Alu2XsrxH1yvODqoIDZlC/d7pneWNJ/kf+2oZD+BHd4kCp71m3sOWl6qCeXY+9m pZpP6NihgHthWpLe3altxNagrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLKg6QNz 0SaBtBFVEdw5QiSDz14EMB8GA1UdIwQYMBaAFG/owWGP+v+yzP9Wno6pFdr6TU42 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzJDMi8xRTdGRkY5QUYw Q0QxMUVFODgxRDNDMTZDNEY5QUUwMi9iLWpCWVlfNl83TE1fMWFlanFrVjJ2cE5U alkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ItakJZWV82XzdMTV8xYWVqcWtWMnZwTlRqWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzJDMi8xRTdGRkY5QUYwQ0QxMUVFODgxRDNDMTZDNEY5QUUwMi9iLWpCWVlfNl83 TE1fMWFlanFrVjJ2cE5UalkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSictilvXS7E3GV9CPp0ohWlTLdmIVhYDHCU8E5qa06bseBiCl8rYl /A7GoDCLI5BQZU7skwv8BnWsI0HWbyJOnJpJbN4c6GEYZg9p8KD43rL5ozAArTZq gs9IvtM2XoxlRvUyNebarLajVGLP1PWsKgh9gQYj+krkupihEBm2ZT65CDuWLbZe 6KqZSZymbIlMzrTNIDmocebzILqYD6IqwMxWaOS2ts1AgKfhVemz65lp0bzksf/G ub5tLeuYm07oP/SKyO8nUAkbq+PMLVLQXSjTDBAYIIjCmJwqO+hHrM4gAo/WeUH9 inBOTzPsGfPrzdW8nUOgcQliRkuXW3m4 -----END CERTIFICATE-----Generated at Mon May 12 07:12:59 2025 by rpki-client