$ rpki-client -vvf rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft File: --bA8ysvL8RXYKA0LkO79VK03oU.mft (raw, json) Hash identifier: Px6CS/Et8T75tkFbhxPIe1wwMq6FIdjZgzdZdPNb2bI= Subject key identifier: 12:DC:D5:B3:A7:4A:DA:90:00:A1:76:77:C8:F6:88:01:D4:19:12:CE Authority key identifier: FB:E6:C0:F3:2B:2F:2F:C4:57:60:A0:34:2E:43:BB:F5:52:B4:DE:85 Certificate issuer: /CN=A9124BD3/serialNumber=FBE6C0F32B2F2FC45760A0342E43BBF552B4DE85 Certificate serial: 0DB1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--bA8ysvL8RXYKA0LkO79VK03oU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft Manifest number: 0D9C Signing time: Mon 30 Jun 2025 18:08:47 +0000 Manifest this update: Mon 30 Jun 2025 18:08:47 +0000 Manifest next update: Mon 07 Jul 2025 18:08:47 +0000 Files and hashes: 1: --bA8ysvL8RXYKA0LkO79VK03oU.crl (hash: E5kRr8TGJe4w6B4I2HyshjTbNiTKs5pbUatfmiYerPQ=) 2: 4C67EC06C68E11E983395515C4F9AE02.roa (hash: tP21nihbHvOPN0o7Q7ZnYvoB4lWQWRK3//ALxViNCn4=) 3: CA761A36760A11EC8FB55C23C4F9AE02.roa (hash: XcKMqxWrgr72X1rDOMRNGWOhRv7K/Bosj9SE1/JpnIk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.crl rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--bA8ysvL8RXYKA0LkO79VK03oU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 18:08:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3505 (0xdb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124BD3, serialNumber=FBE6C0F32B2F2FC45760A0342E43BBF552B4DE85 Validity Not Before: Jun 30 18:08:47 2025 GMT Not After : Jul 7 18:08:47 2025 GMT Subject: CN=6862d2af-2c74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:98:47:4c:6d:3f:be:d9:6e:a2:33:dd:a7:b9: 7b:71:39:df:46:bd:76:08:3c:c9:c8:24:0e:33:7a: 44:91:23:ed:f7:a1:a5:55:0d:47:be:ad:c8:a3:74: c8:a5:fe:ab:55:e9:1c:97:74:32:4d:a1:c3:94:14: 0a:c9:99:09:22:c1:0a:b2:b4:0b:a6:49:ff:d0:48: c5:03:50:af:5a:15:a1:15:d6:35:f7:15:17:b0:c4: 82:73:82:0e:18:30:f4:eb:bc:c0:d4:df:66:70:75: a9:26:a9:d7:99:38:d7:a7:71:57:b8:dd:9b:2a:50: 92:36:2b:db:03:89:4a:20:b7:80:96:be:0a:5f:f8: 2f:46:89:63:20:2c:6a:3b:ea:d5:98:a0:6b:9a:61: d9:ce:54:48:c4:22:16:e8:88:b3:71:a3:e2:3e:17: a7:99:0f:37:03:8c:0e:5d:0f:2e:ba:d6:43:77:53: e9:32:56:44:25:a0:b5:a1:00:ff:55:76:ba:5b:a3: e1:59:72:ae:ee:07:f9:96:99:51:4a:5b:9d:8b:ec: 9c:34:dc:dc:07:7c:ac:5d:0a:b8:cc:fb:8f:a7:d4: 79:bf:60:bd:b8:70:1d:e4:7b:de:1a:07:28:23:a6: d9:fa:62:d5:37:0c:29:47:e8:24:d4:51:2b:2c:06: e8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:DC:D5:B3:A7:4A:DA:90:00:A1:76:77:C8:F6:88:01:D4:19:12:CE X509v3 Authority Key Identifier: keyid:FB:E6:C0:F3:2B:2F:2F:C4:57:60:A0:34:2E:43:BB:F5:52:B4:DE:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--bA8ysvL8RXYKA0LkO79VK03oU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:3d:c6:c3:70:3b:75:a9:6b:32:f8:b3:11:88:82:05:36:7a: a3:9a:4a:4a:c8:29:51:aa:a6:44:c6:4c:b5:1f:a6:86:a7:5d: ab:f4:9b:68:cd:43:a7:b2:b4:ea:df:71:00:ba:b7:04:cb:94: d9:55:04:ba:bb:8c:60:ef:d9:c8:e5:9d:0a:fc:9d:55:fb:a3: ca:d7:5f:00:f5:5a:be:51:e2:d9:7d:63:0a:3f:34:ff:88:09: 3e:63:69:dc:9b:2e:51:28:ed:61:47:04:c3:74:c9:71:86:34: 6b:5e:d4:ea:60:e8:58:ef:2c:fe:3f:17:95:2f:92:b5:58:87: 04:d2:d9:8e:d1:1e:ed:bc:a4:7b:4e:15:69:d5:7f:c7:f5:e1: 7e:da:de:6b:1a:5a:ec:dd:3d:9a:a4:29:e1:53:8f:f1:16:26: bf:89:59:45:9c:aa:9e:4e:90:32:a6:0d:a8:79:1c:b6:8f:0b: 04:06:fd:b2:00:1a:90:29:a4:b1:d9:7f:6e:a9:ab:26:c1:ed: 2e:7f:ff:00:08:2a:4d:8a:42:c2:5c:c7:d6:95:c7:f0:63:9f: 3c:e6:f0:c6:0f:7a:a1:83:fc:fb:6b:23:42:4a:28:5d:58:a4: 02:4a:f4:0f:ac:7b:e3:54:4f:1a:62:bb:fc:74:d8:8a:be:c8: d0:7c:d1:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjRCRDMxMTAvBgNVBAUTKEZCRTZDMEYzMkIyRjJGQzQ1NzYwQTAzNDJFNDNCQkY1 NTJCNERFODUwHhcNMjUwNjMwMTgwODQ3WhcNMjUwNzA3MTgwODQ3WjAYMRYwFAYD VQQDEw02ODYyZDJhZi0yYzc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm5hHTG0/vtluojPdp7l7cTnfRr12CDzJyCQOM3pEkSPt96GlVQ1Hvq3Io3TI pf6rVekcl3QyTaHDlBQKyZkJIsEKsrQLpkn/0EjFA1CvWhWhFdY19xUXsMSCc4IO GDD067zA1N9mcHWpJqnXmTjXp3FXuN2bKlCSNivbA4lKILeAlr4KX/gvRoljICxq O+rVmKBrmmHZzlRIxCIW6IizcaPiPhenmQ83A4wOXQ8uutZDd1PpMlZEJaC1oQD/ VXa6W6PhWXKu7gf5lplRSludi+ycNNzcB3ysXQq4zPuPp9R5v2C9uHAd5HveGgco I6bZ+mLVNwwpR+gk1FErLAboTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBLc1bOn StqQAKF2d8j2iAHUGRLOMB8GA1UdIwQYMBaAFPvmwPMrLy/EV2CgNC5Du/VStN6F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNEJEMy8wRTREODY3QUM2 OEQxMUU5OUI0NTJEMTNDNEY5QUUwMi8tLWJBOHlzdkw4UlhZS0EwTGtPNzlWSzAz b1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy0tYkE4eXN2TDhSWFlLQTBMa083OVZLMDNvVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NEJEMy8wRTREODY3QUM2OEQxMUU5OUI0NTJEMTNDNEY5QUUwMi8tLWJBOHlzdkw4 UlhZS0EwTGtPNzlWSzAzb1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzPcbDcDt1qWsy+LMRiIIFNnqjmkpKyClRqqZExky1H6aGp12r9Jto zUOnsrTq33EAurcEy5TZVQS6u4xg79nI5Z0K/J1V+6PK118A9Vq+UeLZfWMKPzT/ iAk+Y2ncmy5RKO1hRwTDdMlxhjRrXtTqYOhY7yz+PxeVL5K1WIcE0tmO0R7tvKR7 ThVp1X/H9eF+2t5rGlrs3T2apCnhU4/xFia/iVlFnKqeTpAypg2oeRy2jwsEBv2y ABqQKaSx2X9uqasmwe0uf/8ACCpNikLCXMfWlcfwY5885vDGD3qhg/z7ayNCSihd WKQCSvQPrHvjVE8aYrv8dNiKvsjQfNGZ -----END CERTIFICATE-----Generated at Wed Jul 2 16:00:37 2025 by rpki-client