$ rpki-client -vvf rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.mft File: M6OypTA7URezLn5FhqypRAiRh0I.mft (raw, json) Hash identifier: M6q5vSFGdpcpaEvrDm5IdGes74/2izgPG0+ZgBsqIeY= Subject key identifier: FF:E8:9C:5B:ED:5E:94:F9:BB:0A:A9:25:39:27:61:CE:FB:BC:4B:32 Authority key identifier: 33:A3:B2:A5:30:3B:51:17:B3:2E:7E:45:86:AC:A9:44:08:91:87:42 Certificate issuer: /CN=A914BBEF/serialNumber=33A3B2A5303B5117B32E7E4586ACA94408918742 Certificate serial: 0BBA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6OypTA7URezLn5FhqypRAiRh0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.mft Manifest number: 0BB1 Signing time: Sat 10 May 2025 18:43:19 +0000 Manifest this update: Sat 10 May 2025 18:43:19 +0000 Manifest next update: Sat 17 May 2025 18:43:19 +0000 Files and hashes: 1: M6OypTA7URezLn5FhqypRAiRh0I.crl (hash: 7OqNscU1dn0vBE8NO7ZSrCwvk0rfwDmvshRYVTcgHm4=) 2: 9E48E9821FB011EAAD480012C4F9AE02.roa (hash: RTDiXmwESTpSqKQ7Yx+y0Fq2bjlmzbj+gxNPdVcbubY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.crl rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6OypTA7URezLn5FhqypRAiRh0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:43:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3002 (0xbba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BBEF, serialNumber=33A3B2A5303B5117B32E7E4586ACA94408918742 Validity Not Before: May 10 18:43:19 2025 GMT Not After : May 17 18:43:19 2025 GMT Subject: CN=681f9e47-f672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7f:67:6d:59:6f:88:8f:e3:ac:74:74:b7:7f: b0:09:46:c0:f7:68:06:5b:6d:8c:ac:99:83:4b:e6: 64:67:c6:c1:da:e9:68:8c:e9:b1:2b:7f:ff:9c:2f: fa:04:44:4a:75:28:db:a7:ef:12:77:c8:7a:5c:2b: 16:a8:b9:d6:1b:9f:57:74:8a:77:25:ef:40:fe:5e: f5:ec:2d:7b:7c:42:02:fe:d9:74:fd:9a:f0:d5:44: 3e:e7:86:4a:a3:9c:2e:c1:92:02:8b:fc:39:e6:00: 76:bb:b2:58:b6:ef:f9:84:ec:ae:95:1b:43:90:06: 51:e7:84:59:46:5f:3a:58:d2:e3:8b:f8:0e:d5:d0: 98:ca:7a:24:d5:af:0f:85:ee:18:6c:ae:ff:aa:49: 08:74:c9:a7:f1:34:c4:0b:a9:17:ab:21:cd:87:cf: a0:8e:4c:83:3a:9f:e2:89:2b:89:ad:9b:88:1b:d4: 5e:90:21:1e:39:82:5a:35:9e:7e:09:06:ff:78:1b: 0d:87:de:15:2c:66:3f:1a:c0:68:a9:33:4c:5e:16: 13:0e:b9:86:f1:e6:5e:7e:2b:b3:db:72:44:b1:33: 4c:e9:71:74:57:66:8b:d2:63:d1:4e:1b:af:68:6d: 4e:aa:4e:ac:2c:4d:25:c2:78:e8:e5:94:e8:ee:d6: 58:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:E8:9C:5B:ED:5E:94:F9:BB:0A:A9:25:39:27:61:CE:FB:BC:4B:32 X509v3 Authority Key Identifier: keyid:33:A3:B2:A5:30:3B:51:17:B3:2E:7E:45:86:AC:A9:44:08:91:87:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6OypTA7URezLn5FhqypRAiRh0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:0f:05:4d:17:7a:41:ef:2f:46:1d:7d:7e:18:8a:ed:51:1f: 3c:b9:3f:ef:9a:e2:45:3f:dc:bf:94:6a:d0:40:22:39:b8:97: 9a:77:fb:94:35:e6:d0:6f:f2:a4:4b:c2:8f:2d:1a:cb:0e:5c: 99:24:2e:4b:c5:34:95:12:b7:d9:87:06:d5:95:9a:97:6b:1f: c5:51:e1:6a:32:44:aa:60:e7:12:60:41:06:0c:25:e5:ff:39: 5e:ce:a2:33:11:a2:5b:a8:3c:73:72:ae:1f:c9:93:a3:86:51: 2f:cc:46:3e:c5:0d:bf:09:62:80:fd:ef:bd:2d:bb:1f:ad:c5: 8a:05:4d:b4:7c:33:e8:08:30:fa:ac:8e:bc:00:e1:4b:1d:f7: 62:91:fe:ba:ca:b9:13:3f:b8:22:15:d2:9a:73:1c:35:51:0c: 7b:64:f5:46:21:fa:f7:f0:c5:88:11:0d:40:67:0f:3d:33:ed: 5d:2e:a3:3e:9f:58:fd:a1:fd:6f:2a:ab:37:27:aa:86:00:8f: ee:36:76:71:b0:d3:fd:d2:53:9d:cb:5b:39:3b:72:73:a3:43: 44:dc:7d:21:46:79:38:73:0e:ed:a6:99:10:5c:22:9c:d6:85: df:0b:b5:7f:cf:96:46:1a:cf:c2:22:98:88:5a:45:19:ee:ce: df:1c:2f:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJCRUYxMTAvBgNVBAUTKDMzQTNCMkE1MzAzQjUxMTdCMzJFN0U0NTg2QUNBOTQ0 MDg5MTg3NDIwHhcNMjUwNTEwMTg0MzE5WhcNMjUwNTE3MTg0MzE5WjAYMRYwFAYD VQQDEw02ODFmOWU0Ny1mNjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApH9nbVlviI/jrHR0t3+wCUbA92gGW22MrJmDS+ZkZ8bB2ulojOmxK3//nC/6 BERKdSjbp+8Sd8h6XCsWqLnWG59XdIp3Je9A/l717C17fEIC/tl0/Zrw1UQ+54ZK o5wuwZICi/w55gB2u7JYtu/5hOyulRtDkAZR54RZRl86WNLji/gO1dCYynok1a8P he4YbK7/qkkIdMmn8TTEC6kXqyHNh8+gjkyDOp/iiSuJrZuIG9RekCEeOYJaNZ5+ CQb/eBsNh94VLGY/GsBoqTNMXhYTDrmG8eZefiuz23JEsTNM6XF0V2aL0mPRThuv aG1Oqk6sLE0lwnjo5ZTo7tZYNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP/onFvt XpT5uwqpJTknYc77vEsyMB8GA1UdIwQYMBaAFDOjsqUwO1EXsy5+RYasqUQIkYdC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkJFRi9GOTAzMDI2MDFG QUUxMUVBOTM2MEZGMEVDNEY5QUUwMi9NNk95cFRBN1VSZXpMbjVGaHF5cFJBaVJo MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL002T3lwVEE3VVJlekxuNUZocXlwUkFpUmgwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkJFRi9GOTAzMDI2MDFGQUUxMUVBOTM2MEZGMEVDNEY5QUUwMi9NNk95cFRBN1VS ZXpMbjVGaHF5cFJBaVJoMEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiDwVNF3pB7y9GHX1+GIrtUR88uT/vmuJFP9y/lGrQQCI5uJead/uU NebQb/KkS8KPLRrLDlyZJC5LxTSVErfZhwbVlZqXax/FUeFqMkSqYOcSYEEGDCXl /zlezqIzEaJbqDxzcq4fyZOjhlEvzEY+xQ2/CWKA/e+9LbsfrcWKBU20fDPoCDD6 rI68AOFLHfdikf66yrkTP7giFdKacxw1UQx7ZPVGIfr38MWIEQ1AZw89M+1dLqM+ n1j9of1vKqs3J6qGAI/uNnZxsNP90lOdy1s5O3Jzo0NE3H0hRnk4cw7tppkQXCKc 1oXfC7V/z5ZGGs/CIpiIWkUZ7s7fHC+0 -----END CERTIFICATE-----Generated at Mon May 12 01:51:38 2025 by rpki-client