$ rpki-client -vvf rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft File: 0ba-fNUVRYE-wxdmgHrN2YepD98.mft (raw, json) Hash identifier: 8OAcnIiFXGs84C6wgLnKe7mr5lfBwfFgfG7TCq4KtSk= Subject key identifier: 2E:20:12:75:6E:56:79:EF:EA:10:E8:C8:30:09:79:4A:B1:D8:79:05 Authority key identifier: D1:B6:BE:7C:D5:15:45:81:3E:C3:17:66:80:7A:CD:D9:87:A9:0F:DF Certificate issuer: /CN=A915418F/serialNumber=D1B6BE7CD51545813EC31766807ACDD987A90FDF Certificate serial: 08FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ba-fNUVRYE-wxdmgHrN2YepD98.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft Manifest number: 08F1 Signing time: Wed 02 Jul 2025 20:38:33 +0000 Manifest this update: Wed 02 Jul 2025 20:38:33 +0000 Manifest next update: Wed 09 Jul 2025 20:38:33 +0000 Files and hashes: 1: 0ba-fNUVRYE-wxdmgHrN2YepD98.crl (hash: LcOckoPX7GLNFy+nkGT+BRzxq2aWuLgBml62ebPY+7I=) 2: 3BEF1820AFBA11EA8449B980C4F9AE02.roa (hash: bj4egIAAlTEUd+3GyfnPFN1nOaWoeA00wwzQy3Jloew=) 3: F4757B1018C811EB94A5327AC4F9AE02.roa (hash: j+7FuDdUw+7PzuykOYS3riW81hh3FFiLyNobRrPETRw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.crl rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ba-fNUVRYE-wxdmgHrN2YepD98.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:38:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2302 (0x8fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915418F, serialNumber=D1B6BE7CD51545813EC31766807ACDD987A90FDF Validity Not Before: Jul 2 20:38:33 2025 GMT Not After : Jul 9 20:38:33 2025 GMT Subject: CN=686598c9-f701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a3:9b:8e:89:7c:60:80:77:97:4e:d0:5f:7e: 4f:f8:c7:52:94:14:71:6e:4c:b5:b7:f1:4c:13:11: b3:d1:3e:98:a4:b5:1e:38:72:b5:69:45:44:2a:ac: 32:64:9f:53:10:fe:b0:17:4a:ff:de:b3:4a:fa:49: 38:e2:1f:0b:2d:d6:44:45:34:08:9e:85:14:7e:6a: f0:27:f3:f1:22:05:d9:0d:4b:55:54:fb:ce:ad:26: 31:9c:4d:67:73:4b:dc:83:28:db:a6:5b:56:53:b7: d5:6a:76:37:15:81:0b:1b:b7:c8:e1:45:41:4a:2e: 13:53:1e:ff:1d:27:14:d7:32:f9:33:a5:3a:20:cc: d4:4c:66:1f:70:f4:d2:25:25:fa:1e:3d:c8:20:b3: 97:aa:5f:2b:6e:04:91:68:32:2f:e5:d0:dd:3f:ad: cc:13:2c:bf:39:4d:6e:13:8e:d2:9d:6a:c6:4c:b0: b0:24:1c:2f:6a:c6:2f:48:80:7a:2b:93:6c:89:36: e4:06:30:43:8a:b5:65:a4:ec:ea:26:70:e6:8f:b5: 3e:88:7f:4c:e9:02:bd:d0:46:d2:a4:59:60:52:54: 41:86:72:f0:2e:89:01:54:bc:fd:ed:1b:95:1f:ef: a0:a4:7d:cd:00:ba:23:8b:16:fb:98:01:31:72:c6: 5d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:20:12:75:6E:56:79:EF:EA:10:E8:C8:30:09:79:4A:B1:D8:79:05 X509v3 Authority Key Identifier: keyid:D1:B6:BE:7C:D5:15:45:81:3E:C3:17:66:80:7A:CD:D9:87:A9:0F:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ba-fNUVRYE-wxdmgHrN2YepD98.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:1b:e8:dc:b6:ae:f5:7a:f8:13:a3:2b:fe:34:6e:93:00:23: df:0a:15:4f:f9:5a:29:96:a1:07:86:1e:04:d0:97:e4:09:76: 96:fc:12:4c:6c:28:90:65:e1:cb:db:7d:5c:84:b0:34:37:58: cd:5c:bf:e0:4c:be:36:14:d3:15:52:ce:57:a5:55:10:b6:d4: d6:1b:ee:46:0c:f0:fa:36:59:f7:5f:b9:a4:78:48:fd:2f:3c: 66:ee:ed:32:f3:bb:a7:33:ba:77:84:ef:a0:b6:b3:de:1a:27: b7:82:84:91:c3:3e:94:8a:e7:75:e5:41:a2:33:cc:f1:1d:6f: b1:9d:a1:b2:9c:44:9a:ed:d9:72:6e:69:1c:e3:16:c5:d0:5b: 21:7e:40:df:a2:ab:83:c2:d6:e4:53:06:cf:27:e9:ae:ce:fa: 83:da:d9:e4:54:fb:98:e8:02:e3:43:63:f1:f1:99:ba:79:ea: 16:40:5d:63:ba:da:52:d6:28:3f:9a:6c:0c:82:de:3f:a9:d0: df:66:37:73:21:1a:91:55:e6:81:57:3c:5d:bd:b4:99:7c:51: 15:e3:b0:ef:c0:fb:bb:c3:57:f0:7d:a0:f4:fa:49:30:39:f2: 98:c5:18:13:09:79:2d:c3:bf:2c:2a:85:54:92:16:e2:db:15: a3:e0:48:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQxOEYxMTAvBgNVBAUTKEQxQjZCRTdDRDUxNTQ1ODEzRUMzMTc2NjgwN0FDREQ5 ODdBOTBGREYwHhcNMjUwNzAyMjAzODMzWhcNMjUwNzA5MjAzODMzWjAYMRYwFAYD VQQDEw02ODY1OThjOS1mNzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqqObjol8YIB3l07QX35P+MdSlBRxbky1t/FMExGz0T6YpLUeOHK1aUVEKqwy ZJ9TEP6wF0r/3rNK+kk44h8LLdZERTQInoUUfmrwJ/PxIgXZDUtVVPvOrSYxnE1n c0vcgyjbpltWU7fVanY3FYELG7fI4UVBSi4TUx7/HScU1zL5M6U6IMzUTGYfcPTS JSX6Hj3IILOXql8rbgSRaDIv5dDdP63MEyy/OU1uE47SnWrGTLCwJBwvasYvSIB6 K5NsiTbkBjBDirVlpOzqJnDmj7U+iH9M6QK90EbSpFlgUlRBhnLwLokBVLz97RuV H++gpH3NALojixb7mAExcsZdqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC4gEnVu Vnnv6hDoyDAJeUqx2HkFMB8GA1UdIwQYMBaAFNG2vnzVFUWBPsMXZoB6zdmHqQ/f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDE4Ri83NUI5MEQyNEFG QjgxMUVBQTc2RTVFN0JDNEY5QUUwMi8wYmEtZk5VVlJZRS13eGRtZ0hyTjJZZXBE OTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBiYS1mTlVWUllFLXd4ZG1nSHJOMlllcEQ5OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDE4Ri83NUI5MEQyNEFGQjgxMUVBQTc2RTVFN0JDNEY5QUUwMi8wYmEtZk5VVlJZ RS13eGRtZ0hyTjJZZXBEOTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFG+jctq71evgToyv+NG6TACPfChVP+VoplqEHhh4E0JfkCXaW/BJM bCiQZeHL231chLA0N1jNXL/gTL42FNMVUs5XpVUQttTWG+5GDPD6Nln3X7mkeEj9 Lzxm7u0y87unM7p3hO+gtrPeGie3goSRwz6Uiud15UGiM8zxHW+xnaGynESa7dly bmkc4xbF0FshfkDfoquDwtbkUwbPJ+muzvqD2tnkVPuY6ALjQ2Px8Zm6eeoWQF1j utpS1ig/mmwMgt4/qdDfZjdzIRqRVeaBVzxdvbSZfFEV47DvwPu7w1fwfaD0+kkw OfKYxRgTCXktw78sKoVUkhbi2xWj4EiL -----END CERTIFICATE-----Generated at Thu Jul 3 16:45:57 2025 by rpki-client