$ rpki-client -vvf rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/pBUE5m4xRDSGJRkGluDoj_sfUnA.mft File: pBUE5m4xRDSGJRkGluDoj_sfUnA.mft (raw, json) Hash identifier: IPDp3ky5n0Ji23o0QwXdhw/NdUsh0JctYlzzA4dB8ak= Subject key identifier: 15:91:29:FC:D2:AF:42:73:48:DC:79:C3:A2:E7:65:71:A5:87:01:C4 Authority key identifier: A4:15:04:E6:6E:31:44:34:86:25:19:06:96:E0:E8:8F:FB:1F:52:70 Certificate issuer: /CN=A915D9C1/serialNumber=A41504E66E3144348625190696E0E88FFB1F5270 Certificate serial: 72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBUE5m4xRDSGJRkGluDoj_sfUnA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/pBUE5m4xRDSGJRkGluDoj_sfUnA.mft Manifest number: 70 Signing time: Sun 29 Jun 2025 05:56:59 +0000 Manifest this update: Sun 29 Jun 2025 05:56:59 +0000 Manifest next update: Sun 06 Jul 2025 05:56:59 +0000 Files and hashes: 1: pBUE5m4xRDSGJRkGluDoj_sfUnA.crl (hash: r8wl/9lXBNJM2KZfP/+WnFqQggPnLle6Gi9PYFlJDxg=) 2: C17B1042AD7211EFBD28595FC4F9AE02.roa (hash: 6k1OeDAZbCrNksIQf+J6HTs1CPc04jpy2MtgiZuWAoM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/pBUE5m4xRDSGJRkGluDoj_sfUnA.crl rsync://rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/pBUE5m4xRDSGJRkGluDoj_sfUnA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBUE5m4xRDSGJRkGluDoj_sfUnA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 05:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 114 (0x72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D9C1, serialNumber=A41504E66E3144348625190696E0E88FFB1F5270 Validity Not Before: Jun 29 05:56:59 2025 GMT Not After : Jul 6 05:56:59 2025 GMT Subject: CN=6860d5ab-32dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:bc:30:ee:a1:1f:f4:ae:2d:55:84:0a:c3:8f: 47:4c:09:0c:0c:7b:37:dc:41:54:40:1e:13:8f:ed: 46:8e:d2:06:32:80:05:9e:0d:63:07:82:06:99:ac: f3:d4:6b:07:b7:3f:5d:ce:91:6b:f6:68:12:e2:12: 33:4d:59:22:af:a6:c8:45:ec:43:80:49:96:e0:8c: 2f:69:e7:66:94:e2:95:97:34:ec:be:b1:91:aa:fd: 8c:a3:88:a8:82:78:82:14:d9:32:fb:92:ac:0f:c4: 9a:be:2a:97:d7:3d:74:4f:78:f7:09:be:cd:3a:b6: b3:30:a8:09:da:75:d1:39:67:2d:49:2d:5d:ce:6e: f0:73:69:3c:e7:da:39:a6:dc:bd:d4:c3:cc:e4:5d: 2d:dd:4f:7d:98:fe:f0:14:2d:22:fc:9b:7c:d4:6b: c0:73:7e:71:c6:37:98:e6:e6:f6:af:43:c0:cf:62: a7:2c:12:df:45:36:7a:50:b0:98:7a:db:7d:61:e9: 7d:68:5e:ed:bf:7b:48:09:6b:4d:13:72:6c:ce:b9: d3:d7:40:62:d1:78:12:68:cd:00:ae:1d:3f:80:4e: b5:19:0e:60:14:42:a2:f3:8a:31:bd:d0:90:58:dc: 60:fe:27:f2:16:72:ef:50:de:ad:ad:6d:9e:44:fc: b1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:91:29:FC:D2:AF:42:73:48:DC:79:C3:A2:E7:65:71:A5:87:01:C4 X509v3 Authority Key Identifier: keyid:A4:15:04:E6:6E:31:44:34:86:25:19:06:96:E0:E8:8F:FB:1F:52:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/pBUE5m4xRDSGJRkGluDoj_sfUnA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBUE5m4xRDSGJRkGluDoj_sfUnA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/pBUE5m4xRDSGJRkGluDoj_sfUnA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:73:8e:8d:48:36:3a:8b:c3:18:0e:be:e6:28:14:9c:7c:ff: 9b:c6:98:f3:2f:cb:03:81:b9:90:c0:d9:bb:4c:ab:e1:f5:fc: fe:1e:3a:c7:bb:e8:ac:b8:be:ea:8e:55:92:53:85:1d:c0:08: 32:c0:d4:f2:62:5d:1a:4e:2e:4f:5c:b0:f1:39:4f:7b:83:31: fe:bb:d1:d1:67:aa:84:09:ce:8a:ff:ae:22:0d:a3:df:d3:11: 99:cc:12:c7:e9:96:5c:5a:39:3e:5b:4f:90:f2:9a:dc:52:d3: cf:b8:86:da:a6:19:1a:e1:5e:ac:a5:e3:34:5e:6f:36:b9:67: d2:45:c1:2c:11:2c:1f:4f:bd:ff:cf:b1:d0:6f:f1:65:0f:36: 58:9e:ff:5b:cc:10:d2:8c:df:f4:5b:40:70:75:71:6d:b6:35: 2f:90:4e:6d:e1:e4:be:28:f7:28:e0:b4:be:75:ee:20:6e:b2: 83:9e:52:b1:9d:b5:88:80:36:cd:e0:6a:77:e7:df:77:21:17: cc:bd:39:29:ee:aa:26:77:dd:0d:fe:04:54:a1:21:b5:41:ca: df:86:fb:4b:05:1e:73:f1:7c:52:e0:30:0b:ce:71:4b:6d:40: 36:96:17:d6:17:10:88:ca:b6:5e:f3:cc:42:d9:e6:4a:1f:8d: 3e:e3:b9:26 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RDlDMTExMC8GA1UEBRMoQTQxNTA0RTY2RTMxNDQzNDg2MjUxOTA2OTZFMEU4OEZG QjFGNTI3MDAeFw0yNTA2MjkwNTU2NTlaFw0yNTA3MDYwNTU2NTlaMBgxFjAUBgNV BAMTDTY4NjBkNWFiLTMyZGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTvDDuoR/0ri1VhArDj0dMCQwMezfcQVRAHhOP7UaO0gYygAWeDWMHggaZrPPU awe3P13OkWv2aBLiEjNNWSKvpshF7EOASZbgjC9p52aU4pWXNOy+sZGq/YyjiKiC eIIU2TL7kqwPxJq+KpfXPXRPePcJvs06trMwqAnaddE5Zy1JLV3ObvBzaTzn2jmm 3L3Uw8zkXS3dT32Y/vAULSL8m3zUa8BzfnHGN5jm5vavQ8DPYqcsEt9FNnpQsJh6 231h6X1oXu2/e0gJa00TcmzOudPXQGLReBJozQCuHT+ATrUZDmAUQqLzijG90JBY 3GD+J/IWcu9Q3q2tbZ5E/LEJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFZEp/NKv QnNI3HnDoudlcaWHAcQwHwYDVR0jBBgwFoAUpBUE5m4xRDSGJRkGluDoj/sfUnAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVEOUMxLzMwODA1Q0FBQUQ3 MjExRUZBREYyMzQ1RUM0RjlBRTAyL3BCVUU1bTR4UkRTR0pSa0dsdURval9zZlVu QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcEJVRTVtNHhSRFNHSlJrR2x1RG9qX3NmVW5BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVE OUMxLzMwODA1Q0FBQUQ3MjExRUZBREYyMzQ1RUM0RjlBRTAyL3BCVUU1bTR4UkRT R0pSa0dsdURval9zZlVuQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAlzjo1INjqLwxgOvuYoFJx8/5vGmPMvywOBuZDA2btMq+H1/P4eOse7 6Ky4vuqOVZJThR3ACDLA1PJiXRpOLk9csPE5T3uDMf670dFnqoQJzor/riINo9/T EZnMEsfpllxaOT5bT5DymtxS08+4htqmGRrhXqyl4zRebza5Z9JFwSwRLB9Pvf/P sdBv8WUPNlie/1vMENKM3/RbQHB1cW22NS+QTm3h5L4o9yjgtL517iBusoOeUrGd tYiANs3ganfn33chF8y9OSnuqiZ33Q3+BFShIbVByt+G+0sFHnPxfFLgMAvOcUtt QDaWF9YXEIjKtl7zzELZ5kofjT7juSY= -----END CERTIFICATE-----Generated at Mon Jun 30 16:00:19 2025 by rpki-client