$ rpki-client -vvf rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.mft File: BB1RkkfEbnP2pn3ffJBJv_J5wLc.mft (raw, json) Hash identifier: WXSfyPv/Ms6jKM55yJ3NT9zJSgp5WrCxPYjwHON0f44= Subject key identifier: 5D:A4:46:EA:3E:15:7E:20:DC:93:DF:8D:1F:1C:C3:D6:52:91:E1:3E Authority key identifier: 04:1D:51:92:47:C4:6E:73:F6:A6:7D:DF:7C:90:49:BF:F2:79:C0:B7 Certificate issuer: /CN=A9165B02/serialNumber=041D519247C46E73F6A67DDF7C9049BFF279C0B7 Certificate serial: 05CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BB1RkkfEbnP2pn3ffJBJv_J5wLc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.mft Manifest number: 05C6 Signing time: Wed 14 May 2025 23:07:01 +0000 Manifest this update: Wed 14 May 2025 23:07:00 +0000 Manifest next update: Wed 21 May 2025 23:07:00 +0000 Files and hashes: 1: BB1RkkfEbnP2pn3ffJBJv_J5wLc.crl (hash: 19gbNIBnUFja8qNdr+acsP/2VNVUuU60Y7/w8OS7mkI=) 2: CEEBA382BD1511EB9E873260C4F9AE02.roa (hash: SXzW5vEmVU+GCJ/5C4H8HxVaw63CXUsgN+mA1S8Q1HE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.crl rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BB1RkkfEbnP2pn3ffJBJv_J5wLc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 23:07:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1483 (0x5cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165B02, serialNumber=041D519247C46E73F6A67DDF7C9049BFF279C0B7 Validity Not Before: May 14 23:07:00 2025 GMT Not After : May 21 23:07:00 2025 GMT Subject: CN=68252215-569f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c3:84:5d:51:95:8b:0f:3a:70:f9:70:47:04: eb:78:ed:bb:a7:23:88:8c:25:aa:67:b4:fe:7b:c6: 85:81:6e:ac:de:15:fa:d2:6c:8c:36:71:c0:66:c2: ac:c2:bd:bc:78:db:da:f8:de:40:ef:ce:20:d4:6b: dd:fd:91:3d:e8:75:6d:1d:9e:bd:c5:68:a3:e5:06: ee:58:2f:85:ec:52:c8:30:e9:2e:63:da:26:79:b0: 69:a1:1d:84:5e:10:cc:97:51:5f:9b:7f:fa:70:60: e8:55:00:ad:64:54:36:c5:98:6c:f9:29:f2:59:97: b0:fd:76:90:4f:e6:f8:68:0d:60:21:38:54:a1:ee: 5a:3d:fa:cb:bd:9a:6e:52:9c:1f:d6:cf:31:47:e2: a5:8a:f5:02:c1:87:39:48:8e:3b:b9:99:73:ca:49: d5:95:57:da:85:46:be:50:b5:bd:c5:79:c6:74:ea: ed:91:51:39:50:4e:f6:42:eb:d8:62:c8:ca:05:21: 08:88:cf:a6:3f:2d:a8:05:bb:cd:44:77:d5:40:db: de:59:fb:77:08:d5:8b:29:18:87:d4:2b:3f:d9:09: 1c:52:bc:53:fe:03:2f:1b:62:03:6f:45:48:40:1c: 98:6f:e3:ae:a6:7e:c7:a4:a9:94:f7:31:b5:f2:75: f5:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:A4:46:EA:3E:15:7E:20:DC:93:DF:8D:1F:1C:C3:D6:52:91:E1:3E X509v3 Authority Key Identifier: keyid:04:1D:51:92:47:C4:6E:73:F6:A6:7D:DF:7C:90:49:BF:F2:79:C0:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BB1RkkfEbnP2pn3ffJBJv_J5wLc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:7d:45:5c:2d:c2:d6:6f:3a:af:93:cc:f9:40:42:d6:38:ce: d8:33:3e:ae:0f:86:00:ff:3a:7a:a1:dd:aa:da:56:59:10:82: 2c:bd:90:39:db:ee:69:bc:f5:30:0b:cb:0f:04:66:43:24:92: 84:bc:b5:ea:f7:75:41:d0:01:68:d4:a1:cd:8c:62:34:5d:49: 15:d2:70:46:06:af:a7:df:ba:7e:64:07:6e:17:52:e3:3a:9b: e2:56:d0:f6:82:10:54:87:67:08:50:c4:4e:e0:db:67:cf:0c: b1:2c:34:9f:1b:33:d4:78:6a:2f:da:aa:ca:b8:6d:2f:7b:17: 29:00:d7:17:a5:59:3b:aa:7b:06:ce:98:8b:94:58:d5:44:49: ea:a0:03:d8:4d:71:ae:37:d6:62:33:c9:2f:a6:95:68:df:78: e3:95:cf:96:f8:b6:cf:ea:93:0b:e5:58:22:8c:55:5a:37:1f: a6:83:68:b5:a3:5b:8d:10:0f:b0:a8:90:4d:e6:de:4e:da:9b: 14:5a:ee:4d:02:85:88:57:0f:1b:1f:58:48:a1:b0:bc:78:08: 19:c9:16:79:71:fd:52:4d:0a:c3:5d:14:1b:d7:d0:39:e3:51: c2:b4:1d:ab:f9:e6:97:b7:2a:4c:b6:8c:8e:03:cf:8f:e6:87: 13:49:0e:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVCMDIxMTAvBgNVBAUTKDA0MUQ1MTkyNDdDNDZFNzNGNkE2N0RERjdDOTA0OUJG RjI3OUMwQjcwHhcNMjUwNTE0MjMwNzAwWhcNMjUwNTIxMjMwNzAwWjAYMRYwFAYD VQQDEw02ODI1MjIxNS01NjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2sOEXVGViw86cPlwRwTreO27pyOIjCWqZ7T+e8aFgW6s3hX60myMNnHAZsKs wr28eNva+N5A784g1Gvd/ZE96HVtHZ69xWij5QbuWC+F7FLIMOkuY9omebBpoR2E XhDMl1Ffm3/6cGDoVQCtZFQ2xZhs+SnyWZew/XaQT+b4aA1gIThUoe5aPfrLvZpu Upwf1s8xR+KlivUCwYc5SI47uZlzyknVlVfahUa+ULW9xXnGdOrtkVE5UE72QuvY YsjKBSEIiM+mPy2oBbvNRHfVQNveWft3CNWLKRiH1Cs/2QkcUrxT/gMvG2IDb0VI QByYb+Oupn7HpKmU9zG18nX1ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF2kRuo+ FX4g3JPfjR8cw9ZSkeE+MB8GA1UdIwQYMBaAFAQdUZJHxG5z9qZ933yQSb/yecC3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUIwMi85NUEzOEVGNkJE MTQxMUVCQjVFRUZENUZDNEY5QUUwMi9CQjFSa2tmRWJuUDJwbjNmZkpCSnZfSjV3 TGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JCMVJra2ZFYm5QMnBuM2ZmSkJKdl9KNXdMYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NUIwMi85NUEzOEVGNkJEMTQxMUVCQjVFRUZENUZDNEY5QUUwMi9CQjFSa2tmRWJu UDJwbjNmZkpCSnZfSjV3TGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6fUVcLcLWbzqvk8z5QELWOM7YMz6uD4YA/zp6od2q2lZZEIIsvZA5 2+5pvPUwC8sPBGZDJJKEvLXq93VB0AFo1KHNjGI0XUkV0nBGBq+n37p+ZAduF1Lj OpviVtD2ghBUh2cIUMRO4NtnzwyxLDSfGzPUeGov2qrKuG0vexcpANcXpVk7qnsG zpiLlFjVREnqoAPYTXGuN9ZiM8kvppVo33jjlc+W+LbP6pML5VgijFVaNx+mg2i1 o1uNEA+wqJBN5t5O2psUWu5NAoWIVw8bH1hIobC8eAgZyRZ5cf1STQrDXRQb19A5 41HCtB2r+eaXtypMtoyOA8+P5ocTSQ6H -----END CERTIFICATE-----Generated at Thu May 15 15:41:45 2025 by rpki-client