$ rpki-client -vvf rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.mft File: cBB77LhKxM5elcxh0RCmcj-QycM.mft (raw, json) Hash identifier: Pk5sxfnbSZ/KyminnHQWAB6z6n7Ab7qeWOgC0pR+Pdg= Subject key identifier: B1:4C:54:91:68:82:25:FD:D9:15:47:EC:14:2A:45:B0:60:6F:5A:C7 Authority key identifier: 70:10:7B:EC:B8:4A:C4:CE:5E:95:CC:61:D1:10:A6:72:3F:90:C9:C3 Certificate issuer: /CN=A916C2B9/serialNumber=70107BECB84AC4CE5E95CC61D110A6723F90C9C3 Certificate serial: 010B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBB77LhKxM5elcxh0RCmcj-QycM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.mft Manifest number: 0109 Signing time: Thu 03 Jul 2025 05:11:50 +0000 Manifest this update: Thu 03 Jul 2025 05:11:49 +0000 Manifest next update: Thu 10 Jul 2025 05:11:49 +0000 Files and hashes: 1: cBB77LhKxM5elcxh0RCmcj-QycM.crl (hash: plK9A/TQaW+npKr7ruDmp+MEuz+1dIPeMJ07pH9A8s0=) 2: 4FB5C8F4C43D11EE973ADE48C4F9AE02.roa (hash: 1zjPjAAMi/TzSsloil5toyL9PUAMXEmH20tRK4X3XV8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.crl rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBB77LhKxM5elcxh0RCmcj-QycM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 267 (0x10b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C2B9, serialNumber=70107BECB84AC4CE5E95CC61D110A6723F90C9C3 Validity Not Before: Jul 3 05:11:49 2025 GMT Not After : Jul 10 05:11:49 2025 GMT Subject: CN=68661115-841b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1d:54:99:dc:52:1a:56:f1:7b:8f:e1:5c:bc: dd:a7:67:31:e9:cb:29:36:e2:6b:4a:d5:6e:20:7e: fe:64:82:fc:17:4b:57:48:ca:db:d6:70:3b:72:ad: c6:8c:50:e0:55:49:af:40:da:86:c6:06:d0:2b:3a: d9:41:e6:48:23:c1:9b:99:46:6a:80:79:35:a4:69: dc:fb:66:37:c6:64:ad:16:f4:2e:3b:f9:0c:95:8d: 4a:9d:59:bb:7e:14:15:92:d0:07:ad:e2:d5:a5:7e: a9:b9:c7:9f:47:06:67:5a:2d:95:83:7e:6c:71:eb: e3:db:01:ed:e0:d5:59:f8:bc:37:90:9f:bd:35:d2: f2:7e:6f:6b:a6:8e:93:b4:4a:fb:f9:57:78:86:5c: 0c:f8:73:bd:a8:f0:02:19:6c:c5:47:52:91:bc:25: 0a:11:c4:f1:29:9e:20:23:4b:57:ed:3b:b6:77:9e: 18:6b:53:1a:74:de:d5:d0:98:be:cd:6d:f7:19:0f: 78:98:18:78:f8:22:a0:39:44:b7:96:ae:14:39:f4: 0f:18:b1:84:d2:1f:4b:b0:26:c9:69:64:5c:5e:7e: 43:fb:ea:98:fe:e9:ed:ff:ef:bc:4a:6a:07:f5:d1: 71:8d:9d:cd:11:3a:72:98:21:60:d3:2a:cb:98:38: 4a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:4C:54:91:68:82:25:FD:D9:15:47:EC:14:2A:45:B0:60:6F:5A:C7 X509v3 Authority Key Identifier: keyid:70:10:7B:EC:B8:4A:C4:CE:5E:95:CC:61:D1:10:A6:72:3F:90:C9:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBB77LhKxM5elcxh0RCmcj-QycM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:9a:73:d6:60:2c:75:e7:4e:43:26:3a:03:9b:b3:94:72:19: 34:09:3c:00:60:75:85:95:be:79:95:8d:7f:ef:8b:7f:0e:83: ee:82:2d:5a:04:e0:d3:46:96:4e:cc:ea:35:d4:45:86:7b:d3: cc:8e:25:f1:95:55:ee:fc:20:b5:bd:9f:59:94:8b:71:7c:f6: 71:cb:0c:5c:45:d3:2b:61:da:6c:bd:12:89:0e:84:ab:e5:cc: b7:53:51:a0:8f:4b:61:3c:41:dc:b1:ee:30:fa:c9:b1:6e:cc: 5b:13:2f:44:cb:e2:f0:02:49:cd:29:13:c9:69:d8:b1:1a:54: 38:4c:67:e9:08:ef:75:51:8f:8a:06:6c:5f:3a:1e:5f:29:a3: 65:1d:64:6a:46:3b:08:9a:69:51:dd:05:eb:da:59:fa:a3:73: 54:35:e9:41:1c:0f:87:fd:cb:4a:30:5c:87:47:87:d4:16:20: 0e:3d:ca:64:8b:8c:86:b8:b6:91:b6:a1:48:8a:63:8b:9c:20: 78:34:8a:69:7d:02:4e:3c:95:15:0a:9c:ad:27:94:61:e2:ad: 1d:91:34:bd:31:b1:e3:ff:2c:61:dc:de:1b:88:23:de:4a:4d: 48:30:4c:a3:44:4b:b2:3b:cb:f5:e0:95:7a:79:1d:3e:15:ff: 3e:11:7b:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkMyQjkxMTAvBgNVBAUTKDcwMTA3QkVDQjg0QUM0Q0U1RTk1Q0M2MUQxMTBBNjcy M0Y5MEM5QzMwHhcNMjUwNzAzMDUxMTQ5WhcNMjUwNzEwMDUxMTQ5WjAYMRYwFAYD VQQDEw02ODY2MTExNS04NDFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvh1UmdxSGlbxe4/hXLzdp2cx6cspNuJrStVuIH7+ZIL8F0tXSMrb1nA7cq3G jFDgVUmvQNqGxgbQKzrZQeZII8GbmUZqgHk1pGnc+2Y3xmStFvQuO/kMlY1KnVm7 fhQVktAHreLVpX6pucefRwZnWi2Vg35scevj2wHt4NVZ+Lw3kJ+9NdLyfm9rpo6T tEr7+Vd4hlwM+HO9qPACGWzFR1KRvCUKEcTxKZ4gI0tX7Tu2d54Ya1MadN7V0Ji+ zW33GQ94mBh4+CKgOUS3lq4UOfQPGLGE0h9LsCbJaWRcXn5D++qY/unt/++8SmoH 9dFxjZ3NETpymCFg0yrLmDhKLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLFMVJFo giX92RVH7BQqRbBgb1rHMB8GA1UdIwQYMBaAFHAQe+y4SsTOXpXMYdEQpnI/kMnD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzJCOS8zMDY2OTlDQUMy QTIxMUVFOTFEOTUzNUNDNEY5QUUwMi9jQkI3N0xoS3hNNWVsY3hoMFJDbWNqLVF5 Y00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NCQjc3TGhLeE01ZWxjeGgwUkNtY2otUXljTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzJCOS8zMDY2OTlDQUMyQTIxMUVFOTFEOTUzNUNDNEY5QUUwMi9jQkI3N0xoS3hN NWVsY3hoMFJDbWNqLVF5Y00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALmnPWYCx1505DJjoDm7OUchk0CTwAYHWFlb55lY1/74t/DoPugi1a BODTRpZOzOo11EWGe9PMjiXxlVXu/CC1vZ9ZlItxfPZxywxcRdMrYdpsvRKJDoSr 5cy3U1Ggj0thPEHcse4w+smxbsxbEy9Ey+LwAknNKRPJadixGlQ4TGfpCO91UY+K BmxfOh5fKaNlHWRqRjsImmlR3QXr2ln6o3NUNelBHA+H/ctKMFyHR4fUFiAOPcpk i4yGuLaRtqFIimOLnCB4NIppfQJOPJUVCpytJ5Rh4q0dkTS9MbHj/yxh3N4biCPe Sk1IMEyjREuyO8v14JV6eR0+Ff8+EXu8 -----END CERTIFICATE-----Generated at Fri Jul 4 13:52:37 2025 by rpki-client