$ rpki-client -vvf rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft File: ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft (raw, json) Hash identifier: E7LbORretcqGujeUNuK62MWW75mhJYW9ZiJSIMf4pJw= Subject key identifier: 61:27:58:D5:6E:0F:E9:1A:41:E3:28:D3:2D:08:F2:E9:20:E3:6E:FE Authority key identifier: 49:3D:3E:AF:E0:40:57:28:41:E9:FA:B2:56:D0:C6:04:4C:B8:58:C8 Certificate issuer: /CN=A916C7B6/serialNumber=493D3EAFE040572841E9FAB256D0C6044CB858C8 Certificate serial: 0B5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ST0-r-BAVyhB6fqyVtDGBEy4WMg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft Manifest number: 0B53 Signing time: Sat 10 May 2025 18:53:16 +0000 Manifest this update: Sat 10 May 2025 18:53:15 +0000 Manifest next update: Sat 17 May 2025 18:53:15 +0000 Files and hashes: 1: ST0-r-BAVyhB6fqyVtDGBEy4WMg.crl (hash: fh3iAGUD7tA1EgpeOE3MeDzy7xbyJsUigbVNf+2Pb2U=) 2: 1A8553B831F011EAA18AC76AC4F9AE02.roa (hash: 2QDvhbtMSuUMKkHjiP/BzPb8Yd8fGPxfNmWlpQE2e54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.crl rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ST0-r-BAVyhB6fqyVtDGBEy4WMg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2906 (0xb5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C7B6, serialNumber=493D3EAFE040572841E9FAB256D0C6044CB858C8 Validity Not Before: May 10 18:53:15 2025 GMT Not After : May 17 18:53:15 2025 GMT Subject: CN=681fa09b-7f5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c7:a8:08:4d:06:33:02:7c:c5:fc:97:15:a4: 90:d2:6d:e3:f1:92:c0:e1:15:80:a0:5f:43:9d:47: 0e:2f:16:b4:d8:04:c4:67:1d:df:1c:25:84:ca:9b: 96:5e:36:45:7c:3c:e1:f1:fa:97:74:5f:7c:b0:c4: fd:a8:78:07:9d:11:c8:b1:28:04:7e:4e:22:f6:0a: 89:15:b7:a3:0f:ac:fd:33:c2:da:70:0c:cb:b2:5f: e5:0a:01:44:6c:5d:b9:20:42:7c:9b:65:00:4e:42: 77:c7:9e:8d:36:9d:44:ed:35:94:08:48:64:97:95: 40:97:5a:6e:68:1d:72:5c:e4:09:b1:8a:8d:f9:bc: 50:ed:fb:0b:9c:da:9c:c2:8c:0b:a5:75:50:7a:da: 72:77:0e:d4:40:9c:ab:40:9d:ce:e9:65:cf:62:d0: 34:0c:c7:9e:20:37:64:a6:de:4e:91:5a:6e:be:fb: 08:c3:60:cc:35:5d:8b:45:f3:c4:d7:aa:fe:dc:7f: 81:a4:d7:c5:0b:ab:60:39:8c:cb:40:ce:88:b0:6a: 15:65:24:f1:c2:51:38:b2:cd:a7:bb:c7:53:20:c4: 0d:ee:0c:2b:0d:1c:b4:65:ec:f2:32:cf:96:c9:6a: 28:68:59:8f:a1:36:93:28:98:3d:38:94:f5:b0:df: 4a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:27:58:D5:6E:0F:E9:1A:41:E3:28:D3:2D:08:F2:E9:20:E3:6E:FE X509v3 Authority Key Identifier: keyid:49:3D:3E:AF:E0:40:57:28:41:E9:FA:B2:56:D0:C6:04:4C:B8:58:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ST0-r-BAVyhB6fqyVtDGBEy4WMg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:cc:d8:1f:4b:f0:46:c4:2b:ea:61:26:a0:01:a0:f7:b5:b9: 33:ff:0d:f1:0f:4f:ae:e8:5a:39:2c:59:89:03:07:17:62:4a: bb:03:4a:c5:31:20:63:fb:12:4f:6b:96:f3:f8:db:53:b8:aa: 2c:2c:f8:40:91:f6:fa:e6:95:eb:f0:a0:8d:b9:31:13:a9:cd: 3e:b2:d7:04:79:c1:4b:ec:30:c1:fb:3e:5f:ac:d1:cd:6c:e0: ef:78:45:70:7c:89:a8:29:a1:91:81:df:4c:7c:d8:ea:dc:84: 21:a7:8e:7c:f7:f3:9d:ee:9c:8d:59:1e:1e:ac:81:31:ba:b0: 06:d2:8d:ca:22:d1:d1:1f:9b:a2:40:8b:2c:82:f9:ed:16:c0: 69:2b:37:23:45:98:4b:01:69:d0:17:9f:31:0a:9a:6d:b4:dc: 09:65:f1:13:0d:ea:ac:6d:ac:3c:e5:b6:d8:ca:39:05:7a:3b: d0:b5:8d:07:fe:78:51:83:cb:8c:8e:93:09:4d:67:3f:07:28: 70:a5:e7:bd:3f:b3:1b:fc:f5:d8:39:43:9a:d0:86:a1:95:9a: a9:76:6c:20:27:e6:ca:2e:51:27:4c:c1:77:d9:a0:57:24:88: f1:44:c1:4d:e9:88:09:14:9e:44:54:b4:db:18:8f:c1:ef:ba: 3d:78:11:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM3QjYxMTAvBgNVBAUTKDQ5M0QzRUFGRTA0MDU3Mjg0MUU5RkFCMjU2RDBDNjA0 NENCODU4QzgwHhcNMjUwNTEwMTg1MzE1WhcNMjUwNTE3MTg1MzE1WjAYMRYwFAYD VQQDEw02ODFmYTA5Yi03ZjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs8eoCE0GMwJ8xfyXFaSQ0m3j8ZLA4RWAoF9DnUcOLxa02ATEZx3fHCWEypuW XjZFfDzh8fqXdF98sMT9qHgHnRHIsSgEfk4i9gqJFbejD6z9M8LacAzLsl/lCgFE bF25IEJ8m2UATkJ3x56NNp1E7TWUCEhkl5VAl1puaB1yXOQJsYqN+bxQ7fsLnNqc wowLpXVQetpydw7UQJyrQJ3O6WXPYtA0DMeeIDdkpt5OkVpuvvsIw2DMNV2LRfPE 16r+3H+BpNfFC6tgOYzLQM6IsGoVZSTxwlE4ss2nu8dTIMQN7gwrDRy0ZezyMs+W yWooaFmPoTaTKJg9OJT1sN9KFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGEnWNVu D+kaQeMo0y0I8ukg427+MB8GA1UdIwQYMBaAFEk9Pq/gQFcoQen6slbQxgRMuFjI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzdCNi80M0Y2QTU3ODMx RUUxMUVBQUIwMUU3NjdDNEY5QUUwMi9TVDAtci1CQVZ5aEI2ZnF5VnRER0JFeTRX TWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NUMC1yLUJBVnloQjZmcXlWdERHQkV5NFdNZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzdCNi80M0Y2QTU3ODMxRUUxMUVBQUIwMUU3NjdDNEY5QUUwMi9TVDAtci1CQVZ5 aEI2ZnF5VnRER0JFeTRXTWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgzNgfS/BGxCvqYSagAaD3tbkz/w3xD0+u6Fo5LFmJAwcXYkq7A0rF MSBj+xJPa5bz+NtTuKosLPhAkfb65pXr8KCNuTETqc0+stcEecFL7DDB+z5frNHN bODveEVwfImoKaGRgd9MfNjq3IQhp4589/Od7pyNWR4erIExurAG0o3KItHRH5ui QIssgvntFsBpKzcjRZhLAWnQF58xCppttNwJZfETDeqsbaw85bbYyjkFejvQtY0H /nhRg8uMjpMJTWc/Byhwpee9P7Mb/PXYOUOa0IahlZqpdmwgJ+bKLlEnTMF32aBX JIjxRMFN6YgJFJ5EVLTbGI/B77o9eBFO -----END CERTIFICATE-----Generated at Sun May 11 15:33:35 2025 by rpki-client