$ rpki-client -vvf rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft File: B_MbR0cTs6FSxqX49I3tIJfcJB8.mft (raw, json) Hash identifier: GEtKlw29MRyXNIlNkr8AfESseRRSGrqv6r3iiNgaK7w= Subject key identifier: 1F:A7:56:92:0F:89:27:F4:86:F0:BD:9D:09:EC:45:FD:C4:D4:DF:99 Authority key identifier: 07:F3:1B:47:47:13:B3:A1:52:C6:A5:F8:F4:8D:ED:20:97:DC:24:1F Certificate issuer: /CN=A9170D3E/serialNumber=07F31B474713B3A152C6A5F8F48DED2097DC241F Certificate serial: 78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_MbR0cTs6FSxqX49I3tIJfcJB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft Manifest number: 77 Signing time: Tue 01 Jul 2025 07:31:00 +0000 Manifest this update: Tue 01 Jul 2025 07:31:00 +0000 Manifest next update: Tue 08 Jul 2025 07:31:00 +0000 Files and hashes: 1: B_MbR0cTs6FSxqX49I3tIJfcJB8.crl (hash: c1qxD2cEvZHYnN+k7R063dJWJIr9vQIUECjAYJY7P4I=) 2: 232F490A9FD811EFA92BE338C4F9AE02.roa (hash: oshENdblJra/vyPm3h+L7O2yi470pUSFRiQdE49uRfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.crl rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_MbR0cTs6FSxqX49I3tIJfcJB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:30:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170D3E, serialNumber=07F31B474713B3A152C6A5F8F48DED2097DC241F Validity Not Before: Jul 1 07:31:00 2025 GMT Not After : Jul 8 07:31:00 2025 GMT Subject: CN=68638eb4-5f6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:33:c3:44:1c:a8:e1:a4:13:10:b5:a7:11:52: 45:e1:34:86:f4:b9:09:21:0a:15:46:ab:14:c5:21: 35:43:18:7f:d6:b2:cd:ae:13:d4:22:1d:72:91:e1: 30:bc:60:15:1e:6d:5e:a3:d9:2c:d5:25:75:88:61: a8:72:4f:1d:49:cf:a0:90:ec:1d:e8:97:de:70:6b: 2b:7c:79:33:05:bd:d0:1b:d2:5d:93:bb:8b:44:4a: fe:64:fb:a2:c2:ef:4f:04:ff:2e:df:fa:19:16:65: 6c:a2:67:ad:a6:fd:30:64:a5:ff:d2:af:90:e1:02: c1:3a:bb:94:e5:9b:14:16:f5:9d:be:fd:08:d2:23: cd:15:ba:45:4e:3a:80:9a:45:db:1f:82:c7:5f:0a: 59:78:02:83:98:cc:67:49:8d:d3:5f:5c:c3:1d:09: 33:a4:ee:53:dd:46:5b:e9:08:fd:c2:02:fc:f2:c2: 44:93:ac:77:b4:36:34:8e:1e:19:72:c6:e0:fa:cf: 35:d7:67:15:8b:37:ce:74:83:88:b8:6a:33:ff:ea: ba:01:ba:e9:89:75:0a:3a:b3:33:a9:a4:c1:4e:dd: 91:eb:6d:d8:91:94:04:ad:2c:ce:7c:7b:70:c7:a5: cb:ed:4c:8b:d8:5e:6d:a2:d1:78:35:93:0f:30:93: 62:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:A7:56:92:0F:89:27:F4:86:F0:BD:9D:09:EC:45:FD:C4:D4:DF:99 X509v3 Authority Key Identifier: keyid:07:F3:1B:47:47:13:B3:A1:52:C6:A5:F8:F4:8D:ED:20:97:DC:24:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_MbR0cTs6FSxqX49I3tIJfcJB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:db:5a:4d:71:e8:08:4a:19:67:4b:3e:97:ea:f7:60:55:ae: ae:b9:d3:e9:e2:7f:3e:80:40:46:e9:41:60:ce:36:5b:cc:f2: c1:7e:4e:d4:b8:c3:17:b7:a9:e1:14:20:31:a5:96:1c:37:7b: 3b:f5:af:2d:e7:98:47:a5:0d:75:56:34:e9:60:1a:e6:8d:c2: 01:bf:cd:de:3d:ae:2e:95:f8:20:dd:bc:e3:b8:b1:5d:03:da: 79:01:fd:c2:be:b1:76:a6:41:19:73:14:3b:8e:7d:53:08:48: ef:02:22:d7:1b:32:c7:55:77:a4:97:2a:d1:8b:68:79:53:ff: 7f:be:2c:4f:27:35:d4:e1:23:6f:df:ba:fa:c4:de:0e:db:7a: 31:88:90:87:ba:78:e4:8d:8b:db:ae:bb:8a:95:11:e8:ea:b4: 96:1c:11:72:1f:08:2a:6c:ca:20:1b:bd:ef:a0:61:4b:c1:91: 5f:12:79:fb:7b:cc:7a:60:80:61:72:99:74:31:95:77:2c:f4: 2e:7e:c4:40:64:79:a1:8e:91:d1:7c:a2:13:41:cc:d0:62:8f: f4:61:b2:88:b0:8a:82:cd:d0:60:ac:eb:f6:d8:8a:75:e6:6b: 6a:57:1f:4a:dd:3b:04:b2:4e:3f:8c:43:bc:62:9f:92:93:68: 0f:f2:f7:80 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MEQzRTExMC8GA1UEBRMoMDdGMzFCNDc0NzEzQjNBMTUyQzZBNUY4RjQ4REVEMjA5 N0RDMjQxRjAeFw0yNTA3MDEwNzMxMDBaFw0yNTA3MDgwNzMxMDBaMBgxFjAUBgNV BAMTDTY4NjM4ZWI0LTVmNmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDgM8NEHKjhpBMQtacRUkXhNIb0uQkhChVGqxTFITVDGH/Wss2uE9QiHXKR4TC8 YBUebV6j2SzVJXWIYahyTx1Jz6CQ7B3ol95wayt8eTMFvdAb0l2Tu4tESv5k+6LC 708E/y7f+hkWZWyiZ62m/TBkpf/Sr5DhAsE6u5TlmxQW9Z2+/QjSI80VukVOOoCa RdsfgsdfCll4AoOYzGdJjdNfXMMdCTOk7lPdRlvpCP3CAvzywkSTrHe0NjSOHhly xuD6zzXXZxWLN850g4i4ajP/6roBuumJdQo6szOppMFO3ZHrbdiRlAStLM58e3DH pcvtTIvYXm2i0Xg1kw8wk2IrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUH6dWkg+J J/SG8L2dCexF/cTU35kwHwYDVR0jBBgwFoAUB/MbR0cTs6FSxqX49I3tIJfcJB8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwRDNFL0JERUU5RTI0OUZE NzExRUY5RTM4QTgzN0M0RjlBRTAyL0JfTWJSMGNUczZGU3hxWDQ5STN0SUpmY0pC OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQl9NYlIwY1RzNkZTeHFYNDlJM3RJSmZjSkI4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw RDNFL0JERUU5RTI0OUZENzExRUY5RTM4QTgzN0M0RjlBRTAyL0JfTWJSMGNUczZG U3hxWDQ5STN0SUpmY0pCOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA7bWk1x6AhKGWdLPpfq92BVrq650+nifz6AQEbpQWDONlvM8sF+TtS4 wxe3qeEUIDGllhw3ezv1ry3nmEelDXVWNOlgGuaNwgG/zd49ri6V+CDdvOO4sV0D 2nkB/cK+sXamQRlzFDuOfVMISO8CItcbMsdVd6SXKtGLaHlT/3++LE8nNdThI2/f uvrE3g7bejGIkIe6eOSNi9uuu4qVEejqtJYcEXIfCCpsyiAbve+gYUvBkV8Seft7 zHpggGFymXQxlXcs9C5+xEBkeaGOkdF8ohNBzNBij/RhsoiwioLN0GCs6/bYinXm a2pXH0rdOwSyTj+MQ7xin5KTaA/y94A= -----END CERTIFICATE-----Generated at Thu Jul 3 00:44:16 2025 by rpki-client