$ rpki-client -vvf rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft File: -bj5HSkovqo1HMNFxHNpMv2GOfE.mft (raw, json) Hash identifier: ju+vtqXp9M8oyga+Crd99Mwpt8zALc4egPt4aWW7C4s= Subject key identifier: FA:1E:78:0D:C4:AE:AB:0D:9C:AF:E9:6A:38:F6:0E:05:EA:81:F8:A8 Authority key identifier: F9:B8:F9:1D:29:28:BE:AA:35:1C:C3:45:C4:73:69:32:FD:86:39:F1 Certificate issuer: /CN=A917C2CC/serialNumber=F9B8F91D2928BEAA351CC345C4736932FD8639F1 Certificate serial: 0F27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft Manifest number: 0F1D Signing time: Mon 30 Jun 2025 17:50:22 +0000 Manifest this update: Mon 30 Jun 2025 17:50:22 +0000 Manifest next update: Mon 07 Jul 2025 17:50:22 +0000 Files and hashes: 1: -bj5HSkovqo1HMNFxHNpMv2GOfE.crl (hash: 2OlNM+W4tV9H36nf20xbNX0rhcAKNcA/ihMVNWt9Wwo=) 2: 39275D0C232511EC925DF318C4F9AE02.roa (hash: kMA98lH1wtLYavwio/f29E4JAww9w+abzPZIVQ6M1dk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.crl rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 17:50:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3879 (0xf27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C2CC, serialNumber=F9B8F91D2928BEAA351CC345C4736932FD8639F1 Validity Not Before: Jun 30 17:50:22 2025 GMT Not After : Jul 7 17:50:22 2025 GMT Subject: CN=6862ce5e-1781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d7:ed:1c:fe:5c:9d:f8:a5:32:16:e7:3e:a8: 02:32:90:8c:19:26:88:a1:9b:6f:98:f0:92:50:6f: fd:cb:3b:2f:01:71:59:29:b9:86:23:c1:ed:ea:54: 61:53:71:c5:0e:47:55:01:f3:46:2b:a8:ff:11:bc: 9f:26:3e:be:1b:1f:bd:e3:68:49:31:74:91:4e:34: 16:82:a7:68:57:91:d6:87:74:a1:3e:b5:b4:47:a1: 03:0a:1d:a6:ce:be:9b:9f:74:dd:32:ab:bd:12:a4: 46:db:51:40:40:ec:69:6a:91:38:b2:f2:df:a3:00: b3:60:3b:8c:b8:f9:6a:df:d0:de:7b:14:df:dc:d9: 47:f2:2d:03:74:f8:6a:9b:37:21:5d:69:a2:79:9f: 56:14:53:5a:f5:09:d8:44:bf:a7:71:5f:cc:7b:ba: c6:c4:4a:8f:60:2b:37:f7:29:5d:5d:1b:b2:e2:41: d2:b8:8c:e6:42:59:ac:9f:8c:25:27:17:69:89:44: c2:f9:56:c9:c4:d2:eb:06:7a:5d:e0:1a:9e:db:80: ac:c1:c3:49:a0:ea:83:0a:86:e6:9f:24:44:e7:b3: ec:20:0e:ac:a3:af:37:2a:d6:e5:ef:91:8b:be:23: 22:f0:42:02:c4:fa:d9:6c:91:c2:a6:2c:39:59:3e: 88:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:1E:78:0D:C4:AE:AB:0D:9C:AF:E9:6A:38:F6:0E:05:EA:81:F8:A8 X509v3 Authority Key Identifier: keyid:F9:B8:F9:1D:29:28:BE:AA:35:1C:C3:45:C4:73:69:32:FD:86:39:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:a0:2e:a4:7d:33:bb:c7:1e:45:51:2f:52:23:20:dd:ec:ae: 3f:d5:73:7f:4c:3e:6d:07:c4:a7:c9:9b:95:b5:91:8c:c7:f5: 10:80:ff:cb:ef:0c:84:84:33:08:3f:60:be:a7:75:80:0a:1f: 66:fb:68:62:80:43:37:0b:71:fb:93:6f:ab:1b:ee:b3:78:fc: 75:5c:f2:90:69:4b:3b:f1:35:92:d6:1a:34:ec:82:27:00:ed: 18:63:40:9c:3c:78:bf:91:f0:42:07:ec:bc:51:e9:c4:89:19: 08:4a:a3:97:6e:97:01:be:7a:76:d7:78:7f:88:57:1f:97:09: c3:42:8e:d4:e0:12:e6:95:27:13:07:ff:c1:bd:dc:6e:ea:77: 3b:e7:85:8e:90:bc:8a:4a:f3:1d:e9:23:b0:b8:db:2f:e9:32: f4:c3:3a:c0:6a:e7:79:6b:0b:ae:bc:9a:52:53:8a:6f:df:7f: 79:65:a7:f4:f7:f0:9f:67:bb:ba:15:70:2c:e6:0d:b3:f2:89: c4:9a:08:f1:47:a5:13:38:46:32:95:28:47:03:59:12:6d:43: 39:9e:57:29:37:f9:ee:e5:3b:37:81:16:75:8f:fc:04:aa:72: 96:62:7e:a4:33:78:70:56:64:c3:d1:82:f7:18:b2:8a:eb:eb: 28:8c:85:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDycwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MyQ0MxMTAvBgNVBAUTKEY5QjhGOTFEMjkyOEJFQUEzNTFDQzM0NUM0NzM2OTMy RkQ4NjM5RjEwHhcNMjUwNjMwMTc1MDIyWhcNMjUwNzA3MTc1MDIyWjAYMRYwFAYD VQQDEw02ODYyY2U1ZS0xNzgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn9ftHP5cnfilMhbnPqgCMpCMGSaIoZtvmPCSUG/9yzsvAXFZKbmGI8Ht6lRh U3HFDkdVAfNGK6j/EbyfJj6+Gx+942hJMXSRTjQWgqdoV5HWh3ShPrW0R6EDCh2m zr6bn3TdMqu9EqRG21FAQOxpapE4svLfowCzYDuMuPlq39DeexTf3NlH8i0DdPhq mzchXWmieZ9WFFNa9QnYRL+ncV/Me7rGxEqPYCs39yldXRuy4kHSuIzmQlmsn4wl JxdpiUTC+VbJxNLrBnpd4Bqe24CswcNJoOqDCobmnyRE57PsIA6so683Ktbl75GL viMi8EICxPrZbJHCpiw5WT6I8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPoeeA3E rqsNnK/pajj2DgXqgfioMB8GA1UdIwQYMBaAFPm4+R0pKL6qNRzDRcRzaTL9hjnx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzJDQy9DQzE5Mzg3Njc4 REExMUU5OTAxQjdGNERDNEY5QUUwMi8tYmo1SFNrb3ZxbzFITU5GeEhOcE12MkdP ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1iajVIU2tvdnFvMUhNTkZ4SE5wTXYyR09mRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzJDQy9DQzE5Mzg3Njc4REExMUU5OTAxQjdGNERDNEY5QUUwMi8tYmo1SFNrb3Zx bzFITU5GeEhOcE12MkdPZkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0oC6kfTO7xx5FUS9SIyDd7K4/1XN/TD5tB8SnyZuVtZGMx/UQgP/L 7wyEhDMIP2C+p3WACh9m+2higEM3C3H7k2+rG+6zePx1XPKQaUs78TWS1ho07IIn AO0YY0CcPHi/kfBCB+y8UenEiRkISqOXbpcBvnp213h/iFcflwnDQo7U4BLmlScT B//Bvdxu6nc754WOkLyKSvMd6SOwuNsv6TL0wzrAaud5awuuvJpSU4pv3395Zaf0 9/CfZ7u6FXAs5g2z8onEmgjxR6UTOEYylShHA1kSbUM5nlcpN/nu5Ts3gRZ1j/wE qnKWYn6kM3hwVmTD0YL3GLKK6+sojIU9 -----END CERTIFICATE-----Generated at Tue Jul 1 08:59:00 2025 by rpki-client