$ rpki-client -vvf rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.mft File: bWlDJ6eLD158LQx0Y3dIHe3doAI.mft (raw, json) Hash identifier: Gkpa1f/V4+3tvQHKqvisIhYEX4PKAzMOH9FdLUw1uf4= Subject key identifier: 84:23:57:FF:77:3F:D7:3D:FA:42:AA:DF:CB:AC:4E:18:A7:FE:FE:5B Authority key identifier: 6D:69:43:27:A7:8B:0F:5E:7C:2D:0C:74:63:77:48:1D:ED:DD:A0:02 Certificate issuer: /CN=A9186392/serialNumber=6D694327A78B0F5E7C2D0C746377481DEDDDA002 Certificate serial: 01AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bWlDJ6eLD158LQx0Y3dIHe3doAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.mft Manifest number: 01A5 Signing time: Sun 29 Jun 2025 02:28:51 +0000 Manifest this update: Sun 29 Jun 2025 02:28:51 +0000 Manifest next update: Sun 06 Jul 2025 02:28:51 +0000 Files and hashes: 1: bWlDJ6eLD158LQx0Y3dIHe3doAI.crl (hash: sTn7aoHbWut6Rkks/NNSQ2aZTw/iH95UYuzi6QJ3UGA=) 2: 3CF4087AD90611ED890F5D5FC4F9AE02.roa (hash: c52+qULtQI4nUSwyiYqI9B7pVL/XEZ9W/nL53Dz6dtI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.crl rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bWlDJ6eLD158LQx0Y3dIHe3doAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 02:28:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 427 (0x1ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186392, serialNumber=6D694327A78B0F5E7C2D0C746377481DEDDDA002 Validity Not Before: Jun 29 02:28:51 2025 GMT Not After : Jul 6 02:28:51 2025 GMT Subject: CN=6860a4e3-1758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:30:25:74:b1:fb:0b:72:ff:e9:1b:82:16:50: 1e:65:03:65:a8:02:e7:89:28:a8:89:86:62:4a:9e: 46:f4:bc:c5:f8:ad:d2:8b:f9:45:18:29:51:69:09: 26:c2:df:9e:a0:89:39:5a:98:18:33:41:16:c8:45: e5:47:87:96:78:08:88:35:3c:be:09:1a:2d:33:05: 8a:cb:53:65:75:45:f7:93:a0:52:07:e6:8b:14:53: 92:51:af:ef:9d:d3:f9:45:0e:b8:71:11:f2:aa:5d: f4:95:04:64:11:8c:85:e1:20:2c:bf:29:71:2a:5f: f8:b1:12:c6:c0:ce:f3:d1:c2:6d:25:35:76:1b:7d: da:8f:a1:e1:d7:8d:77:b8:d6:84:eb:1f:1d:09:23: ff:c3:c9:f2:9b:8f:95:90:db:b3:06:7c:66:a0:11: 89:b6:4d:fa:34:89:e8:8d:d0:a5:a8:1d:a6:0a:14: d2:f5:50:49:c7:99:18:11:a1:2c:44:62:98:18:02: 6c:47:8a:7e:43:c6:2c:e0:36:ab:23:62:2a:33:0e: 7a:be:2d:12:9d:a6:57:62:1a:5e:4a:7c:0b:90:8a: e7:b9:c5:78:c7:6a:9d:3f:8f:d2:99:05:9b:fd:f6: 79:c5:b1:5a:45:a3:23:2a:7f:d2:39:69:de:e1:8b: 71:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:23:57:FF:77:3F:D7:3D:FA:42:AA:DF:CB:AC:4E:18:A7:FE:FE:5B X509v3 Authority Key Identifier: keyid:6D:69:43:27:A7:8B:0F:5E:7C:2D:0C:74:63:77:48:1D:ED:DD:A0:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bWlDJ6eLD158LQx0Y3dIHe3doAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:b1:7e:20:ef:51:53:3e:6e:35:6b:72:3c:48:5c:65:70:13: d1:ea:cb:1b:c0:8a:fc:09:be:74:2a:87:1e:f6:f9:6f:fc:27: ec:ff:ae:13:04:3b:fb:c2:99:c6:a5:9d:43:10:b3:66:c5:fd: 3e:aa:40:fc:64:b5:e1:26:d0:21:bd:ab:7f:61:13:fe:d9:a1: aa:c5:91:4e:6b:16:46:c3:b0:c9:56:94:b1:ff:5b:99:03:42: 6b:11:ff:e0:c3:0f:6a:2f:f3:4f:64:f8:ae:3c:a4:3b:ff:ef: 2d:ae:de:cc:db:55:03:9f:08:cf:bb:12:79:0b:a0:cb:33:81: bf:67:10:99:cc:77:32:17:9d:2b:36:f0:d9:79:21:b9:26:38: ac:60:6a:6d:39:ac:81:68:04:0f:39:f3:f6:1a:41:3b:58:d1: e7:ee:94:a7:85:5a:54:28:90:c7:44:2a:47:6d:54:2a:de:06: e9:8a:f6:2b:ae:27:fc:12:31:c6:98:97:ce:e7:c7:cf:30:df: df:6f:8d:8e:7c:8d:cd:c1:8e:8e:03:e8:6f:52:d7:7c:d1:65: b8:a0:bc:bd:2f:e2:c6:aa:ab:6d:5a:13:99:f0:10:53:27:a0: e4:d8:35:bb:22:4a:24:6e:63:da:5c:f5:1e:55:b0:c2:f0:1b: 18:d6:f0:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYzOTIxMTAvBgNVBAUTKDZENjk0MzI3QTc4QjBGNUU3QzJEMEM3NDYzNzc0ODFE RUREREEwMDIwHhcNMjUwNjI5MDIyODUxWhcNMjUwNzA2MDIyODUxWjAYMRYwFAYD VQQDEw02ODYwYTRlMy0xNzU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwTAldLH7C3L/6RuCFlAeZQNlqALniSioiYZiSp5G9LzF+K3Si/lFGClRaQkm wt+eoIk5WpgYM0EWyEXlR4eWeAiINTy+CRotMwWKy1NldUX3k6BSB+aLFFOSUa/v ndP5RQ64cRHyql30lQRkEYyF4SAsvylxKl/4sRLGwM7z0cJtJTV2G33aj6Hh1413 uNaE6x8dCSP/w8nym4+VkNuzBnxmoBGJtk36NInojdClqB2mChTS9VBJx5kYEaEs RGKYGAJsR4p+Q8Ys4DarI2IqMw56vi0SnaZXYhpeSnwLkIrnucV4x2qdP4/SmQWb /fZ5xbFaRaMjKn/SOWne4YtxxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIQjV/93 P9c9+kKq38usThin/v5bMB8GA1UdIwQYMBaAFG1pQyeniw9efC0MdGN3SB3t3aAC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjM5Mi8xOUZENENDMkQ5 MDIxMUVEODc4NDQ5NTlDNEY5QUUwMi9iV2xESjZlTEQxNThMUXgwWTNkSUhlM2Rv QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JXbERKNmVMRDE1OExReDBZM2RJSGUzZG9BSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjM5Mi8xOUZENENDMkQ5MDIxMUVEODc4NDQ5NTlDNEY5QUUwMi9iV2xESjZlTEQx NThMUXgwWTNkSUhlM2RvQUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDMsX4g71FTPm41a3I8SFxlcBPR6ssbwIr8Cb50Koce9vlv/Cfs/64T BDv7wpnGpZ1DELNmxf0+qkD8ZLXhJtAhvat/YRP+2aGqxZFOaxZGw7DJVpSx/1uZ A0JrEf/gww9qL/NPZPiuPKQ7/+8trt7M21UDnwjPuxJ5C6DLM4G/ZxCZzHcyF50r NvDZeSG5JjisYGptOayBaAQPOfP2GkE7WNHn7pSnhVpUKJDHRCpHbVQq3gbpivYr rif8EjHGmJfO58fPMN/fb42OfI3NwY6OA+hvUtd80WW4oLy9L+LGqqttWhOZ8BBT J6Dk2DW7IkokbmPaXPUeVbDC8BsY1vBm -----END CERTIFICATE-----Generated at Sun Jun 29 19:12:51 2025 by rpki-client