$ rpki-client -vvf rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft File: bV1Q6IudZeiv2ijCzqYVAScDhgg.mft (raw, json) Hash identifier: WZ2TKwysI4VXhcbb8xndVzjuzHa9hdIAkZJpa1W5QXI= Subject key identifier: 30:53:18:1B:2B:7F:AC:88:0F:6B:F8:F5:53:B8:7A:80:69:CE:98:82 Authority key identifier: 6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08 Certificate issuer: /CN=A91E91BC/serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608 Certificate serial: 035E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft Manifest number: 0332 Signing time: Tue 01 Jul 2025 01:51:10 +0000 Manifest this update: Tue 01 Jul 2025 01:51:09 +0000 Manifest next update: Tue 08 Jul 2025 01:51:09 +0000 Files and hashes: 1: bV1Q6IudZeiv2ijCzqYVAScDhgg.crl (hash: RvTWORlm5HBAbkrcHHn1e+9De5pknMOtc3ZsBpiRevA=) 2: 142EA3A84FEF11EF9A822A21C4F9AE02.roa (hash: PsC0/VUJuwAMkmEBhdJkaydKW8CflQBB5EZOYU0cJtQ=) 3: D1A4CFBA4FBE11EF97812B80C4F9AE02.roa (hash: /TyJbdztz4Y61/Gz2zhowON+Tt9+b5wqgCKpbZ339lw=) 4: 328C9E7CDC1A11EC89244C2FC4F9AE02.roa (hash: SwY/Crs5L/QLrOTdNtWGBh9zEFcoCIW07axxQKOSACI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.crl rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:51:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 862 (0x35e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E91BC, serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608 Validity Not Before: Jul 1 01:51:09 2025 GMT Not After : Jul 8 01:51:09 2025 GMT Subject: CN=68633f0d-e423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9f:f9:2b:5e:7a:68:3e:ee:0a:5c:d5:15:6a: 55:d3:54:f9:3e:7f:af:73:d9:c9:0a:a0:27:ac:99: 97:72:03:5f:98:2d:63:93:be:d8:ab:aa:05:78:a9: 61:82:17:7d:de:c8:ca:18:66:1c:37:61:8f:fb:66: a9:c2:6f:76:85:4b:23:6d:28:ec:38:a1:7c:1c:94: c6:c0:a8:e9:37:df:2f:6b:55:1b:70:9c:28:df:15: a2:39:df:94:32:40:4c:02:e9:f7:42:73:66:68:00: 9e:3b:3d:2c:c9:74:04:54:0e:ce:29:71:09:b7:ae: 49:a4:fa:00:0d:d4:c9:70:30:75:d7:14:5b:a5:7c: 76:c0:9c:a3:5f:c6:14:d7:95:b6:21:71:ce:1d:f1: 61:79:be:9d:95:a7:45:48:a9:e9:91:a3:aa:e2:43: 0f:06:8e:35:76:a9:32:9a:8b:bb:6f:2a:a4:58:6b: d5:72:c6:1c:ef:f9:c4:67:f1:08:18:a9:83:1b:30: c6:0a:6c:5d:78:fa:14:6e:2c:31:83:5e:48:60:e2: dd:63:0a:7e:d2:7e:1f:52:32:5c:04:b7:99:80:cc: f4:f9:79:a6:cb:72:ac:3b:88:3d:1c:21:b3:9a:ba: 41:1c:8e:39:55:15:da:d7:39:5d:eb:71:dd:e1:c6: 42:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:53:18:1B:2B:7F:AC:88:0F:6B:F8:F5:53:B8:7A:80:69:CE:98:82 X509v3 Authority Key Identifier: keyid:6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:4e:fa:13:38:31:f2:e4:8e:5a:e7:96:bb:a5:b8:c6:b2:e4: 48:b5:b7:d2:03:3b:d4:9b:dc:d7:c9:2b:5b:82:11:b2:f1:21: f3:11:a0:88:62:4a:9e:08:eb:b3:52:6f:d0:51:06:24:79:08: f8:10:dc:59:6b:bf:70:a1:da:91:de:f8:0f:3b:8f:e8:2d:f9: b0:1d:8e:9f:25:73:b5:5a:a2:b5:f9:e4:1c:e2:a4:9c:40:41: b8:7f:dd:90:c8:83:05:16:ae:4b:89:87:ef:75:1f:70:19:da: b7:25:4d:ec:a0:10:54:83:1c:77:59:32:97:4d:58:75:86:30: fa:88:ac:1f:92:dd:29:d2:c8:3c:59:70:f0:4f:8b:4f:93:75: 0a:ff:76:13:de:a2:64:29:f4:3f:7c:d2:9b:3b:20:ae:69:26: 1b:ad:d8:40:c7:6d:3a:41:ab:f6:bf:6b:30:4a:1d:87:ab:0d: 0f:9b:60:da:51:5e:49:eb:b8:3e:2e:ac:6a:ce:ab:40:45:83: 57:6a:1a:46:15:56:e4:13:96:bd:d3:40:aa:02:17:7b:6b:6f: f6:33:f8:48:1a:2c:1b:ef:6d:d0:7e:27:af:01:64:64:37:d6: 20:7b:e7:a1:55:bf:26:96:a2:a3:ec:7e:91:91:3b:72:fd:9c: c4:83:92:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA14wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkxQkMxMTAvBgNVBAUTKDZENUQ1MEU4OEI5RDY1RThBRkRBMjhDMkNFQTYxNTAx MjcwMzg2MDgwHhcNMjUwNzAxMDE1MTA5WhcNMjUwNzA4MDE1MTA5WjAYMRYwFAYD VQQDEw02ODYzM2YwZC1lNDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZ/5K156aD7uClzVFWpV01T5Pn+vc9nJCqAnrJmXcgNfmC1jk77Yq6oFeKlh ghd93sjKGGYcN2GP+2apwm92hUsjbSjsOKF8HJTGwKjpN98va1UbcJwo3xWiOd+U MkBMAun3QnNmaACeOz0syXQEVA7OKXEJt65JpPoADdTJcDB11xRbpXx2wJyjX8YU 15W2IXHOHfFheb6dladFSKnpkaOq4kMPBo41dqkymou7byqkWGvVcsYc7/nEZ/EI GKmDGzDGCmxdePoUbiwxg15IYOLdYwp+0n4fUjJcBLeZgMz0+Xmmy3KsO4g9HCGz mrpBHI45VRXa1zld63Hd4cZCdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDBTGBsr f6yID2v49VO4eoBpzpiCMB8GA1UdIwQYMBaAFG1dUOiLnWXor9oows6mFQEnA4YI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTFCQy9BRTQ0RDI0QURC RTkxMUVDOTUxMTA1MTVDNEY5QUUwMi9iVjFRNkl1ZFplaXYyaWpDenFZVkFTY0Ro Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JWMVE2SXVkWmVpdjJpakN6cVlWQVNjRGhnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTFCQy9BRTQ0RDI0QURCRTkxMUVDOTUxMTA1MTVDNEY5QUUwMi9iVjFRNkl1ZFpl aXYyaWpDenFZVkFTY0RoZ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfTvoTODHy5I5a55a7pbjGsuRItbfSAzvUm9zXyStbghGy8SHzEaCI YkqeCOuzUm/QUQYkeQj4ENxZa79wodqR3vgPO4/oLfmwHY6fJXO1WqK1+eQc4qSc QEG4f92QyIMFFq5LiYfvdR9wGdq3JU3soBBUgxx3WTKXTVh1hjD6iKwfkt0p0sg8 WXDwT4tPk3UK/3YT3qJkKfQ/fNKbOyCuaSYbrdhAx206Qav2v2swSh2Hqw0Pm2Da UV5J67g+LqxqzqtARYNXahpGFVbkE5a900CqAhd7a2/2M/hIGiwb723QfievAWRk N9Yge+ehVb8mlqKj7H6RkTty/ZzEg5LF -----END CERTIFICATE-----Generated at Thu Jul 3 01:13:30 2025 by rpki-client