$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.mft File: bBl9pJIs_dxOmMiEbgOn19DkC3E.mft (raw, json) Hash identifier: fBpwP1ylsZk3I0vnV1J5YRNBoN8lx3LI6cgIxqi3Qm4= Subject key identifier: B3:96:87:47:E4:23:EB:06:2C:32:1D:DD:ED:3F:0B:F7:CD:25:84:AF Authority key identifier: 6C:19:7D:A4:92:2C:FD:DC:4E:98:C8:84:6E:03:A7:D7:D0:E4:0B:71 Certificate issuer: /CN=A91EF2E1/serialNumber=6C197DA4922CFDDC4E98C8846E03A7D7D0E40B71 Certificate serial: 0690 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBl9pJIs_dxOmMiEbgOn19DkC3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.mft Manifest number: 067B Signing time: Mon 30 Jun 2025 22:39:07 +0000 Manifest this update: Mon 30 Jun 2025 22:39:06 +0000 Manifest next update: Mon 07 Jul 2025 22:39:06 +0000 Files and hashes: 1: bBl9pJIs_dxOmMiEbgOn19DkC3E.crl (hash: +WJ0DzTfLpg1kOVXj9WAyD1LtUxiFtdX5RUDx4PZ7oI=) 2: ECCDCA04809A11EB9093216EC4F9AE02.roa (hash: //P4Dwc0yC8aNI6dL5grZWmAPuUGPAB2QMNisS1s91o=) 3: 397ED08A2F7911ED93B17C0FC4F9AE02.roa (hash: sO+5ZUlz1ZfgN4m9jGacz4xKmgRg5xQ7WfaHnr5n8EY=) 4: 7D6F53547F0411EBB8CAEE2BC4F9AE02.roa (hash: VneqGQNP18iG+RzoK9rzGT1v0y/EKMK88ucBZjMvCCE=) 5: 08C849682F6E11EDA8ABA74BC4F9AE02.roa (hash: hmEwq8j3GlUgHO4QkFMDsLDsFyKYgDX+OadwrR+PhRU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.crl rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBl9pJIs_dxOmMiEbgOn19DkC3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 22:39:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1680 (0x690) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF2E1, serialNumber=6C197DA4922CFDDC4E98C8846E03A7D7D0E40B71 Validity Not Before: Jun 30 22:39:06 2025 GMT Not After : Jul 7 22:39:06 2025 GMT Subject: CN=6863120b-f2c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b0:75:05:16:ec:48:1d:7c:f9:3f:de:7d:f7: 50:a4:7c:41:85:56:65:ec:d6:ef:66:05:fd:6c:8c: 10:de:0d:05:10:5a:8b:39:31:22:e0:2a:bd:ff:46: 54:32:2f:b5:f7:b1:fe:e9:00:db:59:b3:37:28:b6: 0e:53:4d:54:83:2c:c3:71:18:dc:a2:da:7b:6c:e6: 15:fb:8d:94:e6:f5:1e:75:11:12:22:d0:83:c3:16: 64:08:bc:8c:c4:39:e5:39:2a:ea:4f:bf:48:6a:f8: 04:de:24:8e:8e:6c:a0:8f:b9:a3:de:73:b4:1a:d0: 70:9e:30:84:a8:b7:eb:2a:f9:16:85:a9:b5:af:3a: 88:01:c4:f2:a8:1d:82:05:cf:c0:f7:fe:09:f3:d3: 00:aa:6c:5f:63:b9:38:13:f6:02:c2:1d:84:fb:39: 0f:b1:dc:25:2c:b0:33:6e:bf:50:0f:37:fe:80:14: c5:5c:40:99:6f:ab:08:88:e7:7b:a4:92:b3:e8:a0: ba:39:f7:24:1c:69:62:44:9c:68:68:35:8e:a6:0d: bb:7b:b5:c9:02:81:54:7a:8c:34:36:c9:19:3b:df: f5:e4:1d:ab:76:ea:a0:4d:1f:5e:9b:53:fe:22:0a: 2e:d7:de:6a:9a:ba:cb:f2:ae:ac:0e:dd:35:ec:36: 14:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:96:87:47:E4:23:EB:06:2C:32:1D:DD:ED:3F:0B:F7:CD:25:84:AF X509v3 Authority Key Identifier: keyid:6C:19:7D:A4:92:2C:FD:DC:4E:98:C8:84:6E:03:A7:D7:D0:E4:0B:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBl9pJIs_dxOmMiEbgOn19DkC3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:6b:54:af:2e:da:32:77:d0:64:95:ae:52:5f:af:60:00:aa: 4e:30:23:1f:76:91:e2:c4:ef:6e:a4:c3:71:35:d7:c0:22:e6: 05:3c:6b:bb:03:53:ca:b6:7a:4d:81:ea:63:1e:1f:b6:a2:3b: 85:3b:46:c4:aa:18:a7:2f:77:b8:76:cb:90:89:e7:2b:75:e4: 84:36:65:df:e7:96:01:6f:30:be:33:da:24:7e:13:d7:2d:47: bb:eb:b3:1d:92:6e:36:27:7c:0a:88:5b:35:30:d1:c2:28:bc: 6e:73:a6:8a:07:79:f1:66:e7:1a:01:0c:46:eb:f5:84:72:4a: d7:96:28:cf:25:b6:af:d4:55:79:94:f8:b9:46:16:72:51:03: 08:16:c4:4b:75:79:74:ab:77:17:d7:cd:6f:53:b8:9e:fa:f4: a4:73:d5:05:7e:41:e2:ef:60:c0:cf:79:ff:da:56:08:e7:f6: b2:52:49:08:68:2b:2e:c6:42:c7:e2:4c:c4:ad:71:ac:be:28: 43:25:ec:e8:4b:fa:cf:a6:ae:e6:4c:13:a9:40:03:b5:17:e4: fd:6b:c3:74:92:1e:b1:d9:a7:dc:95:82:cc:3d:d5:fa:d1:d8: d8:da:a1:83:61:19:09:cb:fa:1a:a3:52:69:2f:ec:e8:b9:67: bf:7e:96:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYyRTExMTAvBgNVBAUTKDZDMTk3REE0OTIyQ0ZEREM0RTk4Qzg4NDZFMDNBN0Q3 RDBFNDBCNzEwHhcNMjUwNjMwMjIzOTA2WhcNMjUwNzA3MjIzOTA2WjAYMRYwFAYD VQQDEw02ODYzMTIwYi1mMmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0bB1BRbsSB18+T/effdQpHxBhVZl7NbvZgX9bIwQ3g0FEFqLOTEi4Cq9/0ZU Mi+197H+6QDbWbM3KLYOU01UgyzDcRjcotp7bOYV+42U5vUedRESItCDwxZkCLyM xDnlOSrqT79IavgE3iSOjmygj7mj3nO0GtBwnjCEqLfrKvkWham1rzqIAcTyqB2C Bc/A9/4J89MAqmxfY7k4E/YCwh2E+zkPsdwlLLAzbr9QDzf+gBTFXECZb6sIiOd7 pJKz6KC6OfckHGliRJxoaDWOpg27e7XJAoFUeow0NskZO9/15B2rduqgTR9em1P+ Igou195qmrrL8q6sDt017DYU9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLOWh0fk I+sGLDId3e0/C/fNJYSvMB8GA1UdIwQYMBaAFGwZfaSSLP3cTpjIhG4Dp9fQ5Atx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjJFMS8zRjY5Q0M2NjdG MDMxMUVCQTA4MUEwMkJDNEY5QUUwMi9iQmw5cEpJc19keE9tTWlFYmdPbjE5RGtD M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JCbDlwSklzX2R4T21NaUViZ09uMTlEa0MzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjJFMS8zRjY5Q0M2NjdGMDMxMUVCQTA4MUEwMkJDNEY5QUUwMi9iQmw5cEpJc19k eE9tTWlFYmdPbjE5RGtDM0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGa1SvLtoyd9Bkla5SX69gAKpOMCMfdpHixO9upMNxNdfAIuYFPGu7 A1PKtnpNgepjHh+2ojuFO0bEqhinL3e4dsuQiecrdeSENmXf55YBbzC+M9okfhPX LUe767Mdkm42J3wKiFs1MNHCKLxuc6aKB3nxZucaAQxG6/WEckrXlijPJbav1FV5 lPi5RhZyUQMIFsRLdXl0q3cX181vU7ie+vSkc9UFfkHi72DAz3n/2lYI5/ayUkkI aCsuxkLH4kzErXGsvihDJezoS/rPpq7mTBOpQAO1F+T9a8N0kh6x2afclYLMPdX6 0djY2qGDYRkJy/oao1JpL+zouWe/fpbY -----END CERTIFICATE-----Generated at Tue Jul 1 13:21:56 2025 by rpki-client