$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6E63/D69CD928E4A411EB8BC5C546C4F9AE02/rbkheCH_vuCW4c7EcJijFFokbqA.mft File: rbkheCH_vuCW4c7EcJijFFokbqA.mft (raw, json) Hash identifier: xJADtf3LicGth7c8HNV8WexfJTW/zoxbst/vb07yQms= Subject key identifier: FF:54:1E:AE:D6:78:44:F8:37:93:44:CF:26:20:65:C2:1B:9C:0E:9A Authority key identifier: AD:B9:21:78:21:FF:BE:E0:96:E1:CE:C4:70:98:A3:14:5A:24:6E:A0 Certificate issuer: /CN=A91F6E63/serialNumber=ADB9217821FFBEE096E1CEC47098A3145A246EA0 Certificate serial: 0583 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rbkheCH_vuCW4c7EcJijFFokbqA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6E63/D69CD928E4A411EB8BC5C546C4F9AE02/rbkheCH_vuCW4c7EcJijFFokbqA.mft Manifest number: 057C Signing time: Wed 02 Jul 2025 23:37:08 +0000 Manifest this update: Wed 02 Jul 2025 23:37:07 +0000 Manifest next update: Wed 09 Jul 2025 23:37:07 +0000 Files and hashes: 1: rbkheCH_vuCW4c7EcJijFFokbqA.crl (hash: 0FktzGWy8QjHvGO+Tsp1yrg1VbakYwRgtgbgLlWNEBA=) 2: 0C0402DEE5CD11EBADAD0E66C4F9AE02.roa (hash: trH5jaHCGYgIOAiGZuSF42NeMtUvi3wioLPll8n3v2o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6E63/D69CD928E4A411EB8BC5C546C4F9AE02/rbkheCH_vuCW4c7EcJijFFokbqA.crl rsync://rpki.apnic.net/member_repository/A91F6E63/D69CD928E4A411EB8BC5C546C4F9AE02/rbkheCH_vuCW4c7EcJijFFokbqA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rbkheCH_vuCW4c7EcJijFFokbqA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:37:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1411 (0x583) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6E63, serialNumber=ADB9217821FFBEE096E1CEC47098A3145A246EA0 Validity Not Before: Jul 2 23:37:07 2025 GMT Not After : Jul 9 23:37:07 2025 GMT Subject: CN=6865c2a3-7161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7c:0b:64:5d:0d:57:60:95:2e:a9:b2:e0:a1: 7e:05:56:f1:60:11:86:9c:6a:78:55:fa:31:3c:a7: e5:96:56:24:2a:5c:54:67:9b:00:6a:c8:78:0d:2d: 18:fe:67:2f:02:25:e5:22:ac:72:ae:ed:15:e4:bb: 8d:a4:6d:69:91:c7:4e:42:47:f9:cb:46:40:c0:14: ff:f0:06:17:11:aa:70:b2:7d:90:df:70:1b:b4:c5: 0e:34:94:29:8b:3b:f9:6c:24:ac:a4:8d:a8:e9:64: af:4b:68:0f:24:28:0c:8e:0d:66:44:7e:05:45:f4: 90:d8:e8:0f:af:1e:a7:af:48:b8:c3:82:9a:9f:4b: 7c:21:21:af:c0:59:42:a7:83:f0:c4:98:fc:f7:21: 00:99:eb:c7:f6:43:5d:77:4e:b3:ba:0d:1f:4b:06: d4:b4:8b:d6:57:fa:b3:fb:f5:6d:11:43:92:c6:4b: 4b:a1:f5:c1:d4:31:7d:b6:ed:0e:e5:b7:44:60:0c: 59:03:c7:5d:36:ac:dd:b5:49:a2:14:85:00:1c:a0: 23:f9:66:aa:03:29:a9:90:dd:9f:2e:15:35:77:1d: 2b:21:a2:4b:59:77:47:b5:65:58:f6:8a:be:fa:10: ee:26:8a:92:4c:2c:4e:12:5b:c6:10:db:b9:96:3a: 47:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:54:1E:AE:D6:78:44:F8:37:93:44:CF:26:20:65:C2:1B:9C:0E:9A X509v3 Authority Key Identifier: keyid:AD:B9:21:78:21:FF:BE:E0:96:E1:CE:C4:70:98:A3:14:5A:24:6E:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6E63/D69CD928E4A411EB8BC5C546C4F9AE02/rbkheCH_vuCW4c7EcJijFFokbqA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rbkheCH_vuCW4c7EcJijFFokbqA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6E63/D69CD928E4A411EB8BC5C546C4F9AE02/rbkheCH_vuCW4c7EcJijFFokbqA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:82:55:7f:70:f4:e9:28:8d:65:71:6e:73:e4:02:86:3e:3d: 23:fc:15:0a:5c:5b:7f:20:af:c0:0d:17:ce:61:e2:e2:9d:5a: 3a:e9:5e:d1:d8:4b:70:1a:87:fa:d0:51:b4:c4:ac:16:e5:29: 21:5c:3d:8d:6e:43:d8:9e:9b:78:de:26:b3:fa:1a:74:83:bc: 72:c9:3f:6f:d1:4a:7f:79:90:ed:b4:8a:94:b7:5e:51:c2:50: 3c:fd:d0:45:69:4c:f5:f5:46:a0:75:23:56:33:76:e8:13:67: 2c:46:7d:8d:e1:3b:89:0f:1d:f5:c3:67:fd:59:de:cd:95:11: 1d:dd:c2:f8:12:6a:70:83:bf:9e:b5:c6:30:42:ef:6c:df:f4: 49:f2:21:5e:f1:59:25:ce:54:6c:0f:90:d6:3e:07:ad:d8:13: 69:85:f3:14:ff:74:e1:cf:2b:f3:07:ae:98:0c:1b:57:db:0a: eb:19:88:62:01:ad:b6:a0:d2:83:89:15:ca:01:1f:0f:91:08: 5d:08:d6:7a:4f:a9:c0:65:e3:3d:24:da:ac:a3:40:a7:b3:4e: 9f:66:c6:54:40:33:25:6a:03:dc:6a:db:d7:5a:c0:78:aa:e2: 35:a2:5d:d2:d1:69:a0:a0:62:d0:c1:c4:50:aa:49:d0:11:9c: ba:00:a6:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZFNjMxMTAvBgNVBAUTKEFEQjkyMTc4MjFGRkJFRTA5NkUxQ0VDNDcwOThBMzE0 NUEyNDZFQTAwHhcNMjUwNzAyMjMzNzA3WhcNMjUwNzA5MjMzNzA3WjAYMRYwFAYD VQQDEw02ODY1YzJhMy03MTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwnwLZF0NV2CVLqmy4KF+BVbxYBGGnGp4VfoxPKflllYkKlxUZ5sAash4DS0Y /mcvAiXlIqxyru0V5LuNpG1pkcdOQkf5y0ZAwBT/8AYXEapwsn2Q33AbtMUONJQp izv5bCSspI2o6WSvS2gPJCgMjg1mRH4FRfSQ2OgPrx6nr0i4w4Kan0t8ISGvwFlC p4PwxJj89yEAmevH9kNdd06zug0fSwbUtIvWV/qz+/VtEUOSxktLofXB1DF9tu0O 5bdEYAxZA8ddNqzdtUmiFIUAHKAj+WaqAympkN2fLhU1dx0rIaJLWXdHtWVY9oq+ +hDuJoqSTCxOElvGENu5ljpH7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP9UHq7W eET4N5NEzyYgZcIbnA6aMB8GA1UdIwQYMBaAFK25IXgh/77gluHOxHCYoxRaJG6g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkU2My9ENjlDRDkyOEU0 QTQxMUVCOEJDNUM1NDZDNEY5QUUwMi9yYmtoZUNIX3Z1Q1c0YzdFY0ppakZGb2ti cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Jia2hlQ0hfdnVDVzRjN0VjSmlqRkZva2JxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkU2My9ENjlDRDkyOEU0QTQxMUVCOEJDNUM1NDZDNEY5QUUwMi9yYmtoZUNIX3Z1 Q1c0YzdFY0ppakZGb2ticUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSglV/cPTpKI1lcW5z5AKGPj0j/BUKXFt/IK/ADRfOYeLinVo66V7R 2EtwGof60FG0xKwW5SkhXD2NbkPYnpt43iaz+hp0g7xyyT9v0Up/eZDttIqUt15R wlA8/dBFaUz19UagdSNWM3boE2csRn2N4TuJDx31w2f9Wd7NlREd3cL4Empwg7+e tcYwQu9s3/RJ8iFe8VklzlRsD5DWPget2BNphfMU/3ThzyvzB66YDBtX2wrrGYhi Aa22oNKDiRXKAR8PkQhdCNZ6T6nAZeM9JNqso0Cns06fZsZUQDMlagPcatvXWsB4 quI1ol3S0WmgoGLQwcRQqknQEZy6AKbA -----END CERTIFICATE-----Generated at Thu Jul 3 02:50:41 2025 by rpki-client