$ rpki-client -vvf rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.mft File: b2dYEDhTTU2848gbXy2IYcU2tnw.mft (raw, json) Hash identifier: xQrP785SsQQ79U7GFxZfNmDarnp+7l+5I4tnffUubwI= Subject key identifier: C3:FB:8B:9F:6E:92:E0:7F:D3:13:98:58:E8:59:EA:2A:02:64:0F:26 Authority key identifier: 6F:67:58:10:38:53:4D:4D:BC:E3:C8:1B:5F:2D:88:61:C5:36:B6:7C Certificate issuer: /CN=A9117836/serialNumber=6F67581038534D4DBCE3C81B5F2D8861C536B67C Certificate serial: 0166 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2dYEDhTTU2848gbXy2IYcU2tnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.mft Manifest number: 015E Signing time: Sat 21 Jun 2025 03:17:37 +0000 Manifest this update: Sat 21 Jun 2025 03:17:37 +0000 Manifest next update: Sat 28 Jun 2025 03:17:37 +0000 Files and hashes: 1: b2dYEDhTTU2848gbXy2IYcU2tnw.crl (hash: X1YPkVBBF9bF5932bGZ/Kep1Xiu4FrBN7/4R2o+pHvE=) 2: 9B1DE7226D8F11EE9BD22B40C4F9AE02.roa (hash: H5pK79+DkVT9bgtQkuk9t/grxvSc0nRDSs3JR8icAh8=) 3: EAA5793C367411EF98F49F1CC4F9AE02.roa (hash: /RysZ9FFrvGFWhnZrMrChDiZQuIFgZEdesdb5vE5fVc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.crl rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2dYEDhTTU2848gbXy2IYcU2tnw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 03:17:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 358 (0x166) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117836, serialNumber=6F67581038534D4DBCE3C81B5F2D8861C536B67C Validity Not Before: Jun 21 03:17:37 2025 GMT Not After : Jun 28 03:17:37 2025 GMT Subject: CN=68562451-8640 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fe:49:bf:66:19:46:b2:08:54:cf:79:b1:45: c2:06:bc:31:9f:a0:49:3e:3c:dc:f2:e2:f7:0a:1a: 9b:92:0c:48:f4:ac:6b:79:2b:45:f6:41:06:9f:42: 98:09:19:6d:db:f0:8d:75:51:b2:87:29:44:90:17: 67:bd:7d:8f:9d:bd:aa:7e:1f:9f:05:96:94:58:a5: 2b:f4:38:51:bf:3f:2a:4e:58:fb:ac:3b:56:d5:21: 0a:2a:22:0d:47:5f:0c:28:d2:fa:fb:fa:95:37:a5: df:16:cc:ac:59:65:30:33:f2:b1:27:ad:39:14:5a: bc:e9:3a:ce:85:22:af:df:c0:9f:07:cb:6a:8d:b8: c1:d3:65:92:4f:e6:15:9a:1f:da:26:42:28:e6:cc: 74:f0:ee:8b:e9:c5:92:f4:24:3e:37:f6:50:d6:ef: d7:33:ce:dd:82:22:35:4e:57:d3:0b:c1:a9:d7:52: 10:e9:bb:2a:d2:58:79:6b:f0:9c:47:90:9b:3a:2d: 56:af:4e:db:84:e2:fa:5e:ba:dc:81:b6:cf:f9:46: b4:46:d9:c8:6f:8f:0b:01:f6:c3:d0:c6:67:51:ac: d6:2a:9b:b2:06:27:29:e1:d5:10:8e:21:ae:e4:33: 1c:94:cc:5d:08:fa:d2:58:c0:0a:52:e6:a3:d2:b5: eb:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:FB:8B:9F:6E:92:E0:7F:D3:13:98:58:E8:59:EA:2A:02:64:0F:26 X509v3 Authority Key Identifier: keyid:6F:67:58:10:38:53:4D:4D:BC:E3:C8:1B:5F:2D:88:61:C5:36:B6:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2dYEDhTTU2848gbXy2IYcU2tnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:d0:26:71:8e:e6:77:3f:f6:82:fe:6d:6e:b7:c9:b7:d9:40: d7:c6:7d:3c:b6:73:97:c7:27:58:6f:35:9c:5c:93:bc:8d:84: b3:cd:03:09:bb:21:19:a2:3d:c6:20:42:db:59:70:17:84:64: a4:ed:52:af:f6:76:b2:33:6c:fd:c8:cb:c0:b3:8a:cf:b5:87: 9b:83:51:89:e2:94:75:bf:38:b9:3d:61:08:83:82:69:97:ed: 45:f4:5d:e8:30:1e:d1:51:a5:e4:fc:8e:87:62:79:50:e5:81: c8:59:f0:91:54:89:48:31:be:aa:a7:9f:6a:ce:28:ad:87:c1: b1:65:11:9d:6f:00:6b:50:eb:27:58:03:31:ae:04:ac:a0:f0: fa:cc:fe:28:32:43:c8:28:fc:6a:f9:b6:82:92:54:04:c6:26: 7a:f4:a9:b6:fc:8c:c5:a5:00:f4:89:27:b0:26:d0:33:36:60: 2d:1c:f1:e1:f6:07:b8:14:32:92:c7:99:04:4c:0b:20:69:9f: 47:52:0d:4a:22:9b:1c:40:00:af:cc:01:ec:44:b8:0a:34:4f: 68:81:db:97:90:b8:24:ec:da:63:14:cf:c3:d6:6e:aa:4a:4d: 22:49:52:25:c5:5d:39:28:77:20:0c:20:59:a4:e7:76:65:99: ed:fd:61:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc4MzYxMTAvBgNVBAUTKDZGNjc1ODEwMzg1MzRENERCQ0UzQzgxQjVGMkQ4ODYx QzUzNkI2N0MwHhcNMjUwNjIxMDMxNzM3WhcNMjUwNjI4MDMxNzM3WjAYMRYwFAYD VQQDEw02ODU2MjQ1MS04NjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/5Jv2YZRrIIVM95sUXCBrwxn6BJPjzc8uL3ChqbkgxI9KxreStF9kEGn0KY CRlt2/CNdVGyhylEkBdnvX2Pnb2qfh+fBZaUWKUr9DhRvz8qTlj7rDtW1SEKKiIN R18MKNL6+/qVN6XfFsysWWUwM/KxJ605FFq86TrOhSKv38CfB8tqjbjB02WST+YV mh/aJkIo5sx08O6L6cWS9CQ+N/ZQ1u/XM87dgiI1TlfTC8Gp11IQ6bsq0lh5a/Cc R5CbOi1Wr07bhOL6XrrcgbbP+Ua0RtnIb48LAfbD0MZnUazWKpuyBicp4dUQjiGu 5DMclMxdCPrSWMAKUuaj0rXrXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMP7i59u kuB/0xOYWOhZ6ioCZA8mMB8GA1UdIwQYMBaAFG9nWBA4U01NvOPIG18tiGHFNrZ8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzgzNi9GQTI1RURFMjQz MUQxMUVFODY4Q0E0MEZDNEY5QUUwMi9iMmRZRURoVFRVMjg0OGdiWHkySVljVTJ0 bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2IyZFlFRGhUVFUyODQ4Z2JYeTJJWWNVMnRudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzgzNi9GQTI1RURFMjQzMUQxMUVFODY4Q0E0MEZDNEY5QUUwMi9iMmRZRURoVFRV Mjg0OGdiWHkySVljVTJ0bncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAF0CZxjuZ3P/aC/m1ut8m32UDXxn08tnOXxydYbzWcXJO8jYSzzQMJ uyEZoj3GIELbWXAXhGSk7VKv9nayM2z9yMvAs4rPtYebg1GJ4pR1vzi5PWEIg4Jp l+1F9F3oMB7RUaXk/I6HYnlQ5YHIWfCRVIlIMb6qp59qziith8GxZRGdbwBrUOsn WAMxrgSsoPD6zP4oMkPIKPxq+baCklQExiZ69Km2/IzFpQD0iSewJtAzNmAtHPHh 9ge4FDKSx5kETAsgaZ9HUg1KIpscQACvzAHsRLgKNE9ogduXkLgk7NpjFM/D1m6q Sk0iSVIlxV05KHcgDCBZpOd2ZZnt/WGt -----END CERTIFICATE-----Generated at Sat Jun 21 14:10:38 2025 by rpki-client