$ rpki-client -vvf rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.mft File: bu53G7POfpjbOWDE2C90Kiz36Ek.mft (raw, json) Hash identifier: kWorUUsoav1uOHB/64bnQtgoY3i+IlkDycCF1xLw1Uk= Subject key identifier: 4B:12:6B:5A:9C:4C:FA:80:52:B7:78:09:D0:75:65:45:3C:5E:33:E9 Authority key identifier: 6E:EE:77:1B:B3:CE:7E:98:DB:39:60:C4:D8:2F:74:2A:2C:F7:E8:49 Certificate issuer: /CN=A9118827/serialNumber=6EEE771BB3CE7E98DB3960C4D82F742A2CF7E849 Certificate serial: 04E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bu53G7POfpjbOWDE2C90Kiz36Ek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.mft Manifest number: 04E3 Signing time: Thu 12 Jun 2025 23:20:10 +0000 Manifest this update: Thu 12 Jun 2025 23:20:10 +0000 Manifest next update: Thu 19 Jun 2025 23:20:10 +0000 Files and hashes: 1: bu53G7POfpjbOWDE2C90Kiz36Ek.crl (hash: pBsweVmyGm3jHdKpCmDORr4ff4zZ2oYMqmaKn6Sue8M=) 2: 95D9A9461BEC11EC97B39812C4F9AE02.roa (hash: O7MsLUw+gaoXTG9KiMvLQn/bjyCnjO8H09gMJ3FbG7s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.crl rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bu53G7POfpjbOWDE2C90Kiz36Ek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 23:20:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1255 (0x4e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118827, serialNumber=6EEE771BB3CE7E98DB3960C4D82F742A2CF7E849 Validity Not Before: Jun 12 23:20:10 2025 GMT Not After : Jun 19 23:20:10 2025 GMT Subject: CN=684b60aa-1e62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:44:5f:fd:c1:5a:c6:3a:b5:20:40:83:04:ae: fa:82:97:26:b8:0c:13:f5:77:23:0b:2c:64:af:77: 2a:90:e6:72:38:80:86:9e:30:59:e6:a6:b5:d5:b3: ef:6c:32:99:e7:5e:36:d4:73:ab:15:b4:4d:4b:f2: 9c:fa:da:96:a1:1a:86:f3:01:f7:4d:39:51:c8:38: ca:6d:e9:89:97:4b:e1:a6:21:1f:78:9c:15:8c:25: 0f:d7:ac:2c:65:fc:6a:3c:d5:b7:3e:40:89:f6:61: 49:9f:64:3e:69:b9:a2:5c:1d:6e:20:ca:b0:06:1b: 64:40:24:a9:c6:e4:f6:fd:68:9e:95:cc:e6:47:27: 3d:8d:ea:84:ca:fc:0f:1f:41:c4:29:77:54:8e:62: b0:59:10:21:4f:e4:fb:63:bc:52:28:3d:3c:70:c8: 96:e2:69:73:06:27:95:0f:c0:16:51:4f:af:0a:82: 51:f7:09:07:74:de:46:0b:b7:eb:0b:bf:02:71:80: 0a:84:92:cd:c1:8d:d2:c7:8d:d9:ed:1d:13:f1:0a: 9e:1b:bb:56:5a:c4:a3:56:f1:fc:7e:3b:57:36:78: a1:10:27:02:7c:50:b4:c0:0f:af:d2:e7:bf:f2:a7: 2e:58:93:29:b3:1c:23:8f:6e:6c:65:0d:80:ea:8a: 84:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:12:6B:5A:9C:4C:FA:80:52:B7:78:09:D0:75:65:45:3C:5E:33:E9 X509v3 Authority Key Identifier: keyid:6E:EE:77:1B:B3:CE:7E:98:DB:39:60:C4:D8:2F:74:2A:2C:F7:E8:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bu53G7POfpjbOWDE2C90Kiz36Ek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:6d:f1:6e:da:b0:50:ac:be:7a:a7:4d:1b:b1:52:c9:58:d5: 05:f8:94:77:9a:0f:40:27:bf:14:86:8d:01:e1:02:0c:3e:9e: 0f:d3:57:f1:81:f8:9f:df:fc:cc:2c:6a:6b:56:5e:40:77:0f: e7:4f:ae:19:cf:b0:49:ae:71:b4:a9:fd:4f:e3:04:39:08:b9: 6c:a0:ff:67:e0:fc:a9:54:f3:29:bc:49:8c:68:2f:44:ae:93: 48:00:ec:5d:24:85:0f:5c:b0:00:49:d1:2e:0d:a4:8c:02:5d: 3c:70:ff:17:f6:30:0f:f3:bb:d5:d2:a4:85:c4:89:7a:2f:ce: c4:7d:58:c2:3a:45:56:1f:99:cb:eb:a5:86:32:d0:20:aa:a3: d8:b8:4c:e3:24:c9:02:2f:46:92:f3:7d:08:c6:31:df:94:05: dc:10:b9:fc:e1:ab:bc:9c:e8:b8:b7:fb:0c:52:57:07:96:7a: 87:b6:b9:81:58:c7:ef:2c:97:48:87:68:a7:8f:e3:b0:d8:a6: be:34:3d:80:50:f0:af:26:44:58:49:8a:77:cd:85:0d:20:32: 06:f3:29:95:d1:1e:d1:a4:56:33:97:33:bc:21:c1:6d:e2:cc: f4:37:00:8c:85:e5:85:ee:2f:bb:c8:c9:d2:a7:44:39:b5:cb: d1:b5:42:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg4MjcxMTAvBgNVBAUTKDZFRUU3NzFCQjNDRTdFOThEQjM5NjBDNEQ4MkY3NDJB MkNGN0U4NDkwHhcNMjUwNjEyMjMyMDEwWhcNMjUwNjE5MjMyMDEwWjAYMRYwFAYD VQQDEw02ODRiNjBhYS0xZTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp0Rf/cFaxjq1IECDBK76gpcmuAwT9XcjCyxkr3cqkOZyOICGnjBZ5qa11bPv bDKZ51421HOrFbRNS/Kc+tqWoRqG8wH3TTlRyDjKbemJl0vhpiEfeJwVjCUP16ws ZfxqPNW3PkCJ9mFJn2Q+abmiXB1uIMqwBhtkQCSpxuT2/WielczmRyc9jeqEyvwP H0HEKXdUjmKwWRAhT+T7Y7xSKD08cMiW4mlzBieVD8AWUU+vCoJR9wkHdN5GC7fr C78CcYAKhJLNwY3Sx43Z7R0T8QqeG7tWWsSjVvH8fjtXNnihECcCfFC0wA+v0ue/ 8qcuWJMpsxwjj25sZQ2A6oqERwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEsSa1qc TPqAUrd4CdB1ZUU8XjPpMB8GA1UdIwQYMBaAFG7udxuzzn6Y2zlgxNgvdCos9+hJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODgyNy8zQzdDQjQ1MDFC RTgxMUVDQkJBNjVCNTBDNEY5QUUwMi9idTUzRzdQT2ZwamJPV0RFMkM5MEtpejM2 RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J1NTNHN1BPZnBqYk9XREUyQzkwS2l6MzZFay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODgyNy8zQzdDQjQ1MDFCRTgxMUVDQkJBNjVCNTBDNEY5QUUwMi9idTUzRzdQT2Zw amJPV0RFMkM5MEtpejM2RWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZbfFu2rBQrL56p00bsVLJWNUF+JR3mg9AJ78Uho0B4QIMPp4P01fx gfif3/zMLGprVl5Adw/nT64Zz7BJrnG0qf1P4wQ5CLlsoP9n4PypVPMpvEmMaC9E rpNIAOxdJIUPXLAASdEuDaSMAl08cP8X9jAP87vV0qSFxIl6L87EfVjCOkVWH5nL 66WGMtAgqqPYuEzjJMkCL0aS830IxjHflAXcELn84au8nOi4t/sMUlcHlnqHtrmB WMfvLJdIh2inj+Ow2Ka+ND2AUPCvJkRYSYp3zYUNIDIG8ymV0R7RpFYzlzO8IcFt 4sz0NwCMheWF7i+7yMnSp0Q5tcvRtUL3 -----END CERTIFICATE-----Generated at Sat Jun 14 18:48:48 2025 by rpki-client