$ rpki-client -vvf rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft File: --bA8ysvL8RXYKA0LkO79VK03oU.mft (raw, json) Hash identifier: +kw84Hq763fricza5zbSe/a0Zpsn5NgHSkdonVN4bVo= Subject key identifier: 66:FA:48:8D:A2:AF:B4:EE:AA:ED:F7:96:42:6A:79:69:AD:36:03:48 Authority key identifier: FB:E6:C0:F3:2B:2F:2F:C4:57:60:A0:34:2E:43:BB:F5:52:B4:DE:85 Certificate issuer: /CN=A9124BD3/serialNumber=FBE6C0F32B2F2FC45760A0342E43BBF552B4DE85 Certificate serial: 0DAA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--bA8ysvL8RXYKA0LkO79VK03oU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft Manifest number: 0D95 Signing time: Mon 16 Jun 2025 17:55:04 +0000 Manifest this update: Mon 16 Jun 2025 17:55:04 +0000 Manifest next update: Mon 23 Jun 2025 17:55:04 +0000 Files and hashes: 1: --bA8ysvL8RXYKA0LkO79VK03oU.crl (hash: VZxNLZcWBRB2JDCqWGdEZJaL36DZGAbJPjgEHpGR8dE=) 2: 4C67EC06C68E11E983395515C4F9AE02.roa (hash: tP21nihbHvOPN0o7Q7ZnYvoB4lWQWRK3//ALxViNCn4=) 3: CA761A36760A11EC8FB55C23C4F9AE02.roa (hash: XcKMqxWrgr72X1rDOMRNGWOhRv7K/Bosj9SE1/JpnIk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.crl rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--bA8ysvL8RXYKA0LkO79VK03oU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 17:55:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3498 (0xdaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124BD3, serialNumber=FBE6C0F32B2F2FC45760A0342E43BBF552B4DE85 Validity Not Before: Jun 16 17:55:04 2025 GMT Not After : Jun 23 17:55:04 2025 GMT Subject: CN=68505a78-f518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:7f:13:df:68:7a:92:5b:61:04:b9:d8:6a:e7: 0d:c5:d5:4e:d6:fc:d1:8d:ad:dd:43:85:4f:72:3c: 46:72:3b:3b:f5:5f:46:fd:8c:c6:d9:5b:3c:64:32: 56:83:6a:dd:5c:c6:82:62:e0:53:54:b5:17:10:71: 67:2c:da:06:cc:b4:a7:73:3e:83:52:ba:ad:c7:81: 35:41:aa:d6:70:97:31:44:9e:b1:92:f4:4c:47:d6: 38:7b:01:1d:bc:dc:f1:12:8d:e8:f0:40:99:28:f1: 5b:98:53:cc:52:6d:05:95:ab:5b:ce:c6:a9:e4:19: de:32:1e:5d:35:50:26:08:35:33:95:5e:62:e3:1b: 48:e9:ff:8e:c4:8c:63:9e:a6:26:ae:5e:37:03:c4: 03:93:ff:44:ec:fd:92:55:e0:9d:1e:9e:2f:0f:96: cf:fd:46:be:5d:a6:92:23:f9:7a:44:a2:c7:f6:db: 14:ee:c2:af:e0:65:a5:91:d6:c0:1c:9d:30:cd:89: 82:99:9c:ed:33:9f:80:3e:6c:09:be:6f:5a:da:4a: fe:03:a1:d1:e5:1d:3e:05:16:0a:2e:48:35:93:82: 65:2f:f0:6c:dc:05:6a:22:42:cd:69:f0:b3:64:41: 6d:e2:d9:7a:f9:35:c4:3a:c4:46:2f:01:47:9c:28: fe:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:FA:48:8D:A2:AF:B4:EE:AA:ED:F7:96:42:6A:79:69:AD:36:03:48 X509v3 Authority Key Identifier: keyid:FB:E6:C0:F3:2B:2F:2F:C4:57:60:A0:34:2E:43:BB:F5:52:B4:DE:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--bA8ysvL8RXYKA0LkO79VK03oU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:df:2e:29:8f:2f:2e:18:bc:03:21:6e:e5:87:04:04:1e:bb: 61:19:af:3f:c8:79:83:82:6c:0d:ae:16:65:c0:c4:52:68:5b: e3:18:56:b7:9c:55:0f:35:0b:20:60:dd:ad:ca:f5:35:ea:35: 64:8a:e7:fa:dc:36:0f:a3:e9:1e:25:48:f8:71:fc:8a:36:44: 6c:f2:ef:d6:89:e5:8a:3e:e8:99:a5:51:1c:ef:1c:66:cb:a9: 6e:92:e3:24:bc:42:30:58:c9:2a:c6:9a:f4:1f:5e:c1:6b:1f: b3:38:13:0e:83:0f:6c:fd:1d:a1:34:ab:b1:51:31:85:1b:7a: 9e:ae:72:49:89:44:8d:d3:5c:5f:1a:8f:37:f2:90:80:9e:de: 0e:6d:98:85:68:c2:17:16:c3:5d:55:a3:b4:bb:b4:06:29:3b: 39:e9:3b:36:ce:fb:64:1c:3a:7d:eb:d1:8d:2b:c8:77:71:eb: 33:a3:e4:81:d0:45:d5:a0:9a:c4:df:bb:01:0e:08:31:f8:1b: c0:2b:8d:09:fe:37:40:28:a8:48:83:a6:cd:72:a9:c9:73:24: 62:39:22:9f:b6:40:e0:bd:1d:8e:fb:ad:0a:45:69:81:4e:4f: fd:20:01:35:09:72:c7:3e:76:ca:85:c3:25:63:03:f8:18:84: ce:d4:74:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjRCRDMxMTAvBgNVBAUTKEZCRTZDMEYzMkIyRjJGQzQ1NzYwQTAzNDJFNDNCQkY1 NTJCNERFODUwHhcNMjUwNjE2MTc1NTA0WhcNMjUwNjIzMTc1NTA0WjAYMRYwFAYD VQQDEw02ODUwNWE3OC1mNTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5X8T32h6klthBLnYaucNxdVO1vzRja3dQ4VPcjxGcjs79V9G/YzG2Vs8ZDJW g2rdXMaCYuBTVLUXEHFnLNoGzLSncz6DUrqtx4E1QarWcJcxRJ6xkvRMR9Y4ewEd vNzxEo3o8ECZKPFbmFPMUm0Flatbzsap5BneMh5dNVAmCDUzlV5i4xtI6f+OxIxj nqYmrl43A8QDk/9E7P2SVeCdHp4vD5bP/Ua+XaaSI/l6RKLH9tsU7sKv4GWlkdbA HJ0wzYmCmZztM5+APmwJvm9a2kr+A6HR5R0+BRYKLkg1k4JlL/Bs3AVqIkLNafCz ZEFt4tl6+TXEOsRGLwFHnCj+PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGb6SI2i r7Tuqu33lkJqeWmtNgNIMB8GA1UdIwQYMBaAFPvmwPMrLy/EV2CgNC5Du/VStN6F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNEJEMy8wRTREODY3QUM2 OEQxMUU5OUI0NTJEMTNDNEY5QUUwMi8tLWJBOHlzdkw4UlhZS0EwTGtPNzlWSzAz b1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy0tYkE4eXN2TDhSWFlLQTBMa083OVZLMDNvVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NEJEMy8wRTREODY3QUM2OEQxMUU5OUI0NTJEMTNDNEY5QUUwMi8tLWJBOHlzdkw4 UlhZS0EwTGtPNzlWSzAzb1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBg3y4pjy8uGLwDIW7lhwQEHrthGa8/yHmDgmwNrhZlwMRSaFvjGFa3 nFUPNQsgYN2tyvU16jVkiuf63DYPo+keJUj4cfyKNkRs8u/WieWKPuiZpVEc7xxm y6lukuMkvEIwWMkqxpr0H17Bax+zOBMOgw9s/R2hNKuxUTGFG3qernJJiUSN01xf Go838pCAnt4ObZiFaMIXFsNdVaO0u7QGKTs56Ts2zvtkHDp969GNK8h3ceszo+SB 0EXVoJrE37sBDggx+BvAK40J/jdAKKhIg6bNcqnJcyRiOSKftkDgvR2O+60KRWmB Tk/9IAE1CXLHPnbKhcMlYwP4GITO1HTq -----END CERTIFICATE-----Generated at Wed Jun 18 10:25:52 2025 by rpki-client