$ rpki-client -vvf rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.mft File: Bst2YhlvZE7eydz72HmbjHPjlwk.mft (raw, json) Hash identifier: SB747p6Au/26EQ/itBh7zQczW0yztD6+OdYWI3sgQLY= Subject key identifier: 7F:E0:C4:A2:BF:ED:EF:65:BF:4E:63:DC:2B:13:DD:C8:4A:2F:7C:B2 Authority key identifier: 06:CB:76:62:19:6F:64:4E:DE:C9:DC:FB:D8:79:9B:8C:73:E3:97:09 Certificate issuer: /CN=A9127C93/serialNumber=06CB7662196F644EDEC9DCFBD8799B8C73E39709 Certificate serial: 01F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bst2YhlvZE7eydz72HmbjHPjlwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.mft Manifest number: 01EB Signing time: Fri 13 Jun 2025 01:40:51 +0000 Manifest this update: Fri 13 Jun 2025 01:40:50 +0000 Manifest next update: Fri 20 Jun 2025 01:40:50 +0000 Files and hashes: 1: Bst2YhlvZE7eydz72HmbjHPjlwk.crl (hash: dFV37+7sTK8W3InJCHzSN+16x03zKLcCxEjbYGFEju4=) 2: 2965791E5F4011ED9361C246C4F9AE02.roa (hash: giH1vIhIIPvv5hJDOK02Raj/lgCr3oz3hTTRlbexHIs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.crl rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bst2YhlvZE7eydz72HmbjHPjlwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 01:40:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 497 (0x1f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127C93, serialNumber=06CB7662196F644EDEC9DCFBD8799B8C73E39709 Validity Not Before: Jun 13 01:40:50 2025 GMT Not After : Jun 20 01:40:50 2025 GMT Subject: CN=684b81a2-8551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:44:a3:16:93:8f:dc:95:31:6c:4c:77:e1:c2: 62:39:11:d2:04:33:e0:e8:15:02:83:e2:34:db:2f: c4:b4:42:16:29:c0:b2:1e:dc:1b:60:8f:00:d6:87: 48:ff:75:ce:cb:dd:09:d1:9b:d7:5f:6f:cf:4a:72: be:bd:6f:68:87:29:77:10:c7:86:8e:f8:e8:c7:c1: af:8f:77:4b:85:d3:c6:0b:f1:df:59:b9:1c:59:d8: 7e:e2:25:26:51:ee:0e:72:e1:90:ed:4f:8c:e1:b9: d8:e7:cd:1f:73:7f:db:71:53:39:1c:27:59:e1:2a: 60:fd:03:94:26:88:01:4a:c2:7c:d3:1b:e9:cf:9d: 24:d1:91:2e:42:7e:ca:4b:b7:61:2f:bf:9c:23:47: 08:0e:08:d0:bf:a5:3a:ea:7a:fc:6b:d0:00:ae:54: a7:29:28:09:3f:9d:dd:de:83:04:ae:a3:19:f1:6f: 23:b8:2a:47:2b:fd:0e:ec:89:bc:d6:23:3c:27:c0: 55:c9:38:c4:be:d3:21:86:8b:a4:d2:0c:ef:72:86: 7e:75:63:6d:56:91:eb:83:18:dc:ee:d8:2e:5c:c3: 9c:21:fc:d0:18:ed:99:3a:25:4e:23:e9:c7:49:bd: fa:c2:d1:11:c5:d1:cb:c1:61:94:79:cf:13:76:74: 54:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:E0:C4:A2:BF:ED:EF:65:BF:4E:63:DC:2B:13:DD:C8:4A:2F:7C:B2 X509v3 Authority Key Identifier: keyid:06:CB:76:62:19:6F:64:4E:DE:C9:DC:FB:D8:79:9B:8C:73:E3:97:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bst2YhlvZE7eydz72HmbjHPjlwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:49:0d:bf:d8:c3:80:06:a5:2f:b2:95:ef:61:df:d6:65:cf: 56:76:a3:1e:6c:8d:69:29:da:d5:e1:09:08:d8:4c:27:c4:cc: 44:05:4e:57:24:c4:14:cd:53:38:71:3d:01:25:c1:eb:5f:3b: 21:cc:a6:17:47:04:4e:0e:95:4b:39:ff:f2:81:2d:51:b5:4f: e7:2d:58:af:16:cf:d1:da:44:48:83:37:42:09:79:b7:9a:3c: ee:78:15:d1:5a:db:30:ce:10:fb:09:22:4d:bb:1a:33:61:65: e6:6c:2c:b8:8c:1e:20:cc:c2:8e:f6:ee:16:20:bc:23:f3:cf: 98:95:08:37:92:dd:f5:0d:fa:9b:e5:2d:c1:84:1c:a6:89:01: 4f:02:6e:ee:d5:33:64:b3:bd:3a:43:1c:b0:c6:09:1c:e2:d3: b2:19:87:60:8d:6f:64:62:b4:c4:36:bf:8e:89:88:10:6f:f3: 92:87:b7:23:49:41:4b:f7:5a:66:81:25:b3:1f:07:75:a3:54: ce:b4:52:98:49:82:95:a1:81:33:f4:08:32:4a:07:0a:a5:83: f3:5b:3a:5b:0e:64:e6:ba:7c:48:ba:4f:80:45:04:a4:ee:24: d3:65:fb:6e:97:55:aa:83:16:f4:8c:42:11:47:18:e3:59:e0: 75:09:d3:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdDOTMxMTAvBgNVBAUTKDA2Q0I3NjYyMTk2RjY0NEVERUM5RENGQkQ4Nzk5QjhD NzNFMzk3MDkwHhcNMjUwNjEzMDE0MDUwWhcNMjUwNjIwMDE0MDUwWjAYMRYwFAYD VQQDEw02ODRiODFhMi04NTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1kSjFpOP3JUxbEx34cJiORHSBDPg6BUCg+I02y/EtEIWKcCyHtwbYI8A1odI /3XOy90J0ZvXX2/PSnK+vW9ohyl3EMeGjvjox8Gvj3dLhdPGC/HfWbkcWdh+4iUm Ue4OcuGQ7U+M4bnY580fc3/bcVM5HCdZ4Spg/QOUJogBSsJ80xvpz50k0ZEuQn7K S7dhL7+cI0cIDgjQv6U66nr8a9AArlSnKSgJP53d3oMErqMZ8W8juCpHK/0O7Im8 1iM8J8BVyTjEvtMhhouk0gzvcoZ+dWNtVpHrgxjc7tguXMOcIfzQGO2ZOiVOI+nH Sb36wtERxdHLwWGUec8TdnRUswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH/gxKK/ 7e9lv05j3CsT3chKL3yyMB8GA1UdIwQYMBaAFAbLdmIZb2RO3snc+9h5m4xz45cJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0M5My80MDIxQTRFNjVG MjQxMUVEQjgwQzE5MjFDNEY5QUUwMi9Cc3QyWWhsdlpFN2V5ZHo3MkhtYmpIUGps d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JzdDJZaGx2WkU3ZXlkejcySG1iakhQamx3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0M5My80MDIxQTRFNjVGMjQxMUVEQjgwQzE5MjFDNEY5QUUwMi9Cc3QyWWhsdlpF N2V5ZHo3MkhtYmpIUGpsd2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXSQ2/2MOABqUvspXvYd/WZc9WdqMebI1pKdrV4QkI2EwnxMxEBU5X JMQUzVM4cT0BJcHrXzshzKYXRwRODpVLOf/ygS1RtU/nLVivFs/R2kRIgzdCCXm3 mjzueBXRWtswzhD7CSJNuxozYWXmbCy4jB4gzMKO9u4WILwj88+YlQg3kt31Dfqb 5S3BhBymiQFPAm7u1TNks706Qxywxgkc4tOyGYdgjW9kYrTENr+OiYgQb/OSh7cj SUFL91pmgSWzHwd1o1TOtFKYSYKVoYEz9AgySgcKpYPzWzpbDmTmunxIuk+ARQSk 7iTTZftul1Wqgxb0jEIRRxjjWeB1CdO8 -----END CERTIFICATE-----Generated at Sat Jun 14 19:37:22 2025 by rpki-client