$ rpki-client -vvf rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft File: bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft (raw, json) Hash identifier: YVTLJrgK/KzRdl6iOJR9Fr5pnqBTIQ/G33RlcrfvYIs= Subject key identifier: D4:87:70:E4:E3:E5:24:9A:83:04:71:C1:39:96:34:61:0D:64:B1:80 Authority key identifier: 6E:4E:69:BE:13:D6:13:A7:02:74:C0:CE:77:38:39:23:F1:56:27:2D Certificate issuer: /CN=A9130A53/serialNumber=6E4E69BE13D613A70274C0CE77383923F156272D Certificate serial: 0901 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bk5pvhPWE6cCdMDOdzg5I_FWJy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft Manifest number: 08F5 Signing time: Thu 12 Jun 2025 20:08:06 +0000 Manifest this update: Thu 12 Jun 2025 20:08:05 +0000 Manifest next update: Thu 19 Jun 2025 20:08:05 +0000 Files and hashes: 1: bk5pvhPWE6cCdMDOdzg5I_FWJy0.crl (hash: gT7GrG8pCXkFoZ9g1R07go/Dleam7BTDVhiBrCOnXl0=) 2: F36A0E2EAB4B11EAA2CA585BC4F9AE02.roa (hash: BidxYSVmBabzb42KTEQRZnYy7Sbks/SN1w8y9yUGtJQ=) 3: F2CD89AAAB4B11EAA2CA585BC4F9AE02.roa (hash: OlzMxXAfrSP6Nj86W0pq9Qh2aWjxJmFySgPE4i+83ow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.crl rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bk5pvhPWE6cCdMDOdzg5I_FWJy0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 20:08:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2305 (0x901) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130A53, serialNumber=6E4E69BE13D613A70274C0CE77383923F156272D Validity Not Before: Jun 12 20:08:05 2025 GMT Not After : Jun 19 20:08:05 2025 GMT Subject: CN=684b33a6-31c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b9:97:8f:7f:f4:cd:22:b7:39:d3:9d:f4:62: 70:b7:48:99:1f:b1:e9:ca:4c:44:ac:1a:12:28:9c: 68:db:62:6f:f4:53:c0:38:74:8f:6e:f5:00:d2:70: 41:80:f1:53:f2:0d:26:bf:fb:6a:23:3c:5f:da:c4: 09:1e:57:ae:80:9e:4f:b6:21:36:dd:aa:1d:4e:ad: d7:36:8b:cf:54:c1:02:f1:13:95:62:b1:d0:24:f1: 3e:07:b8:30:31:f9:ce:8b:a0:ee:d8:70:b5:25:27: b0:17:e7:ca:00:d8:4e:c2:27:5f:53:e1:60:e5:f6: 41:27:72:58:f0:9c:c3:09:71:74:93:83:84:1f:10: 28:3e:bf:11:d8:56:b3:38:7f:60:35:1d:23:df:8a: e5:d5:1e:4e:70:81:54:e5:81:a0:dd:ca:b8:73:bc: 79:2b:04:33:ec:03:e7:08:39:48:5b:99:3a:41:84: eb:2f:31:db:8b:a9:03:b4:10:f8:d2:e3:b9:dd:b4: 38:1a:a4:03:87:ff:c8:b8:0f:63:e8:69:19:57:83: 6e:3b:30:d0:54:2b:e2:1d:4c:5e:24:2d:91:4f:d3: 8c:77:49:23:59:6a:c1:16:f8:97:99:ae:4e:de:a8: f1:77:6a:42:0a:a5:3b:fe:0a:3d:d4:f8:98:9f:4b: 98:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:87:70:E4:E3:E5:24:9A:83:04:71:C1:39:96:34:61:0D:64:B1:80 X509v3 Authority Key Identifier: keyid:6E:4E:69:BE:13:D6:13:A7:02:74:C0:CE:77:38:39:23:F1:56:27:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bk5pvhPWE6cCdMDOdzg5I_FWJy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:d4:77:7b:a9:cb:04:45:75:e4:d5:c5:ea:16:e9:27:9b:e3: 4b:16:8b:9c:72:d5:ac:39:02:35:ce:29:14:ce:a2:b8:5f:5c: a7:9b:0a:ad:09:ec:68:8a:0a:13:55:8e:5f:62:b9:2b:03:39: ec:83:46:c0:3a:48:98:2f:6b:4d:40:19:25:aa:15:43:35:fb: f1:af:79:e7:a3:4c:7e:06:db:0f:90:1e:1b:01:b3:32:56:48: be:f1:59:3b:4d:fa:7b:b3:8f:13:36:8c:3a:1a:33:58:3f:7f: 3a:a4:12:57:65:fa:bc:b3:59:df:4c:09:05:61:f9:90:b8:f4: 1f:65:49:6a:d8:81:56:8c:31:8a:ed:25:bd:db:c4:b9:88:c7: 2f:e3:a7:4f:dc:66:21:c9:d1:76:47:41:ad:dd:dd:80:24:d4: dc:15:3a:af:1d:4f:f7:94:20:16:02:53:2c:5c:80:f2:c0:29: e3:ca:23:1a:57:9a:80:1b:29:4d:8a:df:e5:56:d9:25:95:1e: 52:2e:fc:55:99:c5:14:b7:f7:21:f9:f0:49:53:fb:8a:ce:7d: 8b:92:9c:f2:e6:fd:bd:17:e7:4b:7f:88:ba:2a:e9:49:f9:70: 8d:c3:6e:15:a3:a2:8f:e3:df:7f:ff:61:63:b4:5c:c3:b0:9c: 3a:7e:99:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBBNTMxMTAvBgNVBAUTKDZFNEU2OUJFMTNENjEzQTcwMjc0QzBDRTc3MzgzOTIz RjE1NjI3MkQwHhcNMjUwNjEyMjAwODA1WhcNMjUwNjE5MjAwODA1WjAYMRYwFAYD VQQDEw02ODRiMzNhNi0zMWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqLmXj3/0zSK3OdOd9GJwt0iZH7HpykxErBoSKJxo22Jv9FPAOHSPbvUA0nBB gPFT8g0mv/tqIzxf2sQJHleugJ5PtiE23aodTq3XNovPVMEC8ROVYrHQJPE+B7gw MfnOi6Du2HC1JSewF+fKANhOwidfU+Fg5fZBJ3JY8JzDCXF0k4OEHxAoPr8R2Faz OH9gNR0j34rl1R5OcIFU5YGg3cq4c7x5KwQz7APnCDlIW5k6QYTrLzHbi6kDtBD4 0uO53bQ4GqQDh//IuA9j6GkZV4NuOzDQVCviHUxeJC2RT9OMd0kjWWrBFviXma5O 3qjxd2pCCqU7/go91PiYn0uYuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNSHcOTj 5SSagwRxwTmWNGENZLGAMB8GA1UdIwQYMBaAFG5Oab4T1hOnAnTAznc4OSPxVict MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEE1My83MUI3RDQ3MEFC NEExMUVBODlEMTYzNTlDNEY5QUUwMi9iazVwdmhQV0U2Y0NkTURPZHpnNUlfRldK eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JrNXB2aFBXRTZjQ2RNRE9kemc1SV9GV0p5MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEE1My83MUI3RDQ3MEFCNEExMUVBODlEMTYzNTlDNEY5QUUwMi9iazVwdmhQV0U2 Y0NkTURPZHpnNUlfRldKeTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA21Hd7qcsERXXk1cXqFuknm+NLFoucctWsOQI1zikUzqK4X1ynmwqt CexoigoTVY5fYrkrAznsg0bAOkiYL2tNQBklqhVDNfvxr3nno0x+BtsPkB4bAbMy Vki+8Vk7Tfp7s48TNow6GjNYP386pBJXZfq8s1nfTAkFYfmQuPQfZUlq2IFWjDGK 7SW928S5iMcv46dP3GYhydF2R0Gt3d2AJNTcFTqvHU/3lCAWAlMsXIDywCnjyiMa V5qAGylNit/lVtkllR5SLvxVmcUUt/ch+fBJU/uKzn2Lkpzy5v29F+dLf4i6KulJ +XCNw24Vo6KP499//2FjtFzDsJw6fpmS -----END CERTIFICATE-----Generated at Sat Jun 14 19:27:36 2025 by rpki-client