$ rpki-client -vvf rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/b_pdsVnUCjoXLbx09cMrVVF5ea8.mft File: b_pdsVnUCjoXLbx09cMrVVF5ea8.mft (raw, json) Hash identifier: kRnaaffmeMeiaFpzQC+9vppJJq3aSUWG79ttGRNtH0w= Subject key identifier: ED:6D:07:19:C3:5F:34:AD:BA:2D:B6:38:37:4E:78:F0:11:4E:5E:ED Authority key identifier: 6F:FA:5D:B1:59:D4:0A:3A:17:2D:BC:74:F5:C3:2B:55:51:79:79:AF Certificate issuer: /CN=A913C627/serialNumber=6FFA5DB159D40A3A172DBC74F5C32B55517979AF Certificate serial: 0877 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_pdsVnUCjoXLbx09cMrVVF5ea8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/b_pdsVnUCjoXLbx09cMrVVF5ea8.mft Manifest number: 085A Signing time: Thu 12 Jun 2025 20:30:34 +0000 Manifest this update: Thu 12 Jun 2025 20:30:34 +0000 Manifest next update: Thu 19 Jun 2025 20:30:34 +0000 Files and hashes: 1: b_pdsVnUCjoXLbx09cMrVVF5ea8.crl (hash: WwanbFRJdQ9IgQ7j6KHe+ydbBc3Pg2UAxZ2mI34SwJ0=) 2: FFB3EF94F53C11EEA5B4623BC4F9AE02.roa (hash: qCV1CGEKKAAFyjh2aY/pv/O3Ul0oy0qB9pbyOTWaQu4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/b_pdsVnUCjoXLbx09cMrVVF5ea8.crl rsync://rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/b_pdsVnUCjoXLbx09cMrVVF5ea8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_pdsVnUCjoXLbx09cMrVVF5ea8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 20:30:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2167 (0x877) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C627, serialNumber=6FFA5DB159D40A3A172DBC74F5C32B55517979AF Validity Not Before: Jun 12 20:30:34 2025 GMT Not After : Jun 19 20:30:34 2025 GMT Subject: CN=684b38ea-039d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:94:25:5e:ac:8a:90:e1:9e:48:6a:3a:2e:c1: 5f:6b:81:df:80:a4:90:01:99:96:93:ac:93:23:fe: 67:b5:f9:f7:b5:48:5d:98:83:bb:13:02:ad:83:32: f1:aa:4e:23:f9:2b:7c:03:25:4c:f5:44:9a:25:b9: 5e:c7:bf:e5:25:6e:1d:c8:10:fa:a7:f8:35:0f:cd: 6d:6a:59:c8:15:5e:59:f1:30:88:db:54:e4:ba:16: 30:0d:e6:6f:e3:11:b7:a1:61:46:7d:c4:06:ed:25: 07:cc:02:3e:e9:28:33:94:f5:0d:49:14:83:05:bb: 41:91:51:7e:5f:fc:d1:1c:be:46:9b:4f:cd:1b:1d: 47:96:95:9d:a6:de:46:6d:9b:f7:b8:79:94:8f:aa: 95:8b:ba:45:9f:a1:9b:c6:40:45:fd:3a:c8:ce:c6: d0:83:73:9d:9b:ed:1f:e1:76:de:19:ee:6a:aa:31: 5f:ef:1f:d1:ad:05:97:e3:60:b7:bd:2b:92:c1:60: d9:3f:57:1a:80:bf:3c:7f:aa:74:c1:21:37:83:38: 8d:d1:39:9c:9e:03:be:f7:4f:92:06:02:58:3e:12: 23:59:a0:26:c8:23:ca:16:c8:ef:f9:e0:69:c8:51: 57:62:ec:de:78:80:57:5a:fa:48:23:5a:05:59:77: f7:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:6D:07:19:C3:5F:34:AD:BA:2D:B6:38:37:4E:78:F0:11:4E:5E:ED X509v3 Authority Key Identifier: keyid:6F:FA:5D:B1:59:D4:0A:3A:17:2D:BC:74:F5:C3:2B:55:51:79:79:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/b_pdsVnUCjoXLbx09cMrVVF5ea8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_pdsVnUCjoXLbx09cMrVVF5ea8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/b_pdsVnUCjoXLbx09cMrVVF5ea8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:09:f4:c8:87:cb:79:94:a7:6a:af:b5:ac:45:ed:de:56:fd: ee:3d:c4:b2:fd:83:78:e1:70:dc:6f:63:b5:88:57:56:11:f2: ea:ff:7e:1b:c1:56:d1:0a:d4:c7:a6:c6:bb:7b:e9:d8:fa:4d: e8:07:df:ad:14:f4:21:0d:75:e1:bd:63:07:5a:ef:1e:15:8e: dc:9d:ae:db:93:23:87:f6:e3:9b:51:b9:f7:40:b1:7f:ec:49: 9a:07:c7:ab:b4:11:ce:2c:a7:c6:1e:cf:44:42:ab:02:87:05: 0a:0f:84:fb:94:68:45:c3:1f:d4:9a:40:fe:bd:b6:c3:d4:60: c6:d2:ed:1c:78:61:40:42:e6:4f:38:9f:6f:80:f9:b6:0b:e4: 9f:25:69:ad:7b:dc:8b:bb:37:c3:3a:68:13:8d:35:ad:59:47: 24:aa:17:f9:c8:a5:ab:20:e1:8e:9d:65:8e:8a:24:dd:18:39: cb:a5:8d:4c:30:eb:e6:c3:48:dd:9f:4f:6d:8d:55:6f:da:a9: 9d:b7:d7:64:74:31:49:8b:56:73:ce:eb:a2:5a:40:f4:c4:2b: c3:93:19:72:1f:f2:99:f0:6f:df:f4:99:71:e2:d2:de:8e:d4: b0:d0:29:f1:c8:10:f6:ad:cc:3d:d3:7b:3a:64:85:cd:f7:6f: 33:df:9c:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0M2MjcxMTAvBgNVBAUTKDZGRkE1REIxNTlENDBBM0ExNzJEQkM3NEY1QzMyQjU1 NTE3OTc5QUYwHhcNMjUwNjEyMjAzMDM0WhcNMjUwNjE5MjAzMDM0WjAYMRYwFAYD VQQDEw02ODRiMzhlYS0wMzlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt5QlXqyKkOGeSGo6LsFfa4HfgKSQAZmWk6yTI/5ntfn3tUhdmIO7EwKtgzLx qk4j+St8AyVM9USaJblex7/lJW4dyBD6p/g1D81talnIFV5Z8TCI21TkuhYwDeZv 4xG3oWFGfcQG7SUHzAI+6SgzlPUNSRSDBbtBkVF+X/zRHL5Gm0/NGx1HlpWdpt5G bZv3uHmUj6qVi7pFn6GbxkBF/TrIzsbQg3Odm+0f4XbeGe5qqjFf7x/RrQWX42C3 vSuSwWDZP1cagL88f6p0wSE3gziN0TmcngO+90+SBgJYPhIjWaAmyCPKFsjv+eBp yFFXYuzeeIBXWvpII1oFWXf3lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO1tBxnD XzStui22ODdOePARTl7tMB8GA1UdIwQYMBaAFG/6XbFZ1Ao6Fy28dPXDK1VReXmv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzYyNy9DMjY1QzFBNEQw N0QxMUVBODYwMDk4NkRDNEY5QUUwMi9iX3Bkc1ZuVUNqb1hMYngwOWNNclZWRjVl YTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JfcGRzVm5VQ2pvWExieDA5Y01yVlZGNWVhOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzYyNy9DMjY1QzFBNEQwN0QxMUVBODYwMDk4NkRDNEY5QUUwMi9iX3Bkc1ZuVUNq b1hMYngwOWNNclZWRjVlYTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdCfTIh8t5lKdqr7WsRe3eVv3uPcSy/YN44XDcb2O1iFdWEfLq/34b wVbRCtTHpsa7e+nY+k3oB9+tFPQhDXXhvWMHWu8eFY7cna7bkyOH9uObUbn3QLF/ 7EmaB8ertBHOLKfGHs9EQqsChwUKD4T7lGhFwx/UmkD+vbbD1GDG0u0ceGFAQuZP OJ9vgPm2C+SfJWmte9yLuzfDOmgTjTWtWUckqhf5yKWrIOGOnWWOiiTdGDnLpY1M MOvmw0jdn09tjVVv2qmdt9dkdDFJi1ZzzuuiWkD0xCvDkxlyH/KZ8G/f9Jlx4tLe jtSw0CnxyBD2rcw903s6ZIXN928z35wz -----END CERTIFICATE-----Generated at Sat Jun 14 19:27:02 2025 by rpki-client