$ rpki-client -vvf rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.mft File: l9BBWfuzfqZ0YriWl2wRQMlZ5pE.mft (raw, json) Hash identifier: RmDjl2UNWit7hEbTw6c68+mW+LsLVsiPwLEYvcjvabw= Subject key identifier: 9A:3B:84:A3:03:58:41:FA:44:C5:E3:5A:42:E4:B0:D7:61:B4:BB:26 Authority key identifier: 97:D0:41:59:FB:B3:7E:A6:74:62:B8:96:97:6C:11:40:C9:59:E6:91 Certificate issuer: /CN=A913F2BD/serialNumber=97D04159FBB37EA67462B896976C1140C959E691 Certificate serial: B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.mft Manifest number: B3 Signing time: Thu 19 Jun 2025 05:18:39 +0000 Manifest this update: Thu 19 Jun 2025 05:18:38 +0000 Manifest next update: Thu 26 Jun 2025 05:18:38 +0000 Files and hashes: 1: l9BBWfuzfqZ0YriWl2wRQMlZ5pE.crl (hash: MbzVp6QO+xAoPqy94cBxPx0dWhgmovsSGVcJpcmRZdE=) 2: 470E849A389E11EF83D66176C4F9AE02.roa (hash: I6wYLUXo9wiy4AQAxb2ubHia3GZFxKPK++eH7JKRPwI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.crl rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 05:18:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 180 (0xb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F2BD, serialNumber=97D04159FBB37EA67462B896976C1140C959E691 Validity Not Before: Jun 19 05:18:38 2025 GMT Not After : Jun 26 05:18:38 2025 GMT Subject: CN=68539daf-c755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:6d:56:ef:b4:3d:58:6a:a3:6a:d8:2b:7f:8b: 75:23:4e:5e:8e:a2:de:f4:40:57:9e:9d:e5:14:df: 84:8e:61:34:da:6f:23:be:a3:a6:26:e2:2a:4f:ec: a1:a1:d7:c1:01:e9:98:d7:e9:1e:79:b1:3b:d3:a4: 0f:53:8e:ab:1c:59:d2:e7:83:72:a7:85:48:0d:9b: 0f:0b:ef:09:7f:e8:91:e5:29:6d:88:49:e5:c7:37: 0a:c8:27:44:e4:0a:94:e3:9e:f5:71:dd:b3:0b:35: f7:af:5d:72:80:9a:58:d5:95:48:e6:20:e9:7d:3f: 96:5c:58:1a:86:6a:1e:d9:6c:9b:3a:83:db:86:31: 0b:25:13:2d:37:a0:d7:48:fa:67:ce:d2:a1:0d:cd: 6f:d6:c6:e4:48:c3:dc:f2:a3:6c:98:e5:e3:94:ae: 5f:82:ba:40:81:30:24:13:4c:96:1f:65:98:15:02: bc:51:79:c3:45:50:29:e6:ef:5e:7b:a8:be:90:50: 57:ce:76:37:e0:50:9f:0a:bc:fd:58:d2:3d:fa:5f: d0:5a:fb:12:33:61:7e:d2:a4:99:2f:2f:61:9e:1c: 35:17:54:13:d1:d2:94:da:51:bc:0f:d0:1a:fc:3c: 9a:61:1c:65:56:b1:18:b1:a1:0f:e7:ec:9a:c5:2a: 5f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:3B:84:A3:03:58:41:FA:44:C5:E3:5A:42:E4:B0:D7:61:B4:BB:26 X509v3 Authority Key Identifier: keyid:97:D0:41:59:FB:B3:7E:A6:74:62:B8:96:97:6C:11:40:C9:59:E6:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:90:84:18:61:5a:3d:1a:9a:fe:66:46:11:30:8d:29:1b:4e: ba:b7:ea:f2:42:16:b0:34:a8:90:30:3f:5e:39:9c:92:ef:91: c2:47:ed:f8:ec:e6:d4:3a:a3:74:29:b5:cc:cf:b1:55:7e:4f: 31:d3:ef:19:db:c4:75:63:ba:d0:ef:96:2a:8d:53:e0:aa:b2: 6f:a8:fb:31:08:66:8e:de:7e:79:7b:a1:da:74:35:40:5c:0b: df:2c:bb:27:ed:7a:66:2b:4d:9a:54:70:7a:52:ba:7a:ae:69: d8:db:b7:69:10:8a:44:eb:41:09:9e:eb:c1:4e:6b:3b:f6:75: 0b:cb:06:84:aa:3e:92:92:7a:a7:2f:dc:38:4f:18:fd:98:ff: ac:bd:dc:bf:a2:96:e3:67:e6:b0:68:5d:06:d6:6a:8b:15:9c: 36:9a:b2:56:a4:f9:7b:63:d1:d5:79:93:dc:c4:c3:99:ef:a5: 08:54:29:d7:d4:8e:62:cf:26:90:b6:62:cf:eb:cb:eb:45:ec: 90:d7:60:f7:3e:d2:d4:b3:5c:5f:68:7c:15:bd:14:1c:27:f0: a2:d0:da:af:eb:40:65:e4:df:68:ec:0e:ce:5b:8b:63:e5:63: 60:a5:0a:b1:11:82:0f:ec:63:fa:1c:93:1e:5d:d4:16:3e:73: 71:6f:1f:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YyQkQxMTAvBgNVBAUTKDk3RDA0MTU5RkJCMzdFQTY3NDYyQjg5Njk3NkMxMTQw Qzk1OUU2OTEwHhcNMjUwNjE5MDUxODM4WhcNMjUwNjI2MDUxODM4WjAYMRYwFAYD VQQDEw02ODUzOWRhZi1jNzU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA321W77Q9WGqjatgrf4t1I05ejqLe9EBXnp3lFN+EjmE02m8jvqOmJuIqT+yh odfBAemY1+keebE706QPU46rHFnS54Nyp4VIDZsPC+8Jf+iR5SltiEnlxzcKyCdE 5AqU4571cd2zCzX3r11ygJpY1ZVI5iDpfT+WXFgahmoe2WybOoPbhjELJRMtN6DX SPpnztKhDc1v1sbkSMPc8qNsmOXjlK5fgrpAgTAkE0yWH2WYFQK8UXnDRVAp5u9e e6i+kFBXznY34FCfCrz9WNI9+l/QWvsSM2F+0qSZLy9hnhw1F1QT0dKU2lG8D9Aa /DyaYRxlVrEYsaEP5+yaxSpfpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJo7hKMD WEH6RMXjWkLksNdhtLsmMB8GA1UdIwQYMBaAFJfQQVn7s36mdGK4lpdsEUDJWeaR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjJCRC80Nzg0NDIwMDM4 OTYxMUVGOUVERTgxMzZDNEY5QUUwMi9sOUJCV2Z1emZxWjBZcmlXbDJ3UlFNbFo1 cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w5QkJXZnV6ZnFaMFlyaVdsMndSUU1sWjVwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjJCRC80Nzg0NDIwMDM4OTYxMUVGOUVERTgxMzZDNEY5QUUwMi9sOUJCV2Z1emZx WjBZcmlXbDJ3UlFNbFo1cEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAskIQYYVo9Gpr+ZkYRMI0pG066t+ryQhawNKiQMD9eOZyS75HCR+34 7ObUOqN0KbXMz7FVfk8x0+8Z28R1Y7rQ75YqjVPgqrJvqPsxCGaO3n55e6HadDVA XAvfLLsn7XpmK02aVHB6Urp6rmnY27dpEIpE60EJnuvBTms79nULywaEqj6Sknqn L9w4Txj9mP+svdy/opbjZ+awaF0G1mqLFZw2mrJWpPl7Y9HVeZPcxMOZ76UIVCnX 1I5izyaQtmLP68vrReyQ12D3PtLUs1xfaHwVvRQcJ/Ci0Nqv60Bl5N9o7A7OW4tj 5WNgpQqxEYIP7GP6HJMeXdQWPnNxbx+a -----END CERTIFICATE-----Generated at Sat Jun 21 05:37:18 2025 by rpki-client