$ rpki-client -vvf rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft File: bKnl9NY_H1jrllKlKzuc-7vnQbw.mft (raw, json) Hash identifier: bs+RAfgqMMU4XiMY4rbCFwW/6DlN675LH7+4DL4bhHU= Subject key identifier: 9D:1A:64:01:5E:27:1E:C4:28:9D:57:B4:6E:A3:AE:31:AF:AC:81:A9 Authority key identifier: 6C:A9:E5:F4:D6:3F:1F:58:EB:96:52:A5:2B:3B:9C:FB:BB:E7:41:BC Certificate issuer: /CN=A913FC26/serialNumber=6CA9E5F4D63F1F58EB9652A52B3B9CFBBBE741BC Certificate serial: 12F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKnl9NY_H1jrllKlKzuc-7vnQbw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft Manifest number: 12ED Signing time: Sat 14 Jun 2025 16:59:52 +0000 Manifest this update: Sat 14 Jun 2025 16:59:51 +0000 Manifest next update: Sat 21 Jun 2025 16:59:51 +0000 Files and hashes: 1: bKnl9NY_H1jrllKlKzuc-7vnQbw.crl (hash: cG+iHYzhKXd/TPqZ+Fc6Q8O0kwZqv9Z9TjTSTVwkm00=) 2: 706382C2B67811E8A2696333C4F9AE02.roa (hash: rzftRMPtJ5B6XfKei48LV2pqboch+DlK8AP2NtHbsfk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.crl rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKnl9NY_H1jrllKlKzuc-7vnQbw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:59:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4852 (0x12f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FC26, serialNumber=6CA9E5F4D63F1F58EB9652A52B3B9CFBBBE741BC Validity Not Before: Jun 14 16:59:51 2025 GMT Not After : Jun 21 16:59:51 2025 GMT Subject: CN=684daa87-cdd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b4:6c:a1:a4:2f:16:e1:53:f4:94:8d:b4:6b: 9b:d3:c4:17:38:03:d4:45:0d:52:83:80:9d:e3:a1: 9d:7a:e6:78:a6:be:36:fc:47:b7:7c:c7:88:7c:7c: 6e:25:4d:23:77:ec:87:51:b7:f5:66:53:f3:35:7a: 99:d9:bd:5a:52:fc:c9:b6:98:9f:67:7d:63:0a:5e: 50:e7:7a:49:6d:8e:37:51:b3:7c:f2:1e:ea:cf:08: 3f:29:40:94:49:5f:8c:6c:52:48:6a:2e:38:2e:43: da:1e:03:68:82:82:ae:5b:42:a4:26:3e:2a:97:d2: fa:fe:8b:c9:83:35:fa:63:76:10:b0:96:c8:33:be: 6c:8f:98:12:4a:d5:41:de:bb:bd:e7:c9:7a:2c:e2: 22:53:99:21:09:32:ba:a6:85:d0:f4:f2:f7:6e:91: 89:b1:b7:48:98:fa:3b:ec:fd:34:d7:e3:6a:6a:67: 90:93:70:ca:18:c2:8c:60:fb:aa:6e:03:a0:f2:6e: f9:5a:c9:f6:3a:8b:ce:2d:d6:01:4a:06:50:ee:33: b3:2c:12:97:af:20:77:1b:e5:2b:96:f4:e7:df:c3: 84:ea:5c:b4:e2:49:0b:4c:9f:6c:bc:5d:47:01:a5: e2:cd:32:af:b5:1a:ff:94:59:33:c7:8d:77:f8:d3: 4a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:1A:64:01:5E:27:1E:C4:28:9D:57:B4:6E:A3:AE:31:AF:AC:81:A9 X509v3 Authority Key Identifier: keyid:6C:A9:E5:F4:D6:3F:1F:58:EB:96:52:A5:2B:3B:9C:FB:BB:E7:41:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKnl9NY_H1jrllKlKzuc-7vnQbw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:08:1f:47:66:60:17:9f:8f:f3:b2:d4:45:20:34:3f:de:c4: 3e:99:c2:74:15:35:18:88:2f:8e:c3:78:3f:b3:e0:89:b5:12: b8:0b:98:c6:f3:f3:f5:20:63:cb:9f:ba:37:89:8a:27:9a:dd: 56:32:a5:c0:17:05:ec:47:84:d5:4a:92:06:1a:3a:c7:de:05: 71:43:77:61:58:e3:0e:10:c2:94:db:e1:d2:1e:bb:2a:3e:79: 60:9b:0b:c0:d9:18:52:5c:47:89:a2:6e:af:ec:bb:92:67:58: 53:8b:85:cb:36:53:8a:ef:6e:33:d5:90:03:ab:79:8e:0f:ec: 52:06:28:a7:be:bd:7d:07:4f:bf:6d:d8:90:42:68:c6:ae:83: 98:f6:65:ff:17:f1:12:a4:85:ab:35:aa:21:9e:96:37:a3:26: 26:2d:a9:f9:c1:8c:8e:4d:35:26:da:19:18:3a:ca:e6:04:ba: f9:fd:e2:a2:91:f4:57:6b:32:91:e3:ae:87:cc:ef:ce:e3:80: a0:a3:83:6a:92:fd:9a:9d:d1:a0:f0:f5:6d:00:f0:9b:d7:d0: bb:63:6f:eb:ee:a3:79:f4:6b:f7:57:ad:f9:df:10:0d:96:6a: 5c:09:4e:53:73:c1:b3:1b:0f:c3:a1:19:6c:a8:8a:82:2a:87: c2:ec:83:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEvQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0ZDMjYxMTAvBgNVBAUTKDZDQTlFNUY0RDYzRjFGNThFQjk2NTJBNTJCM0I5Q0ZC QkJFNzQxQkMwHhcNMjUwNjE0MTY1OTUxWhcNMjUwNjIxMTY1OTUxWjAYMRYwFAYD VQQDEw02ODRkYWE4Ny1jZGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArLRsoaQvFuFT9JSNtGub08QXOAPURQ1Sg4Cd46GdeuZ4pr42/Ee3fMeIfHxu JU0jd+yHUbf1ZlPzNXqZ2b1aUvzJtpifZ31jCl5Q53pJbY43UbN88h7qzwg/KUCU SV+MbFJIai44LkPaHgNogoKuW0KkJj4ql9L6/ovJgzX6Y3YQsJbIM75sj5gSStVB 3ru958l6LOIiU5khCTK6poXQ9PL3bpGJsbdImPo77P001+NqameQk3DKGMKMYPuq bgOg8m75Wsn2OovOLdYBSgZQ7jOzLBKXryB3G+UrlvTn38OE6ly04kkLTJ9svF1H AaXizTKvtRr/lFkzx413+NNKuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ0aZAFe Jx7EKJ1XtG6jrjGvrIGpMB8GA1UdIwQYMBaAFGyp5fTWPx9Y65ZSpSs7nPu750G8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkMyNi9GRUE1N0U2MEI2 NzcxMUU4QTBBMEQzMzJDNEY5QUUwMi9iS25sOU5ZX0gxanJsbEtsS3p1Yy03dm5R YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JLbmw5TllfSDFqcmxsS2xLenVjLTd2blFidy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RkMyNi9GRUE1N0U2MEI2NzcxMUU4QTBBMEQzMzJDNEY5QUUwMi9iS25sOU5ZX0gx anJsbEtsS3p1Yy03dm5RYncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDOCB9HZmAXn4/zstRFIDQ/3sQ+mcJ0FTUYiC+Ow3g/s+CJtRK4C5jG 8/P1IGPLn7o3iYonmt1WMqXAFwXsR4TVSpIGGjrH3gVxQ3dhWOMOEMKU2+HSHrsq PnlgmwvA2RhSXEeJom6v7LuSZ1hTi4XLNlOK724z1ZADq3mOD+xSBiinvr19B0+/ bdiQQmjGroOY9mX/F/ESpIWrNaohnpY3oyYmLan5wYyOTTUm2hkYOsrmBLr5/eKi kfRXazKR466HzO/O44Cgo4Nqkv2andGg8PVtAPCb19C7Y2/r7qN59Gv3V6353xAN lmpcCU5Tc8GzGw/DoRlsqIqCKofC7INq -----END CERTIFICATE-----Generated at Sat Jun 14 19:41:14 2025 by rpki-client