$ rpki-client -vvf rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft File: bw3LHOJgwKE4iU38RIrdySQTaYE.mft (raw, json) Hash identifier: NtDTMVwKVAdiLycnir/KKGk11SOiGpbIst7POxitRgI= Subject key identifier: C6:5B:22:BD:BF:B7:D2:5B:E9:32:B9:C1:EC:5B:16:2B:1E:2D:CA:C0 Authority key identifier: 6F:0D:CB:1C:E2:60:C0:A1:38:89:4D:FC:44:8A:DD:C9:24:13:69:81 Certificate issuer: /CN=A9142747/serialNumber=6F0DCB1CE260C0A138894DFC448ADDC924136981 Certificate serial: 0806 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft Manifest number: 0801 Signing time: Sat 14 Jun 2025 20:41:25 +0000 Manifest this update: Sat 14 Jun 2025 20:41:24 +0000 Manifest next update: Sat 21 Jun 2025 20:41:24 +0000 Files and hashes: 1: bw3LHOJgwKE4iU38RIrdySQTaYE.crl (hash: LfLBxkU6gEOZfAv94hLARCZYfFc6vddCksVFYVZFKdw=) 2: A15F9276E2A911EAADD4CF7AC4F9AE02.roa (hash: +rpoh0Qao0hx4C7zavudqQAZxQBcoSI/kspTucCxRSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.crl rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 20:41:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2054 (0x806) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142747, serialNumber=6F0DCB1CE260C0A138894DFC448ADDC924136981 Validity Not Before: Jun 14 20:41:24 2025 GMT Not After : Jun 21 20:41:24 2025 GMT Subject: CN=684dde74-3d95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:fc:af:8c:9b:35:8a:2d:89:e4:8a:fb:e7:04: bc:61:2d:a0:33:c6:ea:f1:72:21:39:d2:6e:2f:8b: 17:63:ea:1a:39:19:88:63:dc:ca:fc:85:6c:da:bd: 04:4c:23:45:81:2b:e8:8a:5c:9e:c7:c4:82:b3:55: a5:54:3b:b1:2a:5b:25:8d:4a:fb:85:af:f2:0a:ef: a2:5c:89:07:bc:84:4f:4e:ae:6e:5a:66:20:ab:b5: 71:b7:22:ab:e2:5f:6b:dd:93:03:1c:56:11:e5:ea: 46:a5:15:2c:bd:9e:67:a6:e4:26:e6:06:68:fb:50: d5:e7:72:28:93:16:f1:c2:03:bb:fc:55:3c:19:d8: c0:48:ad:f1:c3:ba:bf:d8:fd:6f:58:14:58:6b:d7: 88:0a:4c:fc:bc:da:d2:2b:83:3d:96:09:69:0f:c8: 4b:90:e5:a2:f3:5f:00:08:01:be:77:2f:1f:8f:4f: bf:0a:de:5d:20:fd:90:0a:44:7f:2d:34:a6:d2:44: 15:d1:26:bf:d7:ca:8f:74:32:a6:f4:d4:4c:4b:bf: 40:69:6b:b1:b7:91:c3:dd:8f:e9:40:b0:01:e9:44: 83:d9:0b:f8:eb:9c:05:75:41:45:4d:56:7a:4d:56: 1d:99:63:e1:7e:5b:25:e4:1c:0c:a8:c8:e5:75:bc: f0:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:5B:22:BD:BF:B7:D2:5B:E9:32:B9:C1:EC:5B:16:2B:1E:2D:CA:C0 X509v3 Authority Key Identifier: keyid:6F:0D:CB:1C:E2:60:C0:A1:38:89:4D:FC:44:8A:DD:C9:24:13:69:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:80:f2:98:2a:b0:e5:87:bf:7d:44:13:68:39:e2:aa:c7:11: a5:a8:29:d9:cd:70:21:02:21:dc:a3:77:c6:36:2d:35:d9:6d: af:8a:94:7f:4b:c5:a4:7e:bc:b4:42:2f:86:d8:23:9c:8e:d1: 7e:74:aa:38:85:7f:bc:51:55:cc:f5:38:ab:57:08:1d:94:c4: ba:8b:9b:42:57:0f:3f:1d:8b:ab:6b:08:c7:b5:af:98:35:f1: ce:9e:db:dd:77:5b:61:6d:ee:9a:a4:00:c9:68:f2:6f:ed:5e: a7:d7:5a:88:5f:1e:e5:64:c7:90:7b:3b:92:37:f2:a9:cb:eb: 98:b6:b9:c5:fd:70:76:dc:c4:83:98:dd:cd:f8:aa:75:96:fa: d9:98:e5:a9:ce:4e:25:8e:14:fc:fa:a0:fa:ec:b4:5b:e7:3d: 5c:d9:b9:87:06:6c:76:8b:7c:0c:b0:05:a1:0c:23:a7:24:38: 48:39:f6:a2:dd:a8:55:2f:21:4b:14:29:72:88:a0:2d:16:e8: 59:8e:21:b3:05:5a:c0:c6:c0:95:86:a8:3c:97:1c:93:15:1c: 46:a5:0c:ba:44:19:b8:ec:90:74:12:d1:04:74:bd:09:8c:0d: 49:31:8f:d7:dc:6a:73:6c:46:73:f8:2c:f5:e4:8f:c9:d2:7c: 5c:2a:9b:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI3NDcxMTAvBgNVBAUTKDZGMERDQjFDRTI2MEMwQTEzODg5NERGQzQ0OEFEREM5 MjQxMzY5ODEwHhcNMjUwNjE0MjA0MTI0WhcNMjUwNjIxMjA0MTI0WjAYMRYwFAYD VQQDEw02ODRkZGU3NC0zZDk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3vyvjJs1ii2J5Ir75wS8YS2gM8bq8XIhOdJuL4sXY+oaORmIY9zK/IVs2r0E TCNFgSvoilyex8SCs1WlVDuxKlsljUr7ha/yCu+iXIkHvIRPTq5uWmYgq7VxtyKr 4l9r3ZMDHFYR5epGpRUsvZ5npuQm5gZo+1DV53IokxbxwgO7/FU8GdjASK3xw7q/ 2P1vWBRYa9eICkz8vNrSK4M9lglpD8hLkOWi818ACAG+dy8fj0+/Ct5dIP2QCkR/ LTSm0kQV0Sa/18qPdDKm9NRMS79AaWuxt5HD3Y/pQLAB6USD2Qv465wFdUFFTVZ6 TVYdmWPhflsl5BwMqMjldbzw0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMZbIr2/ t9Jb6TK5wexbFiseLcrAMB8GA1UdIwQYMBaAFG8NyxziYMChOIlN/ESK3ckkE2mB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Mjc0Ny9BRkU4ODEyMEUy MDYxMUVBQkIxNjZENUZDNEY5QUUwMi9idzNMSE9KZ3dLRTRpVTM4UklyZHlTUVRh WUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J3M0xIT0pnd0tFNGlVMzhSSXJkeVNRVGFZRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Mjc0Ny9BRkU4ODEyMEUyMDYxMUVBQkIxNjZENUZDNEY5QUUwMi9idzNMSE9KZ3dL RTRpVTM4UklyZHlTUVRhWUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFgPKYKrDlh799RBNoOeKqxxGlqCnZzXAhAiHco3fGNi012W2vipR/ S8Wkfry0Qi+G2COcjtF+dKo4hX+8UVXM9TirVwgdlMS6i5tCVw8/HYurawjHta+Y NfHOntvdd1thbe6apADJaPJv7V6n11qIXx7lZMeQezuSN/Kpy+uYtrnF/XB23MSD mN3N+Kp1lvrZmOWpzk4ljhT8+qD67LRb5z1c2bmHBmx2i3wMsAWhDCOnJDhIOfai 3ahVLyFLFClyiKAtFuhZjiGzBVrAxsCVhqg8lxyTFRxGpQy6RBm47JB0EtEEdL0J jA1JMY/X3GpzbEZz+Cz15I/J0nxcKptr -----END CERTIFICATE-----Generated at Sun Jun 15 09:53:35 2025 by rpki-client