$ rpki-client -vvf rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.mft File: baFr8M0J73aPkCE7ZtjLw86TQgY.mft (raw, json) Hash identifier: wkcn+ihmrAuMeoAoKFZjdFPoA2GEQRdohh886K+ZQ/w= Subject key identifier: 54:19:F8:3F:90:36:A9:90:0C:2E:F7:73:A9:F8:94:54:E4:E8:C7:25 Authority key identifier: 6D:A1:6B:F0:CD:09:EF:76:8F:90:21:3B:66:D8:CB:C3:CE:93:42:06 Certificate issuer: /CN=A9151B71/serialNumber=6DA16BF0CD09EF768F90213B66D8CBC3CE934206 Certificate serial: 0750 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baFr8M0J73aPkCE7ZtjLw86TQgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.mft Manifest number: 0747 Signing time: Sat 14 Jun 2025 21:29:08 +0000 Manifest this update: Sat 14 Jun 2025 21:29:07 +0000 Manifest next update: Sat 21 Jun 2025 21:29:07 +0000 Files and hashes: 1: baFr8M0J73aPkCE7ZtjLw86TQgY.crl (hash: 0qt1z1j8xEHwDkD+qutjZoKXnUN35/nNSfewhw+Ri/g=) 2: 0A866A522EAB11EBAB198239C4F9AE02.roa (hash: y8a8NpATY6YYaN1sCCi6QGlP5oTWUdFfM/H2gKyeO+A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.crl rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baFr8M0J73aPkCE7ZtjLw86TQgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 21:29:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1872 (0x750) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151B71, serialNumber=6DA16BF0CD09EF768F90213B66D8CBC3CE934206 Validity Not Before: Jun 14 21:29:07 2025 GMT Not After : Jun 21 21:29:07 2025 GMT Subject: CN=684de9a3-bc32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f6:9d:0f:1c:88:a2:f7:dd:c1:df:5c:ca:61: 4d:58:fa:28:eb:46:5a:a1:85:c8:0d:98:97:e5:05: fd:94:cd:94:9c:4f:98:32:f5:c3:c0:20:86:0c:9b: 95:6f:46:77:b3:b1:ac:57:ff:9f:5f:2d:60:46:69: bb:f1:b9:0f:fc:ed:1a:55:23:a6:d8:1f:17:7b:17: 73:85:56:f6:0e:5d:49:b7:0c:61:bc:f0:05:16:a3: 73:33:0f:03:66:50:b1:70:22:42:d5:7f:8d:ad:13: b4:cf:0c:7d:17:45:6e:82:9a:e8:da:a7:7b:4d:5d: f2:fa:db:d5:fd:6f:23:84:29:06:66:09:51:df:3e: c1:a6:5b:e3:c0:62:41:ec:b0:5b:4c:1a:ca:f4:07: fd:34:dd:82:c9:90:77:e6:1f:08:3f:78:3a:cc:20: 35:d0:f1:9e:3d:b2:91:10:21:f9:3a:df:44:1c:3e: 80:c2:19:cc:dd:50:47:d3:46:28:f4:f8:1f:b9:74: fe:00:26:19:85:f7:59:75:93:f0:09:6d:33:63:7b: 80:dd:12:6e:07:79:d7:bf:e2:1e:72:fe:7a:02:48: c9:05:ad:5d:1a:28:78:0a:5c:df:98:47:a7:f5:4d: 9e:0e:99:e2:36:cb:fa:c6:5d:7b:19:d2:ad:b9:71: 73:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:19:F8:3F:90:36:A9:90:0C:2E:F7:73:A9:F8:94:54:E4:E8:C7:25 X509v3 Authority Key Identifier: keyid:6D:A1:6B:F0:CD:09:EF:76:8F:90:21:3B:66:D8:CB:C3:CE:93:42:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baFr8M0J73aPkCE7ZtjLw86TQgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:c1:c3:b2:f0:44:91:f0:c0:aa:84:c6:20:49:5a:3b:7a:bc: d8:75:04:dc:65:87:b5:52:72:a8:61:e0:fe:ae:1c:f9:62:4a: fe:b8:9a:4a:40:b4:22:6f:b0:55:6c:08:1a:55:29:d4:bf:09: ac:48:a1:be:47:0b:b5:19:dd:ff:2e:61:7c:46:24:3c:5e:49: da:1c:7c:12:94:21:cc:d5:b3:cf:c6:a9:47:9c:72:2b:42:7d: 66:9f:6e:6c:ab:aa:43:60:62:3e:22:b5:b5:ef:3a:0e:57:da: ba:67:f2:49:a1:ad:6d:53:d1:e1:0b:8d:dc:41:da:50:af:5a: e0:77:a7:5a:75:d6:0d:12:24:36:e4:04:fb:66:a3:b2:cb:9f: 66:28:cb:1b:bd:a9:96:ad:1d:6c:05:20:54:fa:b4:15:6e:a4: 35:73:61:8f:1d:12:a8:93:89:b5:47:ac:71:d3:5b:cd:31:5d: 38:a2:92:b5:3d:2f:ed:46:b8:a6:35:bb:43:d4:6f:c1:cf:43: 0f:b3:25:38:26:25:c7:ba:fa:c8:2c:b0:13:b2:8d:57:01:8a: 71:6d:e9:06:46:5f:f9:c0:23:63:35:ca:56:4b:a3:33:87:87: 97:96:b4:7d:47:f1:50:29:e6:8f:bc:11:46:04:d9:3e:e8:71: a4:29:ee:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTFCNzExMTAvBgNVBAUTKDZEQTE2QkYwQ0QwOUVGNzY4RjkwMjEzQjY2RDhDQkMz Q0U5MzQyMDYwHhcNMjUwNjE0MjEyOTA3WhcNMjUwNjIxMjEyOTA3WjAYMRYwFAYD VQQDEw02ODRkZTlhMy1iYzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxPadDxyIovfdwd9cymFNWPoo60ZaoYXIDZiX5QX9lM2UnE+YMvXDwCCGDJuV b0Z3s7GsV/+fXy1gRmm78bkP/O0aVSOm2B8XexdzhVb2Dl1JtwxhvPAFFqNzMw8D ZlCxcCJC1X+NrRO0zwx9F0Vugpro2qd7TV3y+tvV/W8jhCkGZglR3z7BplvjwGJB 7LBbTBrK9Af9NN2CyZB35h8IP3g6zCA10PGePbKRECH5Ot9EHD6AwhnM3VBH00Yo 9PgfuXT+ACYZhfdZdZPwCW0zY3uA3RJuB3nXv+Iecv56AkjJBa1dGih4ClzfmEen 9U2eDpniNsv6xl17GdKtuXFzeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFQZ+D+Q NqmQDC73c6n4lFTk6MclMB8GA1UdIwQYMBaAFG2ha/DNCe92j5AhO2bYy8POk0IG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MUI3MS85RkQ1RjgwRTJF QTkxMUVCOTE2OEZCMzdDNEY5QUUwMi9iYUZyOE0wSjczYVBrQ0U3WnRqTHc4NlRR Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JhRnI4TTBKNzNhUGtDRTdadGpMdzg2VFFnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MUI3MS85RkQ1RjgwRTJFQTkxMUVCOTE2OEZCMzdDNEY5QUUwMi9iYUZyOE0wSjcz YVBrQ0U3WnRqTHc4NlRRZ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEwcOy8ESR8MCqhMYgSVo7erzYdQTcZYe1UnKoYeD+rhz5Ykr+uJpK QLQib7BVbAgaVSnUvwmsSKG+Rwu1Gd3/LmF8RiQ8XknaHHwSlCHM1bPPxqlHnHIr Qn1mn25sq6pDYGI+IrW17zoOV9q6Z/JJoa1tU9HhC43cQdpQr1rgd6daddYNEiQ2 5AT7ZqOyy59mKMsbvamWrR1sBSBU+rQVbqQ1c2GPHRKok4m1R6xx01vNMV04opK1 PS/tRrimNbtD1G/Bz0MPsyU4JiXHuvrILLATso1XAYpxbekGRl/5wCNjNcpWS6Mz h4eXlrR9R/FQKeaPvBFGBNk+6HGkKe40 -----END CERTIFICATE-----Generated at Sun Jun 15 09:42:44 2025 by rpki-client