$ rpki-client -vvf rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft File: BtM8jWukpiIt_LkMK0Ckt5KTdno.mft (raw, json) Hash identifier: oN6qvaFJz0vOvvDO6J0pESkGsiPWDat3Qi4l8/C2EJ8= Subject key identifier: 0B:74:40:CA:94:27:F7:F6:AC:2B:36:2C:3E:71:D4:E4:54:81:B5:A7 Authority key identifier: 06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A Certificate issuer: /CN=A9152E70/serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A Certificate serial: 0502 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft Manifest number: 04F0 Signing time: Thu 12 Jun 2025 23:22:25 +0000 Manifest this update: Thu 12 Jun 2025 23:22:24 +0000 Manifest next update: Thu 19 Jun 2025 23:22:24 +0000 Files and hashes: 1: BtM8jWukpiIt_LkMK0Ckt5KTdno.crl (hash: 7tH/NhWmGG9+Hlkipcg6ST3kWRROvEk97OpyOW7M6Wg=) 2: 5BC9A0B0C91211ED91C9A325C4F9AE02.roa (hash: bWFskxvhi7CkjX9KQtUg/L6OTceIBUoGJSArRRh8yOc=) 3: 900F6E92211E11ECAEED8632C4F9AE02.roa (hash: TEWGyyYFx9ktn3pEsyb60J6bTDtXfXp/IzUXg77M9qA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 23:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1282 (0x502) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152E70, serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A Validity Not Before: Jun 12 23:22:24 2025 GMT Not After : Jun 19 23:22:24 2025 GMT Subject: CN=684b6130-044a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b1:41:b6:3b:f3:7b:c9:60:42:37:ec:74:32: 99:af:89:5f:93:6d:cc:13:71:91:b6:03:4a:61:80: 0e:78:cd:9c:d9:65:11:ab:5e:c7:25:af:ff:b2:1a: d7:e8:f0:27:dc:d6:a1:7c:77:02:96:ae:f3:05:94: 84:1e:10:cc:65:dd:6e:9b:29:6c:7f:0c:c0:23:10: 73:0b:71:5f:bd:1a:d8:23:a4:19:4b:a9:e4:cb:53: dd:81:14:cf:b7:38:03:29:ac:e7:a9:83:15:5e:51: 76:c7:d7:0c:08:fe:60:18:0d:46:38:be:99:80:67: 37:a5:a4:73:a3:d2:f6:81:3e:cd:9d:d1:31:87:73: aa:a0:b2:a5:d0:19:a9:d4:7a:0c:0d:20:44:b3:e4: 2f:eb:94:5f:11:39:48:de:53:67:13:2e:87:c4:20: 51:64:f6:a8:62:2a:56:e0:49:6a:a9:85:ea:9e:3c: 23:ad:9d:d1:02:60:5e:02:a1:9e:4e:e2:0c:a5:c8: 54:08:62:2a:9c:4b:22:19:cd:d1:e7:3e:3a:5d:b4: 2d:86:cd:c5:f6:27:36:92:15:7a:f0:13:0b:7d:da: a2:56:fd:82:33:e0:88:50:d7:a1:6b:81:59:25:48: 45:91:ab:c0:46:37:e5:83:34:b0:c9:11:b2:7f:21: d9:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:74:40:CA:94:27:F7:F6:AC:2B:36:2C:3E:71:D4:E4:54:81:B5:A7 X509v3 Authority Key Identifier: keyid:06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:5b:89:d4:8a:14:bf:03:d0:57:f0:a5:45:fb:2c:59:85:07: 80:4c:50:c9:95:81:b1:0a:dd:b3:ec:80:42:b5:a0:a8:91:3b: 25:79:4e:7a:a7:ca:5b:00:b9:a3:ce:65:65:25:c8:5f:96:15: 15:58:b9:98:33:4d:84:7a:8a:94:d7:8e:d8:61:1e:17:41:70: 45:3b:96:d1:a7:0f:80:90:ce:b6:66:86:0b:5e:56:83:f4:3a: 2b:64:57:e3:39:c0:8b:b3:7c:ee:03:ee:d7:20:41:b1:dc:87: 97:4a:51:60:30:f5:c4:9b:52:05:53:19:96:02:28:86:f0:9d: 37:3c:0b:80:8b:ec:dd:7d:50:af:b6:55:5c:da:39:06:d7:d4: 89:45:35:b6:12:8e:09:75:ab:64:b1:ba:0b:79:2e:12:ae:c9: b6:af:fc:a8:38:5e:7d:1c:b5:f3:5f:9c:b1:7a:9d:dc:86:3b: c7:d0:05:23:0a:08:a3:94:7f:46:fd:95:98:8c:c3:b1:6d:d3: cb:b8:ea:3e:6a:2f:ff:5b:5c:10:75:13:13:94:64:61:b9:6f: 32:b3:4b:44:36:10:8f:8d:9f:07:cb:9e:d0:90:4d:7c:3d:10: be:b9:06:0c:6a:d9:ee:1a:63:95:25:9d:54:8d:0f:b6:20:ad: 44:be:82:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJFNzAxMTAvBgNVBAUTKDA2RDMzQzhENkJBNEE2MjIyREZDQjkwQzJCNDBBNEI3 OTI5Mzc2N0EwHhcNMjUwNjEyMjMyMjI0WhcNMjUwNjE5MjMyMjI0WjAYMRYwFAYD VQQDEw02ODRiNjEzMC0wNDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArrFBtjvze8lgQjfsdDKZr4lfk23ME3GRtgNKYYAOeM2c2WURq17HJa//shrX 6PAn3NahfHcClq7zBZSEHhDMZd1umylsfwzAIxBzC3FfvRrYI6QZS6nky1PdgRTP tzgDKaznqYMVXlF2x9cMCP5gGA1GOL6ZgGc3paRzo9L2gT7NndExh3OqoLKl0Bmp 1HoMDSBEs+Qv65RfETlI3lNnEy6HxCBRZPaoYipW4ElqqYXqnjwjrZ3RAmBeAqGe TuIMpchUCGIqnEsiGc3R5z46XbQths3F9ic2khV68BMLfdqiVv2CM+CIUNeha4FZ JUhFkavARjflgzSwyRGyfyHZXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAt0QMqU J/f2rCs2LD5x1ORUgbWnMB8GA1UdIwQYMBaAFAbTPI1rpKYiLfy5DCtApLeSk3Z6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkU3MC9CRUM1Q0E3MjIx MUIxMUVDQjQ1RkQ0MkZDNEY5QUUwMi9CdE04ald1a3BpSXRfTGtNSzBDa3Q1S1Rk bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J0TThqV3VrcGlJdF9Ma01LMENrdDVLVGRuby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkU3MC9CRUM1Q0E3MjIxMUIxMUVDQjQ1RkQ0MkZDNEY5QUUwMi9CdE04ald1a3Bp SXRfTGtNSzBDa3Q1S1Rkbm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNW4nUihS/A9BX8KVF+yxZhQeATFDJlYGxCt2z7IBCtaCokTsleU56 p8pbALmjzmVlJchflhUVWLmYM02EeoqU147YYR4XQXBFO5bRpw+AkM62ZoYLXlaD 9DorZFfjOcCLs3zuA+7XIEGx3IeXSlFgMPXEm1IFUxmWAiiG8J03PAuAi+zdfVCv tlVc2jkG19SJRTW2Eo4JdatksboLeS4Srsm2r/yoOF59HLXzX5yxep3chjvH0AUj CgijlH9G/ZWYjMOxbdPLuOo+ai//W1wQdRMTlGRhuW8ys0tENhCPjZ8Hy57QkE18 PRC+uQYMatnuGmOVJZ1UjQ+2IK1EvoIr -----END CERTIFICATE-----Generated at Sat Jun 14 19:28:55 2025 by rpki-client