$ rpki-client -vvf rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft File: aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft (raw, json) Hash identifier: UD0Wy/AWreLwBE5CSuby1CQp8wsU7MJxfzQ2ttMikDY= Subject key identifier: DA:DC:E9:7B:49:2A:06:F7:1B:B0:7F:C4:C2:A9:92:E2:4B:33:72:87 Authority key identifier: 68:11:04:90:6C:F9:3D:A4:3B:6C:5B:21:35:A0:24:14:9A:8F:C0:57 Certificate issuer: /CN=A9156751/serialNumber=681104906CF93DA43B6C5B2135A024149A8FC057 Certificate serial: 02BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBEEkGz5PaQ7bFshNaAkFJqPwFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft Manifest number: 02B8 Signing time: Tue 17 Jun 2025 01:01:01 +0000 Manifest this update: Tue 17 Jun 2025 01:01:00 +0000 Manifest next update: Tue 24 Jun 2025 01:01:00 +0000 Files and hashes: 1: aBEEkGz5PaQ7bFshNaAkFJqPwFc.crl (hash: wy9reN7Gkk5gr7vy+YimeqiCcPiOS/NLPdCDykAFjJ0=) 2: 776724AAF7B711ECAE4F7935C4F9AE02.roa (hash: PKEZfZTmj/mGEPOfYVGBRNahCa+W7goVh1g1wDRTSDE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.crl rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBEEkGz5PaQ7bFshNaAkFJqPwFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 01:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 699 (0x2bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156751, serialNumber=681104906CF93DA43B6C5B2135A024149A8FC057 Validity Not Before: Jun 17 01:01:00 2025 GMT Not After : Jun 24 01:01:00 2025 GMT Subject: CN=6850be4c-50ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7b:97:eb:7a:bf:f2:6f:e3:48:f4:0e:c2:a0: 6f:bd:af:a3:e2:b7:f0:9b:3a:ea:d3:67:5e:8d:2d: dd:6f:78:de:17:89:55:f0:ee:1f:9d:28:35:e7:34: 32:fc:97:cd:2e:83:90:6a:97:35:11:a1:cf:14:80: 3b:00:db:52:ea:19:54:54:ff:1c:3a:70:dc:8b:2d: a3:cf:ed:73:f8:8e:dc:bf:95:c0:5a:e8:7f:49:c1: 7c:32:c2:53:94:dc:9c:c4:88:57:c8:d8:da:fe:48: f8:65:10:8c:1f:1a:a4:b8:66:1d:a6:41:00:9d:c5: fc:e3:8f:2e:55:6e:92:8a:04:ea:90:a9:d8:0d:9d: d6:30:30:d6:2c:6c:36:88:a5:cd:94:ac:ff:16:cb: 5d:57:45:6d:1f:55:74:66:ac:68:d7:4f:87:1f:75: e7:8a:00:98:05:db:1d:3c:65:08:1b:02:d1:fe:8c: de:ae:8f:72:76:f2:66:c8:a3:a5:a5:8d:c4:fd:fd: fb:b1:13:17:84:15:b9:cf:5a:db:fe:67:5b:da:88: 87:d3:ff:59:60:c2:93:56:71:bb:69:2a:d3:6c:84: 8a:74:04:50:92:81:de:48:1e:46:79:2f:f4:53:7f: 32:ae:e1:e1:ed:02:74:ca:0f:45:38:4a:36:d6:f5: 42:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:DC:E9:7B:49:2A:06:F7:1B:B0:7F:C4:C2:A9:92:E2:4B:33:72:87 X509v3 Authority Key Identifier: keyid:68:11:04:90:6C:F9:3D:A4:3B:6C:5B:21:35:A0:24:14:9A:8F:C0:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBEEkGz5PaQ7bFshNaAkFJqPwFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:6b:0f:1b:21:74:15:22:b2:c4:e3:7e:0b:26:b3:5c:58:44: 60:de:01:a5:19:80:6e:72:03:e3:e3:fd:4c:cb:4f:b0:ca:27: c0:97:78:e0:00:56:f1:25:96:ff:17:d0:75:30:22:6e:d3:40: 29:2b:f8:2b:f2:bc:f0:f6:5f:fa:5b:15:35:dd:cf:21:0a:69: 8a:86:ea:e4:58:23:f6:b6:c1:4e:d7:82:8f:d3:5a:74:57:3d: c5:d7:c9:bf:b2:45:90:42:cf:5c:6a:87:57:0a:79:37:c8:68: e7:78:42:97:f0:c2:34:85:9d:ae:86:60:47:e6:97:1d:65:c7: 32:77:8b:0f:df:7b:ed:20:27:f9:82:7a:c0:e3:b6:e3:b5:6b: 73:b6:ec:f8:53:dd:79:de:4f:ce:a9:03:32:f3:56:6a:a4:a4: fd:5b:68:a8:d5:e8:7b:db:8d:42:b0:cc:1b:83:1d:ae:a4:aa: 19:1e:ed:cf:99:97:0d:95:2a:1d:21:b9:aa:98:03:79:b5:a9: 23:0b:51:05:16:38:f7:b8:37:25:39:f8:47:b2:fd:b4:63:3b: b0:3e:17:de:de:23:44:9b:7e:ee:2b:75:af:7e:27:cb:aa:77: de:4f:de:3c:1d:b6:3a:78:09:eb:87:1f:29:05:58:fb:7f:24: ae:4b:90:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY3NTExMTAvBgNVBAUTKDY4MTEwNDkwNkNGOTNEQTQzQjZDNUIyMTM1QTAyNDE0 OUE4RkMwNTcwHhcNMjUwNjE3MDEwMTAwWhcNMjUwNjI0MDEwMTAwWjAYMRYwFAYD VQQDEw02ODUwYmU0Yy01MGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxHuX63q/8m/jSPQOwqBvva+j4rfwmzrq02dejS3db3jeF4lV8O4fnSg15zQy /JfNLoOQapc1EaHPFIA7ANtS6hlUVP8cOnDciy2jz+1z+I7cv5XAWuh/ScF8MsJT lNycxIhXyNja/kj4ZRCMHxqkuGYdpkEAncX8448uVW6SigTqkKnYDZ3WMDDWLGw2 iKXNlKz/FstdV0VtH1V0Zqxo10+HH3XnigCYBdsdPGUIGwLR/ozero9ydvJmyKOl pY3E/f37sRMXhBW5z1rb/mdb2oiH0/9ZYMKTVnG7aSrTbISKdARQkoHeSB5GeS/0 U38yruHh7QJ0yg9FOEo21vVCBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNrc6XtJ Kgb3G7B/xMKpkuJLM3KHMB8GA1UdIwQYMBaAFGgRBJBs+T2kO2xbITWgJBSaj8BX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Njc1MS8wRjg3MDJCQUY3 QjIxMUVDQjJBRTYzMkVDNEY5QUUwMi9hQkVFa0d6NVBhUTdiRnNoTmFBa0ZKcVB3 RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FCRUVrR3o1UGFRN2JGc2hOYUFrRkpxUHdGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Njc1MS8wRjg3MDJCQUY3QjIxMUVDQjJBRTYzMkVDNEY5QUUwMi9hQkVFa0d6NVBh UTdiRnNoTmFBa0ZKcVB3RmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPaw8bIXQVIrLE434LJrNcWERg3gGlGYBucgPj4/1My0+wyifAl3jg AFbxJZb/F9B1MCJu00ApK/gr8rzw9l/6WxU13c8hCmmKhurkWCP2tsFO14KP01p0 Vz3F18m/skWQQs9caodXCnk3yGjneEKX8MI0hZ2uhmBH5pcdZccyd4sP33vtICf5 gnrA47bjtWtztuz4U9153k/OqQMy81ZqpKT9W2io1eh7241CsMwbgx2upKoZHu3P mZcNlSodIbmqmAN5takjC1EFFjj3uDclOfhHsv20YzuwPhfe3iNEm37uK3WvfifL qnfeT948HbY6eAnrhx8pBVj7fySuS5Bc -----END CERTIFICATE-----Generated at Wed Jun 18 13:53:37 2025 by rpki-client