$ rpki-client -vvf rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft File: D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft (raw, json) Hash identifier: tqAbBTDJZhImmDSssFGQ0mWafQGg9XNvwi+o3NuBcEY= Subject key identifier: 82:2C:37:0A:E1:83:AE:A0:8D:3B:6B:38:DF:4D:7C:99:1E:FA:60:35 Authority key identifier: 0F:E0:63:24:F1:78:7C:8F:21:4F:BE:AE:67:D8:86:D2:2F:81:67:02 Certificate issuer: /CN=A9156B5D/serialNumber=0FE06324F1787C8F214FBEAE67D886D22F816702 Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-BjJPF4fI8hT76uZ9iG0i-BZwI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft Manifest number: 3A Signing time: Fri 13 Jun 2025 06:27:17 +0000 Manifest this update: Fri 13 Jun 2025 06:27:16 +0000 Manifest next update: Fri 20 Jun 2025 06:27:16 +0000 Files and hashes: 1: D-BjJPF4fI8hT76uZ9iG0i-BZwI.crl (hash: beEjtF7gZfJXHPWV5nLputTXBTeBXfYe6UzMIBJZjvs=) 2: 8CF57F0EF1C111EFAC8BCA59C4F9AE02.roa (hash: BMK5egNvgRPb4zFSiHjhQ8AJphJuXdtk94523bl6Tzs=) 3: 41554C78F1C111EFA67D2459C4F9AE02.roa (hash: waSBCEbcYlolsmBXhQe06r7v3tswwJfsDI5vXs6FVRA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.crl rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-BjJPF4fI8hT76uZ9iG0i-BZwI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156B5D, serialNumber=0FE06324F1787C8F214FBEAE67D886D22F816702 Validity Not Before: Jun 13 06:27:16 2025 GMT Not After : Jun 20 06:27:16 2025 GMT Subject: CN=684bc4c5-2d82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:03:0d:d2:21:f4:ef:a3:fe:77:8b:23:7f:57: 2c:28:d5:16:0a:80:a3:55:f3:6b:47:e6:4f:b2:f4: 70:43:9e:21:c2:94:83:ba:d4:4c:f2:6e:c6:cf:14: 60:03:bc:cd:8e:c3:23:53:5f:41:e8:13:8b:31:17: 34:44:34:50:75:53:8b:63:db:72:37:65:f1:bb:4f: 8f:1d:c3:55:45:0f:cb:9c:24:ab:33:64:4f:59:1d: 66:8b:41:db:4d:5f:41:98:9b:67:15:8c:ec:a5:75: 1c:2a:01:4b:54:d4:e8:a5:12:fa:11:4d:26:2a:41: b1:91:f5:ef:0c:6d:04:93:90:bc:43:0a:11:13:a4: 71:65:d6:9f:4e:3c:1d:23:c5:ef:35:b7:61:bd:ae: eb:44:53:ee:38:35:fa:a5:99:f4:27:bc:2c:a0:0a: 94:7f:cb:4e:0f:d4:9f:cb:1c:6b:be:e3:e9:26:c8: fb:d4:2e:43:a3:1a:e8:92:4a:4c:69:8b:50:05:94: 27:d4:e9:56:80:81:d6:89:39:68:ab:73:bd:f9:64: ae:fd:a7:20:47:33:12:09:a4:12:aa:c2:60:40:60: f9:19:29:79:bb:29:34:93:d1:03:6b:23:b3:25:af: ed:10:1c:22:c2:e7:73:53:42:2a:e1:af:95:bc:f1: ca:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:2C:37:0A:E1:83:AE:A0:8D:3B:6B:38:DF:4D:7C:99:1E:FA:60:35 X509v3 Authority Key Identifier: keyid:0F:E0:63:24:F1:78:7C:8F:21:4F:BE:AE:67:D8:86:D2:2F:81:67:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-BjJPF4fI8hT76uZ9iG0i-BZwI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:6f:f8:0e:d9:f1:d7:cf:21:5b:6a:b6:f6:cc:bf:33:55:0b: 56:b6:f0:6c:a6:2f:39:fb:79:08:01:a7:14:2e:e8:77:56:6b: e5:f7:3f:1c:7a:d7:48:fb:df:61:b4:2d:b2:a9:5b:26:3e:5f: bb:84:2a:bf:ec:72:91:a8:cb:1e:8a:37:d3:ef:ad:e1:4d:45: 2e:16:e2:8d:14:c0:36:70:eb:88:7d:28:94:29:f2:ed:33:62: 14:31:f0:be:39:c4:90:6c:ab:87:8e:69:1f:f1:c2:ad:eb:f5: 92:9a:83:7b:5a:d4:e0:cf:27:27:7a:8d:3c:d3:5c:c7:f5:c1: 83:f1:62:97:3f:10:8a:c9:ab:a2:5c:7e:6c:c0:5b:da:2c:a4: 36:81:90:4c:fb:a1:63:cf:b4:da:78:dd:c1:d8:0f:05:47:43: f1:53:ee:81:62:80:43:e5:62:6e:b1:9b:d8:53:06:80:15:2b: ba:e7:d2:3a:bf:b5:68:76:7f:49:d0:06:73:72:47:88:cc:54: 3b:22:7a:52:cc:ab:8a:2c:d4:04:17:07:31:7d:31:86:bd:06: b0:0a:8e:82:e5:a7:fc:fe:4c:ab:f3:f5:b5:53:42:cc:15:a7: 59:3a:81:61:db:1b:80:76:4b:a1:eb:c4:36:19:5b:1c:23:55: 8e:6c:70:ed -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NkI1RDExMC8GA1UEBRMoMEZFMDYzMjRGMTc4N0M4RjIxNEZCRUFFNjdEODg2RDIy RjgxNjcwMjAeFw0yNTA2MTMwNjI3MTZaFw0yNTA2MjAwNjI3MTZaMBgxFjAUBgNV BAMTDTY4NGJjNGM1LTJkODIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRAw3SIfTvo/53iyN/Vywo1RYKgKNV82tH5k+y9HBDniHClIO61EzybsbPFGAD vM2OwyNTX0HoE4sxFzRENFB1U4tj23I3ZfG7T48dw1VFD8ucJKszZE9ZHWaLQdtN X0GYm2cVjOyldRwqAUtU1OilEvoRTSYqQbGR9e8MbQSTkLxDChETpHFl1p9OPB0j xe81t2G9rutEU+44NfqlmfQnvCygCpR/y04P1J/LHGu+4+kmyPvULkOjGuiSSkxp i1AFlCfU6VaAgdaJOWirc735ZK79pyBHMxIJpBKqwmBAYPkZKXm7KTST0QNrI7Ml r+0QHCLC53NTQirhr5W88coTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgiw3CuGD rqCNO2s43018mR76YDUwHwYDVR0jBBgwFoAUD+BjJPF4fI8hT76uZ9iG0i+BZwIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2QjVELzk4RkQxQTQyRjFD MDExRUZBNTcxNkI1NEM0RjlBRTAyL0QtQmpKUEY0Zkk4aFQ3NnVaOWlHMGktQlp3 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRC1CakpQRjRmSThoVDc2dVo5aUcwaS1CWndJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2 QjVELzk4RkQxQTQyRjFDMDExRUZBNTcxNkI1NEM0RjlBRTAyL0QtQmpKUEY0Zkk4 aFQ3NnVaOWlHMGktQlp3SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJRv+A7Z8dfPIVtqtvbMvzNVC1a28GymLzn7eQgBpxQu6HdWa+X3Pxx6 10j732G0LbKpWyY+X7uEKr/scpGoyx6KN9PvreFNRS4W4o0UwDZw64h9KJQp8u0z YhQx8L45xJBsq4eOaR/xwq3r9ZKag3ta1ODPJyd6jTzTXMf1wYPxYpc/EIrJq6Jc fmzAW9ospDaBkEz7oWPPtNp43cHYDwVHQ/FT7oFigEPlYm6xm9hTBoAVK7rn0jq/ tWh2f0nQBnNyR4jMVDsielLMq4os1AQXBzF9MYa9BrAKjoLlp/z+TKvz9bVTQswV p1k6gWHbG4B2S6HrxDYZWxwjVY5scO0= -----END CERTIFICATE-----Generated at Sat Jun 14 19:38:02 2025 by rpki-client