$ rpki-client -vvf rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft File: B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft (raw, json) Hash identifier: jNUBQ+ARa8UY0jmXzOQn3Wk+yo1aENjZiF9MMsDTf2U= Subject key identifier: B7:C7:CD:6C:E5:BB:BE:8E:4E:EF:B7:C6:E5:8E:BB:E5:9E:D9:1B:E4 Authority key identifier: 07:53:2C:F6:D2:BC:4C:A9:D9:27:F3:07:D0:E6:B8:28:77:D8:EE:4D Certificate issuer: /CN=A915D1F2/serialNumber=07532CF6D2BC4CA9D927F307D0E6B82877D8EE4D Certificate serial: 118D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft Manifest number: 1184 Signing time: Mon 16 Jun 2025 17:15:11 +0000 Manifest this update: Mon 16 Jun 2025 17:15:10 +0000 Manifest next update: Mon 23 Jun 2025 17:15:10 +0000 Files and hashes: 1: B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.crl (hash: YN0yKLX+YH3vRqczbC/eu3O0as0F1XH1l2Xzq/7u9gw=) 2: 9467361CFEAA11E89E73E75BC4F9AE02.roa (hash: GyMFJG7vpXHHpv3BwX4n2XQfqCBxAhnBsVULLZ+wmKs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.crl rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 17:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4493 (0x118d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D1F2, serialNumber=07532CF6D2BC4CA9D927F307D0E6B82877D8EE4D Validity Not Before: Jun 16 17:15:10 2025 GMT Not After : Jun 23 17:15:10 2025 GMT Subject: CN=6850511e-4f4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:f9:9b:fc:9a:a3:0d:05:f7:07:12:31:6d:75: 29:cd:91:1f:e1:d7:c5:94:03:54:10:d7:7e:5c:5a: c4:b7:be:1c:fb:33:8f:59:99:a0:0e:fa:f3:66:7e: d7:ae:23:a0:ba:6c:58:25:9f:94:d4:80:99:46:a8: eb:48:54:7d:80:db:07:85:e7:9a:08:c9:8b:38:ca: a2:f7:a7:9c:d5:81:d3:e4:5f:5b:1f:af:af:df:03: ea:2c:c4:13:0d:8a:5c:53:6c:62:c3:a4:3f:a2:6d: 23:0f:bf:dd:ec:91:4d:88:d3:78:fa:77:92:54:81: e4:15:9f:1c:96:13:85:50:49:a1:8b:80:3f:a0:2a: ee:f0:51:ba:f5:c7:d0:7a:4a:6e:df:5a:01:be:2e: 2d:2e:35:70:8d:d3:ab:fa:2c:dd:3d:6a:aa:49:11: 88:3f:8f:af:76:0f:45:dc:cb:c3:57:55:bc:a7:25: 49:04:66:d0:ab:13:8d:2e:41:e5:f2:08:0c:6c:89: 2d:36:3d:92:d0:7d:bb:11:b3:cb:7f:76:78:e5:20: e8:de:2c:f1:db:4f:4f:0f:0c:86:fb:be:d1:45:b0: 58:54:ab:13:0a:3b:f5:97:54:9e:6e:df:e5:3e:a5: 0c:c2:1e:c8:c7:77:c4:92:d0:1e:ec:95:cd:5e:32: fe:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:C7:CD:6C:E5:BB:BE:8E:4E:EF:B7:C6:E5:8E:BB:E5:9E:D9:1B:E4 X509v3 Authority Key Identifier: keyid:07:53:2C:F6:D2:BC:4C:A9:D9:27:F3:07:D0:E6:B8:28:77:D8:EE:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:07:cb:ce:ee:b9:2a:94:af:85:dc:76:81:77:12:d2:25:77: 57:94:30:b9:c5:7d:21:50:f0:61:93:7c:ed:15:e7:38:f1:d4: bf:ef:3e:ce:39:a4:73:cd:3e:16:ce:55:01:2a:09:91:ab:55: 00:cf:f8:1d:e4:12:82:18:9f:56:4d:5d:88:72:16:54:a6:ec: cf:22:93:45:d4:b7:1c:dd:b3:4e:22:e5:cc:3f:cf:31:ac:d9: 2e:d2:f4:4a:c2:79:45:47:16:a6:1f:14:64:0e:34:d6:5b:c5: 38:38:36:dc:ab:fa:d3:fc:44:9f:80:e1:e5:be:cb:b6:af:64: dd:83:97:f9:fc:bb:58:f1:48:71:7d:4d:7c:af:7a:f1:43:49: 08:18:50:74:0a:9b:6f:ef:01:f9:18:ca:80:3e:94:71:22:b4: 6e:c3:d1:43:4e:2d:98:40:c8:88:88:9b:4c:5a:80:ff:06:49: 09:26:da:6c:dc:db:d1:b3:da:ed:07:5d:01:e2:48:3b:77:a6: 1e:eb:61:d7:70:0d:69:aa:c7:6a:7f:0d:e1:7f:12:00:32:d6: 87:de:93:99:5c:c7:59:27:d1:19:b5:24:4a:e8:a1:17:2a:26: d6:0b:38:46:37:bf:0d:d0:ed:8f:f2:51:ec:d7:40:b9:76:f7: 6c:f6:1d:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQxRjIxMTAvBgNVBAUTKDA3NTMyQ0Y2RDJCQzRDQTlEOTI3RjMwN0QwRTZCODI4 NzdEOEVFNEQwHhcNMjUwNjE2MTcxNTEwWhcNMjUwNjIzMTcxNTEwWjAYMRYwFAYD VQQDEw02ODUwNTExZS00ZjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6/mb/JqjDQX3BxIxbXUpzZEf4dfFlANUENd+XFrEt74c+zOPWZmgDvrzZn7X riOgumxYJZ+U1ICZRqjrSFR9gNsHheeaCMmLOMqi96ec1YHT5F9bH6+v3wPqLMQT DYpcU2xiw6Q/om0jD7/d7JFNiNN4+neSVIHkFZ8clhOFUEmhi4A/oCru8FG69cfQ ekpu31oBvi4tLjVwjdOr+izdPWqqSRGIP4+vdg9F3MvDV1W8pyVJBGbQqxONLkHl 8ggMbIktNj2S0H27EbPLf3Z45SDo3izx209PDwyG+77RRbBYVKsTCjv1l1Sebt/l PqUMwh7Ix3fEktAe7JXNXjL+9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLfHzWzl u76OTu+3xuWOu+We2RvkMB8GA1UdIwQYMBaAFAdTLPbSvEyp2SfzB9DmuCh32O5N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDFGMi9BRjMyMUQzQ0ZF N0MxMUU4ODY4OUM2NTVDNEY5QUUwMi9CMU1zOXRLOFRLblpKX01IME9hNEtIZlk3 azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0IxTXM5dEs4VEtuWkpfTUgwT2E0S0hmWTdrMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDFGMi9BRjMyMUQzQ0ZFN0MxMUU4ODY4OUM2NTVDNEY5QUUwMi9CMU1zOXRLOFRL blpKX01IME9hNEtIZlk3azAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTB8vO7rkqlK+F3HaBdxLSJXdXlDC5xX0hUPBhk3ztFec48dS/7z7O OaRzzT4WzlUBKgmRq1UAz/gd5BKCGJ9WTV2IchZUpuzPIpNF1Lcc3bNOIuXMP88x rNku0vRKwnlFRxamHxRkDjTWW8U4ODbcq/rT/ESfgOHlvsu2r2Tdg5f5/LtY8Uhx fU18r3rxQ0kIGFB0Cptv7wH5GMqAPpRxIrRuw9FDTi2YQMiIiJtMWoD/BkkJJtps 3NvRs9rtB10B4kg7d6Ye62HXcA1pqsdqfw3hfxIAMtaH3pOZXMdZJ9EZtSRK6KEX KibWCzhGN78N0O2P8lHs10C5dvds9h1w -----END CERTIFICATE-----Generated at Wed Jun 18 15:28:04 2025 by rpki-client