$ rpki-client -vvf rpki.apnic.net/member_repository/A915FEAC/793A9DF8F40211EFB1A06C59C4F9AE02/BudciPNpAzH-l_hiEjG2XRR6O20.mft File: BudciPNpAzH-l_hiEjG2XRR6O20.mft (raw, json) Hash identifier: e3bJAIlV0dW58g+J4J5RESLa5tFa/BSgBpur1VEwXxQ= Subject key identifier: 25:31:50:E1:36:9C:45:7B:D1:B8:62:FB:C6:D6:DE:70:64:AD:43:CB Authority key identifier: 06:E7:5C:88:F3:69:03:31:FE:97:F8:62:12:31:B6:5D:14:7A:3B:6D Certificate issuer: /CN=A915FEAC/serialNumber=06E75C88F3690331FE97F8621231B65D147A3B6D Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BudciPNpAzH-l_hiEjG2XRR6O20.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FEAC/793A9DF8F40211EFB1A06C59C4F9AE02/BudciPNpAzH-l_hiEjG2XRR6O20.mft Manifest number: 39 Signing time: Sun 15 Jun 2025 06:38:16 +0000 Manifest this update: Sun 15 Jun 2025 06:38:15 +0000 Manifest next update: Sun 22 Jun 2025 06:38:15 +0000 Files and hashes: 1: BudciPNpAzH-l_hiEjG2XRR6O20.crl (hash: cGYdD/ey4d3BRNGAa8E6VWRUFXgfyTakcPXfmDb4ChU=) 2: 2511401EF40311EFBB6EF777C4F9AE02.roa (hash: tnCDhZMDrHPp0NMpU0cMFqMJ1EvDl+x9yj+eC20nwlY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FEAC/793A9DF8F40211EFB1A06C59C4F9AE02/BudciPNpAzH-l_hiEjG2XRR6O20.crl rsync://rpki.apnic.net/member_repository/A915FEAC/793A9DF8F40211EFB1A06C59C4F9AE02/BudciPNpAzH-l_hiEjG2XRR6O20.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BudciPNpAzH-l_hiEjG2XRR6O20.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FEAC, serialNumber=06E75C88F3690331FE97F8621231B65D147A3B6D Validity Not Before: Jun 15 06:38:15 2025 GMT Not After : Jun 22 06:38:15 2025 GMT Subject: CN=684e6a57-e764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:cb:a9:2b:2e:14:46:de:b9:17:4d:c3:9e:d2: 23:29:82:94:27:6c:d9:3e:28:a3:27:2d:ff:38:6c: ad:2a:ea:ec:4e:2c:c3:28:34:50:99:4e:23:c2:1a: dd:49:f5:24:20:6e:4b:c0:ee:b2:38:c5:b1:1b:50: 26:02:d8:b0:58:1f:53:80:09:fb:c6:60:1e:63:89: 0f:fe:f0:86:23:9d:2f:32:89:0c:41:d2:68:56:a8: a5:cf:50:53:74:0e:c9:ec:63:bc:0d:60:41:2c:51: 99:5c:ad:8f:2e:fc:f6:59:e4:4a:8a:dd:c7:0f:5e: aa:25:6a:58:7a:37:08:e3:8d:ca:7b:9e:e5:d9:67: 39:d3:00:a6:46:7f:d7:e9:db:98:8d:43:82:16:ec: 50:d5:be:53:36:13:9e:1c:2f:52:5a:1e:f3:69:d4: 3d:f7:7a:85:71:10:2d:cf:29:86:d2:46:04:07:6b: c5:73:21:2c:84:45:26:20:35:cd:27:20:8c:3d:5b: 5d:87:74:b4:72:f1:a6:d6:8b:32:5e:6e:2a:d6:27: be:2e:9e:d8:69:9f:76:aa:a9:93:83:b2:5e:72:9f: 39:40:e4:ed:74:1a:29:14:15:2e:94:b6:0d:96:41: 39:9a:33:94:1a:40:8b:5c:88:d9:9c:88:3a:d8:ee: 35:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:31:50:E1:36:9C:45:7B:D1:B8:62:FB:C6:D6:DE:70:64:AD:43:CB X509v3 Authority Key Identifier: keyid:06:E7:5C:88:F3:69:03:31:FE:97:F8:62:12:31:B6:5D:14:7A:3B:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FEAC/793A9DF8F40211EFB1A06C59C4F9AE02/BudciPNpAzH-l_hiEjG2XRR6O20.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BudciPNpAzH-l_hiEjG2XRR6O20.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FEAC/793A9DF8F40211EFB1A06C59C4F9AE02/BudciPNpAzH-l_hiEjG2XRR6O20.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:e4:f1:37:4d:a3:61:11:96:66:44:17:43:6b:7a:e0:a0:86: 8f:72:1c:93:63:21:fc:00:3a:46:85:21:71:c1:13:85:73:78: 52:cc:8a:2a:a3:10:8c:83:f4:02:89:b2:8c:1d:fb:0b:04:3b: 19:ff:50:c9:39:ca:88:71:fb:71:b7:4f:2c:70:b3:fc:8f:e9: 15:e5:c7:cc:e6:92:fd:3e:dd:e2:d2:04:2f:7d:3c:21:4e:73: ed:a1:be:87:10:ee:0e:4f:0a:58:39:07:73:7d:6d:25:cc:53: 9d:3f:37:f1:c3:4f:1b:23:cf:0c:d1:e6:ff:54:ab:a4:77:57: 81:3a:f0:bc:96:41:d8:e9:eb:95:f0:01:f3:3b:3d:9e:42:47: fc:52:d2:c7:ed:26:a1:45:b3:02:5a:40:1d:49:66:fe:9a:b6: 26:2e:7e:71:4a:62:ea:37:93:5a:9c:3d:dd:dd:2e:fc:ea:73: d9:ea:f4:b4:27:e3:64:0b:fb:8a:b7:04:67:75:46:05:cb:61: a1:76:d3:f1:0c:34:ce:53:c4:aa:c9:cb:84:37:31:58:3d:2d: 17:d1:d3:6b:17:d6:7f:59:12:f0:ea:00:63:99:37:0d:db:a3: b4:20:a8:4c:2a:21:36:d7:df:54:44:68:65:05:8f:3f:50:ee: 9c:7e:b1:4a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RkVBQzExMC8GA1UEBRMoMDZFNzVDODhGMzY5MDMzMUZFOTdGODYyMTIzMUI2NUQx NDdBM0I2RDAeFw0yNTA2MTUwNjM4MTVaFw0yNTA2MjIwNjM4MTVaMBgxFjAUBgNV BAMTDTY4NGU2YTU3LWU3NjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFy6krLhRG3rkXTcOe0iMpgpQnbNk+KKMnLf84bK0q6uxOLMMoNFCZTiPCGt1J 9SQgbkvA7rI4xbEbUCYC2LBYH1OACfvGYB5jiQ/+8IYjnS8yiQxB0mhWqKXPUFN0 DsnsY7wNYEEsUZlcrY8u/PZZ5EqK3ccPXqolalh6Nwjjjcp7nuXZZznTAKZGf9fp 25iNQ4IW7FDVvlM2E54cL1JaHvNp1D33eoVxEC3PKYbSRgQHa8VzISyERSYgNc0n IIw9W12HdLRy8abWizJebirWJ74unthpn3aqqZODsl5ynzlA5O10GikUFS6Utg2W QTmaM5QaQItciNmciDrY7jWHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJTFQ4Tac RXvRuGL7xtbecGStQ8swHwYDVR0jBBgwFoAUBudciPNpAzH+l/hiEjG2XRR6O20w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVGRUFDLzc5M0E5REY4RjQw MjExRUZCMUEwNkM1OUM0RjlBRTAyL0J1ZGNpUE5wQXpILWxfaGlFakcyWFJSNk8y MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQnVkY2lQTnBBekgtbF9oaUVqRzJYUlI2TzIwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVG RUFDLzc5M0E5REY4RjQwMjExRUZCMUEwNkM1OUM0RjlBRTAyL0J1ZGNpUE5wQXpI LWxfaGlFakcyWFJSNk8yMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADTk8TdNo2ERlmZEF0NreuCgho9yHJNjIfwAOkaFIXHBE4VzeFLMiiqj EIyD9AKJsowd+wsEOxn/UMk5yohx+3G3Tyxws/yP6RXlx8zmkv0+3eLSBC99PCFO c+2hvocQ7g5PClg5B3N9bSXMU50/N/HDTxsjzwzR5v9Uq6R3V4E68LyWQdjp65Xw AfM7PZ5CR/xS0sftJqFFswJaQB1JZv6atiYufnFKYuo3k1qcPd3dLvzqc9nq9LQn 42QL+4q3BGd1RgXLYaF20/EMNM5TxKrJy4Q3MVg9LRfR02sX1n9ZEvDqAGOZNw3b o7QgqEwqITbX31REaGUFjz9Q7px+sUo= -----END CERTIFICATE-----Generated at Sun Jun 15 10:01:54 2025 by rpki-client