$ rpki-client -vvf rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft File: bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft (raw, json) Hash identifier: +N5z0t+IfxsXUDyHKdeAWfcgJS0lqDYPdat/cobAjUM= Subject key identifier: E9:81:58:15:A9:26:23:09:B0:3C:95:98:EA:C6:DD:D8:C5:F2:C1:AA Authority key identifier: 6C:3B:7F:1C:13:3D:A9:C5:1D:44:4D:A8:5E:60:2A:96:84:51:FE:54 Certificate issuer: /CN=A91626D2/serialNumber=6C3B7F1C133DA9C51D444DA85E602A968451FE54 Certificate serial: CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDt_HBM9qcUdRE2oXmAqloRR_lQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft Manifest number: CB Signing time: Sun 15 Jun 2025 04:50:29 +0000 Manifest this update: Sun 15 Jun 2025 04:50:29 +0000 Manifest next update: Sun 22 Jun 2025 04:50:29 +0000 Files and hashes: 1: bDt_HBM9qcUdRE2oXmAqloRR_lQ.crl (hash: n3EtytYYBtkxumtl0zjPQmolr99YvNpo/igi1Gs0BV8=) 2: 8093CCBA13F611EF8ED7D71EC4F9AE02.roa (hash: J6cm0tDS7Sdy7/sJGsGgF8rSkOKz7v9OX913NFApE9A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.crl rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDt_HBM9qcUdRE2oXmAqloRR_lQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 205 (0xcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91626D2, serialNumber=6C3B7F1C133DA9C51D444DA85E602A968451FE54 Validity Not Before: Jun 15 04:50:29 2025 GMT Not After : Jun 22 04:50:29 2025 GMT Subject: CN=684e5115-4e06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:42:23:4a:e5:90:f5:0f:47:3c:77:6e:2f:c1: 8b:be:3c:07:0d:93:6b:1d:a3:b9:7c:ed:d9:19:d7: 64:7e:5b:65:5b:91:d5:7f:ce:37:0e:c8:8b:12:8a: 51:df:02:95:5e:19:15:05:43:9c:ad:24:ef:ac:3e: 79:03:82:66:aa:85:3e:6f:bf:ab:42:57:c9:f9:41: c2:33:87:e5:25:c2:3c:0c:15:19:b0:e4:a9:18:82: 40:21:60:48:b3:bf:15:d8:1f:4f:6a:de:3a:4e:e0: a9:7f:40:f6:d0:b4:1a:23:d2:f6:27:6c:fb:3e:68: 6a:43:53:c9:9e:a8:26:dc:28:de:67:fc:f8:ba:70: 65:e2:49:b3:ee:85:66:1a:3c:cc:1d:c5:a0:91:08: 7b:30:ef:82:13:3d:a2:c1:e7:60:33:27:9a:76:0c: d4:f8:43:7d:0f:34:46:a4:aa:0e:a9:75:15:ef:37: b0:bc:3e:37:f4:59:20:15:79:6c:c5:11:d4:16:c4: a6:57:13:0d:f2:19:07:18:69:7a:ce:5c:05:ce:ef: d2:dc:50:fe:2b:74:e4:e3:ef:63:2a:32:9c:a7:12: d1:41:68:87:75:20:64:ce:b4:1a:a0:8d:d0:6c:75: 0e:bd:4a:e0:f7:2d:af:d8:de:36:b1:7d:ad:b5:0b: 5c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:81:58:15:A9:26:23:09:B0:3C:95:98:EA:C6:DD:D8:C5:F2:C1:AA X509v3 Authority Key Identifier: keyid:6C:3B:7F:1C:13:3D:A9:C5:1D:44:4D:A8:5E:60:2A:96:84:51:FE:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDt_HBM9qcUdRE2oXmAqloRR_lQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:44:7d:0c:6d:18:fd:eb:a8:06:e1:77:d1:91:4b:6f:58:8c: e2:91:9c:5d:01:40:05:03:ac:22:34:84:a9:4c:62:c2:fd:33: 77:f9:5d:50:c3:33:25:44:8f:59:0e:06:e4:72:56:8c:b4:ff: 80:f3:88:3c:80:85:e2:d2:d0:d6:3f:e6:e2:14:10:86:5c:c9: 9d:2f:65:dc:7e:97:cc:d2:fa:b9:71:50:16:dc:79:91:42:59: 8a:fe:55:c7:cf:48:e5:bd:bd:7f:b7:6f:dd:7f:96:89:59:d3: c4:e4:c4:85:52:1d:e4:7d:66:d8:3b:5f:15:9b:e8:39:d0:0b: fb:c8:36:08:b6:89:31:31:ce:fe:ba:91:3c:2a:aa:b2:f0:fa: 4a:9b:04:e8:df:12:aa:bb:64:4a:2f:fe:23:c4:f3:ce:1a:22: e7:78:e7:f0:a8:3f:b3:89:8f:40:67:51:ff:7d:9f:0b:b6:15: 32:22:b2:72:6e:d0:a2:f5:38:28:55:0a:00:a6:95:db:46:8a: 47:9d:01:9f:29:1c:20:c1:f9:5e:06:26:1b:1a:68:1a:66:6d: 80:ca:cd:86:d2:96:ce:aa:a2:08:ac:69:25:e1:6d:2e:1f:be: 40:54:e0:4c:e1:83:06:c5:db:a1:d0:ea:6f:35:7f:e1:aa:4a: 2e:40:1a:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjI2RDIxMTAvBgNVBAUTKDZDM0I3RjFDMTMzREE5QzUxRDQ0NERBODVFNjAyQTk2 ODQ1MUZFNTQwHhcNMjUwNjE1MDQ1MDI5WhcNMjUwNjIyMDQ1MDI5WjAYMRYwFAYD VQQDEw02ODRlNTExNS00ZTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt0IjSuWQ9Q9HPHduL8GLvjwHDZNrHaO5fO3ZGddkfltlW5HVf843DsiLEopR 3wKVXhkVBUOcrSTvrD55A4JmqoU+b7+rQlfJ+UHCM4flJcI8DBUZsOSpGIJAIWBI s78V2B9Pat46TuCpf0D20LQaI9L2J2z7PmhqQ1PJnqgm3CjeZ/z4unBl4kmz7oVm GjzMHcWgkQh7MO+CEz2iwedgMyeadgzU+EN9DzRGpKoOqXUV7zewvD439FkgFXls xRHUFsSmVxMN8hkHGGl6zlwFzu/S3FD+K3Tk4+9jKjKcpxLRQWiHdSBkzrQaoI3Q bHUOvUrg9y2v2N42sX2ttQtcHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOmBWBWp JiMJsDyVmOrG3djF8sGqMB8GA1UdIwQYMBaAFGw7fxwTPanFHURNqF5gKpaEUf5U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjZEMi9BRjIwODM0RTEz RjUxMUVGQTA5RDMyMUJDNEY5QUUwMi9iRHRfSEJNOXFjVWRSRTJvWG1BcWxvUlJf bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JEdF9IQk05cWNVZFJFMm9YbUFxbG9SUl9sUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjZEMi9BRjIwODM0RTEzRjUxMUVGQTA5RDMyMUJDNEY5QUUwMi9iRHRfSEJNOXFj VWRSRTJvWG1BcWxvUlJfbFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0RH0MbRj966gG4XfRkUtvWIzikZxdAUAFA6wiNISpTGLC/TN3+V1Q wzMlRI9ZDgbkclaMtP+A84g8gIXi0tDWP+biFBCGXMmdL2XcfpfM0vq5cVAW3HmR QlmK/lXHz0jlvb1/t2/df5aJWdPE5MSFUh3kfWbYO18Vm+g50Av7yDYItokxMc7+ upE8Kqqy8PpKmwTo3xKqu2RKL/4jxPPOGiLneOfwqD+ziY9AZ1H/fZ8LthUyIrJy btCi9TgoVQoAppXbRopHnQGfKRwgwfleBiYbGmgaZm2Ays2G0pbOqqIIrGkl4W0u H75AVOBM4YMGxduh0OpvNX/hqkouQBrJ -----END CERTIFICATE-----Generated at Sun Jun 15 10:06:13 2025 by rpki-client