$ rpki-client -vvf rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.mft File: cBB77LhKxM5elcxh0RCmcj-QycM.mft (raw, json) Hash identifier: PwhrETrDg6Iz8a2Kw1bH3o/ZwqwZK1misXvs7eJN3Ho= Subject key identifier: 31:AE:2C:25:B1:7F:F8:DF:2C:E3:37:19:93:D8:42:9C:CD:63:F3:34 Authority key identifier: 70:10:7B:EC:B8:4A:C4:CE:5E:95:CC:61:D1:10:A6:72:3F:90:C9:C3 Certificate issuer: /CN=A916C2B9/serialNumber=70107BECB84AC4CE5E95CC61D110A6723F90C9C3 Certificate serial: 0103 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBB77LhKxM5elcxh0RCmcj-QycM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.mft Manifest number: 0101 Signing time: Tue 17 Jun 2025 04:06:59 +0000 Manifest this update: Tue 17 Jun 2025 04:06:58 +0000 Manifest next update: Tue 24 Jun 2025 04:06:58 +0000 Files and hashes: 1: cBB77LhKxM5elcxh0RCmcj-QycM.crl (hash: ncwKWygfGub0BihbnbuJzxRfe4SH3dwza4wwJ6dO7wo=) 2: 4FB5C8F4C43D11EE973ADE48C4F9AE02.roa (hash: 1zjPjAAMi/TzSsloil5toyL9PUAMXEmH20tRK4X3XV8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.crl rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBB77LhKxM5elcxh0RCmcj-QycM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 04:06:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 259 (0x103) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C2B9, serialNumber=70107BECB84AC4CE5E95CC61D110A6723F90C9C3 Validity Not Before: Jun 17 04:06:58 2025 GMT Not After : Jun 24 04:06:58 2025 GMT Subject: CN=6850e9e3-96ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:da:6c:2a:a6:db:25:b3:f3:29:0d:5d:a9:99: e9:94:dd:8d:48:02:b4:5d:b4:12:d7:f7:72:dc:00: 29:2a:8e:86:27:fa:d6:20:05:b4:44:d4:23:5d:93: b5:69:3b:37:97:38:da:e4:72:c8:9b:cc:d6:b9:a5: 93:bb:d6:ad:49:59:84:da:15:9b:76:5f:1d:7b:b6: 13:dc:c8:3b:5a:3c:36:67:67:07:eb:27:6d:01:d5: 23:29:be:b5:3a:d5:a5:f6:29:49:13:47:ad:3b:9a: 13:e8:e8:d9:02:e0:d8:e8:14:97:2c:7c:54:b5:68: 43:8a:fe:ef:cc:a1:d0:51:e6:1c:e2:da:fe:1f:1b: 70:fe:69:ce:68:1f:35:ff:aa:56:07:86:e4:ab:35: 1f:85:94:bb:a0:6a:f1:48:47:f2:f4:3e:c4:2a:5d: ce:e9:68:48:55:cb:19:a0:08:c6:d8:ce:3e:3b:20: ed:21:23:0c:fc:a0:5c:48:34:e1:ec:5f:b2:e4:47: 49:0c:9c:d5:61:38:af:47:51:7e:25:bf:e0:8d:49: 08:83:ae:12:8d:b4:b4:15:20:c7:fe:a9:93:70:a7: ea:2e:fc:f7:de:6f:e4:fd:01:ee:b8:92:a5:06:0b: 94:b0:c1:f1:33:39:6d:ac:09:3c:92:4b:87:18:ff: 64:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:AE:2C:25:B1:7F:F8:DF:2C:E3:37:19:93:D8:42:9C:CD:63:F3:34 X509v3 Authority Key Identifier: keyid:70:10:7B:EC:B8:4A:C4:CE:5E:95:CC:61:D1:10:A6:72:3F:90:C9:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBB77LhKxM5elcxh0RCmcj-QycM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:c4:bc:82:e3:b6:f5:6a:cd:de:87:a7:50:14:dd:18:61:49: 21:30:b6:27:1b:a4:8c:ab:d7:22:5a:3c:a5:4b:e1:33:6f:04: 2b:de:67:6e:f9:24:25:fc:53:6e:f7:8a:3e:73:b6:87:e0:3a: bd:03:d8:22:2a:8e:41:05:6b:be:41:96:48:cd:fa:bb:36:a5: 29:26:b5:77:55:c7:f5:40:fd:53:9c:ac:f3:33:6b:fd:e3:1f: 74:64:00:30:55:5e:3e:07:2f:e4:a6:b2:3a:7f:be:59:74:76: 90:2a:59:e1:ca:ca:a9:d1:f4:81:04:d3:d6:ff:cc:89:bd:93: 9c:a7:44:91:d3:7e:00:59:1e:d4:d1:a3:0b:02:24:8c:16:4f: 3b:60:85:a7:f2:e3:ab:15:f1:0c:e7:35:0c:6d:07:46:1e:52: 44:bb:89:c8:fe:c4:ab:9a:64:8e:f8:61:09:d7:19:08:e4:d5: 85:1e:96:f1:98:4d:a4:f1:23:1f:15:92:3c:6f:ff:75:44:9e: ff:42:63:d8:99:a7:9b:39:b6:e9:36:46:43:7e:19:ad:c8:d6: a1:5d:30:18:01:5e:3f:56:a0:51:a1:f4:51:eb:ca:32:ea:e5: 6c:47:0b:9d:2f:e1:e1:a7:4b:6d:29:2c:66:ee:5c:3f:74:58: ce:bd:97:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkMyQjkxMTAvBgNVBAUTKDcwMTA3QkVDQjg0QUM0Q0U1RTk1Q0M2MUQxMTBBNjcy M0Y5MEM5QzMwHhcNMjUwNjE3MDQwNjU4WhcNMjUwNjI0MDQwNjU4WjAYMRYwFAYD VQQDEw02ODUwZTllMy05NmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuNpsKqbbJbPzKQ1dqZnplN2NSAK0XbQS1/dy3AApKo6GJ/rWIAW0RNQjXZO1 aTs3lzja5HLIm8zWuaWTu9atSVmE2hWbdl8de7YT3Mg7Wjw2Z2cH6ydtAdUjKb61 OtWl9ilJE0etO5oT6OjZAuDY6BSXLHxUtWhDiv7vzKHQUeYc4tr+Hxtw/mnOaB81 /6pWB4bkqzUfhZS7oGrxSEfy9D7EKl3O6WhIVcsZoAjG2M4+OyDtISMM/KBcSDTh 7F+y5EdJDJzVYTivR1F+Jb/gjUkIg64SjbS0FSDH/qmTcKfqLvz33m/k/QHuuJKl BguUsMHxMzltrAk8kkuHGP9kQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDGuLCWx f/jfLOM3GZPYQpzNY/M0MB8GA1UdIwQYMBaAFHAQe+y4SsTOXpXMYdEQpnI/kMnD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzJCOS8zMDY2OTlDQUMy QTIxMUVFOTFEOTUzNUNDNEY5QUUwMi9jQkI3N0xoS3hNNWVsY3hoMFJDbWNqLVF5 Y00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NCQjc3TGhLeE01ZWxjeGgwUkNtY2otUXljTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzJCOS8zMDY2OTlDQUMyQTIxMUVFOTFEOTUzNUNDNEY5QUUwMi9jQkI3N0xoS3hN NWVsY3hoMFJDbWNqLVF5Y00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmxLyC47b1as3eh6dQFN0YYUkhMLYnG6SMq9ciWjylS+EzbwQr3mdu +SQl/FNu94o+c7aH4Dq9A9giKo5BBWu+QZZIzfq7NqUpJrV3Vcf1QP1TnKzzM2v9 4x90ZAAwVV4+By/kprI6f75ZdHaQKlnhysqp0fSBBNPW/8yJvZOcp0SR034AWR7U 0aMLAiSMFk87YIWn8uOrFfEM5zUMbQdGHlJEu4nI/sSrmmSO+GEJ1xkI5NWFHpbx mE2k8SMfFZI8b/91RJ7/QmPYmaebObbpNkZDfhmtyNahXTAYAV4/VqBRofRR68oy 6uVsRwudL+Hhp0ttKSxm7lw/dFjOvZeI -----END CERTIFICATE-----Generated at Wed Jun 18 18:35:03 2025 by rpki-client