$ rpki-client -vvf rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft File: B_MbR0cTs6FSxqX49I3tIJfcJB8.mft (raw, json) Hash identifier: t4z8bTjjhuyM1I9YpABH4BkwWZntZ1+C0KrJpMZAP6M= Subject key identifier: 38:55:31:A3:06:8E:5D:C2:D8:1A:FE:7F:D7:0B:FA:A9:EF:94:B8:12 Authority key identifier: 07:F3:1B:47:47:13:B3:A1:52:C6:A5:F8:F4:8D:ED:20:97:DC:24:1F Certificate issuer: /CN=A9170D3E/serialNumber=07F31B474713B3A152C6A5F8F48DED2097DC241F Certificate serial: 6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_MbR0cTs6FSxqX49I3tIJfcJB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft Manifest number: 6E Signing time: Fri 13 Jun 2025 05:47:23 +0000 Manifest this update: Fri 13 Jun 2025 05:47:23 +0000 Manifest next update: Fri 20 Jun 2025 05:47:23 +0000 Files and hashes: 1: B_MbR0cTs6FSxqX49I3tIJfcJB8.crl (hash: XbhONYt6+F8LSb6zGd4p0QNtikw6i3tQ1YAs/E8ZOV0=) 2: 232F490A9FD811EFA92BE338C4F9AE02.roa (hash: oshENdblJra/vyPm3h+L7O2yi470pUSFRiQdE49uRfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.crl rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_MbR0cTs6FSxqX49I3tIJfcJB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:47:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 111 (0x6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170D3E, serialNumber=07F31B474713B3A152C6A5F8F48DED2097DC241F Validity Not Before: Jun 13 05:47:23 2025 GMT Not After : Jun 20 05:47:23 2025 GMT Subject: CN=684bbb6b-db3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:39:cd:52:f5:69:70:c1:a0:6a:eb:b0:f2:95: d7:05:3a:94:2a:8d:6a:05:a3:89:76:46:d9:a4:e9: e9:33:6c:b9:84:3b:7c:cc:5b:9b:31:15:d3:37:4a: fa:74:07:5b:89:87:95:4a:98:62:5d:fd:88:5b:73: c5:21:f0:89:e2:11:0a:87:f6:46:93:9d:2f:1e:b4: 48:70:b4:06:98:d6:82:a1:72:25:86:a1:9e:3d:b2: 3b:51:60:62:50:8b:d1:e6:8f:36:b7:0d:7b:0f:27: 12:5a:2f:e8:6b:60:30:b8:96:e3:c1:b1:5f:4d:fe: 3e:b2:da:37:b5:13:2e:0b:30:ca:2b:f4:25:6d:54: cd:99:ac:7d:9d:d7:13:a5:d1:8a:d7:c5:ce:8d:58: 2f:99:d7:41:d7:61:24:5b:5c:ee:91:67:44:37:f9: e6:e6:79:19:a9:f1:ad:aa:51:ec:91:dd:35:d2:09: 4c:0e:dd:5d:c9:c7:9b:8b:4b:a1:95:c7:33:a6:ee: 6f:5f:6e:c6:73:59:99:71:b7:ce:aa:67:69:a0:91: 2c:e0:2b:0a:f8:33:a8:9f:ae:ae:67:af:b6:4d:68: 4e:08:e6:1d:cf:47:33:a2:cd:aa:9a:be:7f:b8:1c: 92:36:bf:7b:c4:c6:99:c8:e1:3a:bb:33:0b:48:98: d2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:55:31:A3:06:8E:5D:C2:D8:1A:FE:7F:D7:0B:FA:A9:EF:94:B8:12 X509v3 Authority Key Identifier: keyid:07:F3:1B:47:47:13:B3:A1:52:C6:A5:F8:F4:8D:ED:20:97:DC:24:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_MbR0cTs6FSxqX49I3tIJfcJB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:05:09:95:78:89:51:57:43:24:0b:97:76:55:98:58:5f:22: 99:49:99:f3:ad:34:3f:02:93:13:e8:da:43:5b:ba:b5:a1:20: a7:c2:20:32:53:3d:dc:5d:03:da:df:82:78:1e:b6:33:62:5b: ee:09:28:2a:82:a6:f4:a8:ff:83:c3:2c:f6:a6:81:fe:2d:63: 7f:16:0f:3b:07:73:a6:28:46:4f:9d:74:90:f0:5e:74:03:ac: 2a:0b:73:9b:e6:aa:d1:0e:31:e7:74:78:07:34:12:bb:62:98: ba:7d:2b:39:03:a3:40:4d:3c:93:73:95:7b:52:bf:5d:2e:d1: f5:46:b8:88:59:5d:c5:6e:97:23:6e:22:64:2c:b4:9e:b5:a1: 7b:89:ea:79:fe:b3:7e:94:f4:4b:68:9a:33:f6:87:b9:29:68: ea:1f:d9:49:00:c4:db:20:95:9a:18:df:a1:af:ad:29:01:17: 3f:56:52:85:be:6b:fb:4b:f2:bb:a3:e3:74:4e:33:d5:e3:f4: d0:18:fb:42:06:f0:04:4c:97:11:06:0c:3a:cc:fa:15:d7:6f: 05:b5:65:cf:83:c1:87:a9:6f:6f:ff:eb:36:ba:2b:08:fb:f4: 67:ae:10:0e:ba:d4:ae:0b:16:dc:1c:9b:dd:8c:ce:ad:44:5b: 80:10:24:81 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MEQzRTExMC8GA1UEBRMoMDdGMzFCNDc0NzEzQjNBMTUyQzZBNUY4RjQ4REVEMjA5 N0RDMjQxRjAeFw0yNTA2MTMwNTQ3MjNaFw0yNTA2MjAwNTQ3MjNaMBgxFjAUBgNV BAMTDTY4NGJiYjZiLWRiM2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1Oc1S9WlwwaBq67DyldcFOpQqjWoFo4l2Rtmk6ekzbLmEO3zMW5sxFdM3Svp0 B1uJh5VKmGJd/Yhbc8Uh8IniEQqH9kaTnS8etEhwtAaY1oKhciWGoZ49sjtRYGJQ i9Hmjza3DXsPJxJaL+hrYDC4luPBsV9N/j6y2je1Ey4LMMor9CVtVM2ZrH2d1xOl 0YrXxc6NWC+Z10HXYSRbXO6RZ0Q3+ebmeRmp8a2qUeyR3TXSCUwO3V3Jx5uLS6GV xzOm7m9fbsZzWZlxt86qZ2mgkSzgKwr4M6ifrq5nr7ZNaE4I5h3PRzOizaqavn+4 HJI2v3vExpnI4Tq7MwtImNJJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOFUxowaO XcLYGv5/1wv6qe+UuBIwHwYDVR0jBBgwFoAUB/MbR0cTs6FSxqX49I3tIJfcJB8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwRDNFL0JERUU5RTI0OUZE NzExRUY5RTM4QTgzN0M0RjlBRTAyL0JfTWJSMGNUczZGU3hxWDQ5STN0SUpmY0pC OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQl9NYlIwY1RzNkZTeHFYNDlJM3RJSmZjSkI4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw RDNFL0JERUU5RTI0OUZENzExRUY5RTM4QTgzN0M0RjlBRTAyL0JfTWJSMGNUczZG U3hxWDQ5STN0SUpmY0pCOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC8FCZV4iVFXQyQLl3ZVmFhfIplJmfOtND8CkxPo2kNburWhIKfCIDJT PdxdA9rfgngetjNiW+4JKCqCpvSo/4PDLPamgf4tY38WDzsHc6YoRk+ddJDwXnQD rCoLc5vmqtEOMed0eAc0ErtimLp9KzkDo0BNPJNzlXtSv10u0fVGuIhZXcVulyNu ImQstJ61oXuJ6nn+s36U9EtomjP2h7kpaOof2UkAxNsglZoY36GvrSkBFz9WUoW+ a/tL8ruj43ROM9Xj9NAY+0IG8ARMlxEGDDrM+hXXbwW1Zc+DwYepb2//6za6Kwj7 9GeuEA661K4LFtwcm92Mzq1EW4AQJIE= -----END CERTIFICATE-----Generated at Sat Jun 14 18:49:59 2025 by rpki-client