$ rpki-client -vvf rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/B4tKgNHf5sBSUzqtsZU0rFmjlUs.mft File: B4tKgNHf5sBSUzqtsZU0rFmjlUs.mft (raw, json) Hash identifier: dFT3D4IasM74HOqC7xQIfZzWMhq7M5w1x1uJssG5AuE= Subject key identifier: 64:2D:5E:F0:98:62:B5:44:30:0A:C8:2E:A0:C7:A6:92:A2:5E:60:72 Authority key identifier: 07:8B:4A:80:D1:DF:E6:C0:52:53:3A:AD:B1:95:34:AC:59:A3:95:4B Certificate issuer: /CN=A917C5E0/serialNumber=078B4A80D1DFE6C052533AADB19534AC59A3954B Certificate serial: A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4tKgNHf5sBSUzqtsZU0rFmjlUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/B4tKgNHf5sBSUzqtsZU0rFmjlUs.mft Manifest number: 9E Signing time: Fri 13 Jun 2025 05:10:03 +0000 Manifest this update: Fri 13 Jun 2025 05:10:03 +0000 Manifest next update: Fri 20 Jun 2025 05:10:03 +0000 Files and hashes: 1: B4tKgNHf5sBSUzqtsZU0rFmjlUs.crl (hash: hmPdw3vLrqtrTr2kK0bT134c7r0B56aPbSbfza2qD3o=) 2: 335E880A5A1811EFB08E4F38C4F9AE02.roa (hash: uB7Em80PKGY4uO2oMYJtskRF61M8oMXLAmFb1PjEp7E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/B4tKgNHf5sBSUzqtsZU0rFmjlUs.crl rsync://rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/B4tKgNHf5sBSUzqtsZU0rFmjlUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4tKgNHf5sBSUzqtsZU0rFmjlUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:10:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C5E0, serialNumber=078B4A80D1DFE6C052533AADB19534AC59A3954B Validity Not Before: Jun 13 05:10:03 2025 GMT Not After : Jun 20 05:10:03 2025 GMT Subject: CN=684bb2ab-27c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:29:94:11:b1:bb:87:de:0d:aa:09:39:4a:8c: ef:ed:3a:44:78:72:17:cb:57:56:8b:4a:50:fa:f1: 0f:ce:bc:01:88:77:0f:13:2a:bf:7e:00:a8:0e:cf: 8d:37:3a:5a:57:3d:b0:10:50:7e:37:f8:03:b8:92: b7:29:b5:8a:d3:da:e8:1f:de:db:32:a3:ed:1e:63: f9:72:c2:93:31:ac:93:0b:db:e2:e8:de:9a:70:d9: 34:78:e7:fe:a8:0b:ae:b4:28:42:55:bc:7e:30:1c: 49:4e:7e:19:ac:1e:16:52:80:8f:d7:f1:1f:d9:07: 5d:c1:8b:6d:28:83:2f:5b:10:cf:b3:a6:55:a4:30: 61:56:7b:61:59:8c:9e:b3:0f:99:30:63:d9:15:7b: c9:88:ac:1f:c0:dc:4d:00:73:cb:3e:aa:10:11:32: 27:9c:81:c2:bf:d5:15:b9:54:49:3c:8b:1a:69:1a: 65:be:24:15:77:6c:2e:55:05:aa:95:8c:74:b5:87: 68:00:75:5a:00:6e:20:6f:5b:08:ca:a3:9a:b1:4c: a0:be:93:dd:a3:a3:5d:6f:50:50:6c:a2:df:4f:ce: fe:98:a3:45:68:74:0e:68:d2:b8:95:cf:df:e9:5f: 3b:18:f4:4a:74:c9:17:0a:28:9b:a2:de:fd:90:91: 45:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:2D:5E:F0:98:62:B5:44:30:0A:C8:2E:A0:C7:A6:92:A2:5E:60:72 X509v3 Authority Key Identifier: keyid:07:8B:4A:80:D1:DF:E6:C0:52:53:3A:AD:B1:95:34:AC:59:A3:95:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/B4tKgNHf5sBSUzqtsZU0rFmjlUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4tKgNHf5sBSUzqtsZU0rFmjlUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/B4tKgNHf5sBSUzqtsZU0rFmjlUs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:e6:7a:ac:3a:02:a1:f6:05:c8:5d:34:bb:9f:57:5b:c9:06: aa:e6:b9:e2:36:5e:b4:44:aa:ce:f7:0a:16:1e:ac:ab:fa:e2: 2c:2a:06:ad:bc:8a:1d:37:3d:e4:85:1b:82:1b:fb:db:ff:76: fb:9c:82:f3:1f:35:fc:bc:71:11:68:c0:f5:32:2b:23:d5:44: 88:c5:c1:8e:00:dd:92:c8:b7:22:6f:7e:08:ef:1e:57:a5:02: 31:ef:3f:fc:33:3f:f8:cf:b5:2e:75:d0:33:19:dc:ec:a6:3d: 37:c9:84:37:12:01:a2:08:f9:d8:77:e3:28:fa:68:d3:e8:9f: 80:7f:fc:03:1e:06:93:96:74:7f:9e:9b:1b:2b:50:4b:65:19: 64:1b:16:fa:68:a8:74:af:a6:47:e3:f4:99:4e:b2:c7:fe:0e: 59:62:b6:73:f0:ad:1d:95:87:c3:b8:7a:87:01:4d:ab:a2:cf: c9:6b:21:3b:62:93:a8:48:35:e9:1e:01:5f:30:32:e4:b0:57: 34:94:3a:b7:fc:6d:43:33:c5:f9:84:64:0f:37:ca:89:2e:6b: 54:00:05:d9:6c:a5:98:c1:f2:20:ed:29:a7:9d:ef:b9:0f:38: dc:dc:0a:d0:f6:36:ea:fb:8f:20:bb:c5:ba:5d:24:7f:9b:f8: 6a:de:f0:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M1RTAxMTAvBgNVBAUTKDA3OEI0QTgwRDFERkU2QzA1MjUzM0FBREIxOTUzNEFD NTlBMzk1NEIwHhcNMjUwNjEzMDUxMDAzWhcNMjUwNjIwMDUxMDAzWjAYMRYwFAYD VQQDEw02ODRiYjJhYi0yN2MxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtymUEbG7h94Nqgk5Sozv7TpEeHIXy1dWi0pQ+vEPzrwBiHcPEyq/fgCoDs+N NzpaVz2wEFB+N/gDuJK3KbWK09roH97bMqPtHmP5csKTMayTC9vi6N6acNk0eOf+ qAuutChCVbx+MBxJTn4ZrB4WUoCP1/Ef2QddwYttKIMvWxDPs6ZVpDBhVnthWYye sw+ZMGPZFXvJiKwfwNxNAHPLPqoQETInnIHCv9UVuVRJPIsaaRplviQVd2wuVQWq lYx0tYdoAHVaAG4gb1sIyqOasUygvpPdo6Ndb1BQbKLfT87+mKNFaHQOaNK4lc/f 6V87GPRKdMkXCiibot79kJFF9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGQtXvCY YrVEMArILqDHppKiXmByMB8GA1UdIwQYMBaAFAeLSoDR3+bAUlM6rbGVNKxZo5VL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzVFMC84NzIwQUIxODVB MTcxMUVGQUEyMkE3MjlDNEY5QUUwMi9CNHRLZ05IZjVzQlNVenF0c1pVMHJGbWps VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I0dEtnTkhmNXNCU1V6cXRzWlUwckZtamxVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzVFMC84NzIwQUIxODVBMTcxMUVGQUEyMkE3MjlDNEY5QUUwMi9CNHRLZ05IZjVz QlNVenF0c1pVMHJGbWpsVXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAK5nqsOgKh9gXIXTS7n1dbyQaq5rniNl60RKrO9woWHqyr+uIsKgat vIodNz3khRuCG/vb/3b7nILzHzX8vHERaMD1Misj1USIxcGOAN2SyLcib34I7x5X pQIx7z/8Mz/4z7UuddAzGdzspj03yYQ3EgGiCPnYd+Mo+mjT6J+Af/wDHgaTlnR/ npsbK1BLZRlkGxb6aKh0r6ZH4/SZTrLH/g5ZYrZz8K0dlYfDuHqHAU2ros/JayE7 YpOoSDXpHgFfMDLksFc0lDq3/G1DM8X5hGQPN8qJLmtUAAXZbKWYwfIg7Smnne+5 Dzjc3ArQ9jbq+48gu8W6XSR/m/hq3vAV -----END CERTIFICATE-----Generated at Sat Jun 14 19:36:39 2025 by rpki-client