$ rpki-client -vvf rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft File: Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft (raw, json) Hash identifier: OCfmCk0bURnArE8ckeK14R6B26Fc+f5f2vVnCTMx97k= Subject key identifier: EB:41:13:51:63:F4:79:39:36:9F:EA:38:A3:A8:12:FC:90:E9:79:A0 Authority key identifier: 05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC Certificate issuer: /CN=A91941E9/serialNumber=05AD3E4AA1961BA7ECBE02935725C25CD26BD6BC Certificate serial: 07C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft Manifest number: 07B6 Signing time: Thu 12 Jun 2025 20:59:31 +0000 Manifest this update: Thu 12 Jun 2025 20:59:31 +0000 Manifest next update: Thu 19 Jun 2025 20:59:31 +0000 Files and hashes: 1: Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl (hash: na/qRcEAWU2HVgukvl73JIp/dUJsrktfvQljpdkF7Tg=) 2: B0425744D7E211ECBD1D447FC4F9AE02.roa (hash: OdlMqUDNtGzAyirklP55vsYTOSuUBKJCfr9lvqlqHYg=) 3: 308C5012BE4C11ED9598AC4EC4F9AE02.roa (hash: P7lzuIcT4OJPq2KVjR4hbm4014N8PEGkbXpO5IhqpWQ=) 4: 067B1AAA70C611EF8080566DC4F9AE02.roa (hash: ap536R4mDpEQmVBUvi08sdQ4AGgP2k0XYVc0G1WQzN4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 20:59:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1993 (0x7c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91941E9, serialNumber=05AD3E4AA1961BA7ECBE02935725C25CD26BD6BC Validity Not Before: Jun 12 20:59:31 2025 GMT Not After : Jun 19 20:59:31 2025 GMT Subject: CN=684b3fb3-2a9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:87:43:f8:e5:98:18:a7:08:0d:85:ac:99:46: 4d:11:06:72:5a:7f:56:08:01:8f:9c:7e:01:7a:37: 52:a1:25:d1:53:c1:50:89:4a:eb:45:65:ef:37:bf: 57:08:7c:2a:ec:30:e7:34:99:ea:a5:ae:82:44:90: 91:11:35:5b:f4:ef:1e:a8:9b:34:ab:59:9d:ff:d0: 22:5e:57:d3:fd:4e:c7:e8:67:05:45:b1:ad:be:85: a2:19:12:a4:a5:e2:1e:5f:fd:e6:ff:e9:ed:9b:42: 5d:b4:a2:ed:b2:af:bb:28:9d:f2:09:84:27:38:9f: 07:17:d7:20:6d:96:17:a9:ce:fc:62:9c:99:f0:2b: 5a:78:82:93:b1:9a:fc:87:33:f7:54:b7:fa:7c:a0: 9a:65:a5:e6:ce:55:c7:cd:29:ce:01:38:8d:4b:61: 5d:e9:fb:a2:b8:cc:15:0d:17:1d:1f:bb:ab:60:3c: 46:ef:99:7b:44:a6:0b:b3:cc:04:58:d2:97:eb:fa: 3c:c0:5a:6e:35:58:a1:0b:62:2f:c6:a2:1c:00:bb: 97:eb:b7:0a:a1:5d:ad:d5:15:c8:e1:f3:69:81:cc: 78:29:79:b1:0d:aa:18:d4:d5:1d:a5:f4:09:e5:34: e3:fa:f9:14:e7:64:03:dc:4d:79:3d:48:55:e6:20: 9f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:41:13:51:63:F4:79:39:36:9F:EA:38:A3:A8:12:FC:90:E9:79:A0 X509v3 Authority Key Identifier: keyid:05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:44:b1:9d:07:d2:cc:bc:2a:44:36:e5:80:71:3d:2a:4c:7e: 9b:d5:da:da:02:96:fb:27:6b:6f:42:f5:71:0c:84:fe:5c:95: bc:36:87:0a:12:40:40:dd:40:ae:62:67:d8:13:cd:f7:89:fa: 7b:3f:65:5b:74:ba:5e:2e:d1:82:03:6c:c7:48:0d:e1:db:b1: 70:93:b8:3f:61:2a:90:4e:b2:d1:f2:5a:da:22:6d:5b:a3:e0: eb:33:49:d1:56:2a:82:a4:60:76:45:ce:5d:d1:d5:1f:a2:3e: be:43:9b:5e:de:88:21:85:a7:e7:55:b0:86:77:7e:94:3f:b5: 44:3c:bc:bf:73:81:29:19:0e:18:9e:8b:a3:02:27:39:28:30: 59:50:d9:c7:52:f0:e0:bf:7c:11:27:64:f5:8b:47:df:84:0d: da:3d:98:27:31:61:36:00:a0:46:00:90:4d:be:21:df:d5:4e: f8:16:1f:08:bc:f5:2c:f7:31:81:af:21:28:24:7d:02:e5:54: 51:2a:7d:b7:79:55:32:f1:d2:38:db:4a:84:63:cb:2b:96:59: 9d:e0:1c:20:10:41:d0:3e:aa:3e:03:92:4c:47:15:9e:f5:ab: 02:e0:fe:bc:c4:ec:2e:8d:65:b0:47:79:0f:da:c9:ac:04:08: bc:b1:dc:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQxRTkxMTAvBgNVBAUTKDA1QUQzRTRBQTE5NjFCQTdFQ0JFMDI5MzU3MjVDMjVD RDI2QkQ2QkMwHhcNMjUwNjEyMjA1OTMxWhcNMjUwNjE5MjA1OTMxWjAYMRYwFAYD VQQDEw02ODRiM2ZiMy0yYTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA14dD+OWYGKcIDYWsmUZNEQZyWn9WCAGPnH4BejdSoSXRU8FQiUrrRWXvN79X CHwq7DDnNJnqpa6CRJCRETVb9O8eqJs0q1md/9AiXlfT/U7H6GcFRbGtvoWiGRKk peIeX/3m/+ntm0JdtKLtsq+7KJ3yCYQnOJ8HF9cgbZYXqc78YpyZ8CtaeIKTsZr8 hzP3VLf6fKCaZaXmzlXHzSnOATiNS2Fd6fuiuMwVDRcdH7urYDxG75l7RKYLs8wE WNKX6/o8wFpuNVihC2IvxqIcALuX67cKoV2t1RXI4fNpgcx4KXmxDaoY1NUdpfQJ 5TTj+vkU52QD3E15PUhV5iCf4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOtBE1Fj 9Hk5Np/qOKOoEvyQ6XmgMB8GA1UdIwQYMBaAFAWtPkqhlhun7L4Ck1clwlzSa9a8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDFFOS9EQUQ4RkI4MDA3 OTAxMUVCQkI5OEMwNzZDNEY5QUUwMi9CYTAtU3FHV0c2ZnN2Z0tUVnlYQ1hOSnIx cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JhMC1TcUdXRzZmc3ZnS1RWeVhDWE5KcjFydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDFFOS9EQUQ4RkI4MDA3OTAxMUVCQkI5OEMwNzZDNEY5QUUwMi9CYTAtU3FHV0c2 ZnN2Z0tUVnlYQ1hOSnIxcncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTRLGdB9LMvCpENuWAcT0qTH6b1draApb7J2tvQvVxDIT+XJW8NocK EkBA3UCuYmfYE833ifp7P2VbdLpeLtGCA2zHSA3h27Fwk7g/YSqQTrLR8lraIm1b o+DrM0nRViqCpGB2Rc5d0dUfoj6+Q5te3oghhafnVbCGd36UP7VEPLy/c4EpGQ4Y noujAic5KDBZUNnHUvDgv3wRJ2T1i0ffhA3aPZgnMWE2AKBGAJBNviHf1U74Fh8I vPUs9zGBryEoJH0C5VRRKn23eVUy8dI420qEY8srllmd4BwgEEHQPqo+A5JMRxWe 9asC4P68xOwujWWwR3kP2smsBAi8sdxM -----END CERTIFICATE-----Generated at Sat Jun 14 19:37:59 2025 by rpki-client