$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.mft File: bODpSXEbID5KyyK2gPP_9H7RbGE.mft (raw, json) Hash identifier: cJeZizkY5as/aWlpQQI34q9tWBnErXvAyxt+/ipjjy8= Subject key identifier: 8F:40:1A:BF:E8:7A:96:89:C9:F4:41:26:96:E0:F2:93:02:91:ED:3D Authority key identifier: 6C:E0:E9:49:71:1B:20:3E:4A:CB:22:B6:80:F3:FF:F4:7E:D1:6C:61 Certificate issuer: /CN=A91BDC3F/serialNumber=6CE0E949711B203E4ACB22B680F3FFF47ED16C61 Certificate serial: E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bODpSXEbID5KyyK2gPP_9H7RbGE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.mft Manifest number: DA Signing time: Sun 15 Jun 2025 04:48:22 +0000 Manifest this update: Sun 15 Jun 2025 04:48:22 +0000 Manifest next update: Sun 22 Jun 2025 04:48:21 +0000 Files and hashes: 1: bODpSXEbID5KyyK2gPP_9H7RbGE.crl (hash: 05X+EB9fw98JlFB4gbh016vu9eEG7FXsUPDxnsqIWBE=) 2: 7980C32AA71B11EFA8320136C4F9AE02.roa (hash: svWCFcB6b/XkbZIPeHevXUk9kvL6MAqPQu9nAp05skM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.crl rsync://rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bODpSXEbID5KyyK2gPP_9H7RbGE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 229 (0xe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDC3F, serialNumber=6CE0E949711B203E4ACB22B680F3FFF47ED16C61 Validity Not Before: Jun 15 04:48:22 2025 GMT Not After : Jun 22 04:48:21 2025 GMT Subject: CN=684e5096-0cbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:6c:ee:94:22:40:f1:20:e2:f4:64:b5:7a:20: 49:92:f5:83:cf:7e:b2:98:ce:10:d1:9d:5f:6a:b4: cc:ca:c9:5a:45:57:cd:89:b7:ee:79:d9:e7:14:72: 58:ee:7b:e3:f9:50:16:7f:32:92:2b:0f:42:2d:f2: 83:5e:bf:e2:3a:fd:a4:14:73:4d:0b:dd:82:28:d6: 93:8b:84:17:56:f5:41:bd:d9:9d:49:b6:8d:f1:87: 21:d7:c9:85:4e:8c:68:6b:e7:37:bf:ab:92:e1:33: 7d:36:bc:ad:47:75:09:4d:5d:d3:ae:20:a6:ed:31: df:e7:a2:9a:de:64:52:b7:ac:c1:03:b4:c4:4a:10: d9:b1:e9:7e:a5:f9:b8:ca:8b:0c:c2:11:93:70:51: d5:b2:f6:40:cc:0a:43:43:0a:1b:be:e2:22:f2:09: 12:84:67:79:b0:cf:82:55:15:63:c4:b1:d6:ca:15: a0:f9:a7:b3:60:6e:f1:92:1f:6a:d1:24:4d:57:7e: da:e2:dd:48:f6:c3:38:d0:12:04:75:6c:ea:df:c7: f3:db:7c:e0:93:1e:25:1f:9a:25:00:60:2c:4d:5e: e6:4f:be:ea:5a:b6:fb:86:a0:28:19:06:57:17:0d: 91:fe:02:ea:f5:0f:86:12:bb:74:4d:a5:e2:fd:68: 46:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:40:1A:BF:E8:7A:96:89:C9:F4:41:26:96:E0:F2:93:02:91:ED:3D X509v3 Authority Key Identifier: keyid:6C:E0:E9:49:71:1B:20:3E:4A:CB:22:B6:80:F3:FF:F4:7E:D1:6C:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bODpSXEbID5KyyK2gPP_9H7RbGE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:3b:3b:46:8f:3b:36:f2:32:68:50:a5:80:2b:70:f7:a2:a0: 1f:6a:3c:f3:19:f6:f1:d5:d6:7a:66:4b:cb:a9:3e:4a:58:0d: 34:7c:76:4d:4b:35:96:2c:30:4a:35:d1:af:01:21:c6:7e:7c: e8:03:6d:85:a0:a6:57:09:4d:ab:f8:b3:14:17:91:4c:af:6c: dd:5d:28:64:8a:f2:37:4b:62:5f:89:8a:2b:31:b5:f4:69:3a: 64:f2:e7:9d:79:ee:f1:13:83:a1:aa:72:a3:8b:67:7c:44:3c: ab:0b:51:94:8d:5e:e6:1d:a0:3b:e7:49:3a:06:8d:9b:ba:ac: 45:db:d9:66:88:1b:ec:cb:86:71:bb:1d:5c:df:60:24:fc:bb: 92:09:a5:9e:ce:dd:a6:d3:7b:fc:2e:ca:fe:13:4a:c7:0c:ad: 76:b8:c8:ab:8e:0e:d8:59:f0:e7:6b:6d:64:97:df:fe:3a:44: f4:c8:81:61:03:c5:6c:4b:8c:7d:f4:87:26:5a:cb:10:c0:2d: af:f9:df:e2:0c:6a:a4:e4:c2:e2:f2:8f:80:11:04:03:d6:16: ef:43:c2:c7:ea:c5:e8:93:ff:67:4e:cb:3c:d8:39:d1:0a:da: c2:ff:25:f0:86:db:18:f5:af:d6:12:3a:59:35:e4:b1:a7:f1: b2:80:a1:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRDM0YxMTAvBgNVBAUTKDZDRTBFOTQ5NzExQjIwM0U0QUNCMjJCNjgwRjNGRkY0 N0VEMTZDNjEwHhcNMjUwNjE1MDQ0ODIyWhcNMjUwNjIyMDQ0ODIxWjAYMRYwFAYD VQQDEw02ODRlNTA5Ni0wY2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA62zulCJA8SDi9GS1eiBJkvWDz36ymM4Q0Z1farTMyslaRVfNibfuednnFHJY 7nvj+VAWfzKSKw9CLfKDXr/iOv2kFHNNC92CKNaTi4QXVvVBvdmdSbaN8Ych18mF Toxoa+c3v6uS4TN9NrytR3UJTV3TriCm7THf56Ka3mRSt6zBA7TEShDZsel+pfm4 yosMwhGTcFHVsvZAzApDQwobvuIi8gkShGd5sM+CVRVjxLHWyhWg+aezYG7xkh9q 0SRNV37a4t1I9sM40BIEdWzq38fz23zgkx4lH5olAGAsTV7mT77qWrb7hqAoGQZX Fw2R/gLq9Q+GErt0TaXi/WhGTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI9AGr/o epaJyfRBJpbg8pMCke09MB8GA1UdIwQYMBaAFGzg6UlxGyA+SssitoDz//R+0Wxh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREMzRi81Q0U4MTA0NjBF QjAxMUVGODcyRTgxMjdDNEY5QUUwMi9iT0RwU1hFYklENUt5eUsyZ1BQXzlIN1Ji R0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JPRHBTWEViSUQ1S3l5SzJnUFBfOUg3UmJHRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REMzRi81Q0U4MTA0NjBFQjAxMUVGODcyRTgxMjdDNEY5QUUwMi9iT0RwU1hFYklE NUt5eUsyZ1BQXzlIN1JiR0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAROztGjzs28jJoUKWAK3D3oqAfajzzGfbx1dZ6ZkvLqT5KWA00fHZN SzWWLDBKNdGvASHGfnzoA22FoKZXCU2r+LMUF5FMr2zdXShkivI3S2JfiYorMbX0 aTpk8uedee7xE4OhqnKji2d8RDyrC1GUjV7mHaA750k6Bo2buqxF29lmiBvsy4Zx ux1c32Ak/LuSCaWezt2m03v8Lsr+E0rHDK12uMirjg7YWfDna21kl9/+OkT0yIFh A8VsS4x99IcmWssQwC2v+d/iDGqk5MLi8o+AEQQD1hbvQ8LH6sXok/9nTss82DnR CtrC/yXwhtsY9a/WEjpZNeSxp/GygKGw -----END CERTIFICATE-----Generated at Sun Jun 15 08:46:32 2025 by rpki-client