$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft File: bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft (raw, json) Hash identifier: +kd3ccrYM0IaWP5yyPZIe2q4+IYHoAfim7SbugRqIyQ= Subject key identifier: F2:2B:AD:5F:20:80:A9:91:F6:A9:62:12:08:E6:36:76:51:72:D6:35 Authority key identifier: 6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25 Certificate issuer: /CN=A91C2C8A/serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325 Certificate serial: D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft Manifest number: C8 Signing time: Fri 13 Jun 2025 06:00:23 +0000 Manifest this update: Fri 13 Jun 2025 06:00:22 +0000 Manifest next update: Fri 20 Jun 2025 06:00:22 +0000 Files and hashes: 1: bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl (hash: a0SD3/1bkJPM7NYb3Fr+V4psWiMyFF1Pim1VnlrM2KA=) 2: AA97516E24CA11EFB59A9379C4F9AE02.roa (hash: vY7AsZ08Pw1TlHVY7hGbU3NQuV3eecatAeSNrTUiOFk=) 3: A1732A0E24CA11EF93486579C4F9AE02.roa (hash: c1fiRMTzx+sKc+PUXDGG2MhU2IceNjiS5ZTGcmsSFDc=) 4: 41A8950C272F11EF9D0A0C5CC4F9AE02.roa (hash: Zeo9E1pvK7pqXxcoNJpNgvy4k5rrUkurswNhSqNf24s=) 5: A074721624CA11EF93486579C4F9AE02.roa (hash: EAuwmClXGMo+6npZ19N/RRkMj4x/6MUGDRCOhMDeS9A=) 6: 0E49D1E024CC11EFB113A27BC4F9AE02.roa (hash: NR/+YgQkm7A4mmhSV+xz9O4OYp+ZS9oT3gP6zL7oedM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2C8A, serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325 Validity Not Before: Jun 13 06:00:22 2025 GMT Not After : Jun 20 06:00:22 2025 GMT Subject: CN=684bbe76-cc32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:8f:8a:4a:dd:5a:c3:21:40:09:b0:85:c6:e0: a0:c9:a1:82:59:51:5b:c5:10:cb:42:81:95:66:9b: 29:6a:7c:f2:18:e5:f9:86:ba:fb:1e:a7:af:91:58: a5:b0:75:8e:8a:6d:f7:7b:3a:bb:b1:41:a2:ee:08: 1f:d2:dd:9c:6c:15:39:46:60:89:89:c1:28:cf:e1: 41:22:a4:80:18:b2:a3:4a:46:86:37:1c:20:09:d6: ee:37:48:02:c0:0d:fc:4e:88:0e:11:d3:35:37:95: 4a:f1:f0:52:e5:ef:b5:b1:06:c3:70:0d:fb:95:f2: 9d:d8:36:38:e1:07:32:ba:76:9e:36:e9:4d:a3:f8: 71:84:47:bf:e3:44:b4:b7:c1:c0:4e:d9:9c:8f:b7: c5:c7:92:c6:da:df:df:3a:c3:2e:ac:88:ec:40:5c: be:1b:93:0c:87:e8:2c:1b:44:5b:06:94:17:99:e9: 43:3a:ae:11:82:e9:77:7b:16:2b:a3:d9:f3:9b:fe: 43:e4:9d:9e:cf:ec:05:bd:ca:dc:12:f1:39:b6:e8: b3:af:fe:65:b2:a4:4a:ad:d1:85:a6:38:48:76:f8: 4a:81:54:93:c3:d5:89:ee:fd:3b:68:88:55:60:10: 29:98:4d:bf:d8:04:8a:d2:a1:b2:a8:d6:e7:f5:0c: b1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:2B:AD:5F:20:80:A9:91:F6:A9:62:12:08:E6:36:76:51:72:D6:35 X509v3 Authority Key Identifier: keyid:6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:42:00:bb:e6:31:5e:1f:ac:0c:fe:b2:cf:75:00:8f:61:ff: 2e:03:b3:3a:2d:0e:c6:d7:fa:4c:54:e2:6c:f2:5f:fa:71:26: bc:28:0f:92:e8:a9:f9:27:1d:f8:fb:64:55:c9:41:c8:5d:cc: 8a:b6:a2:bd:be:5b:2c:d4:eb:14:81:2f:41:bd:3c:a4:db:1b: 9e:73:62:71:c8:1e:f1:e3:32:43:b0:76:f9:b0:42:5d:60:87: 0a:f8:f9:0f:10:e0:8f:32:4d:61:e2:dd:48:09:40:90:95:14: 26:4f:f7:b4:f1:26:c6:42:00:8e:b9:db:04:c1:6e:4c:55:64: c4:e8:f1:c6:e4:da:e3:17:e2:ac:e8:17:12:26:7f:55:e8:57: f4:b8:a8:28:f7:36:a0:ab:6d:06:68:4e:bf:31:48:7d:ea:e6: 7d:d3:6d:e9:63:b8:b0:28:63:e1:b6:f7:b5:7d:5f:c6:16:16: 13:0e:b7:04:88:11:40:69:88:68:58:ac:7c:11:c0:f2:c1:ea: 8a:c9:28:40:6e:dc:da:2e:be:69:ee:06:c8:11:09:15:44:17: cb:39:7a:0e:56:a3:9e:0f:58:d8:c1:92:1b:61:3a:42:3b:ef: 11:b5:1d:e1:8d:52:26:c6:0f:fe:46:49:23:32:b0:a3:31:04: 66:75:d0:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJDOEExMTAvBgNVBAUTKDZDRTdCNTc1MEU2RTE3RDNEMzlFQjVCMDg3RkQzRkFE NTk1OUYzMjUwHhcNMjUwNjEzMDYwMDIyWhcNMjUwNjIwMDYwMDIyWjAYMRYwFAYD VQQDEw02ODRiYmU3Ni1jYzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Y+KSt1awyFACbCFxuCgyaGCWVFbxRDLQoGVZpspanzyGOX5hrr7HqevkVil sHWOim33ezq7sUGi7ggf0t2cbBU5RmCJicEoz+FBIqSAGLKjSkaGNxwgCdbuN0gC wA38TogOEdM1N5VK8fBS5e+1sQbDcA37lfKd2DY44QcyunaeNulNo/hxhEe/40S0 t8HATtmcj7fFx5LG2t/fOsMurIjsQFy+G5MMh+gsG0RbBpQXmelDOq4Rgul3exYr o9nzm/5D5J2ez+wFvcrcEvE5tuizr/5lsqRKrdGFpjhIdvhKgVSTw9WJ7v07aIhV YBApmE2/2ASK0qGyqNbn9QyxPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPIrrV8g gKmR9qliEgjmNnZRctY1MB8GA1UdIwQYMBaAFGzntXUObhfT0561sIf9P61ZWfMl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkM4QS82MUVDNDkxNjI0 QzkxMUVGOUM4QzYyNTlDNEY5QUUwMi9iT2UxZFE1dUY5UFRucld3aF8wX3JWbFo4 eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JPZTFkUTV1RjlQVG5yV3doXzBfclZsWjh5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkM4QS82MUVDNDkxNjI0QzkxMUVGOUM4QzYyNTlDNEY5QUUwMi9iT2UxZFE1dUY5 UFRucld3aF8wX3JWbFo4eVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzQgC75jFeH6wM/rLPdQCPYf8uA7M6LQ7G1/pMVOJs8l/6cSa8KA+S 6Kn5Jx34+2RVyUHIXcyKtqK9vlss1OsUgS9BvTyk2xuec2JxyB7x4zJDsHb5sEJd YIcK+PkPEOCPMk1h4t1ICUCQlRQmT/e08SbGQgCOudsEwW5MVWTE6PHG5NrjF+Ks 6BcSJn9V6Ff0uKgo9zagq20GaE6/MUh96uZ9023pY7iwKGPhtve1fV/GFhYTDrcE iBFAaYhoWKx8EcDyweqKyShAbtzaLr5p7gbIEQkVRBfLOXoOVqOeD1jYwZIbYTpC O+8RtR3hjVImxg/+RkkjMrCjMQRmddAR -----END CERTIFICATE-----Generated at Sat Jun 14 19:26:54 2025 by rpki-client