$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.mft File: bG1HsRFPLVgaghKAXxLDdH80r4M.mft (raw, json) Hash identifier: J+A+ZAB0DaC9CMBRtYFFI8xTFbCd1jRJvGvH3foYzNw= Subject key identifier: FA:5D:DB:14:80:0B:46:C9:F8:04:08:88:A0:15:2B:9A:67:13:23:FA Authority key identifier: 6C:6D:47:B1:11:4F:2D:58:1A:82:12:80:5F:12:C3:74:7F:34:AF:83 Certificate issuer: /CN=A91C7672/serialNumber=6C6D47B1114F2D581A8212805F12C3747F34AF83 Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bG1HsRFPLVgaghKAXxLDdH80r4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.mft Manifest number: 1C0E Signing time: Sat 14 Jun 2025 16:11:34 +0000 Manifest this update: Sat 14 Jun 2025 16:11:33 +0000 Manifest next update: Sat 21 Jun 2025 16:11:33 +0000 Files and hashes: 1: bG1HsRFPLVgaghKAXxLDdH80r4M.crl (hash: uTELQ8Py635Ka+STe7/Iv5h8qL9S0S6D3quwD6ugoSU=) 2: FFD6AB1040F411F08D8C204AC4F9AE02.roa (hash: SXt4cug4jXZud8y6+3Z+JJvmTBLteodmB3qKZVv1oJ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.crl rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bG1HsRFPLVgaghKAXxLDdH80r4M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:11:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7672, serialNumber=6C6D47B1114F2D581A8212805F12C3747F34AF83 Validity Not Before: Jun 14 16:11:33 2025 GMT Not After : Jun 21 16:11:33 2025 GMT Subject: CN=684d9f36-33ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7d:8d:42:49:ee:15:89:9e:6f:0f:33:fa:47: b8:0a:23:20:46:e6:22:b9:c7:25:50:3c:39:24:d1: 8c:ce:49:78:95:4a:a1:85:33:7e:c8:b1:aa:dc:5a: c4:f5:3f:2b:92:22:11:0c:26:43:a6:74:e8:2d:4b: 3b:87:e1:76:a0:13:12:a3:76:e3:89:85:79:e2:7d: 7d:9f:68:63:64:12:0d:f9:1f:4b:aa:4f:f5:d8:15: b4:4e:a4:49:e7:f6:8f:fa:00:89:62:a1:00:5d:05: c7:78:22:5e:e9:68:1f:1f:04:9d:b9:78:6a:ec:5f: 60:bd:11:3a:9c:95:ae:16:df:10:ee:22:19:e8:c2: 9d:2c:b3:41:3b:15:3c:7b:bb:95:c3:21:a5:21:8f: 9a:6f:8a:88:91:da:b3:20:33:dd:b1:36:a7:60:71: 65:82:2d:00:f1:0a:e4:01:01:ed:da:ec:9e:0c:c0: 04:3a:2a:ad:b9:47:9d:40:6e:2e:f0:42:86:9b:4d: 09:d4:e4:9e:9b:d0:5a:55:a2:18:d8:d8:f1:0b:93: 99:91:9a:99:2c:80:fd:34:5c:96:f5:b0:e3:68:fd: 26:16:12:0b:c8:f4:58:5d:bb:d3:c4:7b:ae:b8:73: 35:76:0f:a8:5b:2e:7b:12:f4:44:ff:fb:0c:11:87: 0c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:5D:DB:14:80:0B:46:C9:F8:04:08:88:A0:15:2B:9A:67:13:23:FA X509v3 Authority Key Identifier: keyid:6C:6D:47:B1:11:4F:2D:58:1A:82:12:80:5F:12:C3:74:7F:34:AF:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bG1HsRFPLVgaghKAXxLDdH80r4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:0e:d3:14:e7:be:65:ab:99:c4:f9:8a:7d:ba:7c:ed:f2:04: 34:f8:6f:8c:90:02:2e:e7:a3:50:7b:08:4a:ce:4b:22:89:5a: 1e:e9:35:33:8c:98:9c:7a:98:6f:23:3d:59:e5:22:fe:4a:5d: 2e:6c:67:2f:46:66:ac:25:61:c8:a3:6e:2f:bc:49:3b:d7:a2: d5:fe:e1:fb:27:bf:21:20:60:7d:c7:b4:b3:1e:86:45:76:76: 79:a7:19:61:8f:56:6f:f3:a3:6e:95:ef:d3:27:c3:c8:78:a3: 1d:6c:9a:7b:39:39:b3:7d:5f:7d:e8:77:96:b4:77:a6:2c:3e: 36:6e:bb:93:30:dc:e1:99:32:ae:89:38:de:bd:5d:bd:2e:bd: 77:b6:2c:80:bc:e6:83:a2:e2:02:60:16:52:48:97:d9:01:ec: 3d:5e:dd:c9:32:a4:a7:ff:ac:f8:87:89:ce:5e:13:2a:07:b6: c0:d3:3e:88:6a:44:25:d6:eb:83:70:5c:11:a7:2f:ef:82:81: 25:62:85:7a:4f:7b:20:ea:18:00:2f:3b:0f:64:80:10:b2:5b: a3:db:c3:2f:f3:a2:79:b3:ea:89:c3:bc:e3:fe:c8:db:2f:28: 98:e9:8a:7e:57:d5:1e:94:9f:5a:bd:3f:fa:9b:0c:eb:b7:14: a9:ea:9b:a8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NzY3MjExMC8GA1UEBRMoNkM2RDQ3QjExMTRGMkQ1ODFBODIxMjgwNUYxMkMzNzQ3 RjM0QUY4MzAeFw0yNTA2MTQxNjExMzNaFw0yNTA2MjExNjExMzNaMBgxFjAUBgNV BAMTDTY4NGQ5ZjM2LTMzYWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEfY1CSe4ViZ5vDzP6R7gKIyBG5iK5xyVQPDkk0YzOSXiVSqGFM37IsarcWsT1 PyuSIhEMJkOmdOgtSzuH4XagExKjduOJhXnifX2faGNkEg35H0uqT/XYFbROpEnn 9o/6AIlioQBdBcd4Il7paB8fBJ25eGrsX2C9ETqcla4W3xDuIhnowp0ss0E7FTx7 u5XDIaUhj5pvioiR2rMgM92xNqdgcWWCLQDxCuQBAe3a7J4MwAQ6Kq25R51Abi7w QoabTQnU5J6b0FpVohjY2PELk5mRmpksgP00XJb1sONo/SYWEgvI9Fhdu9PEe664 czV2D6hbLnsS9ET/+wwRhwzvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+l3bFIAL Rsn4BAiIoBUrmmcTI/owHwYDVR0jBBgwFoAUbG1HsRFPLVgaghKAXxLDdH80r4Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3NjcyLzQzNzY0QkVDRjcy NDExRTZBQkYwMkIzQ0M0RjlBRTAyL2JHMUhzUkZQTFZnYWdoS0FYeExEZEg4MHI0 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYkcxSHNSRlBMVmdhZ2hLQVh4TERkSDgwcjRNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3 NjcyLzQzNzY0QkVDRjcyNDExRTZBQkYwMkIzQ0M0RjlBRTAyL2JHMUhzUkZQTFZn YWdoS0FYeExEZEg4MHI0TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABQO0xTnvmWrmcT5in26fO3yBDT4b4yQAi7no1B7CErOSyKJWh7pNTOM mJx6mG8jPVnlIv5KXS5sZy9GZqwlYcijbi+8STvXotX+4fsnvyEgYH3HtLMehkV2 dnmnGWGPVm/zo26V79Mnw8h4ox1smns5ObN9X33od5a0d6YsPjZuu5Mw3OGZMq6J ON69Xb0uvXe2LIC85oOi4gJgFlJIl9kB7D1e3ckypKf/rPiHic5eEyoHtsDTPohq RCXW64NwXBGnL++CgSVihXpPeyDqGAAvOw9kgBCyW6Pbwy/zonmz6onDvOP+yNsv KJjpin5X1R6Un1q9P/qbDOu3FKnqm6g= -----END CERTIFICATE-----Generated at Sat Jun 14 18:55:05 2025 by rpki-client