$ rpki-client -vvf rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft File: bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft (raw, json) Hash identifier: Y+Ly/XrM0s91H8ZYAte4BJy+qiUvzh14NiBnzwKqncU= Subject key identifier: 72:12:1A:E4:4D:8C:09:A3:6C:3A:C7:C6:5B:91:E2:36:2F:8F:C7:C2 Authority key identifier: 6C:9B:96:87:D0:5E:2B:5B:E5:36:10:9A:6A:F9:BF:FA:19:98:73:D4 Certificate issuer: /CN=A91C95AA/serialNumber=6C9B9687D05E2B5BE536109A6AF9BFFA199873D4 Certificate serial: 024F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJuWh9BeK1vlNhCaavm_-hmYc9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft Manifest number: 024A Signing time: Thu 19 Jun 2025 01:40:43 +0000 Manifest this update: Thu 19 Jun 2025 01:40:43 +0000 Manifest next update: Thu 26 Jun 2025 01:40:43 +0000 Files and hashes: 1: bJuWh9BeK1vlNhCaavm_-hmYc9Q.crl (hash: XcPi2whYKDVssd1q1gvZVCndHStn92mOSJ4fc8tVyOE=) 2: FB1F8158242A11ED9547B486C4F9AE02.roa (hash: F+DLJ1aQV5oLLpGFe5erh1ip1G2eNsPVMkZyfdufJjc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.crl rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJuWh9BeK1vlNhCaavm_-hmYc9Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 01:40:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 591 (0x24f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C95AA, serialNumber=6C9B9687D05E2B5BE536109A6AF9BFFA199873D4 Validity Not Before: Jun 19 01:40:43 2025 GMT Not After : Jun 26 01:40:43 2025 GMT Subject: CN=68536a9b-87c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:32:f4:1d:d7:da:e6:3f:01:da:7d:43:4f:8d: ac:b2:b4:14:d7:58:c0:c1:0c:eb:6c:be:35:08:ad: 36:b3:19:69:40:9e:ad:d4:de:0e:1c:51:47:eb:02: d8:08:3a:bc:6d:ef:02:c4:1f:83:4b:f4:eb:8f:25: 0b:8b:7b:93:0a:36:85:eb:57:d2:86:64:c2:11:13: 24:b8:1d:90:86:36:55:39:9d:aa:33:21:b4:f6:ee: 9f:71:a0:72:82:ed:8a:34:93:9b:48:47:79:ec:50: 69:84:68:74:56:b6:a8:71:c6:75:8d:29:bb:95:55: 13:07:a7:8d:4a:75:79:1c:f4:50:5f:14:e7:c5:e5: f1:0f:5d:de:d8:72:a4:8d:03:18:22:25:ea:68:12: 0f:51:84:cd:6b:bd:e2:f9:53:dc:20:fe:52:ea:41: dc:ba:01:98:3f:38:0c:d5:7d:85:b6:98:61:4b:a5: 79:0a:ce:c3:09:13:95:f4:63:52:25:35:b9:a5:fa: eb:f4:ed:27:ba:c6:5f:76:af:d5:da:0f:69:fe:70: 26:d7:e8:82:40:c3:3a:96:e5:f9:b6:d5:3b:3e:b6: 7c:36:f0:76:7a:45:91:c8:90:ce:b3:a1:b8:d2:8d: 32:53:eb:aa:f1:fc:47:7a:db:29:38:4e:33:48:68: e5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:12:1A:E4:4D:8C:09:A3:6C:3A:C7:C6:5B:91:E2:36:2F:8F:C7:C2 X509v3 Authority Key Identifier: keyid:6C:9B:96:87:D0:5E:2B:5B:E5:36:10:9A:6A:F9:BF:FA:19:98:73:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJuWh9BeK1vlNhCaavm_-hmYc9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:53:d4:d4:27:74:b3:b5:08:35:52:99:05:ac:aa:b8:14:93: 5d:e6:16:6a:74:52:b7:31:c3:26:22:17:4a:af:21:6b:ac:37: 01:8f:a8:ae:28:81:90:a8:3a:b7:43:9d:b7:c5:b3:08:60:a7: 97:26:d8:2a:a2:0f:69:0b:b9:52:4d:43:0e:50:f4:87:d2:33: bb:aa:65:96:38:b0:c7:c0:dd:94:7a:83:48:13:c4:ff:f8:9f: 1a:0b:2b:98:58:6c:78:34:4e:ef:1d:e4:6e:e1:b8:e9:3e:ed: 42:5b:ba:f3:17:10:72:3b:f5:97:f9:0b:eb:7a:a6:25:5d:6e: 93:f9:da:25:7c:0b:70:24:57:45:89:55:ef:b5:d5:1e:ce:c9: 45:9d:cb:4d:61:d2:7d:d6:19:d0:3a:a0:fb:6a:b3:76:e6:5f: 6d:bf:93:16:9c:48:f9:c0:91:38:9e:24:1d:06:54:0f:fb:a7: 39:fd:7f:95:fe:15:5d:e7:c1:ba:69:50:e5:e6:1d:cf:52:12: a5:67:74:ac:98:b1:d6:05:2d:68:6d:8b:16:8b:dd:f9:b6:db: c8:d5:bd:96:03:4d:f1:21:8a:dc:84:b9:40:6b:c8:5c:2f:b8: bb:4c:bc:96:ab:29:9f:72:ef:10:15:15:ef:ea:bc:a1:6c:a1: 4e:3d:96:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk1QUExMTAvBgNVBAUTKDZDOUI5Njg3RDA1RTJCNUJFNTM2MTA5QTZBRjlCRkZB MTk5ODczRDQwHhcNMjUwNjE5MDE0MDQzWhcNMjUwNjI2MDE0MDQzWjAYMRYwFAYD VQQDEw02ODUzNmE5Yi04N2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArDL0Hdfa5j8B2n1DT42ssrQU11jAwQzrbL41CK02sxlpQJ6t1N4OHFFH6wLY CDq8be8CxB+DS/TrjyULi3uTCjaF61fShmTCERMkuB2QhjZVOZ2qMyG09u6fcaBy gu2KNJObSEd57FBphGh0VraoccZ1jSm7lVUTB6eNSnV5HPRQXxTnxeXxD13e2HKk jQMYIiXqaBIPUYTNa73i+VPcIP5S6kHcugGYPzgM1X2FtphhS6V5Cs7DCROV9GNS JTW5pfrr9O0nusZfdq/V2g9p/nAm1+iCQMM6luX5ttU7PrZ8NvB2ekWRyJDOs6G4 0o0yU+uq8fxHetspOE4zSGjlEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHISGuRN jAmjbDrHxluR4jYvj8fCMB8GA1UdIwQYMBaAFGyblofQXitb5TYQmmr5v/oZmHPU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTVBQS8xNTZCRDg5RTI0 MjcxMUVEQjNFQTM0ODBDNEY5QUUwMi9iSnVXaDlCZUsxdmxOaENhYXZtXy1obVlj OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2JKdVdoOUJlSzF2bE5oQ2Fhdm1fLWhtWWM5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTVBQS8xNTZCRDg5RTI0MjcxMUVEQjNFQTM0ODBDNEY5QUUwMi9iSnVXaDlCZUsx dmxOaENhYXZtXy1obVljOVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+U9TUJ3SztQg1UpkFrKq4FJNd5hZqdFK3McMmIhdKryFrrDcBj6iu KIGQqDq3Q523xbMIYKeXJtgqog9pC7lSTUMOUPSH0jO7qmWWOLDHwN2UeoNIE8T/ +J8aCyuYWGx4NE7vHeRu4bjpPu1CW7rzFxByO/WX+QvreqYlXW6T+dolfAtwJFdF iVXvtdUezslFnctNYdJ91hnQOqD7arN25l9tv5MWnEj5wJE4niQdBlQP+6c5/X+V /hVd58G6aVDl5h3PUhKlZ3SsmLHWBS1obYsWi935ttvI1b2WA03xIYrchLlAa8hc L7i7TLyWqymfcu8QFRXv6ryhbKFOPZaJ -----END CERTIFICATE-----Generated at Sat Jun 21 02:21:26 2025 by rpki-client