$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8881/089DE84000F811EBB217A449C4F9AE02/Bc1Un1RUvTKyKPavyN424Ej2SA0.mft File: Bc1Un1RUvTKyKPavyN424Ej2SA0.mft (raw, json) Hash identifier: 91P7HaZctm54w9Y6DQ03yFPfIPuSEZh6BetgHPW72us= Subject key identifier: CC:F3:4B:27:24:DB:AC:62:A4:06:A9:83:D7:B2:86:BA:E1:74:48:87 Authority key identifier: 05:CD:54:9F:54:54:BD:32:B2:28:F6:AF:C8:DE:36:E0:48:F6:48:0D Certificate issuer: /CN=A91E8881/serialNumber=05CD549F5454BD32B228F6AFC8DE36E048F6480D Certificate serial: 07BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bc1Un1RUvTKyKPavyN424Ej2SA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8881/089DE84000F811EBB217A449C4F9AE02/Bc1Un1RUvTKyKPavyN424Ej2SA0.mft Manifest number: 07B4 Signing time: Thu 12 Jun 2025 20:53:45 +0000 Manifest this update: Thu 12 Jun 2025 20:53:44 +0000 Manifest next update: Thu 19 Jun 2025 20:53:44 +0000 Files and hashes: 1: Bc1Un1RUvTKyKPavyN424Ej2SA0.crl (hash: 1tT1PRu4SxGFzXCh7zyegIrXsfID5Et+KFf9Ma5Cabs=) 2: EAC9D46200F911EB8E61B84CC4F9AE02.roa (hash: Vn5biCjexx3cjiQ4QgNEGs4i33iiyVoqmR3L4tJPzNU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8881/089DE84000F811EBB217A449C4F9AE02/Bc1Un1RUvTKyKPavyN424Ej2SA0.crl rsync://rpki.apnic.net/member_repository/A91E8881/089DE84000F811EBB217A449C4F9AE02/Bc1Un1RUvTKyKPavyN424Ej2SA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bc1Un1RUvTKyKPavyN424Ej2SA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 20:53:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1979 (0x7bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8881, serialNumber=05CD549F5454BD32B228F6AFC8DE36E048F6480D Validity Not Before: Jun 12 20:53:44 2025 GMT Not After : Jun 19 20:53:44 2025 GMT Subject: CN=684b3e59-d36b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:68:0d:59:8e:34:88:53:6c:d9:80:47:db:fd: dd:b7:5a:13:8e:ba:61:d1:ab:85:5e:16:e2:44:42: 2a:b8:ff:11:c8:fb:2b:8a:61:53:2d:db:36:7a:1b: b8:44:89:fe:1a:ae:04:ee:5f:7d:7f:9a:f1:b5:80: 8a:41:e1:df:de:5e:e7:1f:a9:99:a4:50:20:d5:a6: 17:4c:03:86:5b:0d:f4:f0:2e:3a:01:eb:4f:5e:6b: 8b:49:13:22:fb:d1:a6:8a:12:d7:c5:43:b2:45:44: ee:43:5c:5b:ea:f7:e7:c2:3b:45:8f:45:0c:16:e8: c0:8b:05:a8:51:ad:54:8c:b3:98:96:70:5b:27:c6: f6:31:a5:ef:18:63:b3:d4:b5:9e:8d:37:65:41:80: 8d:87:88:b8:5c:bb:f5:5d:63:5d:d6:01:d2:f9:ce: 2f:0a:d9:b7:7c:5f:aa:1d:8b:41:1d:8e:90:e1:7b: 21:02:6b:d2:a1:b8:b0:6a:9d:59:be:95:7c:5c:d6: f8:5a:43:06:5a:a6:bb:62:90:5b:3b:5b:f0:ad:80: 3d:e2:26:a1:b6:3e:a4:25:b6:cd:e4:5f:4d:cc:52: ad:e1:31:4a:95:ab:a1:ba:57:80:dd:c1:f0:dc:5c: 52:4d:de:39:9b:6e:a2:2e:52:f1:69:86:37:b1:46: 01:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:F3:4B:27:24:DB:AC:62:A4:06:A9:83:D7:B2:86:BA:E1:74:48:87 X509v3 Authority Key Identifier: keyid:05:CD:54:9F:54:54:BD:32:B2:28:F6:AF:C8:DE:36:E0:48:F6:48:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8881/089DE84000F811EBB217A449C4F9AE02/Bc1Un1RUvTKyKPavyN424Ej2SA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bc1Un1RUvTKyKPavyN424Ej2SA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8881/089DE84000F811EBB217A449C4F9AE02/Bc1Un1RUvTKyKPavyN424Ej2SA0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:33:fa:38:31:86:35:38:3d:04:40:7b:9f:69:47:f2:b7:8a: 56:b7:c9:ac:35:7c:5c:cb:f1:e4:d3:85:c2:0c:3f:8c:db:66: 23:57:45:ec:30:c5:f6:2e:39:38:56:0f:cd:23:e3:6a:79:88: 30:78:05:63:99:66:f6:db:60:76:27:12:57:f7:25:2a:0a:88: 15:ae:96:3e:3d:7e:04:f9:ba:80:7b:07:20:95:92:63:c6:df: 53:fc:7e:d1:53:97:20:b2:bd:50:91:cf:ca:c9:81:59:31:36: 9e:95:57:28:dd:80:c5:f5:54:fc:65:72:3f:e3:be:03:25:9c: 71:a3:f7:f9:e8:bb:77:1e:11:f3:a1:d0:be:52:03:02:c4:0f: 8e:ef:3d:ba:d5:94:16:1d:5a:dd:63:42:33:ea:47:fd:5d:4d: c7:9a:f7:13:d5:2e:96:e1:b5:3f:bc:22:77:02:fa:c6:35:33: 4b:6a:9a:4d:48:6d:83:d6:c0:7f:5c:a5:59:69:51:80:bb:90: 8c:79:0d:e3:25:31:40:cc:68:58:ec:d8:b9:d1:d0:6a:4a:65: 6b:13:e9:14:29:3c:d2:ba:bb:86:65:ba:09:6c:4e:9e:71:15: 13:58:08:f9:0a:dd:3d:c1:55:1a:6f:ec:12:9b:f7:9e:a3:40: 4c:e4:a5:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg4ODExMTAvBgNVBAUTKDA1Q0Q1NDlGNTQ1NEJEMzJCMjI4RjZBRkM4REUzNkUw NDhGNjQ4MEQwHhcNMjUwNjEyMjA1MzQ0WhcNMjUwNjE5MjA1MzQ0WjAYMRYwFAYD VQQDEw02ODRiM2U1OS1kMzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzmgNWY40iFNs2YBH2/3dt1oTjrph0auFXhbiREIquP8RyPsrimFTLds2ehu4 RIn+Gq4E7l99f5rxtYCKQeHf3l7nH6mZpFAg1aYXTAOGWw308C46AetPXmuLSRMi +9GmihLXxUOyRUTuQ1xb6vfnwjtFj0UMFujAiwWoUa1UjLOYlnBbJ8b2MaXvGGOz 1LWejTdlQYCNh4i4XLv1XWNd1gHS+c4vCtm3fF+qHYtBHY6Q4XshAmvSobiwap1Z vpV8XNb4WkMGWqa7YpBbO1vwrYA94iahtj6kJbbN5F9NzFKt4TFKlauhuleA3cHw 3FxSTd45m26iLlLxaYY3sUYBtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMzzSyck 26xipAapg9eyhrrhdEiHMB8GA1UdIwQYMBaAFAXNVJ9UVL0ysij2r8jeNuBI9kgN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODg4MS8wODlERTg0MDAw RjgxMUVCQjIxN0E0NDlDNEY5QUUwMi9CYzFVbjFSVXZUS3lLUGF2eU40MjRFajJT QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JjMVVuMVJVdlRLeUtQYXZ5TjQyNEVqMlNBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODg4MS8wODlERTg0MDAwRjgxMUVCQjIxN0E0NDlDNEY5QUUwMi9CYzFVbjFSVXZU S3lLUGF2eU40MjRFajJTQTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3M/o4MYY1OD0EQHufaUfyt4pWt8msNXxcy/Hk04XCDD+M22YjV0Xs MMX2Ljk4Vg/NI+NqeYgweAVjmWb222B2JxJX9yUqCogVrpY+PX4E+bqAewcglZJj xt9T/H7RU5cgsr1Qkc/KyYFZMTaelVco3YDF9VT8ZXI/474DJZxxo/f56Lt3HhHz odC+UgMCxA+O7z261ZQWHVrdY0Iz6kf9XU3HmvcT1S6W4bU/vCJ3AvrGNTNLappN SG2D1sB/XKVZaVGAu5CMeQ3jJTFAzGhY7Ni50dBqSmVrE+kUKTzSuruGZboJbE6e cRUTWAj5Ct09wVUab+wSm/eeo0BM5KXE -----END CERTIFICATE-----Generated at Sat Jun 14 19:34:00 2025 by rpki-client