$ rpki-client -vvf rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft File: bV1Q6IudZeiv2ijCzqYVAScDhgg.mft (raw, json) Hash identifier: CZPbQNI4wsCw64MjLGuwo3eBuOwtJhu9rFCNGblKL04= Subject key identifier: D7:7E:5F:1E:EE:DE:D2:D1:89:F8:BD:51:99:5C:6E:A6:11:8A:C0:93 Authority key identifier: 6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08 Certificate issuer: /CN=A91E91BC/serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608 Certificate serial: 0355 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft Manifest number: 0329 Signing time: Fri 13 Jun 2025 00:47:26 +0000 Manifest this update: Fri 13 Jun 2025 00:47:26 +0000 Manifest next update: Fri 20 Jun 2025 00:47:26 +0000 Files and hashes: 1: bV1Q6IudZeiv2ijCzqYVAScDhgg.crl (hash: AW3IGZ4zU5aQjWr0JItygv3Sph+rFUMnBRfdnrPn8RY=) 2: 142EA3A84FEF11EF9A822A21C4F9AE02.roa (hash: PsC0/VUJuwAMkmEBhdJkaydKW8CflQBB5EZOYU0cJtQ=) 3: D1A4CFBA4FBE11EF97812B80C4F9AE02.roa (hash: /TyJbdztz4Y61/Gz2zhowON+Tt9+b5wqgCKpbZ339lw=) 4: 328C9E7CDC1A11EC89244C2FC4F9AE02.roa (hash: SwY/Crs5L/QLrOTdNtWGBh9zEFcoCIW07axxQKOSACI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.crl rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 00:47:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 853 (0x355) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E91BC, serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608 Validity Not Before: Jun 13 00:47:26 2025 GMT Not After : Jun 20 00:47:26 2025 GMT Subject: CN=684b751e-c4e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:03:99:0f:6a:91:26:ba:8a:bf:80:4c:56:1f: 0c:c4:5d:e2:4b:d9:69:7e:23:51:6c:40:62:98:41: 6e:3d:fd:ee:5a:b8:6f:e8:ab:b3:e2:81:38:2a:a1: a1:9a:c7:bd:42:e1:06:6f:b9:83:8e:1d:05:1a:53: 58:12:9b:2e:3a:bb:c1:6d:b8:f6:40:44:d9:a8:ca: 45:1d:7b:93:cb:8a:a3:ac:5c:d0:d6:1d:18:13:f0: 05:1f:d5:66:38:2d:68:b8:c6:64:9c:2f:4c:c7:a3: a3:ba:d4:be:74:07:db:be:53:85:d6:39:3a:be:88: 9a:a8:77:52:54:1a:73:39:98:3d:ca:fa:16:ed:87: 78:27:56:39:4b:7d:cd:9b:5f:cb:1f:62:fd:2f:67: f4:81:84:95:ba:16:d4:ec:11:12:49:30:b4:9e:78: 95:67:c5:a1:c8:51:ab:00:a6:51:fa:0b:fb:a5:b2: fe:bf:f3:29:b4:55:61:f4:0a:9e:30:9b:29:f0:40: d2:5c:2d:aa:7f:20:40:ae:30:02:25:76:2d:e0:96: ad:a4:6d:bc:f7:22:02:01:15:ac:d4:bf:e4:70:a7: bf:85:58:7c:2a:37:cd:19:54:45:87:63:40:e4:4b: 72:6b:e7:07:4a:54:74:ae:77:ad:1c:07:16:12:ab: 54:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:7E:5F:1E:EE:DE:D2:D1:89:F8:BD:51:99:5C:6E:A6:11:8A:C0:93 X509v3 Authority Key Identifier: keyid:6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d5:c4:d4:7c:0a:7e:0f:1f:8f:f5:13:86:f8:08:f1:ec:4e:ff: 9b:cd:78:9b:ff:0b:ad:d9:42:69:98:1c:14:f4:c0:e7:c5:db: 4b:a1:d2:55:0b:05:62:db:2c:2f:b9:ce:1c:59:40:8e:19:cd: 61:f6:f5:0e:22:7e:67:ec:28:48:22:1d:95:62:ec:86:16:67: e0:2b:bb:0a:84:6b:63:73:d8:c6:34:bb:45:f8:ac:04:41:09: fc:c4:06:0d:43:c8:b3:21:e6:c8:3e:5e:c1:b1:75:a4:14:f9: 0f:40:cb:07:5f:c2:13:85:5b:8e:40:b5:01:7f:e8:61:49:89: c3:d9:fd:a4:af:98:d3:78:51:dd:f1:fc:dc:c5:c5:20:18:4e: b1:61:fe:e2:cd:d0:34:22:df:32:60:7f:02:67:06:14:8f:7a: a0:c9:b2:82:41:2a:32:15:93:18:62:6c:1c:f4:eb:0e:11:b3: 2e:de:0c:a2:31:7c:d8:59:3e:09:04:6c:e1:69:60:be:49:59: a8:3e:1c:01:59:b9:1d:be:77:14:73:9d:18:7b:59:c0:6a:94: 13:68:aa:cd:74:2e:17:6c:b8:38:fd:b3:b6:c1:92:62:e1:a2: d2:bc:10:f6:55:e1:2d:24:f3:b0:4b:04:e2:de:34:2a:5c:7a: 3f:7f:af:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkxQkMxMTAvBgNVBAUTKDZENUQ1MEU4OEI5RDY1RThBRkRBMjhDMkNFQTYxNTAx MjcwMzg2MDgwHhcNMjUwNjEzMDA0NzI2WhcNMjUwNjIwMDA0NzI2WjAYMRYwFAYD VQQDEw02ODRiNzUxZS1jNGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAugOZD2qRJrqKv4BMVh8MxF3iS9lpfiNRbEBimEFuPf3uWrhv6Kuz4oE4KqGh mse9QuEGb7mDjh0FGlNYEpsuOrvBbbj2QETZqMpFHXuTy4qjrFzQ1h0YE/AFH9Vm OC1ouMZknC9Mx6OjutS+dAfbvlOF1jk6voiaqHdSVBpzOZg9yvoW7Yd4J1Y5S33N m1/LH2L9L2f0gYSVuhbU7BESSTC0nniVZ8WhyFGrAKZR+gv7pbL+v/MptFVh9Aqe MJsp8EDSXC2qfyBArjACJXYt4JatpG289yICARWs1L/kcKe/hVh8KjfNGVRFh2NA 5Etya+cHSlR0rnetHAcWEqtUUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNd+Xx7u 3tLRifi9UZlcbqYRisCTMB8GA1UdIwQYMBaAFG1dUOiLnWXor9oows6mFQEnA4YI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTFCQy9BRTQ0RDI0QURC RTkxMUVDOTUxMTA1MTVDNEY5QUUwMi9iVjFRNkl1ZFplaXYyaWpDenFZVkFTY0Ro Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JWMVE2SXVkWmVpdjJpakN6cVlWQVNjRGhnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTFCQy9BRTQ0RDI0QURCRTkxMUVDOTUxMTA1MTVDNEY5QUUwMi9iVjFRNkl1ZFpl aXYyaWpDenFZVkFTY0RoZ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDVxNR8Cn4PH4/1E4b4CPHsTv+bzXib/wut2UJpmBwU9MDnxdtLodJV CwVi2ywvuc4cWUCOGc1h9vUOIn5n7ChIIh2VYuyGFmfgK7sKhGtjc9jGNLtF+KwE QQn8xAYNQ8izIebIPl7BsXWkFPkPQMsHX8IThVuOQLUBf+hhSYnD2f2kr5jTeFHd 8fzcxcUgGE6xYf7izdA0It8yYH8CZwYUj3qgybKCQSoyFZMYYmwc9OsOEbMu3gyi MXzYWT4JBGzhaWC+SVmoPhwBWbkdvncUc50Ye1nAapQTaKrNdC4XbLg4/bO2wZJi 4aLSvBD2VeEtJPOwSwTi3jQqXHo/f6/J -----END CERTIFICATE-----Generated at Sat Jun 14 19:23:39 2025 by rpki-client