$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/bRdadMGgmL-i337kNxYF_2owQkk.mft File: bRdadMGgmL-i337kNxYF_2owQkk.mft (raw, json) Hash identifier: 6tgbKdXUgeLqdyhsZOCrqhjU5VY+xoJ8y/qS9BG7334= Subject key identifier: A7:C6:79:47:BC:07:90:88:C2:7B:41:C3:AD:A8:9B:A8:0A:2E:06:DF Authority key identifier: 6D:17:5A:74:C1:A0:98:BF:A2:DF:7E:E4:37:16:05:FF:6A:30:42:49 Certificate issuer: /CN=A91F6CB0/serialNumber=6D175A74C1A098BFA2DF7EE4371605FF6A304249 Certificate serial: 052E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRdadMGgmL-i337kNxYF_2owQkk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/bRdadMGgmL-i337kNxYF_2owQkk.mft Manifest number: 051B Signing time: Thu 12 Jun 2025 23:12:24 +0000 Manifest this update: Thu 12 Jun 2025 23:12:24 +0000 Manifest next update: Thu 19 Jun 2025 23:12:24 +0000 Files and hashes: 1: bRdadMGgmL-i337kNxYF_2owQkk.crl (hash: Yy65dbxY7FxX5Acthw53B+TLlDaXQ9rvMrjyydOao/4=) 2: 80379A8A09EA11EC8762242CC4F9AE02.roa (hash: bLDcJFTKOtM843ZtxHRVBda6/t9v0F+nd+NQWcmzuYk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/bRdadMGgmL-i337kNxYF_2owQkk.crl rsync://rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/bRdadMGgmL-i337kNxYF_2owQkk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRdadMGgmL-i337kNxYF_2owQkk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 23:12:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1326 (0x52e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6CB0, serialNumber=6D175A74C1A098BFA2DF7EE4371605FF6A304249 Validity Not Before: Jun 12 23:12:24 2025 GMT Not After : Jun 19 23:12:24 2025 GMT Subject: CN=684b5ed8-b822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:62:20:af:4c:03:da:67:9f:73:49:18:12:21: 8f:07:fa:60:83:5a:4b:d5:70:e1:70:19:28:d1:52: 0b:ee:94:52:24:5d:bd:86:11:5e:9f:69:30:2d:15: bd:1f:36:6a:b9:2e:a4:49:61:85:25:af:79:9d:64: 69:d1:5e:7a:36:a0:6e:ac:d8:65:5c:4d:7e:8a:e3: f3:47:58:e9:15:60:ce:4b:e1:7c:8b:4d:fc:84:dc: 25:70:87:72:d5:df:1f:fb:02:14:3d:eb:b5:5a:e3: 12:b8:63:d7:c3:60:33:10:d7:5e:92:2b:8c:06:84: 43:56:34:c7:79:be:b4:fe:a2:57:2d:b6:38:bf:4a: fa:b1:32:22:ab:34:ac:14:b0:9a:e7:3b:a6:79:7f: 37:9d:7e:ac:49:f8:a9:bf:4a:3e:e3:1c:69:b3:a2: 3e:2f:4b:ab:43:dd:76:b0:b1:08:b9:a4:6b:76:e2: b8:be:98:84:3e:f8:bc:07:7d:f6:b6:0b:a8:2b:02: fb:e1:01:3e:b8:79:a8:86:a2:ab:ba:fb:26:71:e8: 9a:88:f3:d6:96:05:ea:5c:23:82:ab:c5:fc:dc:03: 9c:0d:4e:2f:13:53:b0:31:3b:27:a8:6c:ce:78:85: 21:01:16:99:19:ea:f1:82:13:77:75:34:e4:ca:21: 0f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:C6:79:47:BC:07:90:88:C2:7B:41:C3:AD:A8:9B:A8:0A:2E:06:DF X509v3 Authority Key Identifier: keyid:6D:17:5A:74:C1:A0:98:BF:A2:DF:7E:E4:37:16:05:FF:6A:30:42:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/bRdadMGgmL-i337kNxYF_2owQkk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRdadMGgmL-i337kNxYF_2owQkk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/bRdadMGgmL-i337kNxYF_2owQkk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:e1:61:57:ae:0b:0a:f4:e4:3d:ad:d2:73:64:51:7d:4b:13: 65:86:9f:4a:3f:6c:a9:4f:a3:d6:27:dc:f2:b3:ac:ac:b0:f8: fa:d5:e0:de:03:c5:e9:c9:cb:04:26:35:9e:fd:80:28:6c:16: 91:9b:a5:ff:58:c0:7d:27:61:a4:7d:0f:1d:21:89:f5:93:e8: 3b:26:99:99:59:e3:c0:1b:f1:1e:78:43:49:96:7f:86:c0:77: 87:3f:f5:8d:04:4e:30:0c:50:a5:8f:32:14:c3:84:40:95:3a: 63:7c:30:0d:4c:96:b1:92:52:6f:a8:4a:d3:15:e0:a7:f5:f9: c0:b3:d4:10:e6:4d:f5:50:30:14:5b:fe:d2:79:8f:29:a9:07: f4:ac:90:7a:4f:a1:d9:98:c4:cc:89:ca:bb:67:72:40:22:8e: 63:cf:fd:7f:4d:b5:25:b1:cf:66:8f:fe:43:ca:2f:7d:ee:9e: c0:f2:fe:b9:cb:c0:e9:5a:cf:4e:ae:36:b2:41:48:52:69:81: ef:f0:35:06:d9:1e:46:e2:1f:d0:a1:e6:cb:48:12:b8:d1:9a: c1:79:d8:f3:4f:2d:44:11:98:0f:32:7a:af:76:e5:ab:4f:30: 6e:40:68:db:91:f0:79:30:bb:a1:73:65:5a:c0:d7:ac:95:8e: 44:58:2e:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZDQjAxMTAvBgNVBAUTKDZEMTc1QTc0QzFBMDk4QkZBMkRGN0VFNDM3MTYwNUZG NkEzMDQyNDkwHhcNMjUwNjEyMjMxMjI0WhcNMjUwNjE5MjMxMjI0WjAYMRYwFAYD VQQDEw02ODRiNWVkOC1iODIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo2Igr0wD2mefc0kYEiGPB/pgg1pL1XDhcBko0VIL7pRSJF29hhFen2kwLRW9 HzZquS6kSWGFJa95nWRp0V56NqBurNhlXE1+iuPzR1jpFWDOS+F8i038hNwlcIdy 1d8f+wIUPeu1WuMSuGPXw2AzENdekiuMBoRDVjTHeb60/qJXLbY4v0r6sTIiqzSs FLCa5zumeX83nX6sSfipv0o+4xxps6I+L0urQ912sLEIuaRrduK4vpiEPvi8B332 tguoKwL74QE+uHmohqKruvsmceiaiPPWlgXqXCOCq8X83AOcDU4vE1OwMTsnqGzO eIUhARaZGerxghN3dTTkyiEPSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKfGeUe8 B5CIwntBw62om6gKLgbfMB8GA1UdIwQYMBaAFG0XWnTBoJi/ot9+5DcWBf9qMEJJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkNCMC8zNTU2MjAxQzA5 MzIxMUVDOThCOERGMEVDNEY5QUUwMi9iUmRhZE1HZ21MLWkzMzdrTnhZRl8yb3dR a2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JSZGFkTUdnbUwtaTMzN2tOeFlGXzJvd1Fray5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkNCMC8zNTU2MjAxQzA5MzIxMUVDOThCOERGMEVDNEY5QUUwMi9iUmRhZE1HZ21M LWkzMzdrTnhZRl8yb3dRa2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCV4WFXrgsK9OQ9rdJzZFF9SxNlhp9KP2ypT6PWJ9zys6yssPj61eDe A8XpycsEJjWe/YAobBaRm6X/WMB9J2GkfQ8dIYn1k+g7JpmZWePAG/EeeENJln+G wHeHP/WNBE4wDFCljzIUw4RAlTpjfDANTJaxklJvqErTFeCn9fnAs9QQ5k31UDAU W/7SeY8pqQf0rJB6T6HZmMTMicq7Z3JAIo5jz/1/TbUlsc9mj/5Dyi997p7A8v65 y8DpWs9OrjayQUhSaYHv8DUG2R5G4h/QoebLSBK40ZrBedjzTy1EEZgPMnqvduWr TzBuQGjbkfB5MLuhc2VawNeslY5EWC5e -----END CERTIFICATE-----Generated at Sat Jun 14 18:54:36 2025 by rpki-client