$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6E63/D69CD928E4A411EB8BC5C546C4F9AE02/rbkheCH_vuCW4c7EcJijFFokbqA.mft File: rbkheCH_vuCW4c7EcJijFFokbqA.mft (raw, json) Hash identifier: 2FssVjidKiynY5KFKPAstThjMvST1ZzL17N4QHU0ZK0= Subject key identifier: EB:F3:EB:2A:8A:79:00:9F:9B:FB:AA:E9:2E:09:21:5F:CC:31:9A:C5 Authority key identifier: AD:B9:21:78:21:FF:BE:E0:96:E1:CE:C4:70:98:A3:14:5A:24:6E:A0 Certificate issuer: /CN=A91F6E63/serialNumber=ADB9217821FFBEE096E1CEC47098A3145A246EA0 Certificate serial: 057A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rbkheCH_vuCW4c7EcJijFFokbqA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6E63/D69CD928E4A411EB8BC5C546C4F9AE02/rbkheCH_vuCW4c7EcJijFFokbqA.mft Manifest number: 0573 Signing time: Sat 14 Jun 2025 23:03:59 +0000 Manifest this update: Sat 14 Jun 2025 23:03:58 +0000 Manifest next update: Sat 21 Jun 2025 23:03:58 +0000 Files and hashes: 1: rbkheCH_vuCW4c7EcJijFFokbqA.crl (hash: uV8XNcXWOii62hRmbOuFLMKQrpzXSykA2GKwHZV0uNk=) 2: 0C0402DEE5CD11EBADAD0E66C4F9AE02.roa (hash: trH5jaHCGYgIOAiGZuSF42NeMtUvi3wioLPll8n3v2o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6E63/D69CD928E4A411EB8BC5C546C4F9AE02/rbkheCH_vuCW4c7EcJijFFokbqA.crl rsync://rpki.apnic.net/member_repository/A91F6E63/D69CD928E4A411EB8BC5C546C4F9AE02/rbkheCH_vuCW4c7EcJijFFokbqA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rbkheCH_vuCW4c7EcJijFFokbqA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 23:03:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1402 (0x57a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6E63, serialNumber=ADB9217821FFBEE096E1CEC47098A3145A246EA0 Validity Not Before: Jun 14 23:03:58 2025 GMT Not After : Jun 21 23:03:58 2025 GMT Subject: CN=684dffdf-1438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0b:70:de:ab:13:9d:0d:46:07:76:9d:e0:c7: 1b:3f:10:64:ce:5d:70:46:ee:67:5a:36:1f:ea:1f: 40:c4:d7:9e:e0:63:7d:0b:b7:3a:d7:25:64:16:1a: 70:24:ef:42:a7:95:fa:49:b8:90:7c:72:9d:ec:b6: a8:d5:a9:f4:bc:a4:b8:2f:a1:07:1f:89:55:42:c0: d0:12:60:61:8a:fd:ed:57:a9:21:d9:4a:a2:80:b6: 06:6a:00:66:81:82:eb:9a:84:12:f2:ca:55:32:42: 89:a7:9a:31:92:05:88:7a:7b:63:b0:b3:f0:1e:ea: 50:2d:d9:9b:55:cd:ad:8b:95:90:73:01:8d:b8:b1: 33:48:51:fd:2a:ab:30:8e:f1:2d:c9:76:1f:52:49: 38:96:ed:3e:51:a7:21:d7:b3:94:f9:68:ce:08:5c: 4c:fb:a0:a6:72:4d:d6:d1:74:f7:b4:02:4b:52:39: 44:42:32:50:1f:42:c3:ff:62:1f:07:c9:91:3b:99: da:67:7f:50:9c:95:fc:4f:7f:4f:18:cf:99:b8:c0: ae:0d:7a:78:9c:4b:0b:33:8d:4b:a7:5b:d0:77:3d: 4b:47:94:3e:21:9d:97:e8:71:b1:b6:f1:cd:26:21: 68:8f:79:e1:3f:5d:18:7a:bf:5f:7a:45:01:4d:39: f5:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:F3:EB:2A:8A:79:00:9F:9B:FB:AA:E9:2E:09:21:5F:CC:31:9A:C5 X509v3 Authority Key Identifier: keyid:AD:B9:21:78:21:FF:BE:E0:96:E1:CE:C4:70:98:A3:14:5A:24:6E:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6E63/D69CD928E4A411EB8BC5C546C4F9AE02/rbkheCH_vuCW4c7EcJijFFokbqA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rbkheCH_vuCW4c7EcJijFFokbqA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6E63/D69CD928E4A411EB8BC5C546C4F9AE02/rbkheCH_vuCW4c7EcJijFFokbqA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:0a:ad:a2:69:57:77:e2:4a:dc:6d:81:f9:77:2b:fe:05:07: 7a:e5:45:79:a8:18:52:2c:64:14:e2:7c:da:13:2e:51:13:c4: e2:82:4f:33:8f:84:fd:5b:ac:8a:66:05:fe:04:db:f8:59:95: 41:87:f0:86:c7:f8:e6:b4:df:8e:ad:aa:e6:1e:15:61:27:06: 83:af:60:cc:13:7f:9e:07:c5:ff:5a:05:65:cc:e3:9e:60:d3: 0d:58:52:ee:5f:33:bd:25:1f:d6:34:1f:fc:3a:b1:6f:63:43: 22:30:91:8b:19:56:49:df:18:21:8e:c8:b1:e3:08:c4:09:36: f1:c5:f9:1d:a8:ce:a8:33:b5:e9:9e:d2:87:87:35:d0:78:30: 7d:91:36:0d:6c:16:ba:83:96:2a:87:75:94:10:d4:28:ca:22: 95:87:3e:6d:1c:20:73:97:d0:3b:23:a8:42:0c:38:3d:ed:07: 0a:b1:5a:15:75:0c:5c:ab:bd:15:cd:5f:fa:d2:9c:41:cd:9d: 0d:ba:22:31:0c:4b:72:30:67:01:3f:34:bf:2a:d8:56:f2:3c: 50:ef:0f:78:c9:3b:37:5f:4a:98:a7:50:42:5d:ca:88:07:9e: 4d:c6:76:aa:48:68:73:1c:a5:b6:19:82:00:49:59:5e:1e:a6: 0f:28:1e:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZFNjMxMTAvBgNVBAUTKEFEQjkyMTc4MjFGRkJFRTA5NkUxQ0VDNDcwOThBMzE0 NUEyNDZFQTAwHhcNMjUwNjE0MjMwMzU4WhcNMjUwNjIxMjMwMzU4WjAYMRYwFAYD VQQDEw02ODRkZmZkZi0xNDM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvAtw3qsTnQ1GB3ad4McbPxBkzl1wRu5nWjYf6h9AxNee4GN9C7c61yVkFhpw JO9Cp5X6SbiQfHKd7Lao1an0vKS4L6EHH4lVQsDQEmBhiv3tV6kh2UqigLYGagBm gYLrmoQS8spVMkKJp5oxkgWIentjsLPwHupQLdmbVc2ti5WQcwGNuLEzSFH9Kqsw jvEtyXYfUkk4lu0+Uach17OU+WjOCFxM+6Cmck3W0XT3tAJLUjlEQjJQH0LD/2If B8mRO5naZ39QnJX8T39PGM+ZuMCuDXp4nEsLM41Lp1vQdz1LR5Q+IZ2X6HGxtvHN JiFoj3nhP10Yer9fekUBTTn1PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOvz6yqK eQCfm/uq6S4JIV/MMZrFMB8GA1UdIwQYMBaAFK25IXgh/77gluHOxHCYoxRaJG6g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkU2My9ENjlDRDkyOEU0 QTQxMUVCOEJDNUM1NDZDNEY5QUUwMi9yYmtoZUNIX3Z1Q1c0YzdFY0ppakZGb2ti cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Jia2hlQ0hfdnVDVzRjN0VjSmlqRkZva2JxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkU2My9ENjlDRDkyOEU0QTQxMUVCOEJDNUM1NDZDNEY5QUUwMi9yYmtoZUNIX3Z1 Q1c0YzdFY0ppakZGb2ticUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeCq2iaVd34krcbYH5dyv+BQd65UV5qBhSLGQU4nzaEy5RE8Tigk8z j4T9W6yKZgX+BNv4WZVBh/CGx/jmtN+OrarmHhVhJwaDr2DME3+eB8X/WgVlzOOe YNMNWFLuXzO9JR/WNB/8OrFvY0MiMJGLGVZJ3xghjsix4wjECTbxxfkdqM6oM7Xp ntKHhzXQeDB9kTYNbBa6g5Yqh3WUENQoyiKVhz5tHCBzl9A7I6hCDDg97QcKsVoV dQxcq70VzV/60pxBzZ0NuiIxDEtyMGcBPzS/KthW8jxQ7w94yTs3X0qYp1BCXcqI B55NxnaqSGhzHKW2GYIASVleHqYPKB5Q -----END CERTIFICATE-----Generated at Sun Jun 15 10:24:26 2025 by rpki-client