$ rpki-client -vvf rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.mft File: BB1RkkfEbnP2pn3ffJBJv_J5wLc.mft (raw, json) Hash identifier: Ps3oOZ7LriwRY0/k9myXx7fTaF/Rt86/sveMk0BJsac= Subject key identifier: 69:4D:73:93:A2:5F:15:15:DE:E2:6A:FE:47:10:AD:8F:51:19:B5:A3 Authority key identifier: 04:1D:51:92:47:C4:6E:73:F6:A6:7D:DF:7C:90:49:BF:F2:79:C0:B7 Certificate issuer: /CN=A9165B02/serialNumber=041D519247C46E73F6A67DDF7C9049BFF279C0B7 Certificate serial: 05EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BB1RkkfEbnP2pn3ffJBJv_J5wLc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.mft Manifest number: 05E6 Signing time: Fri 18 Jul 2025 23:17:33 +0000 Manifest this update: Fri 18 Jul 2025 23:17:33 +0000 Manifest next update: Fri 25 Jul 2025 23:17:33 +0000 Files and hashes: 1: BB1RkkfEbnP2pn3ffJBJv_J5wLc.crl (hash: Hq8odbKyvZY0nXhgeceWjbH81GYvZJlZt/daQ+i62dU=) 2: CEEBA382BD1511EB9E873260C4F9AE02.roa (hash: SXzW5vEmVU+GCJ/5C4H8HxVaw63CXUsgN+mA1S8Q1HE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.crl rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BB1RkkfEbnP2pn3ffJBJv_J5wLc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 23:17:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1515 (0x5eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165B02, serialNumber=041D519247C46E73F6A67DDF7C9049BFF279C0B7 Validity Not Before: Jul 18 23:17:33 2025 GMT Not After : Jul 25 23:17:33 2025 GMT Subject: CN=687ad60d-c70f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f6:08:89:72:62:96:81:aa:4d:85:7c:52:27: e1:00:ee:c3:6e:9f:71:84:c8:0c:c1:f4:f2:76:51: 71:b8:14:99:50:f8:26:9f:ad:57:10:ff:c0:c1:21: f0:d4:29:3f:07:87:14:3f:01:62:40:46:da:d2:f9: 4b:9d:23:fa:50:07:33:d6:1e:31:ea:c7:b5:26:e2: 75:09:e5:98:0e:10:9b:12:7c:63:d6:86:83:99:96: 3c:a5:62:9a:75:ec:f3:ac:30:2e:96:98:b2:c7:0c: fc:dd:85:c7:84:c5:ae:74:8f:de:e4:5a:f6:d2:90: ac:2c:3c:af:4b:1a:4d:9f:98:99:ae:f6:0c:e3:7d: 53:21:4c:ba:1c:85:62:f6:21:80:6e:e9:74:2d:82: 35:21:58:53:81:fe:d3:f6:6c:d9:0b:69:01:bf:0f: 7a:2f:36:ff:9e:3a:1b:f3:57:1d:b4:cf:d3:78:57: 63:40:6a:32:f8:f3:c7:44:d9:b1:6d:5a:e3:fc:30: 30:d0:8d:28:cf:ac:5a:33:c8:e8:88:ba:18:97:c4: 2f:8b:da:4a:93:fa:39:30:f2:db:b1:b2:17:12:f5: 27:da:7f:9c:eb:2d:57:ed:52:f4:37:4c:04:0c:f8: 71:90:a5:b1:f7:a4:ae:d4:a3:71:0b:1b:41:54:4b: 30:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:4D:73:93:A2:5F:15:15:DE:E2:6A:FE:47:10:AD:8F:51:19:B5:A3 X509v3 Authority Key Identifier: keyid:04:1D:51:92:47:C4:6E:73:F6:A6:7D:DF:7C:90:49:BF:F2:79:C0:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BB1RkkfEbnP2pn3ffJBJv_J5wLc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:f0:d9:b0:d8:82:e5:00:9d:59:a8:1b:d6:82:e9:a3:a9:8b: 89:10:e5:7c:51:4d:e2:28:4c:b3:ac:fd:7a:29:ef:a8:08:2b: 48:cf:0e:30:b7:eb:75:77:3f:bd:f9:e9:8a:5c:1e:2f:40:94: 58:3b:59:9e:71:8e:a8:25:46:9e:be:5e:e1:ab:9d:08:ee:b3: 77:0e:21:92:1e:fc:26:bf:e3:e5:cf:58:e8:3a:cd:c5:90:75: a4:46:f2:40:94:3e:b6:17:0c:4e:2b:31:db:e5:15:58:02:92: e5:f3:b7:1a:e7:35:e9:53:75:f8:34:00:cb:65:c2:11:99:dd: e8:d3:bf:f2:46:8c:88:a7:bb:e4:5b:4e:80:35:53:e4:ab:14: 68:a5:f3:e7:70:9a:b8:0c:d1:e0:ef:73:db:75:2e:eb:e9:c2: 91:5f:5e:c2:66:ae:9f:65:46:9e:5a:e2:9f:a5:9e:3c:bf:07: 3a:0d:93:52:1d:18:44:fb:f1:59:06:b0:01:2f:20:97:17:04: 32:fa:6e:83:68:6b:ca:2f:a3:d2:a8:5b:2f:d5:4a:7a:a2:b2: 22:a3:a4:29:2f:2e:dd:ce:3d:a0:e5:65:55:55:60:e4:cb:af: d2:b6:c5:9f:a9:ca:3e:d8:1c:56:5f:a4:a8:51:25:bf:69:7c: 5c:33:43:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVCMDIxMTAvBgNVBAUTKDA0MUQ1MTkyNDdDNDZFNzNGNkE2N0RERjdDOTA0OUJG RjI3OUMwQjcwHhcNMjUwNzE4MjMxNzMzWhcNMjUwNzI1MjMxNzMzWjAYMRYwFAYD VQQDEw02ODdhZDYwZC1jNzBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw/YIiXJiloGqTYV8UifhAO7Dbp9xhMgMwfTydlFxuBSZUPgmn61XEP/AwSHw 1Ck/B4cUPwFiQEba0vlLnSP6UAcz1h4x6se1JuJ1CeWYDhCbEnxj1oaDmZY8pWKa dezzrDAulpiyxwz83YXHhMWudI/e5Fr20pCsLDyvSxpNn5iZrvYM431TIUy6HIVi 9iGAbul0LYI1IVhTgf7T9mzZC2kBvw96Lzb/njob81cdtM/TeFdjQGoy+PPHRNmx bVrj/DAw0I0oz6xaM8joiLoYl8Qvi9pKk/o5MPLbsbIXEvUn2n+c6y1X7VL0N0wE DPhxkKWx96Su1KNxCxtBVEswhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGlNc5Oi XxUV3uJq/kcQrY9RGbWjMB8GA1UdIwQYMBaAFAQdUZJHxG5z9qZ933yQSb/yecC3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUIwMi85NUEzOEVGNkJE MTQxMUVCQjVFRUZENUZDNEY5QUUwMi9CQjFSa2tmRWJuUDJwbjNmZkpCSnZfSjV3 TGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JCMVJra2ZFYm5QMnBuM2ZmSkJKdl9KNXdMYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NUIwMi85NUEzOEVGNkJEMTQxMUVCQjVFRUZENUZDNEY5QUUwMi9CQjFSa2tmRWJu UDJwbjNmZkpCSnZfSjV3TGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB28Nmw2ILlAJ1ZqBvWgumjqYuJEOV8UU3iKEyzrP16Ke+oCCtIzw4w t+t1dz+9+emKXB4vQJRYO1mecY6oJUaevl7hq50I7rN3DiGSHvwmv+Plz1joOs3F kHWkRvJAlD62FwxOKzHb5RVYApLl87ca5zXpU3X4NADLZcIRmd3o07/yRoyIp7vk W06ANVPkqxRopfPncJq4DNHg73PbdS7r6cKRX17CZq6fZUaeWuKfpZ48vwc6DZNS HRhE+/FZBrABLyCXFwQy+m6DaGvKL6PSqFsv1Up6orIio6QpLy7dzj2g5WVVVWDk y6/StsWfqco+2BxWX6SoUSW/aXxcM0Mw -----END CERTIFICATE-----Generated at Sun Jul 20 07:52:05 2025 by rpki-client