$ rpki-client -vvf rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.mft File: b2dYEDhTTU2848gbXy2IYcU2tnw.mft (raw, json) Hash identifier: uI7IOmUtbQeLwWVpiuWaPRUpxKVK0yeo9tA59iHdiec= Subject key identifier: 21:3A:C3:89:81:55:56:06:D4:FD:1F:0F:01:25:03:BC:7B:B3:15:73 Authority key identifier: 6F:67:58:10:38:53:4D:4D:BC:E3:C8:1B:5F:2D:88:61:C5:36:B6:7C Certificate issuer: /CN=A9117836/serialNumber=6F67581038534D4DBCE3C81B5F2D8861C536B67C Certificate serial: 015B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2dYEDhTTU2848gbXy2IYcU2tnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.mft Manifest number: 0153 Signing time: Sat 31 May 2025 03:52:42 +0000 Manifest this update: Sat 31 May 2025 03:52:41 +0000 Manifest next update: Sat 07 Jun 2025 03:52:41 +0000 Files and hashes: 1: b2dYEDhTTU2848gbXy2IYcU2tnw.crl (hash: OjuaH0Ud/jQv+7ymjyZ2S+oBXF49CqcEqvcfcoljA70=) 2: 9B1DE7226D8F11EE9BD22B40C4F9AE02.roa (hash: H5pK79+DkVT9bgtQkuk9t/grxvSc0nRDSs3JR8icAh8=) 3: EAA5793C367411EF98F49F1CC4F9AE02.roa (hash: /RysZ9FFrvGFWhnZrMrChDiZQuIFgZEdesdb5vE5fVc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.crl rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2dYEDhTTU2848gbXy2IYcU2tnw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:52:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 347 (0x15b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117836, serialNumber=6F67581038534D4DBCE3C81B5F2D8861C536B67C Validity Not Before: May 31 03:52:41 2025 GMT Not After : Jun 7 03:52:41 2025 GMT Subject: CN=683a7d09-bef3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1c:69:81:16:30:36:9c:27:ac:7d:bb:da:2d: 16:50:f6:28:5f:8f:47:0c:ef:a7:68:d9:3a:f6:4b: d9:de:5b:81:8a:63:b3:fe:1e:c4:0e:23:ba:13:8b: 41:27:03:eb:0f:dd:2f:89:c0:71:0b:db:bb:54:36: e2:94:38:43:e3:6e:00:70:ba:24:7c:13:55:21:3e: 73:c4:1f:c3:ab:c9:1f:30:ba:a1:68:94:a4:31:3e: 67:70:6b:cd:a8:7a:d6:97:3d:7f:1b:5e:7e:c6:11: 88:d2:ea:6c:3d:8c:a0:9c:a1:55:2a:7f:36:4b:55: 30:58:d2:d4:14:74:0d:14:99:d3:ad:b5:ea:18:f8: a3:6a:f0:91:10:bc:d0:37:36:76:14:f6:f9:00:65: 88:3c:4b:6e:d5:e8:aa:e8:ab:f8:72:fb:bd:59:d2: 78:94:a8:e7:40:73:7a:19:8f:62:6f:19:ca:bc:15: 57:19:bf:f6:69:97:9a:6f:2c:2b:9e:75:11:a7:1f: c3:eb:64:25:99:7e:63:a4:ae:bc:29:c2:0c:73:91: 9d:7a:0a:7e:f6:ee:49:de:7e:cf:4a:ed:87:db:8e: d1:3a:2f:80:a8:87:02:f1:5b:3c:fd:1a:e3:90:cb: c8:9f:cb:56:7e:78:7d:20:ad:25:0d:54:64:98:8c: ab:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:3A:C3:89:81:55:56:06:D4:FD:1F:0F:01:25:03:BC:7B:B3:15:73 X509v3 Authority Key Identifier: keyid:6F:67:58:10:38:53:4D:4D:BC:E3:C8:1B:5F:2D:88:61:C5:36:B6:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2dYEDhTTU2848gbXy2IYcU2tnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:3d:a6:02:4b:1a:e2:79:6a:ed:49:26:05:b1:ab:0c:35:0d: ca:30:41:96:18:6e:63:8e:a4:a3:e1:87:ab:a7:1d:67:74:6b: ed:0b:8a:86:ba:ea:6f:84:4f:b6:79:1b:0e:df:53:52:d5:e9: 24:39:8c:98:9d:9d:63:ee:0a:fc:83:21:92:08:f4:4f:7e:fc: 5e:bf:87:da:94:2d:64:72:55:a1:3b:57:39:60:dd:32:d1:5b: a1:85:98:25:ca:be:0c:69:39:b5:a0:39:18:c5:87:89:43:b7: d8:fc:8a:3a:02:a5:48:00:6c:df:89:c7:d6:10:2b:a1:6b:c0: 19:32:e1:5a:bf:62:11:df:86:69:bc:b6:c4:33:bb:17:9d:3c: 67:99:48:ec:af:18:75:47:1a:41:3b:8f:e1:2a:1d:08:7b:5f: 45:b0:98:d1:06:ee:45:5a:eb:f3:e6:89:0b:7a:c7:b9:be:71: 3b:73:7f:2a:92:43:45:d3:6b:93:39:bf:c7:6b:eb:da:b3:43: a1:b7:a9:ae:ad:e0:d2:36:73:47:d5:b9:87:91:4a:01:e6:f5: d2:ac:ee:ce:56:a3:66:2e:ca:da:0d:02:aa:2e:c9:b3:29:bc: 41:f3:2c:a0:59:3e:13:47:5c:df:67:72:b1:9c:45:01:69:35: e1:40:e3:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc4MzYxMTAvBgNVBAUTKDZGNjc1ODEwMzg1MzRENERCQ0UzQzgxQjVGMkQ4ODYx QzUzNkI2N0MwHhcNMjUwNTMxMDM1MjQxWhcNMjUwNjA3MDM1MjQxWjAYMRYwFAYD VQQDEw02ODNhN2QwOS1iZWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuBxpgRYwNpwnrH272i0WUPYoX49HDO+naNk69kvZ3luBimOz/h7EDiO6E4tB JwPrD90vicBxC9u7VDbilDhD424AcLokfBNVIT5zxB/Dq8kfMLqhaJSkMT5ncGvN qHrWlz1/G15+xhGI0upsPYygnKFVKn82S1UwWNLUFHQNFJnTrbXqGPijavCRELzQ NzZ2FPb5AGWIPEtu1eiq6Kv4cvu9WdJ4lKjnQHN6GY9ibxnKvBVXGb/2aZeabywr nnURpx/D62QlmX5jpK68KcIMc5Gdegp+9u5J3n7PSu2H247ROi+AqIcC8Vs8/Rrj kMvIn8tWfnh9IK0lDVRkmIyr/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCE6w4mB VVYG1P0fDwElA7x7sxVzMB8GA1UdIwQYMBaAFG9nWBA4U01NvOPIG18tiGHFNrZ8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzgzNi9GQTI1RURFMjQz MUQxMUVFODY4Q0E0MEZDNEY5QUUwMi9iMmRZRURoVFRVMjg0OGdiWHkySVljVTJ0 bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2IyZFlFRGhUVFUyODQ4Z2JYeTJJWWNVMnRudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzgzNi9GQTI1RURFMjQzMUQxMUVFODY4Q0E0MEZDNEY5QUUwMi9iMmRZRURoVFRV Mjg0OGdiWHkySVljVTJ0bncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPPaYCSxrieWrtSSYFsasMNQ3KMEGWGG5jjqSj4Yerpx1ndGvtC4qG uupvhE+2eRsO31NS1ekkOYyYnZ1j7gr8gyGSCPRPfvxev4falC1kclWhO1c5YN0y 0VuhhZglyr4MaTm1oDkYxYeJQ7fY/Io6AqVIAGzficfWECuha8AZMuFav2IR34Zp vLbEM7sXnTxnmUjsrxh1RxpBO4/hKh0Ie19FsJjRBu5FWuvz5okLese5vnE7c38q kkNF02uTOb/Ha+vas0Oht6mureDSNnNH1bmHkUoB5vXSrO7OVqNmLsraDQKqLsmz KbxB8yygWT4TR1zfZ3KxnEUBaTXhQOPT -----END CERTIFICATE-----Generated at Sat May 31 17:26:16 2025 by rpki-client