$ rpki-client -vvf rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.mft File: B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.mft (raw, json) Hash identifier: ZwED6jEbcV0Lj9Gp1FDLIvCU7abt33v7EzAav072HcE= Subject key identifier: A9:86:4C:5A:F5:27:7B:3E:B6:19:40:11:D5:C4:37:27:9B:F2:65:F0 Authority key identifier: 07:FE:41:71:DD:50:DC:E7:B6:4F:76:99:89:67:A5:71:CF:93:C4:0B Certificate issuer: /CN=A911BFB0/serialNumber=07FE4171DD50DCE7B64F76998967A571CF93C40B Certificate serial: 0F5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.mft Manifest number: 112F Signing time: Mon 30 Jun 2025 17:47:18 +0000 Manifest this update: Mon 30 Jun 2025 17:47:18 +0000 Manifest next update: Mon 07 Jul 2025 17:47:18 +0000 Files and hashes: 1: B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.crl (hash: bEgt8CPRfBOWpa/H6Zegxeu8jw88q41UCmVomy4YbfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.crl rsync://rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 17:47:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3933 (0xf5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BFB0, serialNumber=07FE4171DD50DCE7B64F76998967A571CF93C40B Validity Not Before: Jun 30 17:47:18 2025 GMT Not After : Jul 7 17:47:18 2025 GMT Subject: CN=6862cda6-5e2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ef:a6:18:d8:ac:bc:26:68:2d:0a:b7:19:26: 66:38:e4:5c:fb:71:f8:66:a3:45:41:e5:44:6c:10: 38:d3:a8:ea:1a:18:8f:c6:e8:52:49:21:c2:c0:a8: 43:88:60:7d:c1:3c:4d:42:67:f7:08:92:09:d7:ac: 4d:2f:52:1a:b8:92:93:7d:8b:a9:61:96:d2:b8:ac: 07:9c:ab:86:87:ba:60:ef:7e:4d:71:c9:92:f2:86: c0:bf:2c:aa:b5:0f:6f:fe:1d:00:5f:70:23:76:f9: 27:38:03:ea:40:42:bd:9e:9d:ef:49:aa:49:ce:86: 45:05:a7:97:ce:5d:af:bb:67:e6:b6:cc:71:c3:82: 31:d7:62:2a:d2:78:e3:57:bf:f6:37:24:0c:83:ac: ce:50:9f:79:dd:8e:70:f2:f6:a3:a2:0c:5d:5b:7c: ee:da:82:b6:53:9c:d6:85:65:c3:3c:a6:75:eb:f7: 79:d9:70:97:ce:76:19:6e:f2:73:82:33:4d:c9:23: 9b:3e:a0:31:53:d8:e3:c4:42:e7:23:60:87:f3:5d: 55:a1:16:30:ee:73:bc:f6:00:1d:81:c6:6a:ba:5d: 73:20:d3:4d:27:26:f1:c0:56:a4:6f:48:a3:a6:b5: 15:b0:e2:d3:5e:00:7e:39:e7:35:dc:c3:df:ff:5b: 57:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:86:4C:5A:F5:27:7B:3E:B6:19:40:11:D5:C4:37:27:9B:F2:65:F0 X509v3 Authority Key Identifier: keyid:07:FE:41:71:DD:50:DC:E7:B6:4F:76:99:89:67:A5:71:CF:93:C4:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:95:3f:e7:e7:30:a5:93:b6:93:84:cb:09:ab:06:b4:21:4f: ae:90:9f:77:53:ad:25:f1:31:9d:24:f6:c7:1f:da:c1:bf:64: a8:49:04:3d:a6:0d:b8:60:7b:f9:17:58:1e:64:54:ac:ee:b8: 3d:44:1b:a2:c2:d1:39:2f:f9:80:58:88:08:ba:7f:c8:ca:5e: ce:d6:d4:b0:f0:b2:a4:7c:70:51:0f:00:e1:10:d5:3f:94:b8: 8e:6b:03:51:a0:f4:8c:24:8b:d9:cf:32:05:ab:ee:b1:77:e4: e4:00:c0:eb:63:99:4a:88:37:68:dc:06:71:eb:a9:7d:b6:72: 8f:3c:41:ab:e4:c7:fe:ac:6e:f3:ac:cc:fd:23:4d:c6:b6:a4: bc:56:d5:b8:44:de:84:53:b0:18:d6:87:ba:1c:60:21:72:14: aa:6e:ac:e4:47:91:88:01:3c:fc:0e:b9:0c:23:bd:90:25:91: b6:7f:e0:07:45:8c:b3:c0:4b:35:3f:46:bb:60:c1:d6:d4:35: 18:37:c8:0d:7d:77:bb:c9:bf:d4:ad:a8:b5:41:a3:48:68:22: 49:ae:36:73:94:cf:c2:e0:99:23:92:1a:82:d5:e2:5d:f4:b4: c9:22:7e:6e:6c:c0:db:3b:06:49:18:62:43:66:36:8e:92:6b: 50:0d:55:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD10wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJGQjAxMTAvBgNVBAUTKDA3RkU0MTcxREQ1MERDRTdCNjRGNzY5OTg5NjdBNTcx Q0Y5M0M0MEIwHhcNMjUwNjMwMTc0NzE4WhcNMjUwNzA3MTc0NzE4WjAYMRYwFAYD VQQDEw02ODYyY2RhNi01ZTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxu+mGNisvCZoLQq3GSZmOORc+3H4ZqNFQeVEbBA406jqGhiPxuhSSSHCwKhD iGB9wTxNQmf3CJIJ16xNL1IauJKTfYupYZbSuKwHnKuGh7pg735NccmS8obAvyyq tQ9v/h0AX3AjdvknOAPqQEK9np3vSapJzoZFBaeXzl2vu2fmtsxxw4Ix12Iq0njj V7/2NyQMg6zOUJ953Y5w8vajogxdW3zu2oK2U5zWhWXDPKZ16/d52XCXznYZbvJz gjNNySObPqAxU9jjxELnI2CH811VoRYw7nO89gAdgcZqul1zINNNJybxwFakb0ij prUVsOLTXgB+Oec13MPf/1tXXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKmGTFr1 J3s+thlAEdXENyeb8mXwMB8GA1UdIwQYMBaAFAf+QXHdUNzntk92mYlnpXHPk8QL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkZCMC8yMkMyNTE0NjZD QzIxMUU5QTBENkFGNjdDNEY5QUUwMi9CXzVCY2QxUTNPZTJUM2FaaVdlbGNjLVR4 QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JfNUJjZDFRM09lMlQzYVppV2VsY2MtVHhBcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkZCMC8yMkMyNTE0NjZDQzIxMUU5QTBENkFGNjdDNEY5QUUwMi9CXzVCY2QxUTNP ZTJUM2FaaVdlbGNjLVR4QXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCglT/n5zClk7aThMsJqwa0IU+ukJ93U60l8TGdJPbHH9rBv2SoSQQ9 pg24YHv5F1geZFSs7rg9RBuiwtE5L/mAWIgIun/Iyl7O1tSw8LKkfHBRDwDhENU/ lLiOawNRoPSMJIvZzzIFq+6xd+TkAMDrY5lKiDdo3AZx66l9tnKPPEGr5Mf+rG7z rMz9I03GtqS8VtW4RN6EU7AY1oe6HGAhchSqbqzkR5GIATz8DrkMI72QJZG2f+AH RYyzwEs1P0a7YMHW1DUYN8gNfXe7yb/Urai1QaNIaCJJrjZzlM/C4JkjkhqC1eJd 9LTJIn5ubMDbOwZJGGJDZjaOkmtQDVVN -----END CERTIFICATE-----Generated at Wed Jul 2 13:08:32 2025 by rpki-client