$ rpki-client -vvf rpki.apnic.net/member_repository/A91232C2/1E7FFF9AF0CD11EE881D3C16C4F9AE02/b-jBYY_6_7LM_1aejqkV2vpNTjY.mft File: b-jBYY_6_7LM_1aejqkV2vpNTjY.mft (raw, json) Hash identifier: 1r4+iQnmafAnJIJmZudGNazdH06zp+IW7lxjBsf8ojs= Subject key identifier: F2:92:74:98:7F:E3:ED:2B:F0:EB:D3:F1:3A:13:FA:3F:24:65:0C:BD Authority key identifier: 6F:E8:C1:61:8F:FA:FF:B2:CC:FF:56:9E:8E:A9:15:DA:FA:4D:4E:36 Certificate issuer: /CN=A91232C2/serialNumber=6FE8C1618FFAFFB2CCFF569E8EA915DAFA4D4E36 Certificate serial: DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-jBYY_6_7LM_1aejqkV2vpNTjY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91232C2/1E7FFF9AF0CD11EE881D3C16C4F9AE02/b-jBYY_6_7LM_1aejqkV2vpNTjY.mft Manifest number: D8 Signing time: Sat 31 May 2025 05:10:14 +0000 Manifest this update: Sat 31 May 2025 05:10:14 +0000 Manifest next update: Sat 07 Jun 2025 05:10:13 +0000 Files and hashes: 1: b-jBYY_6_7LM_1aejqkV2vpNTjY.crl (hash: HXp5F4cXqVTRUiyMa7DY0tCiwBjo64jlS+xkn1u9+vg=) 2: 85035A64F0CD11EE8CC1FC16C4F9AE02.roa (hash: 9ZKq+nwt9P9nCI+BvZS/E6A1E5sodaBd/S4ZxhUXp0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91232C2/1E7FFF9AF0CD11EE881D3C16C4F9AE02/b-jBYY_6_7LM_1aejqkV2vpNTjY.crl rsync://rpki.apnic.net/member_repository/A91232C2/1E7FFF9AF0CD11EE881D3C16C4F9AE02/b-jBYY_6_7LM_1aejqkV2vpNTjY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-jBYY_6_7LM_1aejqkV2vpNTjY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 218 (0xda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91232C2, serialNumber=6FE8C1618FFAFFB2CCFF569E8EA915DAFA4D4E36 Validity Not Before: May 31 05:10:14 2025 GMT Not After : Jun 7 05:10:13 2025 GMT Subject: CN=683a8f36-968f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:6a:58:50:bf:3b:16:ca:a3:c2:03:0b:fe:64: a7:0a:40:17:93:a2:30:95:ac:69:26:3e:f3:76:0d: ea:84:f2:e1:a6:9b:bc:05:e7:88:69:ad:54:80:ca: af:8d:0b:02:5b:1f:a7:6b:c3:e1:01:b2:eb:56:22: e2:14:ec:76:ce:d7:25:ba:77:40:92:7d:c8:76:42: 5b:c5:59:0f:83:4d:b0:74:e3:59:c9:bd:f1:c4:f9: 5e:2f:08:17:12:5f:ec:9c:54:a0:71:25:d0:91:e6: f0:33:ad:f1:a6:2f:cc:e0:fb:17:66:ba:6d:b5:07: 04:dc:f1:31:1e:9f:58:54:b9:03:07:64:3b:30:59: eb:8d:2b:d4:1b:99:9b:a7:fe:ee:30:ea:c5:2e:a9: c9:ed:0e:63:7a:75:cc:a8:c6:1b:20:36:b2:b4:62: b3:da:e0:05:a4:db:bf:18:a2:56:53:c8:ff:69:ec: e1:d4:99:8f:0b:f7:ac:d8:e3:8f:35:44:b9:aa:d8: 56:f9:ff:35:f0:a5:56:c3:a0:32:1b:24:dc:22:bf: f8:c7:e1:72:1c:2f:fe:d7:05:07:f6:63:c4:70:8b: f2:0e:c6:97:3b:0d:09:14:53:db:74:8d:b4:20:0c: 4f:81:ba:df:9c:6c:2c:a1:86:d6:6c:4c:1e:78:72: de:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:92:74:98:7F:E3:ED:2B:F0:EB:D3:F1:3A:13:FA:3F:24:65:0C:BD X509v3 Authority Key Identifier: keyid:6F:E8:C1:61:8F:FA:FF:B2:CC:FF:56:9E:8E:A9:15:DA:FA:4D:4E:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91232C2/1E7FFF9AF0CD11EE881D3C16C4F9AE02/b-jBYY_6_7LM_1aejqkV2vpNTjY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-jBYY_6_7LM_1aejqkV2vpNTjY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91232C2/1E7FFF9AF0CD11EE881D3C16C4F9AE02/b-jBYY_6_7LM_1aejqkV2vpNTjY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:bb:bd:8e:06:c5:5e:44:a6:be:52:b7:28:63:ce:e0:51:5d: 9e:fb:37:ee:30:3c:18:d6:66:31:20:e0:cd:04:11:cc:21:a7: bd:52:86:8a:cf:55:2f:dd:68:8e:cd:c7:c9:1c:47:5a:80:66: e1:10:f7:ea:83:c0:40:76:8e:a6:8c:f4:6f:38:96:14:95:41: aa:4d:2a:33:43:29:88:da:7c:13:f0:15:f3:ec:5a:27:ff:4c: 8e:22:06:49:34:6d:d3:29:1b:c1:33:08:fc:9f:96:6b:b1:f5: 58:f2:6b:40:ce:0d:58:e8:e5:b0:b7:19:e5:e9:cd:57:10:f3: e1:28:90:aa:13:9a:00:35:ca:4b:9e:61:f2:4b:69:b4:03:ec: 54:5d:98:00:fe:17:8e:44:4e:b3:4e:1c:45:c1:b3:8c:e6:53: a5:21:d3:b6:ad:ee:88:38:d4:0b:f0:12:b2:ff:5f:b8:f8:d9: 53:2b:47:ea:ca:c0:03:65:0a:1f:ac:7a:ae:f1:16:8a:7e:07: 4b:86:22:56:9c:6e:f1:9f:a0:00:67:c6:2f:cf:40:e0:37:84: e6:ef:6b:94:23:e8:f7:5c:a1:fa:8a:5f:af:06:03:0f:bb:39: b1:f0:cc:37:24:ea:e7:e6:4b:ee:bb:43:16:44:f2:37:c4:e8: 91:b4:59:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMyQzIxMTAvBgNVBAUTKDZGRThDMTYxOEZGQUZGQjJDQ0ZGNTY5RThFQTkxNURB RkE0RDRFMzYwHhcNMjUwNTMxMDUxMDE0WhcNMjUwNjA3MDUxMDEzWjAYMRYwFAYD VQQDEw02ODNhOGYzNi05NjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA12pYUL87FsqjwgML/mSnCkAXk6IwlaxpJj7zdg3qhPLhppu8BeeIaa1UgMqv jQsCWx+na8PhAbLrViLiFOx2ztclundAkn3IdkJbxVkPg02wdONZyb3xxPleLwgX El/snFSgcSXQkebwM63xpi/M4PsXZrpttQcE3PExHp9YVLkDB2Q7MFnrjSvUG5mb p/7uMOrFLqnJ7Q5jenXMqMYbIDaytGKz2uAFpNu/GKJWU8j/aezh1JmPC/es2OOP NUS5qthW+f818KVWw6AyGyTcIr/4x+FyHC/+1wUH9mPEcIvyDsaXOw0JFFPbdI20 IAxPgbrfnGwsoYbWbEweeHLeBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPKSdJh/ 4+0r8OvT8ToT+j8kZQy9MB8GA1UdIwQYMBaAFG/owWGP+v+yzP9Wno6pFdr6TU42 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzJDMi8xRTdGRkY5QUYw Q0QxMUVFODgxRDNDMTZDNEY5QUUwMi9iLWpCWVlfNl83TE1fMWFlanFrVjJ2cE5U alkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ItakJZWV82XzdMTV8xYWVqcWtWMnZwTlRqWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzJDMi8xRTdGRkY5QUYwQ0QxMUVFODgxRDNDMTZDNEY5QUUwMi9iLWpCWVlfNl83 TE1fMWFlanFrVjJ2cE5UalkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiu72OBsVeRKa+UrcoY87gUV2e+zfuMDwY1mYxIODNBBHMIae9UoaK z1Uv3WiOzcfJHEdagGbhEPfqg8BAdo6mjPRvOJYUlUGqTSozQymI2nwT8BXz7Fon /0yOIgZJNG3TKRvBMwj8n5ZrsfVY8mtAzg1Y6OWwtxnl6c1XEPPhKJCqE5oANcpL nmHyS2m0A+xUXZgA/heORE6zThxFwbOM5lOlIdO2re6IONQL8BKy/1+4+NlTK0fq ysADZQofrHqu8RaKfgdLhiJWnG7xn6AAZ8Yvz0DgN4Tm72uUI+j3XKH6il+vBgMP uzmx8Mw3JOrn5kvuu0MWRPI3xOiRtFkj -----END CERTIFICATE-----Generated at Sat May 31 16:52:19 2025 by rpki-client