$ rpki-client -vvf rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft File: TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft (raw, json) Hash identifier: JVu1XXJjreJM2CDsYS4k5XgGSno5aN+M5R19pFEEBf0= Subject key identifier: F8:E6:01:8B:BB:28:A3:91:91:38:BE:7B:93:41:53:AE:2A:90:35:B1 Authority key identifier: 4F:14:6F:5C:C4:F4:BC:87:38:22:FA:1E:33:45:2A:54:1A:1E:E5:46 Certificate issuer: /CN=A9129023/serialNumber=4F146F5CC4F4BC873822FA1E33452A541A1EE546 Certificate serial: BB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxRvXMT0vIc4IvoeM0UqVBoe5UY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft Manifest number: BA Signing time: Thu 05 Jun 2025 05:15:47 +0000 Manifest this update: Thu 05 Jun 2025 05:15:47 +0000 Manifest next update: Thu 12 Jun 2025 05:15:47 +0000 Files and hashes: 1: TxRvXMT0vIc4IvoeM0UqVBoe5UY.crl (hash: 8ARPZsi4LXVSVuyi+ZVKEIJDFvI8Mvu3naR1aiegMmo=) 2: FFE6CB36228111EFA702E016C4F9AE02.roa (hash: +BYuc5eNV9QVdOv8+l4kTKaLYQnJEvaUX1OVi3Uj8pM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.crl rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxRvXMT0vIc4IvoeM0UqVBoe5UY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 05:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 187 (0xbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129023, serialNumber=4F146F5CC4F4BC873822FA1E33452A541A1EE546 Validity Not Before: Jun 5 05:15:47 2025 GMT Not After : Jun 12 05:15:47 2025 GMT Subject: CN=68412803-22f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a4:37:f7:68:ae:81:c6:36:82:ef:48:83:5c: 29:95:2d:bc:c6:09:d5:68:c7:ba:9a:f1:f0:23:d6: 9d:95:91:ad:7d:f7:e9:e2:2a:47:07:fa:d4:57:d5: 8d:6a:3b:7f:08:0f:99:20:49:ee:d0:5f:b4:8d:3c: 0f:a3:f3:88:12:78:62:44:ac:32:b5:43:ed:08:0b: 3f:01:a6:25:67:d2:be:4a:2a:78:16:66:3a:1c:35: 4a:d0:dc:bd:bc:eb:c2:b2:4b:c8:9a:95:cc:cb:09: 62:fb:08:d0:1d:93:11:0e:35:4e:08:fd:19:db:a4: cf:70:38:f5:2e:14:66:c0:2e:f3:1b:47:14:b4:0a: ac:ac:40:34:b5:59:86:37:59:36:f4:3c:3e:2b:43: e4:31:da:23:27:ce:a4:94:44:f6:13:34:88:08:3f: e4:f3:0f:b2:7d:a9:7f:21:d2:9e:fe:46:81:6f:76: 79:34:de:8b:91:17:00:6c:29:d6:17:e7:8d:dd:19: 1a:06:c7:89:bc:7b:ea:62:f1:3b:bf:7b:1c:ba:76: d1:25:b2:8d:4f:88:5d:71:06:48:bb:de:c2:cd:c3: 3f:34:f3:b1:99:81:9d:71:94:fa:1b:53:eb:53:e8: ab:e0:de:12:c1:9e:0b:e9:61:7d:b6:e3:0e:ce:e2: 86:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:E6:01:8B:BB:28:A3:91:91:38:BE:7B:93:41:53:AE:2A:90:35:B1 X509v3 Authority Key Identifier: keyid:4F:14:6F:5C:C4:F4:BC:87:38:22:FA:1E:33:45:2A:54:1A:1E:E5:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxRvXMT0vIc4IvoeM0UqVBoe5UY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:98:ef:29:c7:aa:4c:8f:ae:db:90:41:bd:c2:69:b4:69:5c: f7:39:b4:0e:c7:38:91:79:d5:5e:e7:6a:3c:42:c5:0f:bd:25: b1:0d:3a:1a:91:bd:4b:57:bd:ee:83:28:a9:7a:33:d9:b9:d0: 3b:09:b2:2a:af:86:59:ae:a4:0c:3f:b1:e7:5f:17:94:12:13: 97:37:a2:50:ed:81:5e:4b:47:ca:59:28:d6:34:65:be:0f:e8: 99:a8:65:c3:1a:f9:96:d3:28:85:92:9c:e7:ed:2f:56:4b:1c: fc:c7:bb:2b:88:53:47:3e:5c:44:84:8e:a5:c3:a1:d6:21:0f: 99:9a:5b:91:d7:7e:bc:04:87:30:cf:35:8c:d7:3c:12:47:91: 09:a2:21:10:7b:5c:cb:58:70:24:98:74:d4:70:4e:06:f5:83: c2:41:ee:16:a0:1e:18:9e:6a:04:e2:f6:3c:c3:40:12:eb:e7: 92:c0:ea:c0:bb:fc:a6:b0:d4:94:ef:f4:77:be:9e:0f:0e:b3: e2:33:eb:fc:7b:9c:3d:66:67:7c:fd:ec:a5:64:3d:bc:7c:c8: 7a:a2:f5:b2:60:78:04:1f:0a:a7:16:34:63:78:c6:d6:74:1c: f1:69:18:40:b5:ee:e9:40:c6:0f:84:33:09:c0:f1:42:5a:2a: bb:7c:d6:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjkwMjMxMTAvBgNVBAUTKDRGMTQ2RjVDQzRGNEJDODczODIyRkExRTMzNDUyQTU0 MUExRUU1NDYwHhcNMjUwNjA1MDUxNTQ3WhcNMjUwNjEyMDUxNTQ3WjAYMRYwFAYD VQQDEw02ODQxMjgwMy0yMmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0KQ392iugcY2gu9Ig1wplS28xgnVaMe6mvHwI9adlZGtfffp4ipHB/rUV9WN ajt/CA+ZIEnu0F+0jTwPo/OIEnhiRKwytUPtCAs/AaYlZ9K+Sip4FmY6HDVK0Ny9 vOvCskvImpXMywli+wjQHZMRDjVOCP0Z26TPcDj1LhRmwC7zG0cUtAqsrEA0tVmG N1k29Dw+K0PkMdojJ86klET2EzSICD/k8w+yfal/IdKe/kaBb3Z5NN6LkRcAbCnW F+eN3RkaBseJvHvqYvE7v3scunbRJbKNT4hdcQZIu97CzcM/NPOxmYGdcZT6G1Pr U+ir4N4SwZ4L6WF9tuMOzuKGpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPjmAYu7 KKORkTi+e5NBU64qkDWxMB8GA1UdIwQYMBaAFE8Ub1zE9LyHOCL6HjNFKlQaHuVG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTAyMy9GMzNCQjRBNjIy ODAxMUVGQTcyODNDMTRDNEY5QUUwMi9UeFJ2WE1UMHZJYzRJdm9lTTBVcVZCb2U1 VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1R4UnZYTVQwdkljNEl2b2VNMFVxVkJvZTVVWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTAyMy9GMzNCQjRBNjIyODAxMUVGQTcyODNDMTRDNEY5QUUwMi9UeFJ2WE1UMHZJ YzRJdm9lTTBVcVZCb2U1VVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBmO8px6pMj67bkEG9wmm0aVz3ObQOxziRedVe52o8QsUPvSWxDToa kb1LV73ugyipejPZudA7CbIqr4ZZrqQMP7HnXxeUEhOXN6JQ7YFeS0fKWSjWNGW+ D+iZqGXDGvmW0yiFkpzn7S9WSxz8x7sriFNHPlxEhI6lw6HWIQ+ZmluR1368BIcw zzWM1zwSR5EJoiEQe1zLWHAkmHTUcE4G9YPCQe4WoB4YnmoE4vY8w0AS6+eSwOrA u/ymsNSU7/R3vp4PDrPiM+v8e5w9Zmd8/eylZD28fMh6ovWyYHgEHwqnFjRjeMbW dBzxaRhAte7pQMYPhDMJwPFCWiq7fNaI -----END CERTIFICATE-----Generated at Thu Jun 5 19:25:03 2025 by rpki-client