$ rpki-client -vvf rpki.apnic.net/member_repository/A9129162/5A380D6AAD4311EFAA86C31AC4F9AE02/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.mft File: B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.mft (raw, json) Hash identifier: tMe9jVR4CExf/VfJJvUdCUxrcptn5k+xH4BVVUGhKWk= Subject key identifier: 25:D5:6C:8E:D2:3E:FA:E5:BE:24:A5:C5:EC:36:F5:5D:DB:E2:57:B0 Authority key identifier: 07:A6:81:C9:1C:3E:05:12:D3:68:9E:99:BC:E5:BC:66:40:91:67:34 Certificate issuer: /CN=A9129162/serialNumber=07A681C91C3E0512D3689E99BCE5BC6640916734 Certificate serial: 69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129162/5A380D6AAD4311EFAA86C31AC4F9AE02/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.mft Manifest number: 65 Signing time: Sat 31 May 2025 06:40:15 +0000 Manifest this update: Sat 31 May 2025 06:40:14 +0000 Manifest next update: Sat 07 Jun 2025 06:40:14 +0000 Files and hashes: 1: B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.crl (hash: CFt+sAQQVXIh49WCRtbhbFCe9PNQTsIVAJJoKqEHOtY=) 2: A5CE322CAD4311EF8552641BC4F9AE02.roa (hash: oXiSJMCySt2dFDYGEcN3qaUXeVsh5lk+krDNaZUgJ2A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129162/5A380D6AAD4311EFAA86C31AC4F9AE02/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.crl rsync://rpki.apnic.net/member_repository/A9129162/5A380D6AAD4311EFAA86C31AC4F9AE02/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:40:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 105 (0x69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129162, serialNumber=07A681C91C3E0512D3689E99BCE5BC6640916734 Validity Not Before: May 31 06:40:14 2025 GMT Not After : Jun 7 06:40:14 2025 GMT Subject: CN=683aa44f-43e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:36:da:43:26:ad:49:9b:ed:6f:71:1d:60:26: a6:e6:d1:bd:d4:45:cc:74:91:d0:45:54:b3:2b:f3: f0:08:8f:36:ab:35:9b:f2:95:60:94:8b:5c:3b:51: fd:5a:10:ad:88:e9:1b:9a:82:99:e8:10:57:34:c6: 8c:e6:cd:7f:4d:c9:c8:f0:16:d8:8d:2e:8d:0c:bd: c0:b5:2f:bf:ed:18:d7:d8:60:4d:f6:2f:be:10:06: a3:f4:60:84:9d:03:35:7b:2b:c8:5b:7e:21:f5:e7: 85:03:1d:8b:66:36:1d:cc:1b:de:6d:9e:62:dc:18: 88:38:6d:23:fb:2d:95:e0:32:77:03:5a:db:e7:68: 7b:0f:f1:5c:f7:82:84:ef:8f:41:6c:af:0d:0b:43: 20:49:4b:a6:69:4e:d5:fc:13:2e:20:09:a9:50:2a: cd:ad:28:21:b1:a3:34:bd:62:f2:de:f3:43:ab:9b: 40:3e:ba:3a:cc:24:81:1f:da:1f:83:ee:00:3a:2f: 92:7d:7d:09:98:2a:5f:83:84:24:07:29:be:23:a3: 74:fe:89:93:c4:45:92:29:51:45:e8:b2:2a:79:41: f6:3a:89:26:e3:17:83:a5:44:e4:a7:45:62:cb:e6: a2:3f:b3:ae:a5:69:c4:55:80:7e:b6:e1:90:d6:52: e7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:D5:6C:8E:D2:3E:FA:E5:BE:24:A5:C5:EC:36:F5:5D:DB:E2:57:B0 X509v3 Authority Key Identifier: keyid:07:A6:81:C9:1C:3E:05:12:D3:68:9E:99:BC:E5:BC:66:40:91:67:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129162/5A380D6AAD4311EFAA86C31AC4F9AE02/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129162/5A380D6AAD4311EFAA86C31AC4F9AE02/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:a5:d6:37:b9:dc:1d:0c:1b:f9:e4:6c:ee:f3:9a:5c:58:c8: 9e:6e:1a:b0:27:a6:3e:c7:1e:fc:11:3d:d4:82:31:78:56:f9: 68:f5:94:5d:76:f2:3c:e2:85:c4:d6:aa:ef:57:8e:6e:9e:a4: 8b:b5:a4:6f:60:0c:15:d4:6a:ec:7f:d4:0b:73:d0:1c:68:8f: ad:fd:37:33:a2:0d:96:af:6a:fc:33:5e:3f:24:58:97:f0:c2: 0c:89:07:ec:26:ce:90:cc:1c:29:ed:33:da:53:de:3b:88:c9: b6:17:60:8c:65:a5:77:ac:9d:82:3a:fe:42:3c:df:13:94:a4: 2e:91:66:6f:fc:88:2c:56:0d:0e:bc:4f:76:6a:49:df:c5:54: bb:7e:be:82:80:c9:32:89:13:7c:c4:17:c6:2d:31:10:37:ca: ff:86:f0:eb:d5:fc:54:17:cf:41:0b:69:69:54:49:bc:f5:d4: ac:8e:7f:f6:d5:27:24:d6:ce:9e:5f:5a:61:9a:b7:8b:59:8e: ff:7e:ac:8a:35:f9:e2:02:93:11:06:8d:d1:4e:a4:c1:2b:81: 9f:a4:7c:23:0f:c8:67:61:09:47:39:f9:fb:4a:c1:33:b2:4a: ab:d1:1a:8f:06:bf:f4:77:12:cd:e4:b6:72:52:ac:44:39:89: ce:9a:5e:8c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy OTE2MjExMC8GA1UEBRMoMDdBNjgxQzkxQzNFMDUxMkQzNjg5RTk5QkNFNUJDNjY0 MDkxNjczNDAeFw0yNTA1MzEwNjQwMTRaFw0yNTA2MDcwNjQwMTRaMBgxFjAUBgNV BAMTDTY4M2FhNDRmLTQzZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfNtpDJq1Jm+1vcR1gJqbm0b3URcx0kdBFVLMr8/AIjzarNZvylWCUi1w7Uf1a EK2I6RuagpnoEFc0xozmzX9NycjwFtiNLo0MvcC1L7/tGNfYYE32L74QBqP0YISd AzV7K8hbfiH154UDHYtmNh3MG95tnmLcGIg4bSP7LZXgMncDWtvnaHsP8Vz3goTv j0Fsrw0LQyBJS6ZpTtX8Ey4gCalQKs2tKCGxozS9YvLe80Orm0A+ujrMJIEf2h+D 7gA6L5J9fQmYKl+DhCQHKb4jo3T+iZPERZIpUUXosip5QfY6iSbjF4OlROSnRWLL 5qI/s66lacRVgH624ZDWUue3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJdVsjtI+ +uW+JKXF7Db1XdviV7AwHwYDVR0jBBgwFoAUB6aByRw+BRLTaJ6ZvOW8ZkCRZzQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5MTYyLzVBMzgwRDZBQUQ0 MzExRUZBQTg2QzMxQUM0RjlBRTAyL0I2YUJ5UnctQlJMVGFKNlp2T1c4WmtDUlp6 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQjZhQnlSdy1CUkxUYUo2WnZPVzhaa0NSWnpRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5 MTYyLzVBMzgwRDZBQUQ0MzExRUZBQTg2QzMxQUM0RjlBRTAyL0I2YUJ5UnctQlJM VGFKNlp2T1c4WmtDUlp6US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAil1je53B0MG/nkbO7zmlxYyJ5uGrAnpj7HHvwRPdSCMXhW+Wj1lF12 8jzihcTWqu9Xjm6epIu1pG9gDBXUaux/1Atz0Bxoj639NzOiDZavavwzXj8kWJfw wgyJB+wmzpDMHCntM9pT3juIybYXYIxlpXesnYI6/kI83xOUpC6RZm/8iCxWDQ68 T3ZqSd/FVLt+voKAyTKJE3zEF8YtMRA3yv+G8OvV/FQXz0ELaWlUSbz11KyOf/bV JyTWzp5fWmGat4tZjv9+rIo1+eICkxEGjdFOpMErgZ+kfCMPyGdhCUc5+ftKwTOy SqvRGo8Gv/R3Es3ktnJSrEQ5ic6aXow= -----END CERTIFICATE-----Generated at Sat May 31 17:51:33 2025 by rpki-client