$ rpki-client -vvf rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft File: Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft (raw, json) Hash identifier: uTxUrtrh9Xr6OoxLDJoeUEJtJzHD9p1qfSyV1y5N0wY= Subject key identifier: 63:E3:14:9A:8E:68:09:CE:95:47:DF:BA:D5:8F:2B:34:77:92:CB:0E Authority key identifier: 07:1E:25:85:5E:6A:35:B3:D8:08:FF:7A:60:A0:8B:87:81:35:63:62 Certificate issuer: /CN=A913939F/serialNumber=071E25855E6A35B3D808FF7A60A08B8781356362 Certificate serial: 0134 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft Manifest number: 012A Signing time: Wed 11 Jun 2025 04:07:22 +0000 Manifest this update: Wed 11 Jun 2025 04:07:21 +0000 Manifest next update: Wed 18 Jun 2025 04:07:21 +0000 Files and hashes: 1: Bx4lhV5qNbPYCP96YKCLh4E1Y2I.crl (hash: sTqXasZ58mIsT3UkQEb6tXnMUYl2Nrdg6zbzmF/72uY=) 2: 342A14D6F0E911EEAAAD9A6CC4F9AE02.roa (hash: 1nis0P6SfwA6Mcq8SFQmwhxCRMw2QytQSM1sy/jc0jU=) 3: 5A44099895C111EE951C9E4CC4F9AE02.roa (hash: KgYF6AgzMh0SR6YaAVsJGBjcvKCcJWg6gXxqQiLpD64=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.crl rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 04:07:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 308 (0x134) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913939F, serialNumber=071E25855E6A35B3D808FF7A60A08B8781356362 Validity Not Before: Jun 11 04:07:21 2025 GMT Not After : Jun 18 04:07:21 2025 GMT Subject: CN=684900fa-5102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:27:2f:af:bc:89:c5:fd:2b:9f:16:f7:df:00: 62:4c:bf:38:88:a0:d1:a1:ee:70:bd:1c:82:90:51: c5:e7:11:c3:88:6c:03:65:88:f9:39:60:de:1e:54: 5e:56:a5:27:bf:00:5f:56:57:88:f9:a5:42:37:c3: e4:28:2f:0e:68:a3:2a:3d:8e:66:17:27:96:2c:d7: c9:b8:0b:b3:82:2e:f2:bb:81:78:07:58:62:ff:49: 69:f8:52:da:05:c6:e8:4c:bd:3e:08:64:d5:05:6c: e9:04:8c:08:59:dc:eb:b3:cc:4f:a5:2a:97:d6:1a: 4c:d5:4d:23:f4:cb:78:4d:a7:48:08:18:49:32:b3: a8:ee:3d:3c:08:8d:fe:84:34:f5:59:5c:00:dd:98: 7d:f0:68:b8:32:0b:e8:49:2a:a1:45:a9:ff:3c:59: 9c:ca:5e:ee:e1:fc:02:e6:f9:5f:77:05:98:89:ca: 81:ad:91:e0:35:76:aa:e7:ae:d8:df:c3:ae:2b:ed: dd:c8:85:d3:44:2a:28:dd:0c:84:73:4b:28:f9:86: a1:5b:4d:a3:73:76:b5:19:a6:b6:fc:54:7a:c6:22: 1c:b5:cc:bb:6e:d0:d1:34:60:8b:21:ac:12:bf:15: 93:ca:6c:b6:7a:36:b4:53:a0:9c:dd:47:4c:13:a3: 65:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:E3:14:9A:8E:68:09:CE:95:47:DF:BA:D5:8F:2B:34:77:92:CB:0E X509v3 Authority Key Identifier: keyid:07:1E:25:85:5E:6A:35:B3:D8:08:FF:7A:60:A0:8B:87:81:35:63:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d4:fc:d1:c8:97:84:ea:8e:ab:a4:b8:6e:0d:9b:e9:6d:53:08: 8b:3a:db:18:44:8f:a4:74:bd:c1:aa:29:91:f9:99:c7:f0:c7: 21:8d:29:04:0b:d3:cf:3e:f0:57:34:89:83:fc:00:24:8a:f2: 45:bf:37:b3:69:fd:cb:2c:fa:59:72:40:76:ae:2c:28:3e:44: a2:b3:a8:f5:cd:d3:50:65:d1:35:78:d8:5c:fc:ca:78:c0:61: 90:a9:ca:78:27:1e:c8:c1:f6:d2:57:63:6c:30:5c:89:0d:42: 35:50:7c:60:17:ef:34:bd:9a:38:5b:2d:6c:4e:cd:fb:40:d2: 81:d4:06:0d:36:73:05:3a:4c:55:4e:4b:1a:62:95:b6:23:69: bf:9b:6c:a2:bc:72:73:1d:2d:5d:19:64:93:86:29:3e:3c:d3: 7b:d3:a3:2b:25:a0:85:19:8f:1b:63:7e:13:bf:3d:06:af:c6: c6:a3:0e:de:60:56:a3:b9:a4:a2:7c:d1:66:20:01:84:f0:c9: 30:b0:bd:14:6b:6b:8d:aa:9a:b7:c9:c0:42:e1:56:a4:4e:ed: 4a:91:59:aa:17:01:c1:46:dc:08:88:83:89:29:cb:40:46:7d: 2f:c1:ef:37:c8:0c:a4:87:20:77:ca:34:95:07:b8:46:d4:96: f3:95:3d:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkzOUYxMTAvBgNVBAUTKDA3MUUyNTg1NUU2QTM1QjNEODA4RkY3QTYwQTA4Qjg3 ODEzNTYzNjIwHhcNMjUwNjExMDQwNzIxWhcNMjUwNjE4MDQwNzIxWjAYMRYwFAYD VQQDEw02ODQ5MDBmYS01MTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5icvr7yJxf0rnxb33wBiTL84iKDRoe5wvRyCkFHF5xHDiGwDZYj5OWDeHlRe VqUnvwBfVleI+aVCN8PkKC8OaKMqPY5mFyeWLNfJuAuzgi7yu4F4B1hi/0lp+FLa BcboTL0+CGTVBWzpBIwIWdzrs8xPpSqX1hpM1U0j9Mt4TadICBhJMrOo7j08CI3+ hDT1WVwA3Zh98Gi4MgvoSSqhRan/PFmcyl7u4fwC5vlfdwWYicqBrZHgNXaq567Y 38OuK+3dyIXTRCoo3QyEc0so+YahW02jc3a1Gaa2/FR6xiIctcy7btDRNGCLIawS vxWTymy2eja0U6Cc3UdME6NloQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGPjFJqO aAnOlUffutWPKzR3kssOMB8GA1UdIwQYMBaAFAceJYVeajWz2Aj/emCgi4eBNWNi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTM5Ri8yMkU1RjY1NjhB QzExMUVFODUxM0JCMURDNEY5QUUwMi9CeDRsaFY1cU5iUFlDUDk2WUtDTGg0RTFZ MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J4NGxoVjVxTmJQWUNQOTZZS0NMaDRFMVkySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTM5Ri8yMkU1RjY1NjhBQzExMUVFODUxM0JCMURDNEY5QUUwMi9CeDRsaFY1cU5i UFlDUDk2WUtDTGg0RTFZMkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDU/NHIl4TqjqukuG4Nm+ltUwiLOtsYRI+kdL3BqimR+ZnH8MchjSkE C9PPPvBXNImD/AAkivJFvzezaf3LLPpZckB2riwoPkSis6j1zdNQZdE1eNhc/Mp4 wGGQqcp4Jx7IwfbSV2NsMFyJDUI1UHxgF+80vZo4Wy1sTs37QNKB1AYNNnMFOkxV TksaYpW2I2m/m2yivHJzHS1dGWSThik+PNN706MrJaCFGY8bY34Tvz0Gr8bGow7e YFajuaSifNFmIAGE8MkwsL0Ua2uNqpq3ycBC4VakTu1KkVmqFwHBRtwIiIOJKctA Rn0vwe83yAykhyB3yjSVB7hG1JbzlT1i -----END CERTIFICATE-----Generated at Thu Jun 12 10:21:58 2025 by rpki-client