$ rpki-client -vvf rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/b_pdsVnUCjoXLbx09cMrVVF5ea8.mft File: b_pdsVnUCjoXLbx09cMrVVF5ea8.mft (raw, json) Hash identifier: u1OF74WBUM8gDlSIwK9F2lxxNbVX/8Z1ANxej4eyi7Y= Subject key identifier: 5C:CC:29:4D:4D:1E:E3:A2:F5:06:28:73:7E:A5:A6:88:AB:47:E2:6E Authority key identifier: 6F:FA:5D:B1:59:D4:0A:3A:17:2D:BC:74:F5:C3:2B:55:51:79:79:AF Certificate issuer: /CN=A913C627/serialNumber=6FFA5DB159D40A3A172DBC74F5C32B55517979AF Certificate serial: 0870 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_pdsVnUCjoXLbx09cMrVVF5ea8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/b_pdsVnUCjoXLbx09cMrVVF5ea8.mft Manifest number: 0853 Signing time: Fri 30 May 2025 21:01:00 +0000 Manifest this update: Fri 30 May 2025 21:01:00 +0000 Manifest next update: Fri 06 Jun 2025 21:00:59 +0000 Files and hashes: 1: b_pdsVnUCjoXLbx09cMrVVF5ea8.crl (hash: euU472AKziEKv6LJ3rXj2eYoHyoD6A2wJDKN474Zdj0=) 2: FFB3EF94F53C11EEA5B4623BC4F9AE02.roa (hash: qCV1CGEKKAAFyjh2aY/pv/O3Ul0oy0qB9pbyOTWaQu4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/b_pdsVnUCjoXLbx09cMrVVF5ea8.crl rsync://rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/b_pdsVnUCjoXLbx09cMrVVF5ea8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_pdsVnUCjoXLbx09cMrVVF5ea8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2160 (0x870) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C627, serialNumber=6FFA5DB159D40A3A172DBC74F5C32B55517979AF Validity Not Before: May 30 21:01:00 2025 GMT Not After : Jun 6 21:00:59 2025 GMT Subject: CN=683a1c8c-4798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fa:1d:cd:16:e2:02:e3:69:9d:f5:86:d5:48: b1:6b:5c:c7:5d:d8:28:03:39:a2:c7:a1:47:fb:6e: bc:13:7b:51:d9:87:a5:95:1a:b8:25:48:7b:24:79: 5b:9c:fb:53:f3:4a:22:9d:39:cd:4a:6d:b8:72:60: 3b:91:60:5c:b3:c6:cd:28:d0:29:6e:5e:87:d7:68: c6:bd:50:0e:9d:20:1e:ad:2f:a5:dd:fb:5f:32:ae: 09:fc:0e:2e:55:c4:e4:7b:67:e6:64:3b:43:5d:7b: 3d:8b:4a:ec:b2:a9:c7:6f:fd:03:4a:bb:da:64:8c: f2:bc:15:f2:59:af:f5:1d:0a:b0:55:a1:7a:54:d5: 40:4a:70:37:84:d6:d2:89:de:15:d9:8f:fd:8e:ea: 89:57:83:3e:23:db:d7:2c:8c:8a:0b:6e:5b:33:0b: df:c9:37:8a:36:0b:a6:68:d1:ad:80:21:78:c6:b5: f5:f8:08:7d:2f:16:6d:d5:1d:c1:6e:f7:f9:47:b2: a6:b1:9a:ff:b5:92:a9:41:33:9a:d8:d1:0d:32:ec: 20:9b:56:70:58:93:a9:d0:1b:76:2c:b9:c4:3a:61: 41:d2:5d:d1:bd:6d:14:f7:ef:29:32:49:cf:dd:e1: d3:c6:e7:27:6e:41:a5:d2:ac:fc:79:5c:92:fc:3d: 68:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:CC:29:4D:4D:1E:E3:A2:F5:06:28:73:7E:A5:A6:88:AB:47:E2:6E X509v3 Authority Key Identifier: keyid:6F:FA:5D:B1:59:D4:0A:3A:17:2D:BC:74:F5:C3:2B:55:51:79:79:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/b_pdsVnUCjoXLbx09cMrVVF5ea8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_pdsVnUCjoXLbx09cMrVVF5ea8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/b_pdsVnUCjoXLbx09cMrVVF5ea8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:9c:fc:a3:eb:ad:8f:b8:3f:de:30:50:80:de:e1:9b:16:12: bb:e3:01:0e:19:38:71:e1:ce:ae:87:d5:8a:db:33:7b:e0:8b: 21:e3:36:3c:2e:29:8b:70:af:64:97:19:82:e1:0c:c7:c8:7d: aa:ba:0d:fa:29:28:f6:d7:cd:f6:5d:ba:3a:3e:4c:57:f1:4c: 97:66:f8:de:10:27:af:c9:b8:c5:cb:85:2d:69:0f:76:10:a6: e7:db:17:cf:9e:98:95:91:a7:dd:b0:83:46:51:5c:95:6a:57: ff:53:38:75:de:a8:02:c9:3c:16:53:67:60:3c:ba:82:04:1a: e8:8f:05:e0:0d:ce:48:4a:3d:31:c3:8d:d8:38:14:64:f9:27: 52:49:a5:4f:91:ee:6a:95:e3:8e:aa:da:3a:cd:dc:7e:4b:d5: f5:d9:7c:f3:ce:c4:83:d8:48:aa:06:6b:9d:79:26:5f:5c:2a: 4e:03:bb:46:a4:1c:ca:5f:23:90:93:14:03:25:6d:1e:2c:e8: a9:63:de:49:51:9f:2a:ce:e8:0c:b1:79:f7:2a:7a:07:43:ce: 87:7a:d6:fd:fd:a1:87:76:e5:5b:3a:70:d5:9e:f0:4f:1d:f8: 3e:9e:b7:38:a6:44:bf:e0:78:19:13:4a:e5:1a:c9:62:49:70: 4d:2b:86:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0M2MjcxMTAvBgNVBAUTKDZGRkE1REIxNTlENDBBM0ExNzJEQkM3NEY1QzMyQjU1 NTE3OTc5QUYwHhcNMjUwNTMwMjEwMTAwWhcNMjUwNjA2MjEwMDU5WjAYMRYwFAYD VQQDEw02ODNhMWM4Yy00Nzk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyPodzRbiAuNpnfWG1Uixa1zHXdgoAzmix6FH+268E3tR2YellRq4JUh7JHlb nPtT80oinTnNSm24cmA7kWBcs8bNKNApbl6H12jGvVAOnSAerS+l3ftfMq4J/A4u VcTke2fmZDtDXXs9i0rssqnHb/0DSrvaZIzyvBXyWa/1HQqwVaF6VNVASnA3hNbS id4V2Y/9juqJV4M+I9vXLIyKC25bMwvfyTeKNgumaNGtgCF4xrX1+Ah9LxZt1R3B bvf5R7KmsZr/tZKpQTOa2NENMuwgm1ZwWJOp0Bt2LLnEOmFB0l3RvW0U9+8pMknP 3eHTxucnbkGl0qz8eVyS/D1oIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFzMKU1N HuOi9QYoc36lpoirR+JuMB8GA1UdIwQYMBaAFG/6XbFZ1Ao6Fy28dPXDK1VReXmv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzYyNy9DMjY1QzFBNEQw N0QxMUVBODYwMDk4NkRDNEY5QUUwMi9iX3Bkc1ZuVUNqb1hMYngwOWNNclZWRjVl YTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JfcGRzVm5VQ2pvWExieDA5Y01yVlZGNWVhOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzYyNy9DMjY1QzFBNEQwN0QxMUVBODYwMDk4NkRDNEY5QUUwMi9iX3Bkc1ZuVUNq b1hMYngwOWNNclZWRjVlYTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAnPyj662PuD/eMFCA3uGbFhK74wEOGThx4c6uh9WK2zN74Ish4zY8 LimLcK9klxmC4QzHyH2qug36KSj21832Xbo6PkxX8UyXZvjeECevybjFy4UtaQ92 EKbn2xfPnpiVkafdsINGUVyValf/Uzh13qgCyTwWU2dgPLqCBBrojwXgDc5ISj0x w43YOBRk+SdSSaVPke5qleOOqto6zdx+S9X12XzzzsSD2EiqBmudeSZfXCpOA7tG pBzKXyOQkxQDJW0eLOipY95JUZ8qzugMsXn3KnoHQ86Hetb9/aGHduVbOnDVnvBP Hfg+nrc4pkS/4HgZE0rlGsliSXBNK4bx -----END CERTIFICATE-----Generated at Sat May 31 17:32:50 2025 by rpki-client