$ rpki-client -vvf rpki.apnic.net/member_repository/A913EA16/452F7AEE777B11EC86FC105DC4F9AE02/bhSKDQhXgDhqgX3NjWRpVBHHaDg.mft File: bhSKDQhXgDhqgX3NjWRpVBHHaDg.mft (raw, json) Hash identifier: 8gyPbM+MiZRFrtX6VOZZ7hX20Ks/MalhGNaBEoAxGls= Subject key identifier: 2D:70:5D:E4:17:F4:E2:1E:A4:CA:C9:62:F0:77:4D:C1:D0:ED:80:74 Authority key identifier: 6E:14:8A:0D:08:57:80:38:6A:81:7D:CD:8D:64:69:54:11:C7:68:38 Certificate issuer: /CN=A913EA16/serialNumber=6E148A0D085780386A817DCD8D64695411C76838 Certificate serial: 0404 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhSKDQhXgDhqgX3NjWRpVBHHaDg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EA16/452F7AEE777B11EC86FC105DC4F9AE02/bhSKDQhXgDhqgX3NjWRpVBHHaDg.mft Manifest number: 03FD Signing time: Sat 31 May 2025 00:40:02 +0000 Manifest this update: Sat 31 May 2025 00:40:02 +0000 Manifest next update: Sat 07 Jun 2025 00:40:02 +0000 Files and hashes: 1: bhSKDQhXgDhqgX3NjWRpVBHHaDg.crl (hash: pVdqIpMmzw3TjX6Z8/8MAgB1cIGFMfAVXFGkFqVJTPA=) 2: 8B729608B62F11EFB2DE315FC4F9AE02.roa (hash: ERP6Y5/dUFxszjFDuuFfjwGYbKhjm1R8qrQOrEiUTKw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EA16/452F7AEE777B11EC86FC105DC4F9AE02/bhSKDQhXgDhqgX3NjWRpVBHHaDg.crl rsync://rpki.apnic.net/member_repository/A913EA16/452F7AEE777B11EC86FC105DC4F9AE02/bhSKDQhXgDhqgX3NjWRpVBHHaDg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhSKDQhXgDhqgX3NjWRpVBHHaDg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:40:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1028 (0x404) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EA16, serialNumber=6E148A0D085780386A817DCD8D64695411C76838 Validity Not Before: May 31 00:40:02 2025 GMT Not After : Jun 7 00:40:02 2025 GMT Subject: CN=683a4fe2-dc35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9e:3c:6d:4b:80:7f:8c:cb:99:86:b6:e2:81: 01:b8:0e:a1:d0:49:e0:8c:9f:3c:cc:14:20:38:c5: ea:e2:0a:18:da:95:d1:4f:88:7a:15:5a:2f:7f:ba: 22:b9:23:b8:f6:fc:bd:a5:b5:b3:6c:0b:db:53:2a: 46:25:57:38:2a:54:ad:b8:5a:24:18:01:2c:79:65: 28:60:d1:d3:bf:d2:ad:7b:d7:01:34:c8:9f:1d:d2: f0:fc:b8:55:8e:ef:cf:ae:70:ff:85:3a:d7:00:50: a5:0a:c6:98:a5:cf:e5:85:30:7b:d8:df:f1:7b:1d: ad:20:62:20:9d:06:45:64:ff:ed:a0:6a:90:40:85: 0d:f7:8c:5d:98:75:72:08:d0:64:91:b4:26:a0:79: 27:09:5c:ba:e5:c3:03:70:13:9d:96:cb:27:28:b0: c5:fd:5b:35:b7:68:b3:de:0e:60:25:bd:69:68:ea: ef:ea:65:18:0c:f1:15:bc:6f:77:78:a5:6f:0c:61: 0a:83:21:f3:b5:7e:59:64:61:57:dd:76:92:19:e5: f9:6c:5e:a0:f6:32:27:65:7c:65:a3:47:19:b8:70: 21:f8:eb:a7:f2:9d:67:66:13:0e:01:ca:cb:59:a8: e3:4d:28:73:07:c4:27:16:1a:2f:85:06:97:70:5f: 5a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:70:5D:E4:17:F4:E2:1E:A4:CA:C9:62:F0:77:4D:C1:D0:ED:80:74 X509v3 Authority Key Identifier: keyid:6E:14:8A:0D:08:57:80:38:6A:81:7D:CD:8D:64:69:54:11:C7:68:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EA16/452F7AEE777B11EC86FC105DC4F9AE02/bhSKDQhXgDhqgX3NjWRpVBHHaDg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhSKDQhXgDhqgX3NjWRpVBHHaDg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EA16/452F7AEE777B11EC86FC105DC4F9AE02/bhSKDQhXgDhqgX3NjWRpVBHHaDg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:46:49:f9:f7:c5:a4:67:57:71:18:48:d0:ad:45:5f:fe:26: c8:4c:a5:97:04:92:e0:c4:ed:1b:1a:46:79:b3:1d:6b:81:dd: c5:b4:58:4a:cd:89:9f:82:d0:29:98:50:dc:1f:51:65:60:33: d0:51:a5:ff:12:05:16:22:aa:3f:4a:5f:da:7f:b7:01:71:39: a8:44:c7:56:b0:d1:be:3c:f5:64:cf:8c:bf:54:50:ae:01:0b: 3d:d7:6f:88:05:a2:9e:57:d1:d1:c4:9d:1e:1c:66:bb:f3:a7: 11:6c:3e:d2:6a:72:57:02:b2:53:f2:f3:f3:05:7e:34:3e:b5: 7f:7a:a0:ce:1e:15:89:75:0c:8a:03:6f:86:a7:a8:b1:a7:ac: 0d:98:46:87:42:ec:a0:e3:08:ff:c8:0c:17:84:69:60:25:60: e7:fe:62:57:97:41:1a:6a:4a:1a:f9:42:6f:f4:2f:87:21:95: 2b:da:77:5c:2c:2f:cc:fd:ff:fb:2d:f6:67:69:20:35:b5:52: 1b:f3:68:82:84:d7:82:ae:f6:97:e3:7f:fd:65:f6:53:bd:64: 1c:e5:51:31:4e:41:fa:ba:3b:36:7e:99:5b:20:95:c8:64:44: d6:d6:f0:55:10:5a:84:01:dd:f4:44:47:50:dd:bf:20:44:96: 87:45:40:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VBMTYxMTAvBgNVBAUTKDZFMTQ4QTBEMDg1NzgwMzg2QTgxN0RDRDhENjQ2OTU0 MTFDNzY4MzgwHhcNMjUwNTMxMDA0MDAyWhcNMjUwNjA3MDA0MDAyWjAYMRYwFAYD VQQDEw02ODNhNGZlMi1kYzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArp48bUuAf4zLmYa24oEBuA6h0EngjJ88zBQgOMXq4goY2pXRT4h6FVovf7oi uSO49vy9pbWzbAvbUypGJVc4KlStuFokGAEseWUoYNHTv9Kte9cBNMifHdLw/LhV ju/PrnD/hTrXAFClCsaYpc/lhTB72N/xex2tIGIgnQZFZP/toGqQQIUN94xdmHVy CNBkkbQmoHknCVy65cMDcBOdlssnKLDF/Vs1t2iz3g5gJb1paOrv6mUYDPEVvG93 eKVvDGEKgyHztX5ZZGFX3XaSGeX5bF6g9jInZXxlo0cZuHAh+Oun8p1nZhMOAcrL WajjTShzB8QnFhovhQaXcF9a2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC1wXeQX 9OIepMrJYvB3TcHQ7YB0MB8GA1UdIwQYMBaAFG4Uig0IV4A4aoF9zY1kaVQRx2g4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUExNi80NTJGN0FFRTc3 N0IxMUVDODZGQzEwNURDNEY5QUUwMi9iaFNLRFFoWGdEaHFnWDNOaldScFZCSEhh RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JoU0tEUWhYZ0RocWdYM05qV1JwVkJISGFEZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RUExNi80NTJGN0FFRTc3N0IxMUVDODZGQzEwNURDNEY5QUUwMi9iaFNLRFFoWGdE aHFnWDNOaldScFZCSEhhRGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGRkn598WkZ1dxGEjQrUVf/ibITKWXBJLgxO0bGkZ5sx1rgd3FtFhK zYmfgtApmFDcH1FlYDPQUaX/EgUWIqo/Sl/af7cBcTmoRMdWsNG+PPVkz4y/VFCu AQs912+IBaKeV9HRxJ0eHGa786cRbD7SanJXArJT8vPzBX40PrV/eqDOHhWJdQyK A2+Gp6ixp6wNmEaHQuyg4wj/yAwXhGlgJWDn/mJXl0Eaakoa+UJv9C+HIZUr2ndc LC/M/f/7LfZnaSA1tVIb82iChNeCrvaX43/9ZfZTvWQc5VExTkH6ujs2fplbIJXI ZETW1vBVEFqEAd30REdQ3b8gRJaHRUD0 -----END CERTIFICATE-----Generated at Sat May 31 16:35:51 2025 by rpki-client