$ rpki-client -vvf rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft File: bw3LHOJgwKE4iU38RIrdySQTaYE.mft (raw, json) Hash identifier: +sfJOvkbGOsXQW0LUYJZPw/4KFJj6XcufYSiE/n18WU= Subject key identifier: E6:24:4D:9F:B7:61:50:9C:E7:1D:6F:6F:17:6A:95:19:3B:4C:E6:AB Authority key identifier: 6F:0D:CB:1C:E2:60:C0:A1:38:89:4D:FC:44:8A:DD:C9:24:13:69:81 Certificate issuer: /CN=A9142747/serialNumber=6F0DCB1CE260C0A138894DFC448ADDC924136981 Certificate serial: 07FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft Manifest number: 07F9 Signing time: Fri 30 May 2025 21:09:59 +0000 Manifest this update: Fri 30 May 2025 21:09:57 +0000 Manifest next update: Fri 06 Jun 2025 21:09:57 +0000 Files and hashes: 1: bw3LHOJgwKE4iU38RIrdySQTaYE.crl (hash: GHT/nI0nbLmusGx08azxct89v83gAofxqUhFpeAGZrY=) 2: A15F9276E2A911EAADD4CF7AC4F9AE02.roa (hash: +rpoh0Qao0hx4C7zavudqQAZxQBcoSI/kspTucCxRSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.crl rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:09:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2046 (0x7fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142747, serialNumber=6F0DCB1CE260C0A138894DFC448ADDC924136981 Validity Not Before: May 30 21:09:57 2025 GMT Not After : Jun 6 21:09:57 2025 GMT Subject: CN=683a1ea6-c9d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:0c:8e:0e:03:95:2d:42:13:6b:50:0a:3d:fb: d0:f2:65:94:7b:66:69:61:9f:f8:f2:cd:78:74:97: 3d:93:6c:28:1b:73:ee:8c:64:fc:79:09:9c:e7:da: c4:9c:7b:44:61:0a:57:bf:06:2c:d6:a6:17:03:21: 5f:90:c8:fd:84:2c:10:b4:ff:03:66:95:b5:2b:21: f0:51:fd:7a:50:d3:33:9e:5e:36:bf:68:d0:60:51: e3:53:ea:de:80:5c:ea:3d:a3:27:4e:00:92:61:03: f2:14:93:d5:d1:aa:88:ad:78:d7:53:bf:1a:55:d1: 61:0e:12:77:59:6d:9f:46:b5:bf:1a:75:40:7a:5c: 0f:b2:90:1d:f2:ed:56:8f:b4:3b:f3:9a:c2:38:e0: 79:56:70:01:d3:f2:f1:1f:3d:1c:bd:3e:69:30:e3: aa:4c:cb:c3:e5:16:a5:9a:93:1a:8e:49:52:75:d3: 99:50:e6:52:47:b7:83:94:1c:41:6e:8b:35:82:dd: 61:2b:c3:25:3d:45:cc:60:84:09:e9:47:51:a6:d1: e2:56:7c:57:69:44:bf:fc:21:fe:96:13:53:df:86: 98:18:8d:41:fd:cb:4e:45:0a:01:10:69:35:4e:f5: 67:62:9e:40:3c:b9:a6:88:4d:30:61:b2:95:14:3d: 73:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:24:4D:9F:B7:61:50:9C:E7:1D:6F:6F:17:6A:95:19:3B:4C:E6:AB X509v3 Authority Key Identifier: keyid:6F:0D:CB:1C:E2:60:C0:A1:38:89:4D:FC:44:8A:DD:C9:24:13:69:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:56:2b:d2:9a:77:1a:f1:fe:63:96:eb:39:23:05:ca:69:90: d4:9e:2b:85:29:71:4b:a9:8b:a6:16:f9:aa:a9:82:a2:70:4c: 94:d0:43:8f:3c:63:f0:74:12:09:e4:e6:27:cd:29:8a:ab:97: 4d:52:6b:71:6d:4f:e8:ae:36:69:91:ad:05:8b:11:85:6b:eb: 0e:5b:82:d5:59:50:9a:b2:3f:88:e6:fd:21:d4:be:cc:08:ca: bc:e4:4a:e2:36:5f:61:ca:25:8e:a2:94:23:96:69:c5:29:b3: 5b:46:fc:3f:78:72:7a:42:03:eb:aa:2a:10:3c:68:a6:7e:35: bd:24:39:48:3f:d0:4e:c3:83:6d:84:25:45:8f:49:ae:d1:23: 12:5a:cf:d1:48:51:20:1e:2c:32:d3:6d:4f:83:e9:89:87:03: ff:5c:4e:00:d1:02:28:be:cd:94:ca:c7:c6:2d:1b:d6:e6:2b: 65:e5:d2:fd:a2:4a:26:1b:ec:d3:e4:44:19:41:14:d4:1a:c0: 16:c0:b7:d6:c7:9d:d1:a0:b5:33:b0:a1:ca:ef:da:99:39:26: ef:83:5f:f6:fc:1e:b2:3e:19:7b:ac:c0:10:d7:93:a6:98:17: 30:b8:28:78:ee:9e:40:dc:e7:b5:bd:4b:09:b4:fc:1f:1e:78: 2d:a9:bc:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI3NDcxMTAvBgNVBAUTKDZGMERDQjFDRTI2MEMwQTEzODg5NERGQzQ0OEFEREM5 MjQxMzY5ODEwHhcNMjUwNTMwMjEwOTU3WhcNMjUwNjA2MjEwOTU3WjAYMRYwFAYD VQQDEw02ODNhMWVhNi1jOWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3QyODgOVLUITa1AKPfvQ8mWUe2ZpYZ/48s14dJc9k2woG3PujGT8eQmc59rE nHtEYQpXvwYs1qYXAyFfkMj9hCwQtP8DZpW1KyHwUf16UNMznl42v2jQYFHjU+re gFzqPaMnTgCSYQPyFJPV0aqIrXjXU78aVdFhDhJ3WW2fRrW/GnVAelwPspAd8u1W j7Q785rCOOB5VnAB0/LxHz0cvT5pMOOqTMvD5RalmpMajklSddOZUOZSR7eDlBxB bos1gt1hK8MlPUXMYIQJ6UdRptHiVnxXaUS//CH+lhNT34aYGI1B/ctORQoBEGk1 TvVnYp5APLmmiE0wYbKVFD1zcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOYkTZ+3 YVCc5x1vbxdqlRk7TOarMB8GA1UdIwQYMBaAFG8NyxziYMChOIlN/ESK3ckkE2mB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Mjc0Ny9BRkU4ODEyMEUy MDYxMUVBQkIxNjZENUZDNEY5QUUwMi9idzNMSE9KZ3dLRTRpVTM4UklyZHlTUVRh WUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J3M0xIT0pnd0tFNGlVMzhSSXJkeVNRVGFZRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Mjc0Ny9BRkU4ODEyMEUyMDYxMUVBQkIxNjZENUZDNEY5QUUwMi9idzNMSE9KZ3dL RTRpVTM4UklyZHlTUVRhWUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/VivSmnca8f5jlus5IwXKaZDUniuFKXFLqYumFvmqqYKicEyU0EOP PGPwdBIJ5OYnzSmKq5dNUmtxbU/orjZpka0FixGFa+sOW4LVWVCasj+I5v0h1L7M CMq85EriNl9hyiWOopQjlmnFKbNbRvw/eHJ6QgPrqioQPGimfjW9JDlIP9BOw4Nt hCVFj0mu0SMSWs/RSFEgHiwy021Pg+mJhwP/XE4A0QIovs2UysfGLRvW5itl5dL9 okomG+zT5EQZQRTUGsAWwLfWx53RoLUzsKHK79qZOSbvg1/2/B6yPhl7rMAQ15Om mBcwuCh47p5A3Oe1vUsJtPwfHngtqbyt -----END CERTIFICATE-----Generated at Sat May 31 17:27:59 2025 by rpki-client