$ rpki-client -vvf rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.mft File: M6OypTA7URezLn5FhqypRAiRh0I.mft (raw, json) Hash identifier: CvOC4WXHYQ9P8aDSyLuJhqoHwteamxXhTyUg1TXMmjc= Subject key identifier: 8C:34:2D:C6:CF:A9:7C:E5:0D:1D:E1:3B:E4:B8:A9:A1:41:43:E9:00 Authority key identifier: 33:A3:B2:A5:30:3B:51:17:B3:2E:7E:45:86:AC:A9:44:08:91:87:42 Certificate issuer: /CN=A914BBEF/serialNumber=33A3B2A5303B5117B32E7E4586ACA94408918742 Certificate serial: 0BC3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6OypTA7URezLn5FhqypRAiRh0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.mft Manifest number: 0BBA Signing time: Fri 30 May 2025 19:07:09 +0000 Manifest this update: Fri 30 May 2025 19:07:08 +0000 Manifest next update: Fri 06 Jun 2025 19:07:08 +0000 Files and hashes: 1: M6OypTA7URezLn5FhqypRAiRh0I.crl (hash: NCdYNHXrlR0iYKZkVsNtEMdPjO+ftr4NSUx9CmPnhYE=) 2: 9E48E9821FB011EAAD480012C4F9AE02.roa (hash: RTDiXmwESTpSqKQ7Yx+y0Fq2bjlmzbj+gxNPdVcbubY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.crl rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6OypTA7URezLn5FhqypRAiRh0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:07:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3011 (0xbc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BBEF, serialNumber=33A3B2A5303B5117B32E7E4586ACA94408918742 Validity Not Before: May 30 19:07:08 2025 GMT Not After : Jun 6 19:07:08 2025 GMT Subject: CN=683a01dc-670c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:bf:79:06:14:db:29:c8:45:03:fa:36:cd:5a: f3:3c:7a:a0:9c:45:60:33:ca:4d:a5:ca:06:79:11: b5:68:4c:61:37:18:fe:b6:71:c2:22:cf:91:b1:61: 75:a9:62:ee:d8:5e:02:3c:15:c8:7d:c5:ef:f4:a4: 83:6c:8c:00:8d:6e:c8:26:63:07:78:40:13:eb:bb: 1b:b2:a8:b8:09:97:aa:5c:a4:5a:cf:4a:8a:29:d0: ab:b8:43:0c:2d:34:50:71:e7:e1:b7:e1:77:a6:22: 19:47:21:12:e4:43:c1:35:f6:f3:4e:95:48:0f:90: 96:be:20:a4:20:c4:66:71:c3:68:1e:45:d0:4e:8b: 41:07:ef:77:a5:6c:3a:11:9f:c6:2d:e8:f1:0d:a6: 19:02:a8:4d:5a:a2:33:9f:26:50:1a:2f:19:af:7f: 41:0e:21:58:f4:9c:bc:34:2c:95:d2:38:7c:2f:bf: 92:6d:05:54:4c:fa:8c:d3:87:9b:aa:ad:9b:72:dd: 22:7a:96:3d:71:85:f0:22:00:f2:16:f6:bb:34:1a: 1b:ca:e2:6c:47:e7:c0:98:09:25:68:45:95:2f:d8: 3c:b0:26:6e:32:2b:94:d0:a5:38:0c:c2:fe:cd:21: df:6e:60:54:03:c7:eb:ca:e7:ef:66:43:f3:19:8e: 69:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:34:2D:C6:CF:A9:7C:E5:0D:1D:E1:3B:E4:B8:A9:A1:41:43:E9:00 X509v3 Authority Key Identifier: keyid:33:A3:B2:A5:30:3B:51:17:B3:2E:7E:45:86:AC:A9:44:08:91:87:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6OypTA7URezLn5FhqypRAiRh0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:fd:58:62:7e:2e:da:72:0a:1a:b0:d5:e6:7f:a9:8f:88:96: 1b:5f:ad:30:6e:f1:36:d8:56:a1:9f:e2:11:7b:40:eb:64:c8: b3:9e:69:ed:91:c0:4d:ff:12:03:4a:82:db:a3:9a:4f:c7:d4: 5e:7f:cb:f4:70:35:0b:96:74:b4:a9:da:fc:0e:82:ee:64:fc: df:b7:8b:e1:f1:ee:7e:7a:ab:c6:84:6c:9c:ad:a0:a8:14:55: 16:b6:70:0c:32:54:10:24:72:ad:f8:b5:7e:8d:cd:e1:3d:55: b4:d6:e2:82:0c:c1:ad:c0:56:7d:94:85:21:7b:6e:0a:44:28: 6e:80:1d:a2:55:18:55:cf:e3:f0:68:46:61:16:b0:bc:2b:04: 21:78:63:3e:81:92:68:d3:31:d2:d1:70:62:e4:a8:1d:6c:83: 90:8e:a4:41:25:fc:de:cb:7b:3e:41:f9:1d:14:d8:9b:a4:d9: 5d:b3:9b:f6:71:9b:87:93:d6:b0:8d:60:2b:e6:2a:56:28:06: 20:48:60:a8:e0:93:0b:d2:26:95:bc:b9:de:92:9f:a5:43:21: 92:4b:47:e4:3a:63:a9:75:49:d3:11:d8:a6:8f:00:5e:eb:b4: 68:14:85:f9:4c:fa:e6:79:8e:7b:eb:5b:42:7c:cd:c4:8d:c7: 03:02:de:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJCRUYxMTAvBgNVBAUTKDMzQTNCMkE1MzAzQjUxMTdCMzJFN0U0NTg2QUNBOTQ0 MDg5MTg3NDIwHhcNMjUwNTMwMTkwNzA4WhcNMjUwNjA2MTkwNzA4WjAYMRYwFAYD VQQDEw02ODNhMDFkYy02NzBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmr95BhTbKchFA/o2zVrzPHqgnEVgM8pNpcoGeRG1aExhNxj+tnHCIs+RsWF1 qWLu2F4CPBXIfcXv9KSDbIwAjW7IJmMHeEAT67sbsqi4CZeqXKRaz0qKKdCruEMM LTRQcefht+F3piIZRyES5EPBNfbzTpVID5CWviCkIMRmccNoHkXQTotBB+93pWw6 EZ/GLejxDaYZAqhNWqIznyZQGi8Zr39BDiFY9Jy8NCyV0jh8L7+SbQVUTPqM04eb qq2bct0iepY9cYXwIgDyFva7NBobyuJsR+fAmAklaEWVL9g8sCZuMiuU0KU4DML+ zSHfbmBUA8fryufvZkPzGY5pjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIw0LcbP qXzlDR3hO+S4qaFBQ+kAMB8GA1UdIwQYMBaAFDOjsqUwO1EXsy5+RYasqUQIkYdC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkJFRi9GOTAzMDI2MDFG QUUxMUVBOTM2MEZGMEVDNEY5QUUwMi9NNk95cFRBN1VSZXpMbjVGaHF5cFJBaVJo MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL002T3lwVEE3VVJlekxuNUZocXlwUkFpUmgwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkJFRi9GOTAzMDI2MDFGQUUxMUVBOTM2MEZGMEVDNEY5QUUwMi9NNk95cFRBN1VS ZXpMbjVGaHF5cFJBaVJoMEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3/Vhifi7acgoasNXmf6mPiJYbX60wbvE22Fahn+IRe0DrZMiznmnt kcBN/xIDSoLbo5pPx9Ref8v0cDULlnS0qdr8DoLuZPzft4vh8e5+eqvGhGycraCo FFUWtnAMMlQQJHKt+LV+jc3hPVW01uKCDMGtwFZ9lIUhe24KRChugB2iVRhVz+Pw aEZhFrC8KwQheGM+gZJo0zHS0XBi5KgdbIOQjqRBJfzey3s+QfkdFNibpNlds5v2 cZuHk9awjWAr5ipWKAYgSGCo4JML0iaVvLnekp+lQyGSS0fkOmOpdUnTEdimjwBe 67RoFIX5TPrmeY5761tCfM3EjccDAt6G -----END CERTIFICATE-----Generated at Sat May 31 16:44:56 2025 by rpki-client