$ rpki-client -vvf rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft File: BtM8jWukpiIt_LkMK0Ckt5KTdno.mft (raw, json) Hash identifier: AtzEcH4mLuRijvFJTBeUP7EhvVdh1+c6eoLzx70jwmw= Subject key identifier: C8:32:55:03:3F:CC:57:59:48:26:29:92:8D:69:F8:5D:D0:88:E8:AF Authority key identifier: 06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A Certificate issuer: /CN=A9152E70/serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A Certificate serial: 04FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft Manifest number: 04E9 Signing time: Sat 31 May 2025 00:00:16 +0000 Manifest this update: Sat 31 May 2025 00:00:15 +0000 Manifest next update: Sat 07 Jun 2025 00:00:15 +0000 Files and hashes: 1: BtM8jWukpiIt_LkMK0Ckt5KTdno.crl (hash: G2F4X1rqapXF8TnDzwjK2BbgmfnWwabC9wS7cr3xgNc=) 2: 5BC9A0B0C91211ED91C9A325C4F9AE02.roa (hash: bWFskxvhi7CkjX9KQtUg/L6OTceIBUoGJSArRRh8yOc=) 3: 900F6E92211E11ECAEED8632C4F9AE02.roa (hash: TEWGyyYFx9ktn3pEsyb60J6bTDtXfXp/IzUXg77M9qA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1275 (0x4fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152E70, serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A Validity Not Before: May 31 00:00:15 2025 GMT Not After : Jun 7 00:00:15 2025 GMT Subject: CN=683a468f-e29d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:ae:ee:ca:e6:46:81:e7:d6:eb:1f:f9:bb:95: 98:d0:4a:ae:a8:e3:71:ee:e5:de:ef:c1:58:ed:c6: e6:4c:e0:6a:ba:31:56:1d:89:92:15:24:93:4d:fb: 30:77:c0:7e:cb:f3:3d:08:86:18:19:69:19:fe:a3: 9b:1c:45:b9:bd:0f:da:c4:54:47:38:55:fb:ca:26: 86:35:e0:a3:08:62:41:7b:bd:4d:a4:05:a1:f7:c4: fd:b2:5a:4d:aa:c0:a5:f1:38:64:91:d6:63:d5:d7: 81:2c:12:ff:6b:2f:f6:23:9f:16:58:85:f6:e2:57: 23:a4:51:ef:32:04:9c:42:cf:e3:ee:cc:ab:38:e9: 2a:e2:d5:07:53:52:2c:f4:ed:15:1a:dc:6b:6e:c1: b3:93:72:17:dc:7d:e5:d8:ea:93:92:5c:52:d6:da: 54:b9:79:92:94:ef:2e:9f:95:13:1f:80:ab:31:b7: bc:8f:cf:47:20:77:a1:0e:7f:1f:0e:45:b1:7e:6d: bc:2d:ae:7d:3e:97:9c:29:f9:41:63:93:4b:4a:6b: ee:3f:2a:7c:bd:b9:de:e1:37:2b:a4:75:61:fe:10: 3f:c7:45:4e:c2:93:a0:89:e4:52:3e:8e:15:eb:58: 74:c9:d8:7c:0c:40:4e:c3:a7:2f:8a:b7:e4:bd:54: d5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:32:55:03:3F:CC:57:59:48:26:29:92:8D:69:F8:5D:D0:88:E8:AF X509v3 Authority Key Identifier: keyid:06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:d4:fe:1e:cc:68:44:10:7a:4d:ba:fe:8e:d1:54:62:9f:41: 20:67:4f:b8:7b:d4:28:68:07:69:41:c0:e3:9e:e8:bf:9f:54: 7c:2e:8c:d1:79:0b:d5:c4:eb:a2:68:84:8e:a9:1f:1b:0e:01: ca:9e:c9:83:38:c2:9a:e9:a5:a1:81:1a:5d:74:02:f8:cf:6c: f7:9d:2c:57:fd:09:40:5f:35:78:e7:78:f0:f6:28:af:6f:a5: ab:2d:90:8f:44:e8:89:fd:ad:73:ab:79:cc:b1:bc:01:69:84: 3c:cc:f1:31:43:8d:de:57:22:8c:83:86:c3:60:7a:10:38:6f: 4e:36:3c:12:e2:c7:c5:a7:42:45:11:df:1a:5a:c5:5c:ed:d9: 1b:9f:72:7f:c4:8e:c8:7b:c0:5f:42:50:31:2d:4d:05:20:97: f7:62:e3:4f:62:b8:30:38:07:a3:95:5e:f5:37:45:ba:10:d5: 99:67:7e:02:ea:46:f4:77:59:57:ff:70:12:83:9f:75:2c:28: e4:b0:70:5a:6c:0d:9f:43:46:6b:90:67:75:ec:cd:5c:ed:e7: 6d:c8:33:73:24:6e:9f:f9:d3:a6:2d:1c:b9:f1:48:8e:fd:75: df:ad:8b:dd:62:e7:28:70:7e:c4:f9:fe:4f:b4:f4:25:4e:52: 6e:22:28:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJFNzAxMTAvBgNVBAUTKDA2RDMzQzhENkJBNEE2MjIyREZDQjkwQzJCNDBBNEI3 OTI5Mzc2N0EwHhcNMjUwNTMxMDAwMDE1WhcNMjUwNjA3MDAwMDE1WjAYMRYwFAYD VQQDEw02ODNhNDY4Zi1lMjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8a7uyuZGgefW6x/5u5WY0EquqONx7uXe78FY7cbmTOBqujFWHYmSFSSTTfsw d8B+y/M9CIYYGWkZ/qObHEW5vQ/axFRHOFX7yiaGNeCjCGJBe71NpAWh98T9slpN qsCl8ThkkdZj1deBLBL/ay/2I58WWIX24lcjpFHvMgScQs/j7syrOOkq4tUHU1Is 9O0VGtxrbsGzk3IX3H3l2OqTklxS1tpUuXmSlO8un5UTH4CrMbe8j89HIHehDn8f DkWxfm28La59PpecKflBY5NLSmvuPyp8vbne4TcrpHVh/hA/x0VOwpOgieRSPo4V 61h0ydh8DEBOw6cvirfkvVTVgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMgyVQM/ zFdZSCYpko1p+F3QiOivMB8GA1UdIwQYMBaAFAbTPI1rpKYiLfy5DCtApLeSk3Z6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkU3MC9CRUM1Q0E3MjIx MUIxMUVDQjQ1RkQ0MkZDNEY5QUUwMi9CdE04ald1a3BpSXRfTGtNSzBDa3Q1S1Rk bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J0TThqV3VrcGlJdF9Ma01LMENrdDVLVGRuby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkU3MC9CRUM1Q0E3MjIxMUIxMUVDQjQ1RkQ0MkZDNEY5QUUwMi9CdE04ald1a3Bp SXRfTGtNSzBDa3Q1S1Rkbm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAI1P4ezGhEEHpNuv6O0VRin0EgZ0+4e9QoaAdpQcDjnui/n1R8LozR eQvVxOuiaISOqR8bDgHKnsmDOMKa6aWhgRpddAL4z2z3nSxX/QlAXzV453jw9iiv b6WrLZCPROiJ/a1zq3nMsbwBaYQ8zPExQ43eVyKMg4bDYHoQOG9ONjwS4sfFp0JF Ed8aWsVc7dkbn3J/xI7Ie8BfQlAxLU0FIJf3YuNPYrgwOAejlV71N0W6ENWZZ34C 6kb0d1lX/3ASg591LCjksHBabA2fQ0ZrkGd17M1c7edtyDNzJG6f+dOmLRy58UiO /XXfrYvdYucocH7E+f5PtPQlTlJuIihC -----END CERTIFICATE-----Generated at Sat May 31 17:37:42 2025 by rpki-client