$ rpki-client -vvf rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft File: 0ba-fNUVRYE-wxdmgHrN2YepD98.mft (raw, json) Hash identifier: Ima4EqXAO1qr/AIdOKlhzp0lHuLbqY2Sdc8bPzEUQS8= Subject key identifier: 8D:AC:79:59:6E:53:C1:D8:F7:BA:C8:BD:6B:76:75:48:A4:00:C8:C9 Authority key identifier: D1:B6:BE:7C:D5:15:45:81:3E:C3:17:66:80:7A:CD:D9:87:A9:0F:DF Certificate issuer: /CN=A915418F/serialNumber=D1B6BE7CD51545813EC31766807ACDD987A90FDF Certificate serial: 08E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ba-fNUVRYE-wxdmgHrN2YepD98.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft Manifest number: 08DE Signing time: Fri 30 May 2025 20:39:16 +0000 Manifest this update: Fri 30 May 2025 20:39:16 +0000 Manifest next update: Fri 06 Jun 2025 20:39:16 +0000 Files and hashes: 1: 0ba-fNUVRYE-wxdmgHrN2YepD98.crl (hash: 9aNIhWK/NOD2342RB3PKhYVv9cg7bq6Z+w108y6ui7U=) 2: 3BEF1820AFBA11EA8449B980C4F9AE02.roa (hash: uf4p5pgx1V0SluLNrAv0V4EHqRaHMDNsXkTRhyZ1WHY=) 3: F4757B1018C811EB94A5327AC4F9AE02.roa (hash: 76P6B+zD6PNBr4hksz9RJT8sA9qgnhZO985SFBzvQHs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.crl rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ba-fNUVRYE-wxdmgHrN2YepD98.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:39:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2281 (0x8e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915418F, serialNumber=D1B6BE7CD51545813EC31766807ACDD987A90FDF Validity Not Before: May 30 20:39:16 2025 GMT Not After : Jun 6 20:39:16 2025 GMT Subject: CN=683a1774-c3d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ce:d7:be:12:0b:b7:98:ac:4d:17:37:25:d1: 2d:f8:8b:79:60:4e:e7:96:5c:3d:a4:c2:c3:6a:8e: 52:6e:ae:de:42:22:d1:25:dd:bf:66:ef:ee:df:89: bf:f9:46:2a:9b:d1:63:42:43:f3:03:57:5b:5d:dc: ec:bb:ef:76:d6:9d:8d:60:e6:40:20:5d:20:9d:bb: b4:e4:c1:7a:a4:03:ae:61:a7:08:09:f8:e2:b9:7a: eb:d8:1a:aa:ed:b3:c2:42:8b:dc:60:ee:25:3a:ea: ba:58:55:72:c9:68:12:60:64:64:a9:9b:20:2c:b2: e6:59:83:a1:70:8e:24:90:e5:8a:ba:50:68:ee:23: 7f:fc:43:3b:10:c3:f5:65:50:f8:e5:4c:43:30:79: 0b:7e:cf:c4:7e:22:9d:d4:50:61:66:98:01:76:7e: c3:d6:fc:1d:6c:81:ba:ab:b3:c1:33:4b:78:d2:d3: 78:65:17:8f:05:89:b0:87:50:f7:67:6b:84:d5:0a: ab:40:31:59:76:7e:90:4c:24:60:56:32:02:fd:95: e7:86:c0:eb:76:c7:56:d5:aa:97:34:97:d5:73:76: 3c:87:69:9c:66:6a:90:05:47:22:5d:a7:37:de:58: 04:ac:dd:4b:a4:dc:ce:dd:97:b9:ea:3f:30:a5:4c: 9b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:AC:79:59:6E:53:C1:D8:F7:BA:C8:BD:6B:76:75:48:A4:00:C8:C9 X509v3 Authority Key Identifier: keyid:D1:B6:BE:7C:D5:15:45:81:3E:C3:17:66:80:7A:CD:D9:87:A9:0F:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ba-fNUVRYE-wxdmgHrN2YepD98.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:95:d7:27:af:52:27:b8:b7:e6:3f:85:fe:c2:46:40:e1:ab: be:66:0a:2d:b9:58:d7:75:ff:44:e8:66:41:33:25:bd:0a:1b: cf:f6:45:8c:38:46:26:07:9e:3e:32:ad:e2:92:f7:78:f4:9b: 14:1c:ef:1e:e1:52:4d:92:b7:da:6a:b6:ba:ec:25:9a:1a:6e: 4e:5f:9e:ed:35:9c:e3:1d:f3:eb:cc:ed:82:2e:a6:52:50:74: 18:51:38:a1:78:32:eb:a7:4e:f6:8c:14:cf:22:f2:64:22:bf: 33:5e:e6:77:9b:6a:3d:71:18:ee:22:07:08:b9:4b:6f:95:3f: 1c:ff:40:64:65:38:6d:20:7e:a8:02:35:64:a0:22:4a:27:d6: 9d:33:86:c0:6b:03:40:2a:1c:d8:e2:95:6b:72:fb:18:44:2a: 53:56:42:2e:9a:31:28:53:5f:e1:6d:79:5a:83:de:a0:18:8a: 18:e3:ed:3f:7d:1c:22:5d:bb:f1:e1:5c:fe:33:2d:55:f4:f8: 46:5b:06:78:8c:ec:81:26:2d:78:55:76:77:97:75:e7:7e:5f: 88:39:40:e6:34:4a:9e:82:8e:04:6b:e0:57:e2:e3:6f:c6:5c: d7:76:b3:15:e1:90:a7:0f:7d:32:c1:27:bb:f2:8b:5d:03:60: fa:38:29:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQxOEYxMTAvBgNVBAUTKEQxQjZCRTdDRDUxNTQ1ODEzRUMzMTc2NjgwN0FDREQ5 ODdBOTBGREYwHhcNMjUwNTMwMjAzOTE2WhcNMjUwNjA2MjAzOTE2WjAYMRYwFAYD VQQDEw02ODNhMTc3NC1jM2Q0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy87XvhILt5isTRc3JdEt+It5YE7nllw9pMLDao5Sbq7eQiLRJd2/Zu/u34m/ +UYqm9FjQkPzA1dbXdzsu+921p2NYOZAIF0gnbu05MF6pAOuYacICfjiuXrr2Bqq 7bPCQovcYO4lOuq6WFVyyWgSYGRkqZsgLLLmWYOhcI4kkOWKulBo7iN//EM7EMP1 ZVD45UxDMHkLfs/EfiKd1FBhZpgBdn7D1vwdbIG6q7PBM0t40tN4ZRePBYmwh1D3 Z2uE1QqrQDFZdn6QTCRgVjIC/ZXnhsDrdsdW1aqXNJfVc3Y8h2mcZmqQBUciXac3 3lgErN1LpNzO3Ze56j8wpUybpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI2seVlu U8HY97rIvWt2dUikAMjJMB8GA1UdIwQYMBaAFNG2vnzVFUWBPsMXZoB6zdmHqQ/f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDE4Ri83NUI5MEQyNEFG QjgxMUVBQTc2RTVFN0JDNEY5QUUwMi8wYmEtZk5VVlJZRS13eGRtZ0hyTjJZZXBE OTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBiYS1mTlVWUllFLXd4ZG1nSHJOMlllcEQ5OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDE4Ri83NUI5MEQyNEFGQjgxMUVBQTc2RTVFN0JDNEY5QUUwMi8wYmEtZk5VVlJZ RS13eGRtZ0hyTjJZZXBEOTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVldcnr1InuLfmP4X+wkZA4au+ZgotuVjXdf9E6GZBMyW9ChvP9kWM OEYmB54+Mq3ikvd49JsUHO8e4VJNkrfaara67CWaGm5OX57tNZzjHfPrzO2CLqZS UHQYUTiheDLrp072jBTPIvJkIr8zXuZ3m2o9cRjuIgcIuUtvlT8c/0BkZThtIH6o AjVkoCJKJ9adM4bAawNAKhzY4pVrcvsYRCpTVkIumjEoU1/hbXlag96gGIoY4+0/ fRwiXbvx4Vz+My1V9PhGWwZ4jOyBJi14VXZ3l3Xnfl+IOUDmNEqego4Ea+BX4uNv xlzXdrMV4ZCnD30ywSe78otdA2D6OClS -----END CERTIFICATE-----Generated at Sat May 31 16:47:46 2025 by rpki-client