$ rpki-client -vvf rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft File: aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft (raw, json) Hash identifier: i1xmhX3nwFipEYy6wTFgXXe/pJipVX4cIDSVwXTzXoc= Subject key identifier: 1A:5A:C3:E0:6D:B1:B5:6B:C2:1D:DA:DC:7F:3D:34:C5:E2:09:2C:6E Authority key identifier: 68:11:04:90:6C:F9:3D:A4:3B:6C:5B:21:35:A0:24:14:9A:8F:C0:57 Certificate issuer: /CN=A9156751/serialNumber=681104906CF93DA43B6C5B2135A024149A8FC057 Certificate serial: 02B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBEEkGz5PaQ7bFshNaAkFJqPwFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft Manifest number: 02B2 Signing time: Thu 05 Jun 2025 01:18:29 +0000 Manifest this update: Thu 05 Jun 2025 01:18:28 +0000 Manifest next update: Thu 12 Jun 2025 01:18:28 +0000 Files and hashes: 1: aBEEkGz5PaQ7bFshNaAkFJqPwFc.crl (hash: LOJ0N9w4HgyDPk4UdacCfN9mudb1a00oZG5cfWlFykc=) 2: 776724AAF7B711ECAE4F7935C4F9AE02.roa (hash: PKEZfZTmj/mGEPOfYVGBRNahCa+W7goVh1g1wDRTSDE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.crl rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBEEkGz5PaQ7bFshNaAkFJqPwFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 01:18:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 693 (0x2b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156751, serialNumber=681104906CF93DA43B6C5B2135A024149A8FC057 Validity Not Before: Jun 5 01:18:28 2025 GMT Not After : Jun 12 01:18:28 2025 GMT Subject: CN=6840f065-d5b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cb:bd:f4:01:57:0b:76:76:d1:17:fb:f9:b6: 85:e2:a4:a1:d7:9a:eb:2d:1a:77:f0:23:f3:c1:0a: d4:14:47:6a:3a:cb:97:76:22:83:a1:60:32:27:99: a6:00:4b:9a:b9:f9:06:70:a3:8d:42:df:9f:e3:77: 88:67:08:e8:d8:36:ce:db:33:4e:d6:31:2f:30:30: 8d:f0:70:c8:a1:e4:24:1c:97:fc:90:c9:02:99:c7: 27:17:2f:e6:95:d2:26:b7:df:52:ce:a9:86:68:ce: 6f:e2:0e:1e:6e:85:45:5a:52:71:24:5e:ab:d3:c0: c5:38:b9:6c:9c:40:00:59:8a:2f:8c:89:c0:f9:a8: 36:88:2a:a4:ef:5d:ee:c7:01:27:77:80:05:69:91: 6d:07:c6:ee:e3:80:c0:53:c1:2c:14:74:8e:f6:d0: a1:1e:22:1f:41:ed:c5:5b:28:ef:f2:b0:da:70:79: 3e:12:59:2a:29:95:62:8e:2f:4e:db:10:5e:9e:65: d5:cd:d8:b2:8c:95:a7:65:02:69:cb:a0:27:b6:83: 06:1d:43:83:5f:e2:56:76:4f:5e:4f:73:d5:89:a4: d1:05:f7:95:3d:3b:a4:98:90:80:ae:7b:c9:6e:ad: 59:93:71:21:c3:7a:f4:d5:f2:ca:49:9e:c2:72:95: 8e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:5A:C3:E0:6D:B1:B5:6B:C2:1D:DA:DC:7F:3D:34:C5:E2:09:2C:6E X509v3 Authority Key Identifier: keyid:68:11:04:90:6C:F9:3D:A4:3B:6C:5B:21:35:A0:24:14:9A:8F:C0:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBEEkGz5PaQ7bFshNaAkFJqPwFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:c9:e2:ae:0c:28:7c:ec:21:f4:14:54:0b:bb:75:07:94:fd: 74:15:f6:39:f2:02:41:e6:00:b2:fb:b0:27:23:e9:c4:a7:5d: eb:fb:a2:25:89:d6:8b:1e:94:81:15:45:23:6d:da:9d:ce:ec: e3:07:bb:a4:62:94:6b:4f:d0:71:89:b6:1c:2d:ac:57:b3:ae: 81:a2:69:b1:ed:76:3e:11:90:e0:52:29:17:6f:4b:e1:b8:45: 4c:20:4a:09:a8:7a:4c:08:7c:66:3d:f0:8d:2a:a2:d0:09:20: 78:bc:bc:04:8a:78:3e:14:8a:f3:eb:92:e3:8b:7d:4a:07:a7: c1:f8:4e:f5:7c:f1:92:6c:77:ec:9c:56:e6:57:3f:9d:c4:49: 69:6f:99:6f:60:19:38:77:a6:3e:f8:99:c1:e2:8b:dd:b2:6e: 31:25:2e:eb:96:0b:e1:76:a3:bd:96:2e:b9:f0:35:6d:f5:e4: 84:a6:e1:64:a4:ce:02:06:c9:a3:f5:3e:da:80:6d:21:a1:48: 63:2a:a8:f7:dc:32:53:86:de:5a:60:ce:5c:d9:0a:56:0f:e4: 07:92:ae:05:a6:ef:9e:dc:87:11:2b:34:5e:0d:6b:af:c9:da: 20:88:87:d7:63:fb:e0:68:d9:92:4f:df:37:91:6d:de:99:17: 3b:08:72:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY3NTExMTAvBgNVBAUTKDY4MTEwNDkwNkNGOTNEQTQzQjZDNUIyMTM1QTAyNDE0 OUE4RkMwNTcwHhcNMjUwNjA1MDExODI4WhcNMjUwNjEyMDExODI4WjAYMRYwFAYD VQQDEw02ODQwZjA2NS1kNWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt8u99AFXC3Z20Rf7+baF4qSh15rrLRp38CPzwQrUFEdqOsuXdiKDoWAyJ5mm AEuaufkGcKONQt+f43eIZwjo2DbO2zNO1jEvMDCN8HDIoeQkHJf8kMkCmccnFy/m ldImt99SzqmGaM5v4g4eboVFWlJxJF6r08DFOLlsnEAAWYovjInA+ag2iCqk713u xwEnd4AFaZFtB8bu44DAU8EsFHSO9tChHiIfQe3FWyjv8rDacHk+ElkqKZViji9O 2xBenmXVzdiyjJWnZQJpy6AntoMGHUODX+JWdk9eT3PViaTRBfeVPTukmJCArnvJ bq1Zk3Ehw3r01fLKSZ7CcpWOmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBpaw+Bt sbVrwh3a3H89NMXiCSxuMB8GA1UdIwQYMBaAFGgRBJBs+T2kO2xbITWgJBSaj8BX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Njc1MS8wRjg3MDJCQUY3 QjIxMUVDQjJBRTYzMkVDNEY5QUUwMi9hQkVFa0d6NVBhUTdiRnNoTmFBa0ZKcVB3 RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FCRUVrR3o1UGFRN2JGc2hOYUFrRkpxUHdGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Njc1MS8wRjg3MDJCQUY3QjIxMUVDQjJBRTYzMkVDNEY5QUUwMi9hQkVFa0d6NVBh UTdiRnNoTmFBa0ZKcVB3RmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlyeKuDCh87CH0FFQLu3UHlP10FfY58gJB5gCy+7AnI+nEp13r+6Il idaLHpSBFUUjbdqdzuzjB7ukYpRrT9BxibYcLaxXs66Bommx7XY+EZDgUikXb0vh uEVMIEoJqHpMCHxmPfCNKqLQCSB4vLwEing+FIrz65Lji31KB6fB+E71fPGSbHfs nFbmVz+dxElpb5lvYBk4d6Y++JnB4ovdsm4xJS7rlgvhdqO9li658DVt9eSEpuFk pM4CBsmj9T7agG0hoUhjKqj33DJTht5aYM5c2QpWD+QHkq4Fpu+e3IcRKzReDWuv ydogiIfXY/vgaNmST983kW3emRc7CHLN -----END CERTIFICATE-----Generated at Thu Jun 5 19:13:09 2025 by rpki-client