$ rpki-client -vvf rpki.apnic.net/member_repository/A9156854/DD90C3C0CB2311EF9E86682EC4F9AE02/badIHjljLTOANmkPe0OixINj22g.mft File: badIHjljLTOANmkPe0OixINj22g.mft (raw, json) Hash identifier: EyvkRMhnuDN0DFI+JsxDiFDXOcbry7lnkltFH9f7jOw= Subject key identifier: 85:86:4D:71:15:36:29:CD:76:42:CB:2C:88:8D:25:07:1A:0E:6F:FC Authority key identifier: 6D:A7:48:1E:39:63:2D:33:80:36:69:0F:7B:43:A2:C4:83:63:DB:68 Certificate issuer: /CN=A9156854/serialNumber=6DA7481E39632D338036690F7B43A2C48363DB68 Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/badIHjljLTOANmkPe0OixINj22g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156854/DD90C3C0CB2311EF9E86682EC4F9AE02/badIHjljLTOANmkPe0OixINj22g.mft Manifest number: 4B Signing time: Sat 31 May 2025 06:52:08 +0000 Manifest this update: Sat 31 May 2025 06:52:07 +0000 Manifest next update: Sat 07 Jun 2025 06:52:07 +0000 Files and hashes: 1: badIHjljLTOANmkPe0OixINj22g.crl (hash: NfBb2i1GrB89u+mC+asAqxlxF+80WbEkhl829gAkWXM=) 2: CCE068D6CB2411EF93F63631C4F9AE02.roa (hash: ZSOsUiVtVH7stSF1LBrKEfbqy25tB+towx5vwiTWj1U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156854/DD90C3C0CB2311EF9E86682EC4F9AE02/badIHjljLTOANmkPe0OixINj22g.crl rsync://rpki.apnic.net/member_repository/A9156854/DD90C3C0CB2311EF9E86682EC4F9AE02/badIHjljLTOANmkPe0OixINj22g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/badIHjljLTOANmkPe0OixINj22g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:52:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156854, serialNumber=6DA7481E39632D338036690F7B43A2C48363DB68 Validity Not Before: May 31 06:52:07 2025 GMT Not After : Jun 7 06:52:07 2025 GMT Subject: CN=683aa717-671b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6d:4a:1e:c3:b9:5a:29:21:40:b3:e7:fb:6a: 8c:73:1a:4b:91:c1:3b:cc:e4:9d:f5:d8:2b:33:5c: e4:8b:dd:a8:4e:b9:5a:07:d3:ed:8d:dc:01:94:0d: 8c:73:61:d5:ad:49:0a:48:8a:88:50:b2:76:71:89: d0:04:57:cb:c5:88:5f:a0:c2:6d:c2:b5:78:d7:8a: 30:1a:16:b6:e6:b5:53:65:95:58:a8:a4:8d:c8:f2: b1:01:4e:bf:0e:98:3e:9e:37:b8:6b:d2:c7:1b:29: a5:5d:54:e0:c1:8c:2b:e6:83:32:be:00:51:fd:7e: 8d:fd:fc:31:0e:a9:9a:5f:53:9f:9c:44:5c:09:9d: eb:4b:3a:65:e4:26:a9:55:24:bc:8f:b0:f2:d0:5c: 11:e1:66:bc:0a:e5:9d:99:48:b6:42:56:2d:4e:c1: 9a:95:42:04:c1:2c:c0:4e:e5:20:d0:eb:36:99:93: 8f:28:86:60:a7:75:09:93:cf:0c:10:da:15:87:9c: 52:d2:fc:22:ba:85:c2:e0:96:9b:b7:53:77:66:7f: 10:10:45:33:cb:d6:65:b6:b5:66:68:83:f8:9d:f2: 8f:50:5f:d6:ca:6c:2b:46:68:06:ed:06:f3:c3:8d: c4:51:f1:52:40:90:b3:75:ef:7f:d9:15:a9:46:95: 49:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:86:4D:71:15:36:29:CD:76:42:CB:2C:88:8D:25:07:1A:0E:6F:FC X509v3 Authority Key Identifier: keyid:6D:A7:48:1E:39:63:2D:33:80:36:69:0F:7B:43:A2:C4:83:63:DB:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156854/DD90C3C0CB2311EF9E86682EC4F9AE02/badIHjljLTOANmkPe0OixINj22g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/badIHjljLTOANmkPe0OixINj22g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156854/DD90C3C0CB2311EF9E86682EC4F9AE02/badIHjljLTOANmkPe0OixINj22g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:b3:32:85:42:70:2c:8a:da:57:0d:3d:b7:2d:d3:69:4a:32: 6e:17:ed:d0:0e:4e:10:9b:9e:66:82:c5:62:31:53:36:67:ce: 18:c3:5c:b2:51:d0:1f:61:6a:19:ef:c2:49:b4:0e:73:28:2c: 31:e5:9e:76:16:52:ca:a3:28:38:c4:6d:b0:ff:5e:a7:07:e9: fa:30:a1:dd:bb:d0:c0:12:a0:a5:ce:ff:5f:eb:a2:86:2d:82: e6:4a:69:80:b6:de:eb:53:62:ff:e1:84:30:02:63:a0:cd:bb: 8a:56:f6:ea:f5:b9:2c:e6:39:35:0e:b6:80:0a:9f:5c:95:49: f9:42:f4:50:70:69:28:2d:1e:7b:7e:a7:e2:35:d8:0c:96:82: ab:87:0d:46:0d:92:c9:6e:02:2e:f6:3e:c0:61:90:7f:9f:98: ff:27:60:02:8b:c0:e1:32:36:df:7f:2b:ab:aa:7a:bb:8b:32: 8f:52:43:44:2e:93:45:e2:6f:d7:29:92:71:0d:f7:39:ba:ef: c6:ae:3b:cc:51:4b:96:5e:51:bb:15:3a:5d:2d:3c:df:4e:bb: 6f:53:44:dd:3f:b4:46:0f:b3:bb:76:d6:8b:14:6f:c3:82:bf: 75:39:d9:65:80:8d:03:6d:d3:9d:a2:77:23:43:a5:11:62:c5: c1:37:af:30 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 Njg1NDExMC8GA1UEBRMoNkRBNzQ4MUUzOTYzMkQzMzgwMzY2OTBGN0I0M0EyQzQ4 MzYzREI2ODAeFw0yNTA1MzEwNjUyMDdaFw0yNTA2MDcwNjUyMDdaMBgxFjAUBgNV BAMTDTY4M2FhNzE3LTY3MWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3bUoew7laKSFAs+f7aoxzGkuRwTvM5J312CszXOSL3ahOuVoH0+2N3AGUDYxz YdWtSQpIiohQsnZxidAEV8vFiF+gwm3CtXjXijAaFrbmtVNllViopI3I8rEBTr8O mD6eN7hr0scbKaVdVODBjCvmgzK+AFH9fo39/DEOqZpfU5+cRFwJnetLOmXkJqlV JLyPsPLQXBHhZrwK5Z2ZSLZCVi1OwZqVQgTBLMBO5SDQ6zaZk48ohmCndQmTzwwQ 2hWHnFLS/CK6hcLglpu3U3dmfxAQRTPL1mW2tWZog/id8o9QX9bKbCtGaAbtBvPD jcRR8VJAkLN173/ZFalGlUlVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhYZNcRU2 Kc12QsssiI0lBxoOb/wwHwYDVR0jBBgwFoAUbadIHjljLTOANmkPe0OixINj22gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2ODU0L0REOTBDM0MwQ0Iy MzExRUY5RTg2NjgyRUM0RjlBRTAyL2JhZElIamxqTFRPQU5ta1BlME9peElOajIy Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYmFkSUhqbGpMVE9BTm1rUGUwT2l4SU5qMjJnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2 ODU0L0REOTBDM0MwQ0IyMzExRUY5RTg2NjgyRUM0RjlBRTAyL2JhZElIamxqTFRP QU5ta1BlME9peElOajIyZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEmzMoVCcCyK2lcNPbct02lKMm4X7dAOThCbnmaCxWIxUzZnzhjDXLJR 0B9hahnvwkm0DnMoLDHlnnYWUsqjKDjEbbD/XqcH6fowod270MASoKXO/1/rooYt guZKaYC23utTYv/hhDACY6DNu4pW9ur1uSzmOTUOtoAKn1yVSflC9FBwaSgtHnt+ p+I12AyWgquHDUYNksluAi72PsBhkH+fmP8nYAKLwOEyNt9/K6uqeruLMo9SQ0Qu k0Xib9cpknEN9zm678auO8xRS5ZeUbsVOl0tPN9Ou29TRN0/tEYPs7t21osUb8OC v3U52WWAjQNt052idyNDpRFixcE3rzA= -----END CERTIFICATE-----Generated at Sat May 31 17:03:31 2025 by rpki-client