$ rpki-client -vvf rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft File: D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft (raw, json) Hash identifier: G8gpeS64Y4n4Dmuod2O5VUNj9FpfTz91z9n2X7AJCJs= Subject key identifier: BE:8B:A3:68:D6:CA:80:54:6D:56:9B:EC:CB:CC:A1:3E:55:F0:C0:CE Authority key identifier: 0F:E0:63:24:F1:78:7C:8F:21:4F:BE:AE:67:D8:86:D2:2F:81:67:02 Certificate issuer: /CN=A9156B5D/serialNumber=0FE06324F1787C8F214FBEAE67D886D22F816702 Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-BjJPF4fI8hT76uZ9iG0i-BZwI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft Manifest number: 33 Signing time: Sat 31 May 2025 07:11:54 +0000 Manifest this update: Sat 31 May 2025 07:11:53 +0000 Manifest next update: Sat 07 Jun 2025 07:11:53 +0000 Files and hashes: 1: D-BjJPF4fI8hT76uZ9iG0i-BZwI.crl (hash: 4U4eYhT1VtAngFud6FIldvWjdajO6qf59OCo4KTjync=) 2: 8CF57F0EF1C111EFAC8BCA59C4F9AE02.roa (hash: BMK5egNvgRPb4zFSiHjhQ8AJphJuXdtk94523bl6Tzs=) 3: 41554C78F1C111EFA67D2459C4F9AE02.roa (hash: waSBCEbcYlolsmBXhQe06r7v3tswwJfsDI5vXs6FVRA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.crl rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-BjJPF4fI8hT76uZ9iG0i-BZwI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:11:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156B5D, serialNumber=0FE06324F1787C8F214FBEAE67D886D22F816702 Validity Not Before: May 31 07:11:53 2025 GMT Not After : Jun 7 07:11:53 2025 GMT Subject: CN=683aabba-ef40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3d:4d:4a:13:6c:d7:26:f0:3d:a1:98:7c:84: e5:63:5b:9d:38:c6:7a:d7:ac:74:d8:b9:f5:85:d7: 6c:9b:39:74:fa:0a:1c:6c:0e:32:5e:e3:6f:45:dc: d8:f1:7b:58:79:e4:c5:e8:63:19:3d:7d:b7:2b:be: 46:39:4b:9c:39:4d:a0:08:e7:f6:2a:12:82:be:c4: 66:2a:66:f3:b3:7f:64:39:b9:50:a0:78:e8:a6:39: cf:7c:ca:42:9d:8d:31:9a:9e:e3:e4:ee:54:be:b5: 9f:5a:f6:d2:74:81:25:fb:3b:26:67:cb:98:b6:ee: 9f:07:1a:70:46:ee:7e:c8:e8:69:a7:42:8c:6b:b6: 9d:2f:54:60:f4:28:83:51:f4:6a:86:d9:2d:07:62: 67:60:3f:35:b4:99:40:31:32:5e:bc:26:fa:59:5c: 4f:6d:e7:54:ad:5c:ae:7e:69:57:7a:8f:1b:74:0a: c3:d0:81:0c:c0:9d:78:5b:a9:20:2e:42:a7:de:57: 02:16:d4:69:e1:21:2b:05:4e:7c:ee:b5:72:5d:ae: 7b:83:96:0e:5e:f0:48:42:7d:98:06:f5:9f:45:f2: a6:08:d5:66:5c:24:c1:c5:cd:b5:7b:ec:c0:f9:b3: a1:fb:16:ce:20:ff:88:b0:9a:60:c3:30:86:0c:f1: ac:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:8B:A3:68:D6:CA:80:54:6D:56:9B:EC:CB:CC:A1:3E:55:F0:C0:CE X509v3 Authority Key Identifier: keyid:0F:E0:63:24:F1:78:7C:8F:21:4F:BE:AE:67:D8:86:D2:2F:81:67:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-BjJPF4fI8hT76uZ9iG0i-BZwI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:36:fa:a7:e2:74:c6:d4:f0:f8:de:ee:aa:f6:dc:3d:68:d0: 9c:ae:f9:11:a0:a0:8c:60:dc:0b:04:af:71:6b:72:48:29:57: 5c:5a:33:29:5f:92:80:c8:55:ae:43:56:4a:1e:2d:78:b2:4d: 88:0a:5d:b4:91:d0:5e:2d:75:a8:d8:30:d8:03:98:eb:36:dd: 33:02:39:03:73:0f:a9:7d:ca:a9:54:92:0e:88:6f:8b:0b:91: 96:59:cd:88:eb:59:aa:2f:5e:28:49:53:08:c9:c1:b8:c4:d7: 31:12:cc:b2:0a:83:c1:42:33:f9:0b:4c:e1:da:aa:48:c9:13: e2:d1:67:f3:50:6d:11:37:6e:f8:96:17:fa:b8:39:b8:4e:79: 92:3c:41:a4:c3:81:e5:92:c8:01:10:71:4a:db:cd:c0:d6:db: a8:25:10:e2:49:f1:74:c3:36:30:38:e3:82:a3:9f:c1:6a:c1: 10:3e:ce:f3:14:63:c8:2e:d6:86:67:b6:b5:43:a5:8d:4f:ae: 5a:2a:ce:4b:b3:43:c7:6d:f8:74:d4:79:ae:88:24:30:b8:46: b2:5f:05:87:dd:e1:e2:62:12:aa:98:ea:b9:e6:af:25:56:3c: c1:73:5c:be:38:bc:5f:dc:a4:56:57:a7:16:45:ba:16:c6:7c: 97:ac:d2:88 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NkI1RDExMC8GA1UEBRMoMEZFMDYzMjRGMTc4N0M4RjIxNEZCRUFFNjdEODg2RDIy RjgxNjcwMjAeFw0yNTA1MzEwNzExNTNaFw0yNTA2MDcwNzExNTNaMBgxFjAUBgNV BAMTDTY4M2FhYmJhLWVmNDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1PU1KE2zXJvA9oZh8hOVjW504xnrXrHTYufWF12ybOXT6ChxsDjJe429F3Njx e1h55MXoYxk9fbcrvkY5S5w5TaAI5/YqEoK+xGYqZvOzf2Q5uVCgeOimOc98ykKd jTGanuPk7lS+tZ9a9tJ0gSX7OyZny5i27p8HGnBG7n7I6GmnQoxrtp0vVGD0KINR 9GqG2S0HYmdgPzW0mUAxMl68JvpZXE9t51StXK5+aVd6jxt0CsPQgQzAnXhbqSAu QqfeVwIW1GnhISsFTnzutXJdrnuDlg5e8EhCfZgG9Z9F8qYI1WZcJMHFzbV77MD5 s6H7Fs4g/4iwmmDDMIYM8axpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvoujaNbK gFRtVpvsy8yhPlXwwM4wHwYDVR0jBBgwFoAUD+BjJPF4fI8hT76uZ9iG0i+BZwIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2QjVELzk4RkQxQTQyRjFD MDExRUZBNTcxNkI1NEM0RjlBRTAyL0QtQmpKUEY0Zkk4aFQ3NnVaOWlHMGktQlp3 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRC1CakpQRjRmSThoVDc2dVo5aUcwaS1CWndJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2 QjVELzk4RkQxQTQyRjFDMDExRUZBNTcxNkI1NEM0RjlBRTAyL0QtQmpKUEY0Zkk4 aFQ3NnVaOWlHMGktQlp3SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFQ2+qfidMbU8Pje7qr23D1o0Jyu+RGgoIxg3AsEr3FrckgpV1xaMylf koDIVa5DVkoeLXiyTYgKXbSR0F4tdajYMNgDmOs23TMCOQNzD6l9yqlUkg6Ib4sL kZZZzYjrWaovXihJUwjJwbjE1zESzLIKg8FCM/kLTOHaqkjJE+LRZ/NQbRE3bviW F/q4ObhOeZI8QaTDgeWSyAEQcUrbzcDW26glEOJJ8XTDNjA444Kjn8FqwRA+zvMU Y8gu1oZntrVDpY1PrloqzkuzQ8dt+HTUea6IJDC4RrJfBYfd4eJiEqqY6rnmryVW PMFzXL44vF/cpFZXpxZFuhbGfJes0og= -----END CERTIFICATE-----Generated at Sat May 31 17:53:11 2025 by rpki-client