$ rpki-client -vvf rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft File: BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft (raw, json) Hash identifier: gKMnxvm1uPi8LmpM/WCLyRmgo2UNFeERRIm7p4Cl9QE= Subject key identifier: 6A:81:21:18:1B:EB:71:B0:16:A3:55:3B:38:5E:69:EE:C6:E0:40:7E Authority key identifier: 05:D2:4B:3B:8A:22:27:B6:FE:E9:2D:CD:25:D5:4B:F0:5E:E8:68:CA Certificate issuer: /CN=A9157724/serialNumber=05D24B3B8A2227B6FEE92DCD25D54BF05EE868CA Certificate serial: 0123 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft Manifest number: 011E Signing time: Thu 05 Jun 2025 04:14:52 +0000 Manifest this update: Thu 05 Jun 2025 04:14:51 +0000 Manifest next update: Thu 12 Jun 2025 04:14:51 +0000 Files and hashes: 1: BdJLO4oiJ7b-6S3NJdVL8F7oaMo.crl (hash: pQ1yzKhvdVwlLAA8CEg/aDCOIc+XcdXjuA/VL0/J+b4=) 2: 6063C75CB6E411EE94471D14C4F9AE02.roa (hash: HDfP4LwrloNXU1nzvfFcUeha0pVa0Ubh8d+qNote20c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.crl rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 04:14:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 291 (0x123) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157724, serialNumber=05D24B3B8A2227B6FEE92DCD25D54BF05EE868CA Validity Not Before: Jun 5 04:14:51 2025 GMT Not After : Jun 12 04:14:51 2025 GMT Subject: CN=684119bc-5da2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f0:22:64:32:30:d4:d9:51:88:fe:ee:04:3c: e6:88:2c:1c:ef:e5:a7:14:a5:39:4e:22:a2:f9:03: f7:60:a9:68:37:bc:07:23:22:74:f7:40:29:46:70: da:2b:00:ef:59:c4:84:31:9b:d6:ed:98:ea:1c:c3: f9:b8:01:8a:00:91:5c:85:de:f9:16:f3:d9:77:29: c5:6e:4a:a0:0d:51:92:09:6d:a3:8d:7a:f8:3f:79: 20:48:2f:f7:1b:46:51:b7:44:cd:d6:06:c5:a6:23: ea:04:7b:2e:1b:e2:be:8c:77:15:53:88:b0:74:ac: ce:3b:94:ec:a3:77:74:a5:29:f2:e9:da:ad:00:0b: d9:30:dc:25:fb:fd:62:25:df:c6:65:fe:b0:78:64: fc:de:f0:40:86:55:f0:04:2e:f7:e3:ab:87:d4:d3: 32:85:fa:d2:29:98:56:b7:d5:1a:1d:df:1e:85:2f: 85:e6:c1:dd:4a:8f:05:f2:62:d7:44:61:11:36:20: c1:0a:61:9f:44:c2:9d:f2:91:61:94:c0:60:38:a2: 95:4a:40:d8:b9:86:a3:86:c7:ad:b6:5a:53:72:fa: 97:a3:4f:d1:ad:05:c9:84:c6:49:84:48:50:9c:30: b8:b9:7e:0e:09:bf:11:af:2f:80:bc:e0:f7:e0:24: 06:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:81:21:18:1B:EB:71:B0:16:A3:55:3B:38:5E:69:EE:C6:E0:40:7E X509v3 Authority Key Identifier: keyid:05:D2:4B:3B:8A:22:27:B6:FE:E9:2D:CD:25:D5:4B:F0:5E:E8:68:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:ad:ce:9a:7d:45:5f:10:d4:e4:5c:4a:77:e7:3b:f2:a7:a0: 7f:d6:16:f9:1e:6f:e2:fc:31:7c:40:40:3d:dc:1d:2c:32:6d: d8:50:03:32:62:a8:cb:b4:da:8a:43:c6:f7:7e:f8:07:c9:9e: e3:83:8c:80:dc:04:1b:46:eb:48:e5:72:cd:03:61:74:bc:6a: 38:e6:14:77:67:46:c9:2b:fb:e1:33:40:31:98:8f:12:29:6d: cc:18:ce:8f:eb:5b:89:46:2c:56:25:86:80:91:ce:ea:58:4c: 51:1b:ce:45:31:a9:78:6f:17:84:98:f6:62:af:e4:0f:f4:f9: d1:25:5f:37:07:a9:79:2b:47:97:2b:7f:b1:24:cb:19:e0:8b: 6a:52:a8:7b:bc:0f:82:a6:8e:2d:7b:18:e3:4e:59:72:d3:60: 9b:3b:90:50:dd:36:0f:28:19:a2:38:4f:51:f7:88:70:07:f9: 1c:6f:86:11:8b:0c:d0:f7:61:eb:33:03:9a:cb:4e:6f:04:66: 5a:fc:4f:9e:8e:77:e1:68:94:cc:4a:01:e1:35:7a:9e:01:f0: 6e:0f:69:01:2d:2d:ce:eb:54:d0:16:c4:f4:76:7a:98:c3:18: 87:c3:18:c1:0f:87:cf:72:af:5e:31:55:b0:d7:cf:e6:71:5d: f3:80:45:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTc3MjQxMTAvBgNVBAUTKDA1RDI0QjNCOEEyMjI3QjZGRUU5MkRDRDI1RDU0QkYw NUVFODY4Q0EwHhcNMjUwNjA1MDQxNDUxWhcNMjUwNjEyMDQxNDUxWjAYMRYwFAYD VQQDEw02ODQxMTliYy01ZGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw/AiZDIw1NlRiP7uBDzmiCwc7+WnFKU5TiKi+QP3YKloN7wHIyJ090ApRnDa KwDvWcSEMZvW7ZjqHMP5uAGKAJFchd75FvPZdynFbkqgDVGSCW2jjXr4P3kgSC/3 G0ZRt0TN1gbFpiPqBHsuG+K+jHcVU4iwdKzOO5Tso3d0pSny6dqtAAvZMNwl+/1i Jd/GZf6weGT83vBAhlXwBC7346uH1NMyhfrSKZhWt9UaHd8ehS+F5sHdSo8F8mLX RGERNiDBCmGfRMKd8pFhlMBgOKKVSkDYuYajhsettlpTcvqXo0/RrQXJhMZJhEhQ nDC4uX4OCb8Rry+AvOD34CQG+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGqBIRgb 63GwFqNVOzheae7G4EB+MB8GA1UdIwQYMBaAFAXSSzuKIie2/uktzSXVS/Be6GjK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzcyNC9ENzM5ODcyODk1 ODcxMUVFQUQzQkIyNjJDNEY5QUUwMi9CZEpMTzRvaUo3Yi02UzNOSmRWTDhGN29h TW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JkSkxPNG9pSjdiLTZTM05KZFZMOEY3b2FNby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzcyNC9ENzM5ODcyODk1ODcxMUVFQUQzQkIyNjJDNEY5QUUwMi9CZEpMTzRvaUo3 Yi02UzNOSmRWTDhGN29hTW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJrc6afUVfENTkXEp35zvyp6B/1hb5Hm/i/DF8QEA93B0sMm3YUAMy YqjLtNqKQ8b3fvgHyZ7jg4yA3AQbRutI5XLNA2F0vGo45hR3Z0bJK/vhM0AxmI8S KW3MGM6P61uJRixWJYaAkc7qWExRG85FMal4bxeEmPZir+QP9PnRJV83B6l5K0eX K3+xJMsZ4ItqUqh7vA+Cpo4texjjTlly02CbO5BQ3TYPKBmiOE9R94hwB/kcb4YR iwzQ92HrMwOay05vBGZa/E+ejnfhaJTMSgHhNXqeAfBuD2kBLS3O61TQFsT0dnqY wxiHwxjBD4fPcq9eMVWw18/mcV3zgEVi -----END CERTIFICATE-----Generated at Fri Jun 6 17:07:45 2025 by rpki-client