$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft File: bifP0YnuRkQx1LkBO8wHWKgCZOY.mft (raw, json) Hash identifier: EiBJa5O/FiNdeqHylFPncotB31BrEI9IRTZrdohRBoc= Subject key identifier: 0F:E6:98:65:77:7C:09:A1:2F:07:B2:F5:60:FE:14:B3:A5:E0:42:2C Authority key identifier: 6E:27:CF:D1:89:EE:46:44:31:D4:B9:01:3B:CC:07:58:A8:02:64:E6 Certificate issuer: /CN=A9157D13/serialNumber=6E27CFD189EE464431D4B9013BCC0758A80264E6 Certificate serial: 18BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bifP0YnuRkQx1LkBO8wHWKgCZOY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft Manifest number: 18A4 Signing time: Wed 04 Jun 2025 16:31:02 +0000 Manifest this update: Wed 04 Jun 2025 16:31:01 +0000 Manifest next update: Wed 11 Jun 2025 16:31:01 +0000 Files and hashes: 1: bifP0YnuRkQx1LkBO8wHWKgCZOY.crl (hash: 8dpvGdPQhVoD5pgL3H8+I+g27v5kfDNmU27li4AswBY=) 2: 33E73FAAE50B11EF838B6642C4F9AE02.roa (hash: hGExMUb+w4JyWjME6Pb9a+xtMzWk7NBawSO3YXbXwM4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.crl rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bifP0YnuRkQx1LkBO8wHWKgCZOY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 16:31:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6330 (0x18ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D13, serialNumber=6E27CFD189EE464431D4B9013BCC0758A80264E6 Validity Not Before: Jun 4 16:31:01 2025 GMT Not After : Jun 11 16:31:01 2025 GMT Subject: CN=684074c6-d851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5c:b2:b4:d0:eb:23:9f:a4:b4:83:d1:1c:34: d9:05:0f:9f:80:1d:cd:f6:dc:29:4e:dc:da:02:41: 22:e5:04:e4:0e:b9:af:1d:5c:a7:db:0a:5a:8a:5a: 62:1a:ac:19:cf:c0:1a:78:9f:0e:92:62:9f:0b:d5: e9:d9:40:51:0e:0f:d7:de:29:8e:73:9b:d2:40:d6: b9:5c:82:81:04:8b:12:e1:0a:89:f2:26:50:e8:30: 93:62:48:79:42:58:89:ad:37:32:e1:61:cd:23:78: 3b:08:ee:75:5d:0f:61:29:d4:a5:cd:70:ee:d6:b5: 60:48:0b:0d:0a:81:aa:5a:8d:cf:68:61:d1:2d:4f: 2c:d3:cb:de:9a:47:b5:b9:c5:d8:1b:12:e7:26:4f: f3:69:f6:99:34:7f:07:f8:2a:d2:d8:40:1d:40:06: ae:ff:a0:b7:97:2e:97:14:03:dc:21:ec:c4:e9:c9: 41:1c:80:c5:7f:e8:aa:69:a5:19:04:4a:d9:2a:1e: 2c:55:61:42:ba:50:97:44:43:52:d9:fe:32:21:72: 6d:e8:fa:01:d0:c2:08:4c:58:47:6c:46:5a:ff:5e: 67:de:96:77:70:37:cc:e1:87:0b:5e:0b:52:43:e0: 36:4e:43:f5:c3:2c:0d:3c:44:44:9c:5d:5d:6b:62: b0:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:E6:98:65:77:7C:09:A1:2F:07:B2:F5:60:FE:14:B3:A5:E0:42:2C X509v3 Authority Key Identifier: keyid:6E:27:CF:D1:89:EE:46:44:31:D4:B9:01:3B:CC:07:58:A8:02:64:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bifP0YnuRkQx1LkBO8wHWKgCZOY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:b3:91:85:66:a0:05:20:43:d6:9b:56:7d:aa:2d:a4:5d:c0: 6f:60:16:ec:1a:54:70:c5:13:d6:db:e8:29:9a:3e:83:ca:18: 18:53:3e:55:02:f4:8f:37:b7:85:29:57:f1:65:70:4a:c3:15: 61:36:1e:20:10:2f:64:78:18:e1:dd:05:be:92:39:ca:03:5d: 17:3d:64:3e:b0:a0:14:26:5d:69:50:77:a7:2c:3f:e6:65:cc: 18:bb:e0:bf:7b:b2:8e:42:ba:f9:74:4c:da:27:c2:8d:ca:99: 5c:89:25:d8:9e:41:8e:82:9f:a5:d4:b8:5a:1d:8a:a9:e3:99: b1:19:81:57:59:05:91:73:21:df:d1:46:3e:fa:77:7d:05:54: b2:cd:42:4b:7f:e5:65:2b:d2:61:aa:6f:f8:54:09:f9:02:a9: 7e:36:b4:7f:9b:aa:d1:34:a5:50:e6:9c:ef:bc:88:dd:e2:fa: 97:34:39:d3:59:4c:94:a9:3f:ab:78:24:7f:8d:82:53:1f:53: 68:ed:73:36:89:7c:d8:3e:03:11:1d:b9:f7:53:70:65:e5:c2: a6:c7:04:fa:96:21:e3:7b:91:a3:c6:e6:b6:59:82:1b:4e:30: 3a:bc:3d:f2:8c:4e:0d:25:d2:c2:82:3d:51:14:06:d6:eb:32: 0c:6e:96:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGLowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEMTMxMTAvBgNVBAUTKDZFMjdDRkQxODlFRTQ2NDQzMUQ0QjkwMTNCQ0MwNzU4 QTgwMjY0RTYwHhcNMjUwNjA0MTYzMTAxWhcNMjUwNjExMTYzMTAxWjAYMRYwFAYD VQQDEw02ODQwNzRjNi1kODUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw1yytNDrI5+ktIPRHDTZBQ+fgB3N9twpTtzaAkEi5QTkDrmvHVyn2wpailpi GqwZz8AaeJ8OkmKfC9Xp2UBRDg/X3imOc5vSQNa5XIKBBIsS4QqJ8iZQ6DCTYkh5 QliJrTcy4WHNI3g7CO51XQ9hKdSlzXDu1rVgSAsNCoGqWo3PaGHRLU8s08vemke1 ucXYGxLnJk/zafaZNH8H+CrS2EAdQAau/6C3ly6XFAPcIezE6clBHIDFf+iqaaUZ BErZKh4sVWFCulCXRENS2f4yIXJt6PoB0MIITFhHbEZa/15n3pZ3cDfM4YcLXgtS Q+A2TkP1wywNPEREnF1da2KwXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA/mmGV3 fAmhLwey9WD+FLOl4EIsMB8GA1UdIwQYMBaAFG4nz9GJ7kZEMdS5ATvMB1ioAmTm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0QxMy9BQTI1REYxQzk4 RkQxMUU3QTgxNDU1NjBDNEY5QUUwMi9iaWZQMFludVJrUXgxTGtCTzh3SFdLZ0Na T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JpZlAwWW51UmtReDFMa0JPOHdIV0tnQ1pPWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0QxMy9BQTI1REYxQzk4RkQxMUU3QTgxNDU1NjBDNEY5QUUwMi9iaWZQMFludVJr UXgxTGtCTzh3SFdLZ0NaT1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUs5GFZqAFIEPWm1Z9qi2kXcBvYBbsGlRwxRPW2+gpmj6DyhgYUz5V AvSPN7eFKVfxZXBKwxVhNh4gEC9keBjh3QW+kjnKA10XPWQ+sKAUJl1pUHenLD/m ZcwYu+C/e7KOQrr5dEzaJ8KNyplciSXYnkGOgp+l1LhaHYqp45mxGYFXWQWRcyHf 0UY++nd9BVSyzUJLf+VlK9Jhqm/4VAn5Aql+NrR/m6rRNKVQ5pzvvIjd4vqXNDnT WUyUqT+reCR/jYJTH1No7XM2iXzYPgMRHbn3U3Bl5cKmxwT6liHje5Gjxua2WYIb TjA6vD3yjE4NJdLCgj1RFAbW6zIMbpad -----END CERTIFICATE-----Generated at Thu Jun 5 18:35:47 2025 by rpki-client