$ rpki-client -vvf rpki.apnic.net/member_repository/A915FEAC/793A9DF8F40211EFB1A06C59C4F9AE02/BudciPNpAzH-l_hiEjG2XRR6O20.mft File: BudciPNpAzH-l_hiEjG2XRR6O20.mft (raw, json) Hash identifier: Pohe1FUOHype+ESjlfZXDuU2oxjIdD/jn0ht56wRaHY= Subject key identifier: 3B:9F:92:70:F1:78:31:AE:0E:61:13:DB:38:8A:A2:7F:98:E6:1A:D5 Authority key identifier: 06:E7:5C:88:F3:69:03:31:FE:97:F8:62:12:31:B6:5D:14:7A:3B:6D Certificate issuer: /CN=A915FEAC/serialNumber=06E75C88F3690331FE97F8621231B65D147A3B6D Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BudciPNpAzH-l_hiEjG2XRR6O20.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FEAC/793A9DF8F40211EFB1A06C59C4F9AE02/BudciPNpAzH-l_hiEjG2XRR6O20.mft Manifest number: 31 Signing time: Sat 31 May 2025 07:12:42 +0000 Manifest this update: Sat 31 May 2025 07:12:41 +0000 Manifest next update: Sat 07 Jun 2025 07:12:41 +0000 Files and hashes: 1: BudciPNpAzH-l_hiEjG2XRR6O20.crl (hash: ExHmS4azYGPlkk1JO8BU97MIdikLOqJnTnLSRjsg6Bk=) 2: 2511401EF40311EFBB6EF777C4F9AE02.roa (hash: tnCDhZMDrHPp0NMpU0cMFqMJ1EvDl+x9yj+eC20nwlY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FEAC/793A9DF8F40211EFB1A06C59C4F9AE02/BudciPNpAzH-l_hiEjG2XRR6O20.crl rsync://rpki.apnic.net/member_repository/A915FEAC/793A9DF8F40211EFB1A06C59C4F9AE02/BudciPNpAzH-l_hiEjG2XRR6O20.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BudciPNpAzH-l_hiEjG2XRR6O20.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:12:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FEAC, serialNumber=06E75C88F3690331FE97F8621231B65D147A3B6D Validity Not Before: May 31 07:12:41 2025 GMT Not After : Jun 7 07:12:41 2025 GMT Subject: CN=683aabe9-0413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c5:81:b4:8e:2c:6c:eb:74:cc:8f:ac:2f:b1: 07:74:de:f5:1f:67:d7:46:aa:eb:a0:f5:c2:3a:ce: 79:3c:d3:bd:bd:50:46:ed:e1:46:5b:8d:3a:15:43: ca:9a:e6:1b:ef:dc:e4:24:27:3e:e9:9a:4e:30:8c: 83:d2:31:31:a8:8c:b3:fa:91:bc:ff:80:67:07:b3: d1:e1:28:92:a3:f0:28:d7:65:34:d3:97:c2:b1:5c: 72:23:b9:4e:c5:1e:05:7d:a1:d1:52:73:fd:8f:e3: dd:64:87:cf:e4:0d:77:2f:ad:7f:ca:17:48:b1:f8: cb:b8:73:1e:9e:21:d8:26:ec:93:27:39:85:41:c2: 28:38:03:ce:85:06:b6:e9:fb:2f:53:ce:f1:ce:95: 08:88:e8:17:1f:67:4f:21:46:23:b0:36:07:0c:20: d9:7a:81:ab:ef:ea:da:fc:d5:76:1d:60:86:25:a2: ee:e5:23:96:2f:74:10:5f:50:06:34:85:85:cf:45: 47:71:2f:64:d8:98:53:5d:a8:1c:1a:7d:01:74:74: ae:70:24:9a:df:6b:30:53:d7:22:1c:81:8d:ce:da: a5:b2:ec:5d:05:02:8d:c7:4b:34:96:88:72:df:0f: 8d:6b:6a:b7:20:80:b8:a5:bf:5d:93:40:5a:04:1e: ca:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:9F:92:70:F1:78:31:AE:0E:61:13:DB:38:8A:A2:7F:98:E6:1A:D5 X509v3 Authority Key Identifier: keyid:06:E7:5C:88:F3:69:03:31:FE:97:F8:62:12:31:B6:5D:14:7A:3B:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FEAC/793A9DF8F40211EFB1A06C59C4F9AE02/BudciPNpAzH-l_hiEjG2XRR6O20.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BudciPNpAzH-l_hiEjG2XRR6O20.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FEAC/793A9DF8F40211EFB1A06C59C4F9AE02/BudciPNpAzH-l_hiEjG2XRR6O20.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:91:3e:2f:50:a1:63:6e:f2:b3:9a:ae:5b:b4:4e:69:40:6c: 97:4d:5c:73:c9:f0:61:09:c8:55:18:6e:48:3f:fb:3e:24:a1: ee:fa:fd:b1:a3:08:66:eb:1c:1d:e1:54:23:d4:f8:c6:25:08: 1c:2e:ff:b6:d9:f1:ea:7e:d4:b3:16:b5:7e:13:a6:17:48:0c: b9:bf:ef:9e:bb:ea:63:59:69:19:66:6b:94:42:b3:af:c3:91: a7:c4:eb:bd:ee:62:99:f6:42:af:7f:5c:ca:cd:8f:a8:ef:81: 2c:01:d7:d2:43:9f:d5:81:0a:85:0d:66:3c:4b:88:ea:a1:92: 81:69:c1:35:96:9a:39:40:87:7f:93:cb:46:2c:71:d3:9c:7a: 6a:f0:f3:22:51:82:ff:61:34:17:56:af:cf:d3:8f:f8:79:c2: 2f:48:27:fc:56:9e:6b:b4:89:f2:56:7d:51:e7:14:81:c6:47: 4c:69:b2:e7:7d:c0:31:c2:c8:d3:3e:1b:55:3b:2e:c0:e8:a4: 31:9f:b1:33:94:a7:19:50:ae:30:3f:67:11:61:ef:20:61:db: d5:11:98:fa:b0:32:a0:77:77:7f:4e:d0:77:80:50:fd:21:95: 67:c0:9e:50:9d:d6:14:80:2a:a6:2a:f1:98:d4:06:bf:4a:3e: 97:c1:fb:a5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RkVBQzExMC8GA1UEBRMoMDZFNzVDODhGMzY5MDMzMUZFOTdGODYyMTIzMUI2NUQx NDdBM0I2RDAeFw0yNTA1MzEwNzEyNDFaFw0yNTA2MDcwNzEyNDFaMBgxFjAUBgNV BAMTDTY4M2FhYmU5LTA0MTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4xYG0jixs63TMj6wvsQd03vUfZ9dGquug9cI6znk80729UEbt4UZbjToVQ8qa 5hvv3OQkJz7pmk4wjIPSMTGojLP6kbz/gGcHs9HhKJKj8CjXZTTTl8KxXHIjuU7F HgV9odFSc/2P491kh8/kDXcvrX/KF0ix+Mu4cx6eIdgm7JMnOYVBwig4A86FBrbp +y9TzvHOlQiI6BcfZ08hRiOwNgcMINl6gavv6tr81XYdYIYlou7lI5YvdBBfUAY0 hYXPRUdxL2TYmFNdqBwafQF0dK5wJJrfazBT1yIcgY3O2qWy7F0FAo3HSzSWiHLf D41rarcggLilv12TQFoEHspxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUO5+ScPF4 Ma4OYRPbOIqif5jmGtUwHwYDVR0jBBgwFoAUBudciPNpAzH+l/hiEjG2XRR6O20w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVGRUFDLzc5M0E5REY4RjQw MjExRUZCMUEwNkM1OUM0RjlBRTAyL0J1ZGNpUE5wQXpILWxfaGlFakcyWFJSNk8y MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQnVkY2lQTnBBekgtbF9oaUVqRzJYUlI2TzIwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVG RUFDLzc5M0E5REY4RjQwMjExRUZCMUEwNkM1OUM0RjlBRTAyL0J1ZGNpUE5wQXpI LWxfaGlFakcyWFJSNk8yMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACWRPi9QoWNu8rOarlu0TmlAbJdNXHPJ8GEJyFUYbkg/+z4koe76/bGj CGbrHB3hVCPU+MYlCBwu/7bZ8ep+1LMWtX4TphdIDLm/75676mNZaRlma5RCs6/D kafE673uYpn2Qq9/XMrNj6jvgSwB19JDn9WBCoUNZjxLiOqhkoFpwTWWmjlAh3+T y0YscdOcemrw8yJRgv9hNBdWr8/Tj/h5wi9IJ/xWnmu0ifJWfVHnFIHGR0xpsud9 wDHCyNM+G1U7LsDopDGfsTOUpxlQrjA/ZxFh7yBh29URmPqwMqB3d39O0HeAUP0h lWfAnlCd1hSAKqYq8ZjUBr9KPpfB+6U= -----END CERTIFICATE-----Generated at Sat May 31 17:29:00 2025 by rpki-client