$ rpki-client -vvf rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.mft File: bbZgfaaV3QngKYA6L_JiWtiDguM.mft (raw, json) Hash identifier: 0oBFf4hMUDoVwYYStNvzZVCPRx28IrlFYrRNRO6xBxo= Subject key identifier: A4:59:5E:66:C8:2D:4B:0F:47:B3:6A:5D:AA:68:14:C7:17:85:1A:72 Authority key identifier: 6D:B6:60:7D:A6:95:DD:09:E0:29:80:3A:2F:F2:62:5A:D8:83:82:E3 Certificate issuer: /CN=A91643F8/serialNumber=6DB6607DA695DD09E029803A2FF2625AD88382E3 Certificate serial: 84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bbZgfaaV3QngKYA6L_JiWtiDguM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.mft Manifest number: 81 Signing time: Sat 31 May 2025 06:13:57 +0000 Manifest this update: Sat 31 May 2025 06:13:56 +0000 Manifest next update: Sat 07 Jun 2025 06:13:56 +0000 Files and hashes: 1: bbZgfaaV3QngKYA6L_JiWtiDguM.crl (hash: ZbxhDRIedwAbztwDrFM8aYeqajRxJ6eEGfr7H52HcmI=) 2: F2F0E3FE882E11EFB58CD069C4F9AE02.roa (hash: xhTjRYAmVfOwQQSsGsr7HfgpLZrnPmaYeWIc+EpYBdU=) 3: 50A6B6427C6B11EFAB9AB658C4F9AE02.roa (hash: xeZt84UMp+B7UEH+ve0Je8d8/kwmPLcBVN2BEDa+kr8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.crl rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bbZgfaaV3QngKYA6L_JiWtiDguM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:13:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 132 (0x84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91643F8, serialNumber=6DB6607DA695DD09E029803A2FF2625AD88382E3 Validity Not Before: May 31 06:13:56 2025 GMT Not After : Jun 7 06:13:56 2025 GMT Subject: CN=683a9e24-88af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:14:d3:06:25:dc:d8:c6:3e:47:c3:37:ff:8c: 87:b3:45:52:b3:57:19:56:fe:5f:f2:60:01:44:e0: e2:65:f2:db:23:f2:3a:02:ea:27:d1:59:03:44:2c: ed:9b:e6:d6:43:b7:df:4d:37:46:6d:3b:de:64:31: e1:d5:39:17:46:f8:cc:99:5e:00:03:4a:6a:8a:2f: bb:f6:5a:a3:c5:15:72:40:f8:d0:f8:d6:e1:21:30: 09:fe:f6:9c:72:05:fe:94:5f:f1:01:f0:d3:a8:82: 7d:88:5e:6b:c0:ef:06:7b:45:f7:41:de:5b:19:64: ab:0b:b4:3e:09:fb:eb:cb:68:f8:47:dc:40:fc:a2: b0:52:e3:8d:8f:cb:f9:68:67:bd:7b:3d:1e:e0:c7: db:07:fa:35:2c:98:03:70:37:4b:81:86:31:87:56: 63:88:7a:70:20:c1:c9:37:19:0b:4f:41:c1:15:0d: 92:f0:e6:20:46:8d:2f:bd:c0:f9:97:08:cc:b5:08: 7e:73:f0:9a:31:d1:e2:ff:dd:92:ae:fa:72:a5:47: cb:d1:da:79:01:84:5f:fa:25:51:03:02:6f:35:6b: 38:ae:f5:87:c8:58:36:fb:6b:44:1a:b2:19:ab:3d: 7b:94:c9:35:a2:2b:85:68:aa:ec:f0:5e:13:e6:2a: ac:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:59:5E:66:C8:2D:4B:0F:47:B3:6A:5D:AA:68:14:C7:17:85:1A:72 X509v3 Authority Key Identifier: keyid:6D:B6:60:7D:A6:95:DD:09:E0:29:80:3A:2F:F2:62:5A:D8:83:82:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bbZgfaaV3QngKYA6L_JiWtiDguM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:e0:5f:e9:64:b0:d1:71:61:16:57:43:b0:8d:ae:c9:fc:70: 66:23:d2:ac:03:f1:43:74:5d:86:61:dd:f6:53:b6:d4:af:c5: d7:f0:b4:77:cb:c5:85:a5:05:fa:a8:21:54:0d:96:53:ca:97: f7:ad:75:32:e7:2d:6b:45:03:44:df:be:41:3a:61:35:c3:5b: f0:f4:da:b8:aa:f4:bd:93:5c:f2:8d:0f:fd:3e:19:ed:3e:d1: 69:1e:26:60:a8:18:3e:ba:31:41:cb:80:6c:37:ea:a4:94:a1: b6:4f:b8:3d:58:28:a8:b4:5e:17:08:ae:08:09:94:23:ee:7d: 34:3f:9a:e6:d0:b5:4c:17:7d:6d:03:8f:69:4f:74:d5:a8:77: 16:5f:96:e6:d1:f5:87:c7:50:59:ed:44:4d:a8:7e:8b:fe:25: 84:f1:2c:2d:65:b6:4d:dc:d3:98:18:6b:13:0a:e2:5d:58:29: 88:b5:69:79:90:4a:71:cd:c7:c1:3c:18:93:8b:7d:83:a3:a3: 35:82:2f:8b:09:56:e4:e2:64:95:96:2e:e0:bb:30:be:0a:aa: 0b:24:8a:01:d6:0d:1f:bc:71:23:6e:20:3d:be:07:2d:b8:2a: 53:61:4f:de:fe:0c:d0:34:e0:4b:ae:81:a1:93:27:a7:92:1d: b3:9c:ec:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQzRjgxMTAvBgNVBAUTKDZEQjY2MDdEQTY5NUREMDlFMDI5ODAzQTJGRjI2MjVB RDg4MzgyRTMwHhcNMjUwNTMxMDYxMzU2WhcNMjUwNjA3MDYxMzU2WjAYMRYwFAYD VQQDEw02ODNhOWUyNC04OGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvBTTBiXc2MY+R8M3/4yHs0VSs1cZVv5f8mABRODiZfLbI/I6Auon0VkDRCzt m+bWQ7ffTTdGbTveZDHh1TkXRvjMmV4AA0pqii+79lqjxRVyQPjQ+NbhITAJ/vac cgX+lF/xAfDTqIJ9iF5rwO8Ge0X3Qd5bGWSrC7Q+Cfvry2j4R9xA/KKwUuONj8v5 aGe9ez0e4MfbB/o1LJgDcDdLgYYxh1ZjiHpwIMHJNxkLT0HBFQ2S8OYgRo0vvcD5 lwjMtQh+c/CaMdHi/92SrvpypUfL0dp5AYRf+iVRAwJvNWs4rvWHyFg2+2tEGrIZ qz17lMk1oiuFaKrs8F4T5iqsIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKRZXmbI LUsPR7NqXapoFMcXhRpyMB8GA1UdIwQYMBaAFG22YH2mld0J4CmAOi/yYlrYg4Lj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDNGOC9GNzkwQ0M1QTdD NkExMUVGOUE2ODg4NTdDNEY5QUUwMi9iYlpnZmFhVjNRbmdLWUE2TF9KaVd0aURn dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JiWmdmYWFWM1FuZ0tZQTZMX0ppV3RpRGd1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDNGOC9GNzkwQ0M1QTdDNkExMUVGOUE2ODg4NTdDNEY5QUUwMi9iYlpnZmFhVjNR bmdLWUE2TF9KaVd0aURndU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBY4F/pZLDRcWEWV0Owja7J/HBmI9KsA/FDdF2GYd32U7bUr8XX8LR3 y8WFpQX6qCFUDZZTypf3rXUy5y1rRQNE375BOmE1w1vw9Nq4qvS9k1zyjQ/9Phnt PtFpHiZgqBg+ujFBy4BsN+qklKG2T7g9WCiotF4XCK4ICZQj7n00P5rm0LVMF31t A49pT3TVqHcWX5bm0fWHx1BZ7URNqH6L/iWE8SwtZbZN3NOYGGsTCuJdWCmItWl5 kEpxzcfBPBiTi32Do6M1gi+LCVbk4mSVli7guzC+CqoLJIoB1g0fvHEjbiA9vgct uCpTYU/e/gzQNOBLroGhkyenkh2znOzV -----END CERTIFICATE-----Generated at Sat May 31 17:45:03 2025 by rpki-client