$ rpki-client -vvf rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.mft File: BB1RkkfEbnP2pn3ffJBJv_J5wLc.mft (raw, json) Hash identifier: CzgHGFBErEn6THMQEvH6We5UyAsTOt6mw73k03v3zCM= Subject key identifier: 03:22:12:72:DE:C6:22:7A:2F:17:E4:6F:1D:92:7D:DE:1D:28:1C:D9 Authority key identifier: 04:1D:51:92:47:C4:6E:73:F6:A6:7D:DF:7C:90:49:BF:F2:79:C0:B7 Certificate issuer: /CN=A9165B02/serialNumber=041D519247C46E73F6A67DDF7C9049BFF279C0B7 Certificate serial: 05D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BB1RkkfEbnP2pn3ffJBJv_J5wLc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.mft Manifest number: 05CD Signing time: Fri 30 May 2025 23:15:15 +0000 Manifest this update: Fri 30 May 2025 23:15:13 +0000 Manifest next update: Fri 06 Jun 2025 23:15:13 +0000 Files and hashes: 1: BB1RkkfEbnP2pn3ffJBJv_J5wLc.crl (hash: lKWJRCXf4Kug+RbryfwjGRLpodBUr5QWHaUXm4riq4Y=) 2: CEEBA382BD1511EB9E873260C4F9AE02.roa (hash: SXzW5vEmVU+GCJ/5C4H8HxVaw63CXUsgN+mA1S8Q1HE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.crl rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BB1RkkfEbnP2pn3ffJBJv_J5wLc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:15:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1490 (0x5d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165B02, serialNumber=041D519247C46E73F6A67DDF7C9049BFF279C0B7 Validity Not Before: May 30 23:15:13 2025 GMT Not After : Jun 6 23:15:13 2025 GMT Subject: CN=683a3c02-0928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:01:66:6f:9a:d0:f0:17:d3:0f:4c:eb:86:3e: 6a:4f:7a:77:1d:dc:3f:f0:78:a3:72:7c:2a:78:e6: 58:c7:e5:11:f8:18:90:78:37:d1:cd:4c:3d:e7:5a: 91:d2:0c:a4:21:06:19:c8:1a:2c:6e:9e:e7:a2:fa: 4b:2e:a2:67:16:c3:99:27:5f:8d:a1:26:b6:d7:11: 26:8d:cb:c1:d3:1e:c0:be:90:22:d0:3a:5b:39:5f: d1:8b:7c:14:a0:3d:01:11:8a:ba:03:0a:5a:c8:47: 6b:da:bd:51:34:a1:c7:34:fc:4e:6c:d1:44:f3:a9: ea:84:c0:55:28:cd:7c:98:3b:d8:a3:1a:8f:da:1f: df:a5:4c:a1:5c:d9:6e:17:e8:50:cf:e6:73:32:cf: c3:f6:76:98:8e:34:00:c5:d0:d7:92:d3:57:85:80: 82:0a:66:ce:d8:98:2b:d4:99:93:5b:95:13:d6:04: 56:6c:b2:91:6b:de:e9:d9:91:7b:55:39:9b:76:c2: 7c:8d:05:04:d7:56:dd:92:d4:3a:90:ce:5e:a7:11: 4a:d3:92:ee:a6:f3:cd:da:e5:e9:46:85:10:6c:8b: 94:b6:88:69:db:c8:f0:f0:c5:44:79:71:8d:de:5e: 18:b7:4e:a1:27:5c:ce:1f:6b:a3:67:d2:2a:8d:83: 21:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:22:12:72:DE:C6:22:7A:2F:17:E4:6F:1D:92:7D:DE:1D:28:1C:D9 X509v3 Authority Key Identifier: keyid:04:1D:51:92:47:C4:6E:73:F6:A6:7D:DF:7C:90:49:BF:F2:79:C0:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BB1RkkfEbnP2pn3ffJBJv_J5wLc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:9b:c2:ae:d8:03:e6:11:43:19:9a:98:6f:4d:ce:7c:cf:b5: f5:85:5d:f5:3e:cc:b9:20:eb:0b:15:8b:61:48:0b:a4:1e:47: 55:62:2b:0f:5c:c4:4e:86:9a:2d:c8:d9:e3:a4:ba:cc:30:b9: 95:7e:1b:9f:84:a5:8b:42:68:e5:ea:d6:4a:6a:6f:9d:ca:1f: cf:80:80:bd:6c:24:ef:cb:02:7e:8e:90:22:96:9b:fe:2f:08: f6:64:9e:30:5d:11:db:96:56:bf:1b:a9:9a:6a:e0:5d:35:02: ba:e7:95:5c:14:32:71:0a:a6:01:48:5c:41:d6:19:f4:4d:5e: 29:32:2c:35:42:66:32:1f:a5:3d:c9:cf:bb:12:4d:3b:a9:88: b6:b8:bd:6f:73:66:83:09:94:83:97:1a:f3:68:6e:b2:b2:4e: 51:a6:ff:36:82:af:b5:94:ff:27:29:a9:b5:2b:35:c9:12:6e: 56:b5:15:ce:90:0a:e7:88:7c:fe:e8:d7:fd:9d:73:78:83:52: 4b:b4:42:02:68:6b:2a:b8:56:ef:82:d9:cb:8c:42:76:dc:cd: c0:c9:24:ff:6a:03:11:91:26:c8:39:b8:0e:e5:0d:c8:1a:ce: 29:e1:93:ea:69:9d:5c:36:87:94:ac:7c:6f:d5:c4:d5:d7:04: db:0a:28:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVCMDIxMTAvBgNVBAUTKDA0MUQ1MTkyNDdDNDZFNzNGNkE2N0RERjdDOTA0OUJG RjI3OUMwQjcwHhcNMjUwNTMwMjMxNTEzWhcNMjUwNjA2MjMxNTEzWjAYMRYwFAYD VQQDEw02ODNhM2MwMi0wOTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvQFmb5rQ8BfTD0zrhj5qT3p3Hdw/8HijcnwqeOZYx+UR+BiQeDfRzUw951qR 0gykIQYZyBosbp7novpLLqJnFsOZJ1+NoSa21xEmjcvB0x7AvpAi0DpbOV/Ri3wU oD0BEYq6AwpayEdr2r1RNKHHNPxObNFE86nqhMBVKM18mDvYoxqP2h/fpUyhXNlu F+hQz+ZzMs/D9naYjjQAxdDXktNXhYCCCmbO2Jgr1JmTW5UT1gRWbLKRa97p2ZF7 VTmbdsJ8jQUE11bdktQ6kM5epxFK05LupvPN2uXpRoUQbIuUtohp28jw8MVEeXGN 3l4Yt06hJ1zOH2ujZ9IqjYMhqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAMiEnLe xiJ6Lxfkbx2Sfd4dKBzZMB8GA1UdIwQYMBaAFAQdUZJHxG5z9qZ933yQSb/yecC3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUIwMi85NUEzOEVGNkJE MTQxMUVCQjVFRUZENUZDNEY5QUUwMi9CQjFSa2tmRWJuUDJwbjNmZkpCSnZfSjV3 TGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JCMVJra2ZFYm5QMnBuM2ZmSkJKdl9KNXdMYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NUIwMi85NUEzOEVGNkJEMTQxMUVCQjVFRUZENUZDNEY5QUUwMi9CQjFSa2tmRWJu UDJwbjNmZkpCSnZfSjV3TGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsm8Ku2APmEUMZmphvTc58z7X1hV31Psy5IOsLFYthSAukHkdVYisP XMROhpotyNnjpLrMMLmVfhufhKWLQmjl6tZKam+dyh/PgIC9bCTvywJ+jpAilpv+ Lwj2ZJ4wXRHblla/G6maauBdNQK655VcFDJxCqYBSFxB1hn0TV4pMiw1QmYyH6U9 yc+7Ek07qYi2uL1vc2aDCZSDlxrzaG6ysk5Rpv82gq+1lP8nKam1KzXJEm5WtRXO kArniHz+6Nf9nXN4g1JLtEICaGsquFbvgtnLjEJ23M3AyST/agMRkSbIObgO5Q3I Gs4p4ZPqaZ1cNoeUrHxv1cTV1wTbCii3 -----END CERTIFICATE-----Generated at Sat May 31 17:30:17 2025 by rpki-client