$ rpki-client -vvf rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.mft File: Br1EFUedLHUIN8XJQzYTuyWIrrg.mft (raw, json) Hash identifier: dbYfBvbYx7ZV2KeUDeqAAktIug5wkXlwDexScpjHDn0= Subject key identifier: 60:E0:B5:66:B7:A2:70:0F:72:9B:8A:7C:4E:CC:F1:DE:8B:AD:6A:EA Authority key identifier: 06:BD:44:15:47:9D:2C:75:08:37:C5:C9:43:36:13:BB:25:88:AE:B8 Certificate issuer: /CN=A9177FC9/serialNumber=06BD4415479D2C750837C5C9433613BB2588AEB8 Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Br1EFUedLHUIN8XJQzYTuyWIrrg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.mft Manifest number: 2D Signing time: Sat 31 May 2025 07:23:29 +0000 Manifest this update: Sat 31 May 2025 07:23:29 +0000 Manifest next update: Sat 07 Jun 2025 07:23:29 +0000 Files and hashes: 1: Br1EFUedLHUIN8XJQzYTuyWIrrg.crl (hash: 7oa7nFIN6uy3Pd/P4+u2jUNSEtfVlLNjLnDZB+LnrIc=) 2: FDD39BD607B811F0AB98B333C4F9AE02.roa (hash: qoLPoA4lZ1ha+1hCNURiczpMXcx77W01//WQ1dkufkU=) 3: FD6DA4D407B811F0AB98B333C4F9AE02.roa (hash: 1A7do/sKIO8NT6R3NBCJ/yFYUs9LFmYB3G5A768MYYA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.crl rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Br1EFUedLHUIN8XJQzYTuyWIrrg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:23:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9177FC9, serialNumber=06BD4415479D2C750837C5C9433613BB2588AEB8 Validity Not Before: May 31 07:23:29 2025 GMT Not After : Jun 7 07:23:29 2025 GMT Subject: CN=683aae71-7cb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b4:05:09:64:75:e4:8c:c0:fd:d7:ef:12:93: ac:ba:17:50:6b:c1:e7:49:9e:ec:4a:a8:47:a2:7e: f8:06:13:77:a7:3b:2c:03:f1:58:71:cf:b2:56:af: 66:1d:16:e3:90:12:3f:7e:2f:e2:ff:46:04:6e:fe: d8:18:b1:a7:66:c7:de:a8:20:29:4b:2e:31:ad:52: 35:50:57:31:04:e4:91:45:9b:20:12:73:d7:2f:c6: 6b:d5:e2:1a:12:2c:42:40:31:1f:ee:61:b7:c6:1f: ae:b4:f8:07:45:90:a0:42:fb:ee:50:33:39:d0:86: f6:3b:8d:43:ba:1d:17:0a:3e:6c:7d:2b:96:32:7c: f3:db:6b:25:28:03:2c:08:15:1d:83:e2:ab:de:a4: bc:79:57:24:59:35:0a:d0:0f:1f:da:c2:39:e1:ff: 01:62:18:4c:18:2b:58:e0:60:9f:a2:4b:60:c4:7d: d4:45:3e:e7:27:af:99:fc:7d:c3:79:1e:41:29:e4: 64:63:67:ca:c7:f1:95:5d:0d:38:ee:dc:66:0c:76: aa:ae:21:6d:d1:b5:f5:d1:ef:cf:12:17:8f:13:06: 43:69:43:37:42:8a:c3:9b:52:84:c7:6d:99:5e:1a: 6f:ab:45:c5:fb:20:4d:73:fb:a2:0f:e0:7d:2b:9c: 7c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:E0:B5:66:B7:A2:70:0F:72:9B:8A:7C:4E:CC:F1:DE:8B:AD:6A:EA X509v3 Authority Key Identifier: keyid:06:BD:44:15:47:9D:2C:75:08:37:C5:C9:43:36:13:BB:25:88:AE:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Br1EFUedLHUIN8XJQzYTuyWIrrg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:02:68:13:1f:4f:66:0a:57:48:16:30:3a:0e:00:8b:dc:4e: 6b:1c:8f:ce:4b:b6:39:d2:e3:16:2b:a5:e1:a3:24:a8:23:4b: 92:81:4c:b3:e8:6a:6f:54:25:3d:4e:39:3c:81:1a:2d:19:21: 96:81:da:a8:ba:32:e9:e5:a3:51:94:00:97:25:95:1a:e5:ef: 67:20:eb:00:a2:f3:77:ab:16:e9:55:00:a2:9f:57:53:62:16: c1:e8:cb:07:26:1b:98:c7:90:4f:48:e9:b6:f9:7e:c9:63:eb: 5b:bc:85:9c:07:1e:1b:69:2b:c7:07:4a:b7:19:5b:db:0e:5d: c0:31:5d:45:52:44:e5:51:09:82:3d:e4:13:5c:1a:1d:16:2e: 50:24:57:65:d8:84:dd:9d:aa:9a:7b:40:1d:f6:b9:a0:da:0d: 50:b0:c4:c6:a7:ce:38:98:98:31:92:a2:30:40:ff:9a:81:68: 68:46:63:8f:64:04:ba:79:13:ac:81:a9:82:e7:b6:33:1e:35: 29:9d:20:75:98:cd:2a:08:cf:d0:45:69:f0:d7:ab:e3:e7:4c: 57:ae:50:8c:e5:a5:15:35:86:f0:8a:fb:f9:8d:5c:d4:6b:b3: 81:41:a1:74:9d:fe:81:1a:71:9e:f2:ab:44:f4:0d:d7:77:39: c9:f4:5a:11 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 N0ZDOTExMC8GA1UEBRMoMDZCRDQ0MTU0NzlEMkM3NTA4MzdDNUM5NDMzNjEzQkIy NTg4QUVCODAeFw0yNTA1MzEwNzIzMjlaFw0yNTA2MDcwNzIzMjlaMBgxFjAUBgNV BAMTDTY4M2FhZTcxLTdjYjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCotAUJZHXkjMD91+8Sk6y6F1BrwedJnuxKqEeifvgGE3enOywD8Vhxz7JWr2Yd FuOQEj9+L+L/RgRu/tgYsadmx96oIClLLjGtUjVQVzEE5JFFmyASc9cvxmvV4hoS LEJAMR/uYbfGH660+AdFkKBC++5QMznQhvY7jUO6HRcKPmx9K5YyfPPbayUoAywI FR2D4qvepLx5VyRZNQrQDx/awjnh/wFiGEwYK1jgYJ+iS2DEfdRFPucnr5n8fcN5 HkEp5GRjZ8rH8ZVdDTju3GYMdqquIW3RtfXR788SF48TBkNpQzdCisObUoTHbZle Gm+rRcX7IE1z+6IP4H0rnHz7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYOC1Zrei cA9ym4p8Tszx3outauowHwYDVR0jBBgwFoAUBr1EFUedLHUIN8XJQzYTuyWIrrgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3RkM5L0YzQ0JGNTUwMDc1 MTExRjA4MThBNTQzM0M0RjlBRTAyL0JyMUVGVWVkTEhVSU44WEpRellUdXlXSXJy Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQnIxRUZVZWRMSFVJTjhYSlF6WVR1eVdJcnJnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3 RkM5L0YzQ0JGNTUwMDc1MTExRjA4MThBNTQzM0M0RjlBRTAyL0JyMUVGVWVkTEhV SU44WEpRellUdXlXSXJyZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADICaBMfT2YKV0gWMDoOAIvcTmscj85LtjnS4xYrpeGjJKgjS5KBTLPo am9UJT1OOTyBGi0ZIZaB2qi6Munlo1GUAJcllRrl72cg6wCi83erFulVAKKfV1Ni FsHoywcmG5jHkE9I6bb5fslj61u8hZwHHhtpK8cHSrcZW9sOXcAxXUVSROVRCYI9 5BNcGh0WLlAkV2XYhN2dqpp7QB32uaDaDVCwxManzjiYmDGSojBA/5qBaGhGY49k BLp5E6yBqYLntjMeNSmdIHWYzSoIz9BFafDXq+PnTFeuUIzlpRU1hvCK+/mNXNRr s4FBoXSd/oEacZ7yq0T0Ddd3Ocn0WhE= -----END CERTIFICATE-----Generated at Sat May 31 16:59:30 2025 by rpki-client