$ rpki-client -vvf rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft File: -bj5HSkovqo1HMNFxHNpMv2GOfE.mft (raw, json) Hash identifier: Xtj+18Q+A/dnPrk5CUwtCaedhCCyt/vTTsI8IPV6CMg= Subject key identifier: CE:14:1F:3B:38:F4:B3:B9:FA:BF:B2:5A:31:73:40:9B:32:D2:48:5E Authority key identifier: F9:B8:F9:1D:29:28:BE:AA:35:1C:C3:45:C4:73:69:32:FD:86:39:F1 Certificate issuer: /CN=A917C2CC/serialNumber=F9B8F91D2928BEAA351CC345C4736932FD8639F1 Certificate serial: 0F14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft Manifest number: 0F0B Signing time: Fri 30 May 2025 17:49:19 +0000 Manifest this update: Fri 30 May 2025 17:49:19 +0000 Manifest next update: Fri 06 Jun 2025 17:49:19 +0000 Files and hashes: 1: -bj5HSkovqo1HMNFxHNpMv2GOfE.crl (hash: wgSGPaWEPxFWfjvHNTAnrfGmYuUXvCuI3lDk4aNjReA=) 2: 39275D0C232511EC925DF318C4F9AE02.roa (hash: IUxOhh5i3F8AXkiEHRy2ZFcsd2EB0EPXzUnc2RHCPV4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.crl rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:49:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3860 (0xf14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C2CC, serialNumber=F9B8F91D2928BEAA351CC345C4736932FD8639F1 Validity Not Before: May 30 17:49:19 2025 GMT Not After : Jun 6 17:49:19 2025 GMT Subject: CN=6839ef9f-b00c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ce:90:b7:31:5c:09:91:ab:bc:1d:dd:0b:1e: 5d:cb:c4:86:ff:07:9b:04:0f:ac:f8:82:b6:c6:26: c5:f8:39:e1:ca:80:43:75:19:2b:9f:fa:8a:f3:a3: d9:6c:5f:56:4f:ed:58:36:32:9b:04:28:ae:db:a2: f7:1b:4b:5b:f9:c5:27:ec:ea:21:78:e4:16:3e:29: 6f:74:c2:9f:dd:f9:93:6a:69:1f:86:95:35:10:af: 2b:d0:c6:47:13:77:66:83:e8:cd:01:db:02:5a:f9: 13:7c:6f:8c:6d:3b:1e:89:ff:3b:68:71:be:2a:c6: f4:05:bf:fe:54:a0:ce:1a:a0:f0:e8:53:86:a6:4f: 12:5e:6e:bd:08:51:b9:3b:b6:22:bc:70:5c:a7:20: af:02:a9:f1:fd:80:36:5b:aa:26:2d:52:bf:95:19: e4:85:95:86:c9:4f:c1:70:bf:67:d7:3d:79:8d:ae: 7d:40:bc:8d:9f:14:17:f1:21:a7:6a:d6:67:96:59: ee:29:47:b8:fd:c5:44:dd:81:9f:a0:b4:ce:e9:51: df:9d:a7:41:03:6d:e1:43:ea:fb:00:e4:2b:08:1f: 9a:33:dc:5a:a8:2d:2c:b8:93:2a:04:08:3d:69:9f: 48:a2:c9:e5:1a:79:2b:84:eb:01:d0:e8:c9:ab:d3: a9:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:14:1F:3B:38:F4:B3:B9:FA:BF:B2:5A:31:73:40:9B:32:D2:48:5E X509v3 Authority Key Identifier: keyid:F9:B8:F9:1D:29:28:BE:AA:35:1C:C3:45:C4:73:69:32:FD:86:39:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:e0:2f:70:ec:86:19:3f:17:99:26:d9:8e:bb:5f:cd:61:98: de:07:65:16:b9:c5:17:4f:61:4a:a5:f3:89:6d:31:16:d7:cd: 98:fb:9e:71:5a:a5:db:9c:b1:09:fa:b4:20:6a:8f:3a:b2:da: fc:b8:14:a3:57:b8:3c:5c:47:13:61:75:c9:09:52:60:c8:66: 51:b7:d2:93:4a:4a:b9:37:6f:1d:34:58:71:8a:7a:a9:d0:ba: 8e:48:51:ae:07:9c:55:9f:50:ee:22:be:03:32:be:b7:f1:e9: 25:04:44:9c:48:25:20:5e:38:2a:66:d3:fc:ed:d6:3e:79:57: 8b:ca:85:87:4d:ca:ae:aa:ad:34:36:2e:4b:d8:d3:ad:a9:14: b9:08:f9:90:ae:34:0d:c7:a1:ed:18:97:1b:8f:5b:7c:68:63: 4c:c7:da:72:9b:27:68:34:3d:9c:4c:7d:15:8e:c1:f6:18:b0: 7e:3c:a2:7b:08:2c:87:42:40:7f:c4:be:b4:d4:54:89:63:b5: c6:17:8e:0d:32:07:44:f7:92:8f:6f:3e:a5:0f:79:0f:75:0e: f4:d8:57:0d:04:1e:b1:83:dd:89:14:f7:1e:e1:67:e3:c5:67: 59:77:5b:2a:7c:b7:7c:cd:22:92:02:c5:28:f6:3a:fb:88:e2: b5:52:26:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDxQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MyQ0MxMTAvBgNVBAUTKEY5QjhGOTFEMjkyOEJFQUEzNTFDQzM0NUM0NzM2OTMy RkQ4NjM5RjEwHhcNMjUwNTMwMTc0OTE5WhcNMjUwNjA2MTc0OTE5WjAYMRYwFAYD VQQDEw02ODM5ZWY5Zi1iMDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA286QtzFcCZGrvB3dCx5dy8SG/webBA+s+IK2xibF+DnhyoBDdRkrn/qK86PZ bF9WT+1YNjKbBCiu26L3G0tb+cUn7OoheOQWPilvdMKf3fmTamkfhpU1EK8r0MZH E3dmg+jNAdsCWvkTfG+MbTseif87aHG+Ksb0Bb/+VKDOGqDw6FOGpk8SXm69CFG5 O7YivHBcpyCvAqnx/YA2W6omLVK/lRnkhZWGyU/BcL9n1z15ja59QLyNnxQX8SGn atZnllnuKUe4/cVE3YGfoLTO6VHfnadBA23hQ+r7AOQrCB+aM9xaqC0suJMqBAg9 aZ9IosnlGnkrhOsB0OjJq9OpBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM4UHzs4 9LO5+r+yWjFzQJsy0kheMB8GA1UdIwQYMBaAFPm4+R0pKL6qNRzDRcRzaTL9hjnx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzJDQy9DQzE5Mzg3Njc4 REExMUU5OTAxQjdGNERDNEY5QUUwMi8tYmo1SFNrb3ZxbzFITU5GeEhOcE12MkdP ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1iajVIU2tvdnFvMUhNTkZ4SE5wTXYyR09mRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzJDQy9DQzE5Mzg3Njc4REExMUU5OTAxQjdGNERDNEY5QUUwMi8tYmo1SFNrb3Zx bzFITU5GeEhOcE12MkdPZkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJ4C9w7IYZPxeZJtmOu1/NYZjeB2UWucUXT2FKpfOJbTEW182Y+55x WqXbnLEJ+rQgao86str8uBSjV7g8XEcTYXXJCVJgyGZRt9KTSkq5N28dNFhxinqp 0LqOSFGuB5xVn1DuIr4DMr638eklBEScSCUgXjgqZtP87dY+eVeLyoWHTcquqq00 Ni5L2NOtqRS5CPmQrjQNx6HtGJcbj1t8aGNMx9pymydoND2cTH0VjsH2GLB+PKJ7 CCyHQkB/xL601FSJY7XGF44NMgdE95KPbz6lD3kPdQ702FcNBB6xg92JFPce4Wfj xWdZd1sqfLd8zSKSAsUo9jr7iOK1Uian -----END CERTIFICATE-----Generated at Sat May 31 16:33:02 2025 by rpki-client