$ rpki-client -vvf rpki.apnic.net/member_repository/A9181380/0DF3B39A3EFB11EDB7DA7875C4F9AE02/bC3jjX43M-CH3e95d-MYOcCt7jc.mft File: bC3jjX43M-CH3e95d-MYOcCt7jc.mft (raw, json) Hash identifier: LRKqxSWUbsVF7178iYGQrWHFc02Mj+9pIaXyu23Jn0A= Subject key identifier: 11:46:66:76:B9:F2:F8:57:B9:2A:88:28:E3:2E:00:E0:34:AD:EE:82 Authority key identifier: 6C:2D:E3:8D:7E:37:33:E0:87:DD:EF:79:77:E3:18:39:C0:AD:EE:37 Certificate issuer: /CN=A9181380/serialNumber=6C2DE38D7E3733E087DDEF7977E31839C0ADEE37 Certificate serial: 01FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bC3jjX43M-CH3e95d-MYOcCt7jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181380/0DF3B39A3EFB11EDB7DA7875C4F9AE02/bC3jjX43M-CH3e95d-MYOcCt7jc.mft Manifest number: 01FA Signing time: Sat 31 May 2025 02:13:57 +0000 Manifest this update: Sat 31 May 2025 02:13:56 +0000 Manifest next update: Sat 07 Jun 2025 02:13:56 +0000 Files and hashes: 1: bC3jjX43M-CH3e95d-MYOcCt7jc.crl (hash: KGLprjJYE9aOXsNUH4VTrdpmGVr+W8rsf87vhhuRiM4=) 2: 164993A63FBA11EDA5387132C4F9AE02.roa (hash: XYc2mxLenXQc+O8B80ZFK5EpIFxtXO429dywGYqqozs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181380/0DF3B39A3EFB11EDB7DA7875C4F9AE02/bC3jjX43M-CH3e95d-MYOcCt7jc.crl rsync://rpki.apnic.net/member_repository/A9181380/0DF3B39A3EFB11EDB7DA7875C4F9AE02/bC3jjX43M-CH3e95d-MYOcCt7jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bC3jjX43M-CH3e95d-MYOcCt7jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:13:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 510 (0x1fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181380, serialNumber=6C2DE38D7E3733E087DDEF7977E31839C0ADEE37 Validity Not Before: May 31 02:13:56 2025 GMT Not After : Jun 7 02:13:56 2025 GMT Subject: CN=683a65e4-6513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:91:8b:fd:78:5a:3b:45:ea:b8:7e:b1:30:bb: 0e:6e:e6:85:39:6f:0d:99:63:e4:d4:c6:56:39:01: ae:91:d2:6d:11:13:75:2e:0a:bc:fc:a6:98:d2:9c: 39:6c:0e:06:38:39:14:5c:76:21:5c:f9:cd:1f:06: 03:8d:73:d0:e9:a9:69:ad:95:42:2b:97:b5:08:5b: 78:f5:03:0d:59:a9:bb:c0:3c:d4:3e:0d:a7:f3:e5: 7a:37:1e:b8:3b:8b:3c:58:37:6e:f5:89:a6:d3:5d: 75:13:d9:2a:bc:68:e9:46:03:ae:7b:4c:ce:17:06: 39:b0:11:7d:6f:71:6e:21:0c:85:2c:3c:2a:5f:d2: c6:9f:d4:5a:d8:5f:e1:e2:7a:c0:f3:9e:38:b8:91: 2e:78:5f:93:79:fa:0f:0d:8d:5c:cd:13:61:0d:d2: 9f:59:11:62:91:b4:05:54:8a:98:4d:50:c9:92:e1: 4a:03:cf:1b:8e:36:ad:d3:e8:12:66:b7:da:4a:36: a4:60:22:f7:cf:15:c8:0a:28:9e:fd:43:fd:57:6c: 78:6e:39:58:44:9d:d3:f0:0a:42:37:aa:ff:6a:5e: 3e:f4:7d:5d:d4:fa:d6:31:a0:db:d1:0e:8b:db:ab: 1e:2d:43:05:1b:df:e2:4d:1b:2d:b7:55:b6:73:a7: eb:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:46:66:76:B9:F2:F8:57:B9:2A:88:28:E3:2E:00:E0:34:AD:EE:82 X509v3 Authority Key Identifier: keyid:6C:2D:E3:8D:7E:37:33:E0:87:DD:EF:79:77:E3:18:39:C0:AD:EE:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181380/0DF3B39A3EFB11EDB7DA7875C4F9AE02/bC3jjX43M-CH3e95d-MYOcCt7jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bC3jjX43M-CH3e95d-MYOcCt7jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181380/0DF3B39A3EFB11EDB7DA7875C4F9AE02/bC3jjX43M-CH3e95d-MYOcCt7jc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:9e:48:0c:74:ec:3a:08:08:a4:ae:fc:fd:22:77:39:5a:54: 72:d4:01:36:d3:85:11:a5:20:95:87:5b:86:e6:8d:02:05:9a: e9:2c:80:a5:29:45:16:ed:38:50:36:26:49:e9:be:03:c4:ae: f8:ea:6a:c1:c5:56:9a:70:73:58:e3:59:1e:53:77:df:19:0a: dd:c9:5a:e8:fe:ca:04:92:5e:3e:50:74:86:61:a9:3e:85:3e: 65:c2:cd:05:d3:b9:8d:b8:a7:a1:8d:4c:d7:d8:84:40:7f:ea: 13:34:e3:e9:8d:b5:c3:fc:c5:ef:98:bd:8e:3c:b3:67:5e:06: 4e:0d:e6:6f:ce:53:f2:c3:fa:e1:f7:6e:8b:ed:a9:9f:14:b3: df:16:d7:94:ba:7b:89:33:1e:b7:d8:25:4e:33:de:b4:ed:5f: b4:77:38:4b:b2:a8:54:ef:b6:08:a3:05:b4:c3:b5:5c:e5:44: 7c:dd:3c:ff:6c:0b:87:70:5a:cd:86:4a:7b:21:7c:78:a6:d7: 2d:ae:08:38:94:5d:87:c8:7d:0d:20:37:a8:72:74:0a:b0:d1: 0b:57:b9:93:e7:0a:d2:cd:7d:68:1e:a1:7e:f8:e2:64:fc:9b: 8b:c9:6f:ff:70:9d:b4:c2:f8:30:54:bb:30:3d:a9:11:fd:12: b2:67:5b:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEzODAxMTAvBgNVBAUTKDZDMkRFMzhEN0UzNzMzRTA4N0RERUY3OTc3RTMxODM5 QzBBREVFMzcwHhcNMjUwNTMxMDIxMzU2WhcNMjUwNjA3MDIxMzU2WjAYMRYwFAYD VQQDEw02ODNhNjVlNC02NTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp5GL/XhaO0XquH6xMLsObuaFOW8NmWPk1MZWOQGukdJtERN1Lgq8/KaY0pw5 bA4GODkUXHYhXPnNHwYDjXPQ6alprZVCK5e1CFt49QMNWam7wDzUPg2n8+V6Nx64 O4s8WDdu9Ymm0111E9kqvGjpRgOue0zOFwY5sBF9b3FuIQyFLDwqX9LGn9Ra2F/h 4nrA8544uJEueF+TefoPDY1czRNhDdKfWRFikbQFVIqYTVDJkuFKA88bjjat0+gS ZrfaSjakYCL3zxXICiie/UP9V2x4bjlYRJ3T8ApCN6r/al4+9H1d1PrWMaDb0Q6L 26seLUMFG9/iTRstt1W2c6frvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBFGZna5 8vhXuSqIKOMuAOA0re6CMB8GA1UdIwQYMBaAFGwt441+NzPgh93veXfjGDnAre43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTM4MC8wREYzQjM5QTNF RkIxMUVEQjdEQTc4NzVDNEY5QUUwMi9iQzNqalg0M00tQ0gzZTk1ZC1NWU9jQ3Q3 amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JDM2pqWDQzTS1DSDNlOTVkLU1ZT2NDdDdqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTM4MC8wREYzQjM5QTNFRkIxMUVEQjdEQTc4NzVDNEY5QUUwMi9iQzNqalg0M00t Q0gzZTk1ZC1NWU9jQ3Q3amMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbnkgMdOw6CAikrvz9Inc5WlRy1AE204URpSCVh1uG5o0CBZrpLICl KUUW7ThQNiZJ6b4DxK746mrBxVaacHNY41keU3ffGQrdyVro/soEkl4+UHSGYak+ hT5lws0F07mNuKehjUzX2IRAf+oTNOPpjbXD/MXvmL2OPLNnXgZODeZvzlPyw/rh 926L7amfFLPfFteUunuJMx632CVOM9607V+0dzhLsqhU77YIowW0w7Vc5UR83Tz/ bAuHcFrNhkp7IXx4ptctrgg4lF2HyH0NIDeocnQKsNELV7mT5wrSzX1oHqF++OJk /JuLyW//cJ20wvgwVLswPakR/RKyZ1tI -----END CERTIFICATE-----Generated at Sat May 31 17:02:14 2025 by rpki-client