$ rpki-client -vvf rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft File: bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft (raw, json) Hash identifier: r/qftw3YnneH8GwLrQH7iOnKYJuOar6QQk8d0L40PHI= Subject key identifier: 48:24:1B:C3:4C:B9:93:1A:5E:91:12:63:89:D1:A8:55:A6:76:E7:87 Authority key identifier: 6E:95:A6:89:22:09:7E:76:C4:DB:12:47:EE:CE:E1:A3:B1:1F:8E:91 Certificate issuer: /CN=A9198F69/serialNumber=6E95A68922097E76C4DB1247EECEE1A3B11F8E91 Certificate serial: 0175 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpWmiSIJfnbE2xJH7s7ho7EfjpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft Manifest number: 016C Signing time: Sat 31 May 2025 03:35:59 +0000 Manifest this update: Sat 31 May 2025 03:35:59 +0000 Manifest next update: Sat 07 Jun 2025 03:35:59 +0000 Files and hashes: 1: bpWmiSIJfnbE2xJH7s7ho7EfjpE.crl (hash: mv9+aUX2THvkyqA9SXUlEQJGm90t0P8hNZkvCnzekpM=) 2: 62A9A9AC240A11F0A6893962C4F9AE02.roa (hash: u7hN3LaHpP2Ln4sXR3bb/0qJyMn/y5kDAuAzcgYeb9k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.crl rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpWmiSIJfnbE2xJH7s7ho7EfjpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:35:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 373 (0x175) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198F69, serialNumber=6E95A68922097E76C4DB1247EECEE1A3B11F8E91 Validity Not Before: May 31 03:35:59 2025 GMT Not After : Jun 7 03:35:59 2025 GMT Subject: CN=683a791f-dbfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0f:e2:6e:93:9a:57:53:6e:f4:bc:74:a5:de: cc:00:a2:3a:ca:bf:4c:c1:ba:3f:e6:51:d8:c2:b4: 2b:49:87:52:75:8b:5a:f7:cb:2e:a0:a4:1c:2b:f3: 19:8f:99:be:10:16:37:e1:0e:39:87:b1:19:5f:3b: 73:66:22:9c:0f:be:12:c8:42:2f:08:94:44:7f:28: cb:f5:2d:9e:f6:48:c3:cc:d3:cd:e5:5d:9f:9d:3c: 89:a3:9f:67:c8:bb:9e:39:85:05:d4:89:45:f5:ab: 54:8c:30:6b:a3:4d:7e:d2:12:77:c4:71:3a:98:7a: 4f:92:04:f5:01:2b:3b:e3:5c:b8:8c:ff:85:84:21: 3f:53:b0:17:78:49:94:d7:0f:c9:e1:d4:45:7d:c5: b4:5f:f4:d1:05:8d:1f:56:fb:18:d5:53:72:ac:67: da:0c:cb:f1:68:a5:0c:74:b1:b4:98:58:f9:2c:ab: 41:81:9a:9d:ca:56:38:6a:55:1c:3d:de:31:b7:42: 9c:41:32:fc:32:1a:6b:31:05:58:6a:42:8b:69:cd: be:17:bc:f3:8f:1a:5b:5d:6e:81:47:36:5c:56:a8: 5e:59:57:bf:6f:01:c2:49:c1:88:53:6b:05:a6:aa: c2:8a:f9:96:bf:67:19:8d:d2:3a:27:02:f0:6f:50: b0:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:24:1B:C3:4C:B9:93:1A:5E:91:12:63:89:D1:A8:55:A6:76:E7:87 X509v3 Authority Key Identifier: keyid:6E:95:A6:89:22:09:7E:76:C4:DB:12:47:EE:CE:E1:A3:B1:1F:8E:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpWmiSIJfnbE2xJH7s7ho7EfjpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:5f:70:6d:32:73:fb:c0:42:76:c0:34:8d:66:e3:6b:fe:4c: b0:b4:6c:2e:19:42:f0:96:5b:af:82:3b:a1:3d:5a:c9:cf:dc: 73:ea:7f:7d:bb:0a:a8:4c:ae:40:c1:ab:50:e1:0a:ab:8a:b8: 03:8f:38:1e:2b:59:0c:96:a3:6c:f2:99:ca:14:74:1f:a1:a7: 67:b9:0b:15:11:7d:5e:10:ea:52:de:0b:be:0d:1a:d8:f0:dd: ec:35:89:8b:22:5c:ed:9f:fd:64:8c:f3:24:0f:7d:5f:38:76: b0:7e:14:a0:f0:87:cd:d4:91:ab:14:56:2e:24:92:a9:74:b2: 72:d4:ca:43:fe:65:1a:34:63:74:5f:fe:c0:ba:33:db:85:da: 9a:45:01:02:e3:67:27:34:ea:67:bd:92:cb:2e:41:8a:5a:62: 82:94:7a:77:e4:f4:a5:f6:f4:1c:a6:68:0e:45:ee:54:f3:81: a5:8d:a2:57:98:f9:10:9f:7c:ac:11:7f:1f:c1:97:96:98:6f: af:62:a0:06:97:49:72:6f:8b:a3:8b:b0:cc:b7:2f:69:9b:23: b9:e6:76:53:13:ab:94:96:f0:fd:8b:ba:82:fb:43:a9:8a:e5: 8f:7b:ca:cc:16:c7:d2:b3:23:69:7c:89:5a:60:e8:a8:74:58: 0d:d3:bf:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OThGNjkxMTAvBgNVBAUTKDZFOTVBNjg5MjIwOTdFNzZDNERCMTI0N0VFQ0VFMUEz QjExRjhFOTEwHhcNMjUwNTMxMDMzNTU5WhcNMjUwNjA3MDMzNTU5WjAYMRYwFAYD VQQDEw02ODNhNzkxZi1kYmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtw/ibpOaV1Nu9Lx0pd7MAKI6yr9Mwbo/5lHYwrQrSYdSdYta98suoKQcK/MZ j5m+EBY34Q45h7EZXztzZiKcD74SyEIvCJREfyjL9S2e9kjDzNPN5V2fnTyJo59n yLueOYUF1IlF9atUjDBro01+0hJ3xHE6mHpPkgT1ASs741y4jP+FhCE/U7AXeEmU 1w/J4dRFfcW0X/TRBY0fVvsY1VNyrGfaDMvxaKUMdLG0mFj5LKtBgZqdylY4alUc Pd4xt0KcQTL8MhprMQVYakKLac2+F7zzjxpbXW6BRzZcVqheWVe/bwHCScGIU2sF pqrCivmWv2cZjdI6JwLwb1CwKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEgkG8NM uZMaXpESY4nRqFWmdueHMB8GA1UdIwQYMBaAFG6VpokiCX52xNsSR+7O4aOxH46R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OEY2OS9EQ0Y1QzNEMjFB NUYxMUVFOUFBQUIzODZDNEY5QUUwMi9icFdtaVNJSmZuYkUyeEpIN3M3aG83RWZq cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JwV21pU0lKZm5iRTJ4Skg3czdobzdFZmpwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OEY2OS9EQ0Y1QzNEMjFBNUYxMUVFOUFBQUIzODZDNEY5QUUwMi9icFdtaVNJSmZu YkUyeEpIN3M3aG83RWZqcEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnX3BtMnP7wEJ2wDSNZuNr/kywtGwuGULwlluvgjuhPVrJz9xz6n99 uwqoTK5AwatQ4QqrirgDjzgeK1kMlqNs8pnKFHQfoadnuQsVEX1eEOpS3gu+DRrY 8N3sNYmLIlztn/1kjPMkD31fOHawfhSg8IfN1JGrFFYuJJKpdLJy1MpD/mUaNGN0 X/7AujPbhdqaRQEC42cnNOpnvZLLLkGKWmKClHp35PSl9vQcpmgORe5U84GljaJX mPkQn3ysEX8fwZeWmG+vYqAGl0lyb4uji7DMty9pmyO55nZTE6uUlvD9i7qC+0Op iuWPe8rMFsfSsyNpfIlaYOiodFgN078F -----END CERTIFICATE-----Generated at Sat May 31 17:51:33 2025 by rpki-client