$ rpki-client -vvf rpki.apnic.net/member_repository/A919F554/3F95A85231F311F0ABBAE669C4F9AE02/bFF5ywz4GJ4eIIHUtpWUhKPrNqg.mft File: bFF5ywz4GJ4eIIHUtpWUhKPrNqg.mft (raw, json) Hash identifier: T///1gjss0L1R/58soP1faIDfj6VeBvUc5JnQKpGR9k= Subject key identifier: 26:11:AC:C6:7F:77:C2:2F:6B:BD:6C:F6:D2:EF:B5:5C:7F:98:8E:F1 Authority key identifier: 6C:51:79:CB:0C:F8:18:9E:1E:20:81:D4:B6:95:94:84:A3:EB:36:A8 Certificate issuer: /CN=A919F554/serialNumber=6C5179CB0CF8189E1E2081D4B6959484A3EB36A8 Certificate serial: 0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFF5ywz4GJ4eIIHUtpWUhKPrNqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F554/3F95A85231F311F0ABBAE669C4F9AE02/bFF5ywz4GJ4eIIHUtpWUhKPrNqg.mft Manifest number: 0A Signing time: Sat 31 May 2025 07:42:23 +0000 Manifest this update: Sat 31 May 2025 07:42:23 +0000 Manifest next update: Sat 07 Jun 2025 07:42:23 +0000 Files and hashes: 1: bFF5ywz4GJ4eIIHUtpWUhKPrNqg.crl (hash: OOj3qZDJKzJDqVQ7k3SqeZWZdgIRo8U/ym4iauJBSas=) 2: C420C91231F311F0B07AC76AC4F9AE02.roa (hash: XPTUja6J7XFQv+BD9NiOzIrOTCkxWgFmdmQI7JPx3gw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F554/3F95A85231F311F0ABBAE669C4F9AE02/bFF5ywz4GJ4eIIHUtpWUhKPrNqg.crl rsync://rpki.apnic.net/member_repository/A919F554/3F95A85231F311F0ABBAE669C4F9AE02/bFF5ywz4GJ4eIIHUtpWUhKPrNqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFF5ywz4GJ4eIIHUtpWUhKPrNqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:42:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F554, serialNumber=6C5179CB0CF8189E1E2081D4B6959484A3EB36A8 Validity Not Before: May 31 07:42:23 2025 GMT Not After : Jun 7 07:42:23 2025 GMT Subject: CN=683ab2df-8136 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ba:0a:16:90:85:c1:ec:0b:b1:9d:23:71:cf: 84:fe:2e:44:bc:df:dc:91:ef:fb:6f:da:49:9e:34: 34:d8:ce:7d:14:6e:9c:77:54:1d:f3:3c:fa:c8:92: d9:61:6c:4c:57:40:68:e7:e0:20:78:59:57:61:a4: 14:cf:52:e3:af:3a:51:dd:5a:cf:b3:e2:2b:f5:e4: e9:55:63:3a:c9:9a:bf:d3:fa:fd:4d:c1:bf:f5:5b: f7:61:91:35:17:ca:19:3b:7b:c8:c6:65:4f:b2:dd: 56:d1:93:75:d1:d6:51:5b:16:46:a6:c5:25:26:8a: 4f:c3:e9:11:c8:ef:de:4b:5b:f1:ab:3e:f9:de:e6: 1d:e6:a2:f7:61:8d:fb:78:f4:64:b4:50:0a:20:47: eb:15:07:1c:af:17:fa:fc:42:e0:c4:ea:ea:10:0e: 9d:6a:1d:04:66:8f:32:7d:4b:5b:c6:63:52:3b:64: 81:69:6e:44:30:1a:37:bc:21:b6:cf:ee:48:ef:13: 53:9c:09:27:84:44:1f:fb:d2:77:5a:5e:d5:e3:bd: 90:b8:84:d9:12:6a:fb:c3:d0:30:77:6d:3f:ea:bb: 3e:06:de:5c:77:9d:e9:9f:2f:14:eb:cf:28:38:ce: a8:19:e9:fe:67:22:6c:0c:1a:26:47:f8:04:ac:c4: 54:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:11:AC:C6:7F:77:C2:2F:6B:BD:6C:F6:D2:EF:B5:5C:7F:98:8E:F1 X509v3 Authority Key Identifier: keyid:6C:51:79:CB:0C:F8:18:9E:1E:20:81:D4:B6:95:94:84:A3:EB:36:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F554/3F95A85231F311F0ABBAE669C4F9AE02/bFF5ywz4GJ4eIIHUtpWUhKPrNqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFF5ywz4GJ4eIIHUtpWUhKPrNqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F554/3F95A85231F311F0ABBAE669C4F9AE02/bFF5ywz4GJ4eIIHUtpWUhKPrNqg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:73:34:a5:57:03:15:40:2c:e9:e5:4a:1a:50:13:a4:f4:18: 6f:92:e1:6e:68:03:0b:41:5d:0a:de:01:55:40:96:09:b2:51: 98:f9:a5:af:b5:74:48:22:dd:e9:72:2f:d0:2b:37:63:6b:8b: 45:ed:64:08:75:ee:f4:31:c4:29:18:d1:a7:08:c4:c8:6a:68: ef:65:08:d6:88:78:da:87:51:04:34:d9:35:db:09:fd:8c:84: 4f:13:ff:be:eb:c8:24:ff:4e:27:08:fc:4d:59:9d:e2:40:bd: a8:7f:08:d5:fc:28:7b:27:de:31:73:6b:b2:9f:24:48:d2:1e: f3:43:71:44:5d:d9:d5:33:76:99:9f:ca:28:56:cf:99:45:49: 20:81:01:9c:cf:6c:b4:b3:14:74:b0:24:97:28:fb:a5:da:52: cf:19:27:54:1b:45:7c:ac:82:92:20:ec:ce:20:f7:a5:2d:11: 4a:4d:93:5a:a9:05:09:04:6b:78:79:a0:c5:27:4b:a6:0b:0d: 1f:f5:30:95:72:6a:c1:74:24:fe:23:c5:70:2a:a0:40:a7:58: 46:b6:5c:e6:3a:d2:3d:70:b3:d1:4e:5f:92:ce:ad:81:58:c8: 59:19:ac:0c:17:58:69:0e:64:17:ad:90:5e:25:ae:ff:ac:08: 6c:60:80:a8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RjU1NDExMC8GA1UEBRMoNkM1MTc5Q0IwQ0Y4MTg5RTFFMjA4MUQ0QjY5NTk0ODRB M0VCMzZBODAeFw0yNTA1MzEwNzQyMjNaFw0yNTA2MDcwNzQyMjNaMBgxFjAUBgNV BAMTDTY4M2FiMmRmLTgxMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwugoWkIXB7AuxnSNxz4T+LkS839yR7/tv2kmeNDTYzn0Ubpx3VB3zPPrIktlh bExXQGjn4CB4WVdhpBTPUuOvOlHdWs+z4iv15OlVYzrJmr/T+v1Nwb/1W/dhkTUX yhk7e8jGZU+y3VbRk3XR1lFbFkamxSUmik/D6RHI795LW/GrPvne5h3movdhjft4 9GS0UAogR+sVBxyvF/r8QuDE6uoQDp1qHQRmjzJ9S1vGY1I7ZIFpbkQwGje8IbbP 7kjvE1OcCSeERB/70ndaXtXjvZC4hNkSavvD0DB3bT/quz4G3lx3nemfLxTrzyg4 zqgZ6f5nImwMGiZH+ASsxFRvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJhGsxn93 wi9rvWz20u+1XH+YjvEwHwYDVR0jBBgwFoAUbFF5ywz4GJ4eIIHUtpWUhKPrNqgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlGNTU0LzNGOTVBODUyMzFG MzExRjBBQkJBRTY2OUM0RjlBRTAyL2JGRjV5d3o0R0o0ZUlJSFV0cFdVaEtQck5x Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYkZGNXl3ejRHSjRlSUlIVXRwV1VoS1ByTnFnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlG NTU0LzNGOTVBODUyMzFGMzExRjBBQkJBRTY2OUM0RjlBRTAyL2JGRjV5d3o0R0o0 ZUlJSFV0cFdVaEtQck5xZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACpzNKVXAxVALOnlShpQE6T0GG+S4W5oAwtBXQreAVVAlgmyUZj5pa+1 dEgi3elyL9ArN2Nri0XtZAh17vQxxCkY0acIxMhqaO9lCNaIeNqHUQQ02TXbCf2M hE8T/77ryCT/TicI/E1ZneJAvah/CNX8KHsn3jFza7KfJEjSHvNDcURd2dUzdpmf yihWz5lFSSCBAZzPbLSzFHSwJJco+6XaUs8ZJ1QbRXysgpIg7M4g96UtEUpNk1qp BQkEa3h5oMUnS6YLDR/1MJVyasF0JP4jxXAqoECnWEa2XOY60j1ws9FOX5LOrYFY yFkZrAwXWGkOZBetkF4lrv+sCGxggKg= -----END CERTIFICATE-----Generated at Sat May 31 14:59:33 2025 by rpki-client