$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.mft File: g7bn6iO9w6ONYLT_ou_1oY8dzWg.mft (raw, json) Hash identifier: neqgZVlaZ4VwoXQJtByD9g9udKButMkVfSgkeszlrCs= Subject key identifier: 3D:06:50:30:FC:1D:12:D6:FF:8F:67:ED:EC:88:E8:AD:07:2C:D1:44 Authority key identifier: 83:B6:E7:EA:23:BD:C3:A3:8D:60:B4:FF:A2:EF:F5:A1:8F:1D:CD:68 Certificate issuer: /CN=A91AB4BA/serialNumber=83B6E7EA23BDC3A38D60B4FFA2EFF5A18F1DCD68 Certificate serial: 01BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7bn6iO9w6ONYLT_ou_1oY8dzWg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.mft Manifest number: 01BB Signing time: Sat 07 Jun 2025 02:41:22 +0000 Manifest this update: Sat 07 Jun 2025 02:41:22 +0000 Manifest next update: Sat 14 Jun 2025 02:41:22 +0000 Files and hashes: 1: g7bn6iO9w6ONYLT_ou_1oY8dzWg.crl (hash: wfbsYjiS0UJVeRtTCRlmpQBiAIANJIpn3DEdimFN6bw=) 2: 93E8AC909CA111ED97E7FC20C4F9AE02.roa (hash: yz7MYEbOgQ8Al3poUxihFYnUX5uLUR4cvOqS22MeFsU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.crl rsync://rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7bn6iO9w6ONYLT_ou_1oY8dzWg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Jun 2025 02:41:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 447 (0x1bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB4BA, serialNumber=83B6E7EA23BDC3A38D60B4FFA2EFF5A18F1DCD68 Validity Not Before: Jun 7 02:41:22 2025 GMT Not After : Jun 14 02:41:22 2025 GMT Subject: CN=6843a6d2-d0a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2a:dd:37:94:15:56:cc:9d:a4:f8:c3:2a:2f: 5a:cb:a2:6d:e3:10:bd:ac:f9:77:2a:d5:a5:d6:b9: 0b:df:da:0e:c3:0e:37:77:c5:56:e2:e6:97:db:46: 35:a6:1f:0d:ab:17:d9:1a:3e:40:51:4d:1d:45:3e: 7b:5e:fa:1f:72:25:26:15:16:87:61:b2:60:41:60: a7:45:60:92:cc:30:33:cf:64:92:7d:ec:d7:5a:0b: 97:4d:62:dd:d4:66:5a:06:17:44:69:4d:62:ea:e0: 6a:e7:63:07:d7:7d:bd:97:e7:69:27:78:bb:e3:2b: 68:7f:a8:c5:53:4b:c9:86:89:96:e6:97:32:19:c5: 6b:92:80:2a:af:9f:55:f4:a9:6d:41:a1:35:25:d7: fb:42:92:b1:26:07:f6:4e:13:e6:a7:cb:24:7e:98: a6:ff:2a:9f:9b:30:87:14:d5:da:c2:f9:28:d9:81: 4a:68:76:d2:c4:78:d3:ac:5b:02:f9:3b:7b:dc:58: 8d:be:20:46:8d:88:be:38:a5:72:0e:04:51:32:5b: c9:54:6a:29:39:cd:8b:8a:6a:4b:71:f6:5f:88:97: c6:d1:09:a1:bd:08:30:71:60:06:c9:7d:4a:43:8d: 49:18:13:d2:df:69:b2:92:7f:b5:52:e3:01:f7:8f: 5c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:06:50:30:FC:1D:12:D6:FF:8F:67:ED:EC:88:E8:AD:07:2C:D1:44 X509v3 Authority Key Identifier: keyid:83:B6:E7:EA:23:BD:C3:A3:8D:60:B4:FF:A2:EF:F5:A1:8F:1D:CD:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7bn6iO9w6ONYLT_ou_1oY8dzWg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:bc:8e:8e:ed:c6:dd:d2:20:4e:83:4c:39:c4:b0:5f:c6:45: 7f:9a:f1:00:05:c7:9e:dc:fd:4f:aa:d5:4d:6d:d2:b8:28:5d: 34:d2:16:37:f0:e9:b4:eb:1d:d8:25:ca:4e:90:a2:57:78:40: 55:1f:6a:5e:a3:cd:4c:be:fb:98:15:56:f6:90:21:2b:69:2f: 7e:69:f5:22:94:f4:0c:ce:f6:6c:8d:51:61:84:99:ad:28:a6: 48:5d:62:ab:72:ed:fb:64:d3:a6:55:47:d0:8a:0d:d5:b0:ce: 10:a0:ab:9b:be:94:51:4e:c4:e3:d7:dd:bd:a2:d6:b6:bd:c6: d6:82:ee:95:39:f7:39:91:73:7b:ac:a4:6d:b7:02:cb:88:69: 69:cc:02:02:a9:07:ac:fa:fc:76:d2:77:5e:0f:85:09:1f:57: 88:fe:57:29:33:46:23:62:0a:c7:fe:61:83:70:75:67:3f:09: 90:bb:f5:87:59:56:76:18:9d:bd:a8:a6:98:cb:dc:77:f8:2d: c3:70:fb:24:b0:04:3a:54:7f:f1:7a:e5:e7:94:4a:7b:6d:e8: 78:f6:ad:cd:5c:41:97:c4:1c:86:f1:50:00:c6:aa:57:5f:31: fe:49:58:eb:ea:a9:b0:98:ab:f1:9d:22:78:9a:8d:3b:03:06: f1:ce:c0:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI0QkExMTAvBgNVBAUTKDgzQjZFN0VBMjNCREMzQTM4RDYwQjRGRkEyRUZGNUEx OEYxRENENjgwHhcNMjUwNjA3MDI0MTIyWhcNMjUwNjE0MDI0MTIyWjAYMRYwFAYD VQQDEw02ODQzYTZkMi1kMGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtyrdN5QVVsydpPjDKi9ay6Jt4xC9rPl3KtWl1rkL39oOww43d8VW4uaX20Y1 ph8NqxfZGj5AUU0dRT57XvofciUmFRaHYbJgQWCnRWCSzDAzz2SSfezXWguXTWLd 1GZaBhdEaU1i6uBq52MH1329l+dpJ3i74ytof6jFU0vJhomW5pcyGcVrkoAqr59V 9KltQaE1Jdf7QpKxJgf2ThPmp8skfpim/yqfmzCHFNXawvko2YFKaHbSxHjTrFsC +Tt73FiNviBGjYi+OKVyDgRRMlvJVGopOc2LimpLcfZfiJfG0QmhvQgwcWAGyX1K Q41JGBPS32mykn+1UuMB949cbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD0GUDD8 HRLW/49n7eyI6K0HLNFEMB8GA1UdIwQYMBaAFIO25+ojvcOjjWC0/6Lv9aGPHc1o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjRCQS9DNzNFMTg0NDlD OUUxMUVEOTFCNzE2MURDNEY5QUUwMi9nN2JuNmlPOXc2T05ZTFRfb3VfMW9ZOGR6 V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c3Ym42aU85dzZPTllMVF9vdV8xb1k4ZHpXZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjRCQS9DNzNFMTg0NDlDOUUxMUVEOTFCNzE2MURDNEY5QUUwMi9nN2JuNmlPOXc2 T05ZTFRfb3VfMW9ZOGR6V2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjvI6O7cbd0iBOg0w5xLBfxkV/mvEABcee3P1PqtVNbdK4KF000hY3 8Om06x3YJcpOkKJXeEBVH2peo81MvvuYFVb2kCEraS9+afUilPQMzvZsjVFhhJmt KKZIXWKrcu37ZNOmVUfQig3VsM4QoKubvpRRTsTj1929ota2vcbWgu6VOfc5kXN7 rKRttwLLiGlpzAICqQes+vx20ndeD4UJH1eI/lcpM0YjYgrH/mGDcHVnPwmQu/WH WVZ2GJ29qKaYy9x3+C3DcPsksAQ6VH/xeuXnlEp7beh49q3NXEGXxByG8VAAxqpX XzH+SVjr6qmwmKvxnSJ4mo07AwbxzsBO -----END CERTIFICATE-----Generated at Sat Jun 7 12:29:06 2025 by rpki-client