$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft File: b5rATOWscafCt6-xpVcnoQ5bBu4.mft (raw, json) Hash identifier: faTKAjAowibzUwOvEEvWhfHh780IftLikfwCi0M3pDk= Subject key identifier: 7E:C0:A5:F1:CE:26:56:A7:03:0E:8D:7C:37:76:5E:47:AF:FA:5E:42 Authority key identifier: 6F:9A:C0:4C:E5:AC:71:A7:C2:B7:AF:B1:A5:57:27:A1:0E:5B:06:EE Certificate issuer: /CN=A91BD9C2/serialNumber=6F9AC04CE5AC71A7C2B7AFB1A55727A10E5B06EE Certificate serial: 0B3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft Manifest number: 0B33 Signing time: Fri 06 Jun 2025 19:13:15 +0000 Manifest this update: Fri 06 Jun 2025 19:13:14 +0000 Manifest next update: Fri 13 Jun 2025 19:13:14 +0000 Files and hashes: 1: b5rATOWscafCt6-xpVcnoQ5bBu4.crl (hash: klJ9f3mJEwqS4cHhKHFQdQs806brNmg84fiHVcUThRo=) 2: 1A0B540E3AA711EA83682876C4F9AE02.roa (hash: Gpxpc8IRQzuHqiyk8bsF5mq9N6coqqpi1UICb22hud0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.crl rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 19:13:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2876 (0xb3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD9C2, serialNumber=6F9AC04CE5AC71A7C2B7AFB1A55727A10E5B06EE Validity Not Before: Jun 6 19:13:14 2025 GMT Not After : Jun 13 19:13:14 2025 GMT Subject: CN=68433dcb-9ea6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b5:20:ee:50:5b:f8:25:e7:6d:cb:98:b2:b2: 46:c9:16:d2:c6:29:90:88:8d:bb:1d:5b:26:98:3f: dd:aa:c5:70:8e:7e:85:71:a7:4c:f1:71:c5:fb:5d: 29:0d:eb:10:cf:13:72:83:ba:93:8c:04:3f:ff:70: ba:62:46:a9:2b:32:65:e1:c6:a8:6c:d3:d6:80:b5: c8:b5:76:a7:d7:9e:04:d6:a3:d4:e1:e3:ce:6d:83: fe:eb:cb:e8:36:7a:8a:2b:ed:ea:8b:57:d0:2a:8d: c8:d8:59:81:b9:60:b3:82:1c:53:63:25:2a:19:c3: 9f:35:34:d0:a7:e5:3d:85:9f:b5:16:e8:99:98:54: 88:1e:a1:6b:b1:7d:78:17:4a:47:7b:bc:cb:d1:80: 50:8e:cc:af:69:30:7e:2b:65:bd:31:74:dd:a0:ee: c3:f8:14:a9:1a:18:8f:32:2f:21:57:7d:0e:18:af: f2:96:4c:de:30:e0:e5:17:99:94:83:19:eb:9b:bb: 0e:82:6c:b6:9d:4a:60:59:d1:35:d1:f2:9f:b1:4c: 1f:2a:8a:c8:2d:bb:59:fe:8c:f9:e0:50:9d:5d:e3: 2c:68:08:f8:a6:18:92:3b:9f:b6:e6:7b:2d:99:31: bc:02:14:74:b7:9d:d6:01:29:cf:2e:09:9e:fa:fe: 4b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:C0:A5:F1:CE:26:56:A7:03:0E:8D:7C:37:76:5E:47:AF:FA:5E:42 X509v3 Authority Key Identifier: keyid:6F:9A:C0:4C:E5:AC:71:A7:C2:B7:AF:B1:A5:57:27:A1:0E:5B:06:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:fe:93:01:54:4e:33:de:9b:aa:86:eb:c3:ea:1d:36:66:b5: f5:ae:fe:d0:ea:c6:df:33:11:d2:9c:d8:9d:3d:b5:7c:09:06: 1d:c4:6d:a1:7e:78:ca:f9:ab:a3:62:75:41:bf:45:7a:80:45: 39:7b:35:7b:c8:67:08:1b:35:54:ab:12:02:e6:a3:cb:ac:c5: 5f:44:c6:24:d7:23:1e:5d:ff:f7:11:9c:9c:ca:2c:81:29:4b: 2b:3b:5e:e2:dd:0f:73:58:00:41:14:fa:fa:37:74:a9:a4:d9: 3f:33:71:8e:5f:cc:4b:8b:d8:13:66:33:39:bd:4d:b1:1d:17: 14:97:fe:f5:13:41:43:09:45:dc:c1:f5:d1:61:61:15:cb:8f: be:8e:03:0f:0c:cc:27:7c:89:fc:ce:71:ce:d2:d5:3b:b5:92: 4a:37:0c:80:d1:7b:30:a8:36:35:80:ba:46:df:ba:ea:0b:05: 94:5a:d0:51:c9:ba:b1:5c:77:24:3c:27:d6:19:81:e3:fc:a2: 58:08:dc:51:42:f5:96:57:6d:d9:b5:80:e2:7a:a4:d6:0c:00: cd:65:a2:0e:c5:a7:f5:e8:e2:a2:b7:0a:10:e0:91:d1:0b:46: c5:ed:0d:24:f5:60:2e:c9:58:29:77:97:51:5f:e6:ae:29:a3: 27:08:f9:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ5QzIxMTAvBgNVBAUTKDZGOUFDMDRDRTVBQzcxQTdDMkI3QUZCMUE1NTcyN0Ex MEU1QjA2RUUwHhcNMjUwNjA2MTkxMzE0WhcNMjUwNjEzMTkxMzE0WjAYMRYwFAYD VQQDEw02ODQzM2RjYi05ZWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArLUg7lBb+CXnbcuYsrJGyRbSximQiI27HVsmmD/dqsVwjn6FcadM8XHF+10p DesQzxNyg7qTjAQ//3C6YkapKzJl4caobNPWgLXItXan154E1qPU4ePObYP+68vo NnqKK+3qi1fQKo3I2FmBuWCzghxTYyUqGcOfNTTQp+U9hZ+1FuiZmFSIHqFrsX14 F0pHe7zL0YBQjsyvaTB+K2W9MXTdoO7D+BSpGhiPMi8hV30OGK/ylkzeMODlF5mU gxnrm7sOgmy2nUpgWdE10fKfsUwfKorILbtZ/oz54FCdXeMsaAj4phiSO5+25nst mTG8AhR0t53WASnPLgme+v5L1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH7ApfHO JlanAw6NfDd2Xkev+l5CMB8GA1UdIwQYMBaAFG+awEzlrHGnwrevsaVXJ6EOWwbu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDlDMi9BQjBERjRGMjNB QTIxMUVBQTc5RTZBNjlDNEY5QUUwMi9iNXJBVE9Xc2NhZkN0Ni14cFZjbm9RNWJC dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I1ckFUT1dzY2FmQ3Q2LXhwVmNub1E1YkJ1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDlDMi9BQjBERjRGMjNBQTIxMUVBQTc5RTZBNjlDNEY5QUUwMi9iNXJBVE9Xc2Nh ZkN0Ni14cFZjbm9RNWJCdTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDG/pMBVE4z3puqhuvD6h02ZrX1rv7Q6sbfMxHSnNidPbV8CQYdxG2h fnjK+aujYnVBv0V6gEU5ezV7yGcIGzVUqxIC5qPLrMVfRMYk1yMeXf/3EZycyiyB KUsrO17i3Q9zWABBFPr6N3SppNk/M3GOX8xLi9gTZjM5vU2xHRcUl/71E0FDCUXc wfXRYWEVy4++jgMPDMwnfIn8znHO0tU7tZJKNwyA0XswqDY1gLpG37rqCwWUWtBR ybqxXHckPCfWGYHj/KJYCNxRQvWWV23ZtYDieqTWDADNZaIOxaf16OKitwoQ4JHR C0bF7Q0k9WAuyVgpd5dRX+auKaMnCPnV -----END CERTIFICATE-----Generated at Sun Jun 8 18:00:18 2025 by rpki-client