$ rpki-client -vvf rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.mft File: Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.mft (raw, json) Hash identifier: xCOu90TZBUKNFtke3Xmvv6et8oKep1G88Ih5/QjO6bk= Subject key identifier: 6F:F1:EE:2F:92:59:05:39:A7:27:DB:0D:E7:05:72:0A:64:BA:B8:F2 Authority key identifier: 05:BE:F3:B7:64:63:56:CE:40:9F:C5:63:F2:A6:90:78:67:79:5E:F7 Certificate issuer: /CN=A91D795B/serialNumber=05BEF3B7646356CE409FC563F2A6907867795EF7 Certificate serial: 0528 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.mft Manifest number: 0523 Signing time: Fri 06 Jun 2025 23:36:21 +0000 Manifest this update: Fri 06 Jun 2025 23:36:20 +0000 Manifest next update: Fri 13 Jun 2025 23:36:20 +0000 Files and hashes: 1: Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.crl (hash: x48LaH4ncVDjUiZiwzsp719if/uPlx081nV+JobB17s=) 2: 7C05ACEE75B311EF83EC6F78C4F9AE02.roa (hash: 4HbuRwfGRyDZiXaifrjrnY5mPijGwg/rzxNxMS6Fugs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.crl rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 23:36:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1320 (0x528) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D795B, serialNumber=05BEF3B7646356CE409FC563F2A6907867795EF7 Validity Not Before: Jun 6 23:36:20 2025 GMT Not After : Jun 13 23:36:20 2025 GMT Subject: CN=68437b74-4907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:53:33:b4:f1:3a:e8:1d:df:76:43:d4:fa:78: 41:dc:fc:ba:a2:77:cf:90:a0:81:a2:4b:43:f5:73: 06:81:bb:c6:22:a2:03:23:46:97:35:b7:10:f8:42: 68:e1:7c:4f:df:66:4c:b7:4e:99:03:e2:6d:98:d4: 38:37:63:8b:ec:5b:f0:bf:3a:f1:d2:18:8d:34:88: 45:03:05:ea:a9:cd:2b:f0:1b:ab:7b:00:71:bd:62: af:be:87:8b:91:e1:fa:4f:36:c2:d8:b1:54:a7:03: c9:66:82:82:db:f8:70:6b:09:ac:27:d6:82:5a:8f: ab:c8:1b:2d:43:3a:67:e6:67:22:aa:b2:73:89:bc: 43:97:a5:38:09:10:35:15:07:5e:78:04:a9:e7:7c: 16:18:74:fb:fb:0f:c6:31:52:61:c8:cd:d3:72:61: 2f:2e:bf:ed:18:be:4a:77:36:db:3e:2e:e0:9b:8c: 13:04:04:04:d5:c0:22:81:ce:bc:f5:37:f7:10:07: 55:15:b7:02:4e:ea:b1:49:33:8f:46:7e:8c:76:48: f0:ca:48:d8:dd:b6:6c:bf:a3:8b:04:87:74:04:a3: 03:fa:45:cd:18:3a:70:2e:f1:0f:3c:c7:68:08:df: 1f:dd:31:39:6e:8a:50:54:3e:bf:4b:99:01:dc:fe: 65:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:F1:EE:2F:92:59:05:39:A7:27:DB:0D:E7:05:72:0A:64:BA:B8:F2 X509v3 Authority Key Identifier: keyid:05:BE:F3:B7:64:63:56:CE:40:9F:C5:63:F2:A6:90:78:67:79:5E:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:94:37:2e:d9:01:72:46:6f:1b:a3:71:8e:c0:5b:e8:3b:d8: aa:cb:89:ca:14:48:d3:ec:7d:37:ac:89:e4:45:23:23:dd:59: 71:5a:ce:d6:bc:6f:5c:83:f6:d5:6b:5e:53:c8:38:b9:f3:df: 6e:d3:e6:ac:c0:a4:4c:6e:77:3a:f3:3d:6d:bf:d2:71:3c:0a: d8:3f:6e:ad:05:c2:e4:48:0a:34:75:e3:b2:e4:7c:99:79:ac: 09:0f:6f:70:2f:c9:4e:9f:75:55:aa:33:46:03:25:c3:ea:d6: a3:2c:95:0f:1e:ce:9f:e0:a4:56:69:ed:f7:e1:c1:5b:d2:80: a7:21:3f:52:a6:5a:8a:08:f8:0f:3d:df:53:6e:fe:8c:5d:ed: b2:25:a9:e6:3a:76:83:59:07:d2:4d:b3:a1:c7:25:9f:58:35: 5a:07:b7:78:38:88:9a:61:34:41:61:0a:d4:18:1c:b0:39:c3: 5e:42:16:c4:a0:a9:d8:28:1d:e2:85:1c:94:89:7d:68:73:df: f7:7c:00:24:77:be:e7:f4:cc:35:8a:1a:0b:32:01:13:85:34: af:b9:60:09:a0:a2:01:b7:71:af:f0:39:a4:a4:29:5d:00:58: 86:ae:c4:17:c4:b8:9d:43:b1:28:4c:e2:56:ef:77:5c:c0:f4: 93:7b:66:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc5NUIxMTAvBgNVBAUTKDA1QkVGM0I3NjQ2MzU2Q0U0MDlGQzU2M0YyQTY5MDc4 Njc3OTVFRjcwHhcNMjUwNjA2MjMzNjIwWhcNMjUwNjEzMjMzNjIwWjAYMRYwFAYD VQQDEw02ODQzN2I3NC00OTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA41MztPE66B3fdkPU+nhB3Py6onfPkKCBoktD9XMGgbvGIqIDI0aXNbcQ+EJo 4XxP32ZMt06ZA+JtmNQ4N2OL7Fvwvzrx0hiNNIhFAwXqqc0r8BurewBxvWKvvoeL keH6TzbC2LFUpwPJZoKC2/hwawmsJ9aCWo+ryBstQzpn5mciqrJzibxDl6U4CRA1 FQdeeASp53wWGHT7+w/GMVJhyM3TcmEvLr/tGL5KdzbbPi7gm4wTBAQE1cAigc68 9Tf3EAdVFbcCTuqxSTOPRn6MdkjwykjY3bZsv6OLBId0BKMD+kXNGDpwLvEPPMdo CN8f3TE5bopQVD6/S5kB3P5lywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG/x7i+S WQU5pyfbDecFcgpkurjyMB8GA1UdIwQYMBaAFAW+87dkY1bOQJ/FY/KmkHhneV73 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzk1Qi9BODhGQjNFMjAw QzAxMUVDOTZDMkQ1ODNDNEY5QUUwMi9CYjd6dDJSalZzNUFuOFZqOHFhUWVHZDVY dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JiN3p0MlJqVnM1QW44Vmo4cWFRZUdkNVh2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Nzk1Qi9BODhGQjNFMjAwQzAxMUVDOTZDMkQ1ODNDNEY5QUUwMi9CYjd6dDJSalZz NUFuOFZqOHFhUWVHZDVYdmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnlDcu2QFyRm8bo3GOwFvoO9iqy4nKFEjT7H03rInkRSMj3VlxWs7W vG9cg/bVa15TyDi5899u0+aswKRMbnc68z1tv9JxPArYP26tBcLkSAo0deOy5HyZ eawJD29wL8lOn3VVqjNGAyXD6tajLJUPHs6f4KRWae334cFb0oCnIT9SplqKCPgP Pd9Tbv6MXe2yJanmOnaDWQfSTbOhxyWfWDVaB7d4OIiaYTRBYQrUGBywOcNeQhbE oKnYKB3ihRyUiX1oc9/3fAAkd77n9Mw1ihoLMgEThTSvuWAJoKIBt3Gv8DmkpCld AFiGrsQXxLidQ7EoTOJW73dcwPSTe2aJ -----END CERTIFICATE-----Generated at Sat Jun 7 15:27:39 2025 by rpki-client