$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA5FD/8BDAFEF4528611EE89B00D87C4F9AE02/B2DK71ty3-WwS3ba3_q4Z8MKmMc.mft File: B2DK71ty3-WwS3ba3_q4Z8MKmMc.mft (raw, json) Hash identifier: /f8G/xIt85S6V+5gci0zfuYydku0PZroE645LCEWyNE= Subject key identifier: 28:E9:D9:84:7F:D2:EC:7D:99:AF:FB:FE:9F:F1:B0:F9:0A:FB:89:80 Authority key identifier: 07:60:CA:EF:5B:72:DF:E5:B0:4B:76:DA:DF:FA:B8:67:C3:0A:98:C7 Certificate issuer: /CN=A91DA5FD/serialNumber=0760CAEF5B72DFE5B04B76DADFFAB867C30A98C7 Certificate serial: 0147 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2DK71ty3-WwS3ba3_q4Z8MKmMc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA5FD/8BDAFEF4528611EE89B00D87C4F9AE02/B2DK71ty3-WwS3ba3_q4Z8MKmMc.mft Manifest number: 0143 Signing time: Sat 31 May 2025 03:59:22 +0000 Manifest this update: Sat 31 May 2025 03:59:21 +0000 Manifest next update: Sat 07 Jun 2025 03:59:21 +0000 Files and hashes: 1: B2DK71ty3-WwS3ba3_q4Z8MKmMc.crl (hash: T6eidw2nGgnZxpAEFhUBzHhcyg4iAtTVcv2cYYq44mQ=) 2: 76817340537011EEB43BD523C4F9AE02.roa (hash: jAD/7lg+++i+O4y1RlntCcfLaxTpo5Pzuq6OqBjjXF4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA5FD/8BDAFEF4528611EE89B00D87C4F9AE02/B2DK71ty3-WwS3ba3_q4Z8MKmMc.crl rsync://rpki.apnic.net/member_repository/A91DA5FD/8BDAFEF4528611EE89B00D87C4F9AE02/B2DK71ty3-WwS3ba3_q4Z8MKmMc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2DK71ty3-WwS3ba3_q4Z8MKmMc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:59:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 327 (0x147) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA5FD, serialNumber=0760CAEF5B72DFE5B04B76DADFFAB867C30A98C7 Validity Not Before: May 31 03:59:21 2025 GMT Not After : Jun 7 03:59:21 2025 GMT Subject: CN=683a7e9a-393e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f8:91:bc:0a:ef:89:1b:7d:a2:64:f3:2a:2e: ce:d1:a8:69:bc:98:ae:06:24:4f:dd:1e:7a:46:b8: ff:1b:bd:7b:49:a9:78:cf:ca:32:d3:47:08:cd:4c: 23:fa:ae:89:78:ac:ac:ad:73:45:b9:e4:aa:de:16: cf:2e:a9:30:54:a7:82:67:26:f2:8b:62:fc:00:3a: 8e:4b:c3:91:d2:ad:15:9b:e2:b8:57:48:cc:fa:5c: 76:2f:6b:f2:2d:9a:d0:3b:2f:00:3a:d0:81:f4:85: 00:e9:b2:6d:7b:e0:d3:80:a5:06:45:4f:de:8a:d0: 45:3b:bd:60:fb:db:7b:96:a8:01:45:9c:46:a3:c4: 58:15:98:b2:ec:13:a7:6e:1d:6e:0d:ce:26:df:ae: cd:98:ad:37:6c:61:52:f3:99:6b:8f:57:7b:7b:1e: e4:02:12:c0:04:dd:e6:c2:db:27:2d:25:82:ec:82: 2e:66:6c:02:81:05:32:fe:d8:6d:87:63:b4:f9:a7: 0c:74:d4:00:3e:7c:53:50:a7:9f:fa:f5:7e:17:34: f9:40:13:5f:db:e5:3c:6b:11:db:8c:d1:d4:3f:65: 1a:3b:46:c2:eb:3b:1a:8a:63:21:85:4c:00:c8:e7: 06:6c:60:8e:9c:6a:f7:69:14:e2:db:48:fd:58:5e: 42:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:E9:D9:84:7F:D2:EC:7D:99:AF:FB:FE:9F:F1:B0:F9:0A:FB:89:80 X509v3 Authority Key Identifier: keyid:07:60:CA:EF:5B:72:DF:E5:B0:4B:76:DA:DF:FA:B8:67:C3:0A:98:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA5FD/8BDAFEF4528611EE89B00D87C4F9AE02/B2DK71ty3-WwS3ba3_q4Z8MKmMc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2DK71ty3-WwS3ba3_q4Z8MKmMc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA5FD/8BDAFEF4528611EE89B00D87C4F9AE02/B2DK71ty3-WwS3ba3_q4Z8MKmMc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:e9:8f:2a:18:78:36:e7:62:2d:b1:e6:e5:a2:0e:75:29:99: 54:3b:37:39:07:a5:55:4d:0b:dc:5f:31:e6:c9:2b:5f:1a:cc: bb:7b:bf:97:c6:ba:d2:41:72:80:8a:eb:b8:8a:07:7f:60:5a: c9:a9:65:ee:87:bb:5a:39:0a:5e:19:f0:47:c9:b6:03:fd:87: 73:95:ff:89:34:0c:6a:61:5e:dc:8e:9c:96:b6:d5:15:ce:2d: b3:40:1b:b7:87:5a:1b:77:3d:6f:a0:62:af:02:6e:fa:cc:5f: 03:95:bf:25:fc:5a:67:fb:18:d5:9e:f2:7a:ce:ea:49:75:f0: 4d:18:1d:1f:5c:c1:e8:14:44:2f:90:c4:94:ca:81:f9:9e:de: ab:c9:07:49:1d:f8:dd:17:4b:94:99:0d:40:54:6e:2c:95:6c: c2:36:bd:3c:94:83:83:aa:b7:b1:e4:d0:43:a9:b2:b6:64:95: 22:f5:0d:95:86:cb:4c:7f:6d:2c:f0:33:d3:21:57:30:e1:c0: 31:d1:58:05:ce:e2:c2:77:05:6c:f3:1f:27:f2:49:04:4b:52: 3d:f2:c8:7c:56:a8:d2:3a:7d:9a:f2:18:ac:72:6e:40:44:5b: 6a:8d:4b:4a:a6:df:63:f2:38:63:30:df:59:19:b4:43:c6:ff: e5:ba:4b:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REE1RkQxMTAvBgNVBAUTKDA3NjBDQUVGNUI3MkRGRTVCMDRCNzZEQURGRkFCODY3 QzMwQTk4QzcwHhcNMjUwNTMxMDM1OTIxWhcNMjUwNjA3MDM1OTIxWjAYMRYwFAYD VQQDEw02ODNhN2U5YS0zOTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtfiRvArviRt9omTzKi7O0ahpvJiuBiRP3R56Rrj/G717Sal4z8oy00cIzUwj +q6JeKysrXNFueSq3hbPLqkwVKeCZybyi2L8ADqOS8OR0q0Vm+K4V0jM+lx2L2vy LZrQOy8AOtCB9IUA6bJte+DTgKUGRU/eitBFO71g+9t7lqgBRZxGo8RYFZiy7BOn bh1uDc4m367NmK03bGFS85lrj1d7ex7kAhLABN3mwtsnLSWC7IIuZmwCgQUy/tht h2O0+acMdNQAPnxTUKef+vV+FzT5QBNf2+U8axHbjNHUP2UaO0bC6zsaimMhhUwA yOcGbGCOnGr3aRTi20j9WF5CDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCjp2YR/ 0ux9ma/7/p/xsPkK+4mAMB8GA1UdIwQYMBaAFAdgyu9bct/lsEt22t/6uGfDCpjH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTVGRC84QkRBRkVGNDUy ODYxMUVFODlCMDBEODdDNEY5QUUwMi9CMkRLNzF0eTMtV3dTM2JhM19xNFo4TUtt TWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0IyREs3MXR5My1Xd1MzYmEzX3E0WjhNS21NYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTVGRC84QkRBRkVGNDUyODYxMUVFODlCMDBEODdDNEY5QUUwMi9CMkRLNzF0eTMt V3dTM2JhM19xNFo4TUttTWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCi6Y8qGHg252Itseblog51KZlUOzc5B6VVTQvcXzHmyStfGsy7e7+X xrrSQXKAiuu4igd/YFrJqWXuh7taOQpeGfBHybYD/Ydzlf+JNAxqYV7cjpyWttUV zi2zQBu3h1obdz1voGKvAm76zF8Dlb8l/Fpn+xjVnvJ6zupJdfBNGB0fXMHoFEQv kMSUyoH5nt6ryQdJHfjdF0uUmQ1AVG4slWzCNr08lIODqrex5NBDqbK2ZJUi9Q2V hstMf20s8DPTIVcw4cAx0VgFzuLCdwVs8x8n8kkES1I98sh8VqjSOn2a8hiscm5A RFtqjUtKpt9j8jhjMN9ZGbRDxv/lukvg -----END CERTIFICATE-----Generated at Sat May 31 14:41:34 2025 by rpki-client