$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.mft File: bBl9pJIs_dxOmMiEbgOn19DkC3E.mft (raw, json) Hash identifier: fxTol3i/23saF6H114jUYWhFJanwrZ4HqmO+3TZ2fM4= Subject key identifier: 6E:11:AE:66:B2:9E:CC:8B:8A:16:6B:92:A2:6A:76:04:55:5F:F9:4E Authority key identifier: 6C:19:7D:A4:92:2C:FD:DC:4E:98:C8:84:6E:03:A7:D7:D0:E4:0B:71 Certificate issuer: /CN=A91EF2E1/serialNumber=6C197DA4922CFDDC4E98C8846E03A7D7D0E40B71 Certificate serial: 0680 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBl9pJIs_dxOmMiEbgOn19DkC3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.mft Manifest number: 066B Signing time: Fri 30 May 2025 22:42:44 +0000 Manifest this update: Fri 30 May 2025 22:42:43 +0000 Manifest next update: Fri 06 Jun 2025 22:42:43 +0000 Files and hashes: 1: bBl9pJIs_dxOmMiEbgOn19DkC3E.crl (hash: 1+nstxNjetWnfc1pNFhTOP9ZPZNh5WdE85dfScqMWmU=) 2: ECCDCA04809A11EB9093216EC4F9AE02.roa (hash: //P4Dwc0yC8aNI6dL5grZWmAPuUGPAB2QMNisS1s91o=) 3: 397ED08A2F7911ED93B17C0FC4F9AE02.roa (hash: sO+5ZUlz1ZfgN4m9jGacz4xKmgRg5xQ7WfaHnr5n8EY=) 4: 7D6F53547F0411EBB8CAEE2BC4F9AE02.roa (hash: VneqGQNP18iG+RzoK9rzGT1v0y/EKMK88ucBZjMvCCE=) 5: 08C849682F6E11EDA8ABA74BC4F9AE02.roa (hash: hmEwq8j3GlUgHO4QkFMDsLDsFyKYgDX+OadwrR+PhRU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.crl rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBl9pJIs_dxOmMiEbgOn19DkC3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1664 (0x680) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF2E1, serialNumber=6C197DA4922CFDDC4E98C8846E03A7D7D0E40B71 Validity Not Before: May 30 22:42:43 2025 GMT Not After : Jun 6 22:42:43 2025 GMT Subject: CN=683a3463-526f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:43:b3:00:9d:5a:a3:fa:9e:4a:79:7a:c1:31: b9:fd:60:1d:d0:b6:9f:78:cd:a7:d3:d2:59:24:48: d0:80:ca:e3:dc:57:84:96:e1:3e:79:cc:61:09:a2: 9c:87:5e:7f:4c:3d:19:a4:7b:f2:a2:29:12:e0:da: f9:64:4a:5b:3e:09:4c:15:50:27:40:a1:6d:a0:4f: 43:b7:7c:d3:01:b5:3e:5c:64:c9:34:40:3a:3c:b9: f0:43:6c:83:03:60:99:19:ba:ae:52:da:b1:4e:63: 2f:92:37:0b:d8:e1:74:2c:ae:6b:00:0e:76:e7:d6: 2d:73:49:0d:0b:e1:c9:04:00:51:1d:5e:13:61:32: 14:ae:a6:fe:72:64:46:9c:8c:0c:53:5c:28:96:1a: bd:c1:77:b7:24:1a:d4:d5:59:ef:cc:63:bb:7c:be: 46:10:84:84:cf:bf:de:b4:32:27:fa:8f:5d:84:1d: 18:e8:2e:30:92:95:92:b4:1c:36:3b:e8:92:4c:fe: 27:0f:7c:9d:c8:f6:73:08:6a:07:11:67:e6:15:e6: d1:d7:ff:b6:e9:d0:d4:db:67:a5:10:e7:4e:37:85: 95:83:70:5e:1e:c3:71:12:19:ef:6d:65:0c:cf:2d: cd:96:b8:96:a2:37:42:3e:18:ac:84:85:23:14:9b: 06:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:11:AE:66:B2:9E:CC:8B:8A:16:6B:92:A2:6A:76:04:55:5F:F9:4E X509v3 Authority Key Identifier: keyid:6C:19:7D:A4:92:2C:FD:DC:4E:98:C8:84:6E:03:A7:D7:D0:E4:0B:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBl9pJIs_dxOmMiEbgOn19DkC3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:7e:a4:65:3d:2d:3a:e8:68:92:d9:c3:cd:4e:ff:fc:2a:81: 48:1e:18:b0:8e:d3:41:38:93:25:fe:c1:48:fe:42:e0:da:11: 30:38:69:d7:3d:03:3a:d0:14:a2:ec:da:c1:49:09:02:16:73: be:71:05:f2:04:3c:96:ae:e4:cd:11:6c:09:4d:26:d6:4c:79: e1:82:de:72:2d:16:5c:5a:9d:d9:3b:55:b0:8c:85:2a:f7:71: 21:7e:37:6a:ca:48:f0:b6:80:5f:73:d5:3f:c6:ac:4b:68:6f: 63:12:94:39:18:ef:58:43:7d:54:5d:39:6a:0c:3d:b5:65:ca: 68:da:21:1d:d9:25:27:84:bd:33:2b:dd:76:f4:3c:7a:b1:11: 7e:d7:00:bc:32:f0:4e:0f:03:ea:da:0d:f5:a1:bc:10:3e:d5: f2:3f:77:49:aa:ab:f2:70:ae:45:57:48:1e:66:64:de:9e:81: 58:8b:26:11:ba:4a:5d:2a:9c:92:1b:fd:2d:0f:cd:d5:be:25: a4:b5:01:1a:36:bf:b2:d6:61:7f:0c:ff:98:1e:52:d3:25:cb: 2c:f6:7a:d9:a6:82:9b:ba:a8:f2:72:db:ab:9f:6d:29:e2:03: a2:e2:72:07:f8:f9:ff:c3:0b:49:f1:33:79:4b:a2:a6:68:10: eb:43:ea:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYyRTExMTAvBgNVBAUTKDZDMTk3REE0OTIyQ0ZEREM0RTk4Qzg4NDZFMDNBN0Q3 RDBFNDBCNzEwHhcNMjUwNTMwMjI0MjQzWhcNMjUwNjA2MjI0MjQzWjAYMRYwFAYD VQQDEw02ODNhMzQ2My01MjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAskOzAJ1ao/qeSnl6wTG5/WAd0LafeM2n09JZJEjQgMrj3FeEluE+ecxhCaKc h15/TD0ZpHvyoikS4Nr5ZEpbPglMFVAnQKFtoE9Dt3zTAbU+XGTJNEA6PLnwQ2yD A2CZGbquUtqxTmMvkjcL2OF0LK5rAA5259Ytc0kNC+HJBABRHV4TYTIUrqb+cmRG nIwMU1wolhq9wXe3JBrU1VnvzGO7fL5GEISEz7/etDIn+o9dhB0Y6C4wkpWStBw2 O+iSTP4nD3ydyPZzCGoHEWfmFebR1/+26dDU22elEOdON4WVg3BeHsNxEhnvbWUM zy3NlriWojdCPhishIUjFJsGBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG4Rrmay nsyLihZrkqJqdgRVX/lOMB8GA1UdIwQYMBaAFGwZfaSSLP3cTpjIhG4Dp9fQ5Atx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjJFMS8zRjY5Q0M2NjdG MDMxMUVCQTA4MUEwMkJDNEY5QUUwMi9iQmw5cEpJc19keE9tTWlFYmdPbjE5RGtD M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JCbDlwSklzX2R4T21NaUViZ09uMTlEa0MzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjJFMS8zRjY5Q0M2NjdGMDMxMUVCQTA4MUEwMkJDNEY5QUUwMi9iQmw5cEpJc19k eE9tTWlFYmdPbjE5RGtDM0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgfqRlPS066GiS2cPNTv/8KoFIHhiwjtNBOJMl/sFI/kLg2hEwOGnX PQM60BSi7NrBSQkCFnO+cQXyBDyWruTNEWwJTSbWTHnhgt5yLRZcWp3ZO1WwjIUq 93EhfjdqykjwtoBfc9U/xqxLaG9jEpQ5GO9YQ31UXTlqDD21Zcpo2iEd2SUnhL0z K9129Dx6sRF+1wC8MvBODwPq2g31obwQPtXyP3dJqqvycK5FV0geZmTenoFYiyYR ukpdKpySG/0tD83VviWktQEaNr+y1mF/DP+YHlLTJcss9nrZpoKbuqjycturn20p 4gOi4nIH+Pn/wwtJ8TN5S6KmaBDrQ+r3 -----END CERTIFICATE-----Generated at Sat May 31 16:38:08 2025 by rpki-client