$ rpki-client -vvf rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.mft File: bu53G7POfpjbOWDE2C90Kiz36Ek.mft (raw, json) Hash identifier: Zmf3xpuLQ3fYf+4BnmAUTQDT0oA/oaBcO1xSS/3mB+c= Subject key identifier: 04:D1:01:D6:F6:5E:04:63:DC:97:C0:A0:E8:69:9D:A6:65:DD:8F:07 Authority key identifier: 6E:EE:77:1B:B3:CE:7E:98:DB:39:60:C4:D8:2F:74:2A:2C:F7:E8:49 Certificate issuer: /CN=A9118827/serialNumber=6EEE771BB3CE7E98DB3960C4D82F742A2CF7E849 Certificate serial: 04C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bu53G7POfpjbOWDE2C90Kiz36Ek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.mft Manifest number: 04BD Signing time: Sat 29 Mar 2025 00:07:06 +0000 Manifest this update: Sat 29 Mar 2025 00:07:06 +0000 Manifest next update: Sat 05 Apr 2025 00:07:06 +0000 Files and hashes: 1: bu53G7POfpjbOWDE2C90Kiz36Ek.crl (hash: YtxNujr0T/xmRjDP3YYdhFBiWbLc7RwTMJqCfliibBg=) 2: 95D9A9461BEC11EC97B39812C4F9AE02.roa (hash: O7MsLUw+gaoXTG9KiMvLQn/bjyCnjO8H09gMJ3FbG7s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.crl rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bu53G7POfpjbOWDE2C90Kiz36Ek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 00:07:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1217 (0x4c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118827 Validity Not Before: Mar 29 00:07:06 2025 GMT Not After : Apr 5 00:07:06 2025 GMT Subject: CN=67e739aa-c145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1b:86:8f:65:d7:aa:6c:7e:96:8b:33:01:23: f8:51:2d:72:b5:77:1b:b0:b9:4d:43:e4:d9:8d:09: f1:8b:25:cb:ac:5a:b1:27:63:a3:ba:bb:64:76:20: ef:c6:3b:59:be:61:26:8d:f2:95:1b:a1:c7:a8:f6: b4:d4:0e:82:c0:a0:a4:c7:c7:a2:e9:b0:47:55:ce: 62:ec:8a:1b:d1:af:4c:37:6f:83:35:c7:6e:01:c4: 4e:a9:1c:7d:53:37:75:4a:f4:b2:03:7a:d8:09:4d: 87:45:4e:01:62:e8:f3:41:18:4c:6d:a7:f0:1f:e8: 48:6b:ed:7d:0f:05:dd:75:9d:05:6b:87:0b:45:97: ff:5e:5c:f4:b4:89:1f:d0:82:3e:13:5a:72:69:f1: cf:c9:eb:d2:35:4d:59:97:52:94:06:89:aa:bb:fe: 08:46:74:cd:b2:3a:5b:1d:da:5f:c4:d6:82:3a:c4: 86:9e:84:00:37:48:bc:03:73:fd:d0:47:d1:a4:fa: da:6d:fc:bf:f6:1d:d0:eb:e8:0c:2e:bf:d9:0e:15: b9:72:4e:f7:5e:d0:78:95:55:a9:82:0f:d5:99:bf: a6:bc:8b:22:7a:a5:50:47:d9:2d:03:98:fe:f3:b3: 06:d3:d6:fb:37:60:d2:37:5c:a0:74:c0:94:03:34: 20:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:D1:01:D6:F6:5E:04:63:DC:97:C0:A0:E8:69:9D:A6:65:DD:8F:07 X509v3 Authority Key Identifier: keyid:6E:EE:77:1B:B3:CE:7E:98:DB:39:60:C4:D8:2F:74:2A:2C:F7:E8:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bu53G7POfpjbOWDE2C90Kiz36Ek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:da:94:fd:17:79:f1:89:bd:56:23:b4:c4:3b:f1:20:f1:11: d2:93:7e:62:59:c0:ea:f1:d4:69:01:6b:db:d7:81:9f:e5:4b: d8:81:0c:bf:cf:f2:43:42:e2:05:f6:26:22:2d:7f:76:b6:f3: b6:6a:a6:b9:19:81:9a:55:45:75:80:34:3d:37:5c:da:48:58: 35:79:1b:81:aa:4a:38:63:fa:b9:9d:47:31:c5:59:b7:0d:3f: 43:d4:25:3a:94:a1:37:58:9f:8c:71:42:d7:fe:92:62:fa:2d: 94:19:83:1e:61:5c:b8:fa:4e:b8:9c:14:02:1d:ac:f7:61:1e: 5c:a1:6b:db:91:2d:b0:3b:90:9c:e4:cf:3a:fb:00:1a:82:e6: 66:51:d1:32:f7:52:20:2c:78:36:e4:9a:0c:3b:88:d4:1d:66: 1e:12:82:a9:16:d5:ec:ec:9c:26:51:55:ab:d4:25:fc:14:6f: 0b:16:78:07:03:ee:0d:da:bd:83:5e:70:71:0e:7f:b7:65:bf: 8a:9c:52:f7:09:26:8a:dc:51:0d:ba:ad:10:c5:46:68:05:ae: c6:b1:c7:65:76:f2:cb:49:a1:e0:1f:26:8f:f7:a9:16:4f:69: ca:7b:8c:9d:03:5b:bb:03:bb:04:32:01:9b:b3:37:90:89:da: 21:d9:b2:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg4MjcxMTAvBgNVBAUTKDZFRUU3NzFCQjNDRTdFOThEQjM5NjBDNEQ4MkY3NDJB MkNGN0U4NDkwHhcNMjUwMzI5MDAwNzA2WhcNMjUwNDA1MDAwNzA2WjAYMRYwFAYD VQQDEw02N2U3MzlhYS1jMTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqhuGj2XXqmx+loszASP4US1ytXcbsLlNQ+TZjQnxiyXLrFqxJ2OjurtkdiDv xjtZvmEmjfKVG6HHqPa01A6CwKCkx8ei6bBHVc5i7Iob0a9MN2+DNcduAcROqRx9 Uzd1SvSyA3rYCU2HRU4BYujzQRhMbafwH+hIa+19DwXddZ0Fa4cLRZf/Xlz0tIkf 0II+E1pyafHPyevSNU1Zl1KUBomqu/4IRnTNsjpbHdpfxNaCOsSGnoQAN0i8A3P9 0EfRpPrabfy/9h3Q6+gMLr/ZDhW5ck73XtB4lVWpgg/Vmb+mvIsieqVQR9ktA5j+ 87MG09b7N2DSN1ygdMCUAzQg7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFATRAdb2 XgRj3JfAoOhpnaZl3Y8HMB8GA1UdIwQYMBaAFG7udxuzzn6Y2zlgxNgvdCos9+hJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODgyNy8zQzdDQjQ1MDFC RTgxMUVDQkJBNjVCNTBDNEY5QUUwMi9idTUzRzdQT2ZwamJPV0RFMkM5MEtpejM2 RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J1NTNHN1BPZnBqYk9XREUyQzkwS2l6MzZFay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODgyNy8zQzdDQjQ1MDFCRTgxMUVDQkJBNjVCNTBDNEY5QUUwMi9idTUzRzdQT2Zw amJPV0RFMkM5MEtpejM2RWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC42pT9F3nxib1WI7TEO/Eg8RHSk35iWcDq8dRpAWvb14Gf5UvYgQy/ z/JDQuIF9iYiLX92tvO2aqa5GYGaVUV1gDQ9N1zaSFg1eRuBqko4Y/q5nUcxxVm3 DT9D1CU6lKE3WJ+McULX/pJi+i2UGYMeYVy4+k64nBQCHaz3YR5coWvbkS2wO5Cc 5M86+wAaguZmUdEy91IgLHg25JoMO4jUHWYeEoKpFtXs7JwmUVWr1CX8FG8LFngH A+4N2r2DXnBxDn+3Zb+KnFL3CSaK3FENuq0QxUZoBa7GscdldvLLSaHgHyaP96kW T2nKe4ydA1u7A7sEMgGbszeQidoh2bI5 -----END CERTIFICATE-----Generated at Fri Apr 4 21:49:17 2025 by rpki-client