$ rpki-client -vvf rpki.apnic.net/member_repository/A91238EC/61D4F48AE3E611E7AF2F615EC4F9AE02/BIMvvnDHuIWcoaDj4Fopa7CcXT0.mft File: BIMvvnDHuIWcoaDj4Fopa7CcXT0.mft (raw, json) Hash identifier: +mJqt5wrNHxQDEi+XKPqttxDWpqOIT9SbU9j3zJRYWU= Subject key identifier: C8:92:F5:45:78:58:A3:6C:C3:64:99:6C:9C:19:6C:5B:54:B1:C6:DA Authority key identifier: 04:83:2F:BE:70:C7:B8:85:9C:A1:A0:E3:E0:5A:29:6B:B0:9C:5D:3D Certificate issuer: /CN=A91238EC/serialNumber=04832FBE70C7B8859CA1A0E3E05A296BB09C5D3D Certificate serial: 1731 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIMvvnDHuIWcoaDj4Fopa7CcXT0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91238EC/61D4F48AE3E611E7AF2F615EC4F9AE02/BIMvvnDHuIWcoaDj4Fopa7CcXT0.mft Manifest number: 1716 Signing time: Fri 18 Apr 2025 16:44:46 +0000 Manifest this update: Fri 18 Apr 2025 16:44:45 +0000 Manifest next update: Fri 25 Apr 2025 16:44:45 +0000 Files and hashes: 1: BIMvvnDHuIWcoaDj4Fopa7CcXT0.crl (hash: qHH49hrdEX4bC0Hz4cq8I6PfQUJ7DwiHXoNAVqozato=) 2: 2F9D268C76B211ECABA1A612C4F9AE02.roa (hash: N4cX9Gn5/2UN1QBdCa0fdRS9KCB6RvJx+JIs1tA6NvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91238EC/61D4F48AE3E611E7AF2F615EC4F9AE02/BIMvvnDHuIWcoaDj4Fopa7CcXT0.crl rsync://rpki.apnic.net/member_repository/A91238EC/61D4F48AE3E611E7AF2F615EC4F9AE02/BIMvvnDHuIWcoaDj4Fopa7CcXT0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIMvvnDHuIWcoaDj4Fopa7CcXT0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 16:44:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5937 (0x1731) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91238EC, serialNumber=04832FBE70C7B8859CA1A0E3E05A296BB09C5D3D Validity Not Before: Apr 18 16:44:45 2025 GMT Not After : Apr 25 16:44:45 2025 GMT Subject: CN=6802817d-6489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:0c:40:fb:3d:b4:6c:15:35:03:13:99:16:14: 9f:2c:b2:8c:b1:78:11:98:1f:c2:52:49:47:e4:3b: 31:cc:cb:71:8c:ba:db:23:37:c2:00:75:3a:49:7f: 55:23:f7:13:6c:26:fc:78:4a:5f:0f:0b:8c:74:c1: f8:7d:11:e2:00:09:2a:a9:3b:a2:66:4e:56:db:b5: fc:5b:8c:40:c0:7b:32:c2:dc:bd:40:54:28:ac:f7: 0f:af:9a:b1:ae:5f:33:64:5e:0b:a9:1a:1b:df:da: 3b:6a:e4:4c:65:25:f1:d7:d3:dc:b2:5a:1b:28:bb: 63:26:51:ea:e8:7d:fe:c4:9a:a2:24:df:01:30:36: a1:97:9b:ea:11:9f:aa:fc:09:11:22:41:d7:44:f5: e0:0c:49:1d:36:95:58:7a:48:f4:c7:20:43:31:62: 8e:a1:67:8b:93:84:d2:12:15:3a:0c:12:8d:e7:c8: 72:ac:81:61:e0:b5:c6:e8:0e:e7:5d:2e:6d:59:6e: 2d:c3:c3:7d:6b:ae:98:30:d1:80:7d:86:38:13:5e: a1:2d:09:4f:e9:84:7b:6b:7d:92:dc:6e:96:be:06: 56:9f:7e:40:9c:8a:c1:5e:fd:f9:7e:db:e1:92:32: d3:da:fb:b6:b2:ab:cd:4f:a6:e5:83:aa:cb:8b:8f: c0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:92:F5:45:78:58:A3:6C:C3:64:99:6C:9C:19:6C:5B:54:B1:C6:DA X509v3 Authority Key Identifier: keyid:04:83:2F:BE:70:C7:B8:85:9C:A1:A0:E3:E0:5A:29:6B:B0:9C:5D:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91238EC/61D4F48AE3E611E7AF2F615EC4F9AE02/BIMvvnDHuIWcoaDj4Fopa7CcXT0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIMvvnDHuIWcoaDj4Fopa7CcXT0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91238EC/61D4F48AE3E611E7AF2F615EC4F9AE02/BIMvvnDHuIWcoaDj4Fopa7CcXT0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:96:ff:a4:f3:07:e6:7d:2f:b8:8e:e2:09:2a:5a:7c:c3:6d: 82:30:1b:10:3d:fe:d7:f9:96:09:41:2b:19:29:e0:36:e1:7f: f7:19:30:d0:b6:7c:7a:79:0b:5a:bf:ab:2c:21:7a:1b:30:00: 37:72:8d:60:ec:50:0e:70:fb:e2:ab:17:27:d0:e6:17:42:5f: 4e:a8:fa:aa:37:0a:a4:5b:9f:ae:71:48:c9:2e:1f:95:83:50: 15:54:c0:a9:74:0d:00:c7:0e:9c:2c:15:b5:d8:2d:42:a7:6f: c1:c8:df:ed:1d:bc:8b:99:4a:52:c5:d1:8c:60:dc:98:62:4f: d2:e6:1b:55:2d:4d:4a:fe:17:bb:be:f0:1a:db:a5:3c:d2:98: 1e:2d:e4:c3:c4:e2:d7:df:69:e6:a5:b9:88:6c:93:9c:02:1e: 19:75:ba:dc:78:70:94:50:78:ec:0f:b2:61:12:7a:6a:34:87: 43:69:a9:2b:cf:0e:e6:5a:d4:87:0d:4c:b3:b7:f4:c0:b1:1c: f6:88:2d:a8:b3:ab:52:29:09:c4:33:66:fe:fb:29:07:dd:41: 6e:e5:ba:d2:da:1a:77:ab:d8:35:bd:e6:db:0c:47:8d:a7:6f: d4:29:3e:25:55:17:b3:62:25:ef:e8:96:8b:c2:f9:4f:1f:d9: 9e:8c:0a:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFzEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM4RUMxMTAvBgNVBAUTKDA0ODMyRkJFNzBDN0I4ODU5Q0ExQTBFM0UwNUEyOTZC QjA5QzVEM0QwHhcNMjUwNDE4MTY0NDQ1WhcNMjUwNDI1MTY0NDQ1WjAYMRYwFAYD VQQDEw02ODAyODE3ZC02NDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1AxA+z20bBU1AxOZFhSfLLKMsXgRmB/CUklH5DsxzMtxjLrbIzfCAHU6SX9V I/cTbCb8eEpfDwuMdMH4fRHiAAkqqTuiZk5W27X8W4xAwHsywty9QFQorPcPr5qx rl8zZF4LqRob39o7auRMZSXx19PcslobKLtjJlHq6H3+xJqiJN8BMDahl5vqEZ+q /AkRIkHXRPXgDEkdNpVYekj0xyBDMWKOoWeLk4TSEhU6DBKN58hyrIFh4LXG6A7n XS5tWW4tw8N9a66YMNGAfYY4E16hLQlP6YR7a32S3G6WvgZWn35AnIrBXv35ftvh kjLT2vu2sqvNT6blg6rLi4/A2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMiS9UV4 WKNsw2SZbJwZbFtUscbaMB8GA1UdIwQYMBaAFASDL75wx7iFnKGg4+BaKWuwnF09 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzhFQy82MUQ0RjQ4QUUz RTYxMUU3QUYyRjYxNUVDNEY5QUUwMi9CSU12dm5ESHVJV2NvYURqNEZvcGE3Q2NY VDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JJTXZ2bkRIdUlXY29hRGo0Rm9wYTdDY1hUMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzhFQy82MUQ0RjQ4QUUzRTYxMUU3QUYyRjYxNUVDNEY5QUUwMi9CSU12dm5ESHVJ V2NvYURqNEZvcGE3Q2NYVDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALlv+k8wfmfS+4juIJKlp8w22CMBsQPf7X+ZYJQSsZKeA24X/3GTDQ tnx6eQtav6ssIXobMAA3co1g7FAOcPviqxcn0OYXQl9OqPqqNwqkW5+ucUjJLh+V g1AVVMCpdA0Axw6cLBW12C1Cp2/ByN/tHbyLmUpSxdGMYNyYYk/S5htVLU1K/he7 vvAa26U80pgeLeTDxOLX32nmpbmIbJOcAh4ZdbrceHCUUHjsD7JhEnpqNIdDaakr zw7mWtSHDUyzt/TAsRz2iC2os6tSKQnEM2b++ykH3UFu5brS2hp3q9g1vebbDEeN p2/UKT4lVRezYiXv6JaLwvlPH9mejAql -----END CERTIFICATE-----Generated at Sat Apr 19 00:41:04 2025 by rpki-client