$ rpki-client -vvf rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft File: BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft (raw, json) Hash identifier: hyhLIT6/2PFXNgPdNzspCxQsd1XynojeBlWkclJvLMI= Subject key identifier: 0D:27:50:BD:76:C3:8B:45:78:5F:69:FB:09:46:06:13:CF:ED:B7:48 Authority key identifier: 04:F0:74:A0:BA:87:80:5C:50:FC:79:93:D4:04:10:B8:4A:11:D2:F6 Certificate issuer: /CN=A9126B7C/serialNumber=04F074A0BA87805C50FC7993D40410B84A11D2F6 Certificate serial: 0178 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft Manifest number: 0172 Signing time: Wed 09 Apr 2025 02:46:42 +0000 Manifest this update: Wed 09 Apr 2025 02:46:41 +0000 Manifest next update: Wed 16 Apr 2025 02:46:41 +0000 Files and hashes: 1: BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl (hash: tDU0+x31gKL4gNcpOwAVSJAuae39T2irunCfUiSyPe4=) 2: F57CB8F6DF8C11ED9EAE5884C4F9AE02.roa (hash: 5VwQvP2fVpjZvZxgLpSBhfWvfSymTIgG5SpcIoI9Jnk=) 3: F607A6C8DF8C11ED9EAE5884C4F9AE02.roa (hash: OJOp4QsqdIdHyogZJwwwl2CA1RHQVKJeYLhatS2OCss=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 02:46:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 376 (0x178) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126B7C Validity Not Before: Apr 9 02:46:41 2025 GMT Not After : Apr 16 02:46:41 2025 GMT Subject: CN=67f5df91-880e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:ee:52:0b:48:91:08:e6:10:88:2a:f6:da:65: ad:9e:9f:01:f4:d4:1c:77:18:d5:09:32:e7:8a:1d: cf:63:55:aa:80:17:34:f6:ed:2b:7a:ef:31:2d:26: 0b:0d:c3:6e:46:09:f7:63:12:3c:68:78:18:25:d3: e7:ef:de:9c:37:1e:18:04:35:a6:52:84:28:2b:cf: a1:04:04:2d:db:7e:e9:83:ca:13:95:91:c2:e4:cf: 5a:e4:6c:40:c8:7e:45:1f:c3:80:ca:d6:18:df:a0: 8e:82:79:43:07:c0:35:69:a0:aa:be:17:52:8a:60: df:47:5c:31:19:06:08:6c:23:05:cf:04:aa:b2:a2: 3f:cd:2e:9d:30:4e:f7:a3:4c:22:47:40:f8:af:59: 6b:9a:ab:18:7f:22:e6:93:24:ce:99:48:f8:02:09: c4:ac:8f:b1:92:68:e4:95:fe:cd:eb:14:b3:84:14: cb:ba:b2:0a:45:9f:1a:6a:56:30:bc:ec:8f:aa:2e: cd:96:f1:2d:b7:ef:c0:d6:00:0c:6d:f0:7c:d6:52: 59:3b:dc:63:43:b9:77:3e:91:59:27:cf:46:77:a6: cf:72:0a:90:b9:ca:cb:87:b8:ac:81:04:3f:44:6d: 8d:17:41:f7:78:10:dd:dd:e3:2c:e4:cf:e9:cc:a4: c0:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:27:50:BD:76:C3:8B:45:78:5F:69:FB:09:46:06:13:CF:ED:B7:48 X509v3 Authority Key Identifier: keyid:04:F0:74:A0:BA:87:80:5C:50:FC:79:93:D4:04:10:B8:4A:11:D2:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:fa:48:ef:4e:52:bc:c1:82:84:19:35:bb:94:7b:1f:22:67: 51:03:24:a1:3b:3a:ba:8a:a6:ee:da:3a:b9:9b:dc:f7:fa:42: 87:71:59:1a:94:6b:d5:0c:bb:20:92:55:af:b0:b0:56:65:f6: 01:e2:f1:65:79:ae:30:ec:0c:ab:ec:79:86:5e:5c:74:8f:dd: 66:53:d7:d6:b3:1f:fd:50:49:b6:4b:08:28:17:6a:77:f3:93: 97:66:95:0d:bb:ee:14:97:5c:32:41:53:bc:be:55:9e:b0:85: 03:df:6b:13:e2:5c:ad:93:d6:c4:09:0b:25:02:01:76:0d:3b: 70:f4:6c:6f:2a:3b:af:6a:e8:1e:f0:72:6c:63:41:04:0e:6f: 06:0b:e2:b0:5b:09:5c:d0:c0:a5:77:8f:1d:de:7c:18:e8:99: 60:4c:05:9e:c8:76:0f:7a:98:ba:88:5c:20:b2:8a:03:e4:be: 09:1b:76:0c:60:a6:ee:db:f3:99:39:c9:4b:1d:d1:c0:8c:a7: d6:9f:9f:21:cf:c4:6e:1b:29:13:f8:bf:9b:94:d0:bd:1a:9d: 64:f5:7a:4c:3f:95:ba:67:07:31:e7:ef:11:34:9a:b1:08:36: 05:0c:ce:64:21:97:08:92:c3:c7:f9:c9:3d:a2:fb:65:f8:04: 60:46:2d:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjZCN0MxMTAvBgNVBAUTKDA0RjA3NEEwQkE4NzgwNUM1MEZDNzk5M0Q0MDQxMEI4 NEExMUQyRjYwHhcNMjUwNDA5MDI0NjQxWhcNMjUwNDE2MDI0NjQxWjAYMRYwFAYD VQQDEw02N2Y1ZGY5MS04ODBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7O5SC0iRCOYQiCr22mWtnp8B9NQcdxjVCTLnih3PY1WqgBc09u0reu8xLSYL DcNuRgn3YxI8aHgYJdPn796cNx4YBDWmUoQoK8+hBAQt237pg8oTlZHC5M9a5GxA yH5FH8OAytYY36COgnlDB8A1aaCqvhdSimDfR1wxGQYIbCMFzwSqsqI/zS6dME73 o0wiR0D4r1lrmqsYfyLmkyTOmUj4AgnErI+xkmjklf7N6xSzhBTLurIKRZ8aalYw vOyPqi7NlvEtt+/A1gAMbfB81lJZO9xjQ7l3PpFZJ89Gd6bPcgqQucrLh7isgQQ/ RG2NF0H3eBDd3eMs5M/pzKTAQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA0nUL12 w4tFeF9p+wlGBhPP7bdIMB8GA1UdIwQYMBaAFATwdKC6h4BcUPx5k9QEELhKEdL2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNkI3Qy81MUE5NDQ1QURG ODgxMUVEQUZCRjJCN0ZDNEY5QUUwMi9CUEIwb0xxSGdGeFFfSG1UMUFRUXVFb1Iw dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JQQjBvTHFIZ0Z4UV9IbVQxQVFRdUVvUjB2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NkI3Qy81MUE5NDQ1QURGODgxMUVEQUZCRjJCN0ZDNEY5QUUwMi9CUEIwb0xxSGdG eFFfSG1UMUFRUXVFb1IwdlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAl+kjvTlK8wYKEGTW7lHsfImdRAyShOzq6iqbu2jq5m9z3+kKHcVka lGvVDLsgklWvsLBWZfYB4vFlea4w7Ayr7HmGXlx0j91mU9fWsx/9UEm2SwgoF2p3 85OXZpUNu+4Ul1wyQVO8vlWesIUD32sT4lytk9bECQslAgF2DTtw9GxvKjuvauge 8HJsY0EEDm8GC+KwWwlc0MCld48d3nwY6JlgTAWeyHYPepi6iFwgsooD5L4JG3YM YKbu2/OZOclLHdHAjKfWn58hz8RuGykT+L+blNC9Gp1k9XpMP5W6Zwcx5+8RNJqx CDYFDM5kIZcIksPH+ck9ovtl+ARgRi0z -----END CERTIFICATE-----Generated at Fri Apr 11 23:34:35 2025 by rpki-client