$ rpki-client -vvf rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.mft File: bfCTVmC1JNKoCAZDaLCvxWU4ppo.mft (raw, json) Hash identifier: KWmYh/LUEICaqwy1jDHXm77ZXHavan6ZoaLC0xFFhDA= Subject key identifier: 1F:A0:D7:76:C4:88:7B:CC:97:B9:17:6C:90:6B:67:9D:18:68:AD:A4 Authority key identifier: 6D:F0:93:56:60:B5:24:D2:A8:08:06:43:68:B0:AF:C5:65:38:A6:9A Certificate issuer: /CN=A912978E/serialNumber=6DF0935660B524D2A808064368B0AFC56538A69A Certificate serial: 0131 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bfCTVmC1JNKoCAZDaLCvxWU4ppo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.mft Manifest number: 012C Signing time: Fri 11 Apr 2025 03:53:48 +0000 Manifest this update: Fri 11 Apr 2025 03:53:47 +0000 Manifest next update: Fri 18 Apr 2025 03:53:47 +0000 Files and hashes: 1: bfCTVmC1JNKoCAZDaLCvxWU4ppo.crl (hash: K0x8gkeQ4qZKI1wZghJ52PZv4adWehsZzKPxTvvTtv0=) 2: 59923F2CA72011EEA63ABF4AC4F9AE02.roa (hash: jVn5ZxyveGa/F3Z17pqMoq5Bfa+WnZz2iNW6T6RgwPs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.crl rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bfCTVmC1JNKoCAZDaLCvxWU4ppo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 03:53:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912978E, serialNumber=6DF0935660B524D2A808064368B0AFC56538A69A Validity Not Before: Apr 11 03:53:47 2025 GMT Not After : Apr 18 03:53:47 2025 GMT Subject: CN=67f8924b-898f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1e:f0:56:5d:37:7d:46:57:82:dc:31:85:25: a2:1f:8d:53:dc:4a:fa:ae:34:64:2c:7e:55:01:4c: 01:f4:5d:2a:31:fc:ce:f0:29:d8:a9:5d:1d:e8:6b: 56:6f:6e:ce:2a:23:df:ef:88:57:e9:b8:be:c6:3d: 17:43:44:2f:c3:fa:dc:7b:f0:3e:51:6a:ca:df:6a: c3:a5:70:4c:0f:21:d9:fd:1f:7d:35:16:f8:d9:8d: 9c:88:5e:d7:d1:75:2b:b9:6f:5c:a9:55:14:f0:93: a4:1a:7a:fd:16:ca:d2:e4:4c:2d:af:9c:b7:7f:ed: 5d:3c:8c:05:b3:0c:99:8e:f6:ba:87:be:57:3f:7a: 2a:4f:79:2d:f9:71:d2:e1:ad:a0:ce:d1:31:a2:96: 16:74:f9:d0:49:55:67:ba:88:27:3e:76:b4:e9:79: da:1f:65:35:8f:7a:13:ed:eb:54:4b:e4:90:17:c6: 07:98:65:1b:ab:37:1f:b6:ca:b2:30:ae:eb:4b:dc: 5d:27:ae:ac:6b:57:5f:40:07:56:49:c6:3c:9b:e9: 21:76:b0:48:db:bc:ce:3e:34:98:a1:72:78:09:58: 4d:8f:2b:fe:20:57:13:d5:c3:18:9d:ea:67:53:9e: 83:91:7a:d6:c3:d9:a8:57:c5:ce:42:4b:f3:aa:79: 59:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:A0:D7:76:C4:88:7B:CC:97:B9:17:6C:90:6B:67:9D:18:68:AD:A4 X509v3 Authority Key Identifier: keyid:6D:F0:93:56:60:B5:24:D2:A8:08:06:43:68:B0:AF:C5:65:38:A6:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bfCTVmC1JNKoCAZDaLCvxWU4ppo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:00:24:b5:f6:6f:96:b3:ab:6a:15:9f:d8:ec:de:7a:17:77: e5:f7:05:53:43:44:08:ec:29:65:26:ea:43:61:a2:39:e8:0e: 2b:dd:66:5d:2b:15:aa:c6:1d:84:31:ac:80:45:56:b7:be:42: 4c:bc:98:b2:8e:bc:71:62:73:36:c5:98:f5:67:89:71:82:e5: b2:dd:b8:fd:a9:83:b2:a0:94:52:7b:49:77:96:9c:01:b2:b7: 2f:d3:48:cf:47:f0:4e:04:50:13:f4:20:52:83:ac:27:20:25: 0a:72:e3:48:d0:7b:7d:4b:dc:66:29:02:91:48:3d:24:fa:8c: e7:96:0a:ef:fa:59:52:0f:c9:cc:66:ce:92:a1:76:da:9c:57: 39:a4:ef:8e:5f:8f:8f:c6:2e:fe:55:ca:fa:f1:af:c3:d4:ad: 44:9b:99:dd:85:b6:12:16:54:62:b1:a2:45:4f:06:70:f8:7b: 0c:3a:25:89:bd:06:ba:c9:3c:bf:da:69:a0:3f:ce:ce:6f:8a: 37:1b:a7:f4:6d:5e:a0:9a:79:8b:4c:3a:a8:68:e0:2f:27:cf: 47:61:d2:3a:5c:af:64:61:3e:78:5b:12:b1:d3:5d:75:14:da: fc:28:df:01:ca:b5:d1:f3:96:19:fe:66:9d:d0:d0:38:84:74: 48:1a:d0:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk3OEUxMTAvBgNVBAUTKDZERjA5MzU2NjBCNTI0RDJBODA4MDY0MzY4QjBBRkM1 NjUzOEE2OUEwHhcNMjUwNDExMDM1MzQ3WhcNMjUwNDE4MDM1MzQ3WjAYMRYwFAYD VQQDEw02N2Y4OTI0Yi04OThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmx7wVl03fUZXgtwxhSWiH41T3Er6rjRkLH5VAUwB9F0qMfzO8CnYqV0d6GtW b27OKiPf74hX6bi+xj0XQ0Qvw/rce/A+UWrK32rDpXBMDyHZ/R99NRb42Y2ciF7X 0XUruW9cqVUU8JOkGnr9FsrS5Ewtr5y3f+1dPIwFswyZjva6h75XP3oqT3kt+XHS 4a2gztExopYWdPnQSVVnuognPna06XnaH2U1j3oT7etUS+SQF8YHmGUbqzcftsqy MK7rS9xdJ66sa1dfQAdWScY8m+khdrBI27zOPjSYoXJ4CVhNjyv+IFcT1cMYnepn U56DkXrWw9moV8XOQkvzqnlZcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB+g13bE iHvMl7kXbJBrZ50YaK2kMB8GA1UdIwQYMBaAFG3wk1ZgtSTSqAgGQ2iwr8VlOKaa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTc4RS9ENUFFN0ZBQzUz Q0ExMUVFODA0OTkzNUVDNEY5QUUwMi9iZkNUVm1DMUpOS29DQVpEYUxDdnhXVTRw cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JmQ1RWbUMxSk5Lb0NBWkRhTEN2eFdVNHBwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTc4RS9ENUFFN0ZBQzUzQ0ExMUVFODA0OTkzNUVDNEY5QUUwMi9iZkNUVm1DMUpO S29DQVpEYUxDdnhXVTRwcG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKACS19m+Ws6tqFZ/Y7N56F3fl9wVTQ0QI7CllJupDYaI56A4r3WZd KxWqxh2EMayARVa3vkJMvJiyjrxxYnM2xZj1Z4lxguWy3bj9qYOyoJRSe0l3lpwB srcv00jPR/BOBFAT9CBSg6wnICUKcuNI0Ht9S9xmKQKRSD0k+oznlgrv+llSD8nM Zs6SoXbanFc5pO+OX4+Pxi7+Vcr68a/D1K1Em5ndhbYSFlRisaJFTwZw+HsMOiWJ vQa6yTy/2mmgP87Ob4o3G6f0bV6gmnmLTDqoaOAvJ89HYdI6XK9kYT54WxKx0111 FNr8KN8ByrXR85YZ/mad0NA4hHRIGtCo -----END CERTIFICATE-----Generated at Sun Apr 13 04:26:26 2025 by rpki-client