$ rpki-client -vvf rpki.apnic.net/member_repository/A912DD36/7F4023F2253211EFBC93211AC4F9AE02/BN7ay9uvpcHBT5KBe5b39QMQCig.mft File: BN7ay9uvpcHBT5KBe5b39QMQCig.mft (raw, json) Hash identifier: /ccrPXO2w0+qykLX1g+Tc9nBnyVHPyu0BRfBBi3nxaU= Subject key identifier: 84:BE:7A:AC:62:A1:30:B2:B1:3E:A4:2F:AF:34:70:C0:18:C2:08:2E Authority key identifier: 04:DE:DA:CB:DB:AF:A5:C1:C1:4F:92:81:7B:96:F7:F5:03:10:0A:28 Certificate issuer: /CN=A912DD36/serialNumber=04DEDACBDBAFA5C1C14F92817B96F7F503100A28 Certificate serial: A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BN7ay9uvpcHBT5KBe5b39QMQCig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DD36/7F4023F2253211EFBC93211AC4F9AE02/BN7ay9uvpcHBT5KBe5b39QMQCig.mft Manifest number: A3 Signing time: Tue 15 Apr 2025 05:01:26 +0000 Manifest this update: Tue 15 Apr 2025 05:01:25 +0000 Manifest next update: Tue 22 Apr 2025 05:01:25 +0000 Files and hashes: 1: BN7ay9uvpcHBT5KBe5b39QMQCig.crl (hash: OPFGK9pdqWzPscTy5tkG6H3lKgecCjcc6MDRBMstA1k=) 2: 09EC8E16662211EFB6FA446CC4F9AE02.roa (hash: urnxskxc6j+If6xUlVvxOJwYlSVOMo9w2F7g3T2GGgM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DD36/7F4023F2253211EFBC93211AC4F9AE02/BN7ay9uvpcHBT5KBe5b39QMQCig.crl rsync://rpki.apnic.net/member_repository/A912DD36/7F4023F2253211EFBC93211AC4F9AE02/BN7ay9uvpcHBT5KBe5b39QMQCig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BN7ay9uvpcHBT5KBe5b39QMQCig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 05:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 166 (0xa6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DD36, serialNumber=04DEDACBDBAFA5C1C14F92817B96F7F503100A28 Validity Not Before: Apr 15 05:01:25 2025 GMT Not After : Apr 22 05:01:25 2025 GMT Subject: CN=67fde826-ea94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c6:3c:a3:c8:fe:96:4f:3a:ed:83:26:c1:6f: 8d:1f:a1:3c:4f:03:ea:d8:15:2e:15:20:a4:64:54: 90:02:d2:0f:02:f2:9d:0c:6c:b1:7f:01:b6:68:98: 60:ac:ed:5a:bc:1d:28:80:89:56:52:9b:b4:34:89: c2:2e:0e:af:45:ab:d6:73:4c:be:89:04:ac:d8:f8: ba:8f:da:32:df:f8:a2:cf:0a:8b:8c:cf:06:9d:55: 18:c1:6f:22:c5:3c:47:9b:a3:8a:63:d2:50:54:76: fb:25:24:d0:63:78:ed:b6:5a:d7:b8:4f:11:5f:1d: 68:3c:b4:bd:9e:ce:3b:29:26:d1:43:81:67:19:ab: 9e:96:70:e1:74:0c:bd:4d:47:00:2d:bd:22:93:a6: 5b:3b:a0:6c:4d:fc:f3:91:58:14:4d:b2:fd:7b:e6: 36:e1:9d:fc:62:3f:05:8f:98:06:43:1a:2d:fb:3a: 2c:a3:87:f9:1c:08:68:3a:dd:be:93:e1:e5:1b:74: 8f:6b:07:5e:8e:29:98:c7:04:80:27:ae:11:17:07: 8e:30:b2:4b:43:cf:11:04:a5:23:8c:4b:29:07:f8: e1:5c:fe:82:fa:04:8b:21:8f:5e:88:03:9c:d7:ed: a5:ca:19:d2:e4:c8:16:b9:27:f6:30:42:f0:bb:2c: ac:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:BE:7A:AC:62:A1:30:B2:B1:3E:A4:2F:AF:34:70:C0:18:C2:08:2E X509v3 Authority Key Identifier: keyid:04:DE:DA:CB:DB:AF:A5:C1:C1:4F:92:81:7B:96:F7:F5:03:10:0A:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DD36/7F4023F2253211EFBC93211AC4F9AE02/BN7ay9uvpcHBT5KBe5b39QMQCig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BN7ay9uvpcHBT5KBe5b39QMQCig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DD36/7F4023F2253211EFBC93211AC4F9AE02/BN7ay9uvpcHBT5KBe5b39QMQCig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:9e:1f:79:29:7d:65:45:3b:49:99:cd:6d:23:29:db:97:c7: b8:7e:59:eb:de:ae:31:bc:a3:84:6a:85:89:32:2e:bd:3e:23: 0a:6d:29:ce:ee:e1:09:e8:5a:6d:64:13:b4:2a:79:6b:f7:58: 89:68:f2:0c:73:b1:f4:7f:7b:72:e7:39:3f:17:3c:86:c7:e5: 48:70:a4:e4:3e:55:61:1e:1a:b7:20:7b:ba:0b:f0:89:08:03: af:57:61:32:8d:9a:7c:da:e6:69:da:0f:30:92:81:4e:15:53: a8:6c:c2:47:a8:d2:1b:7b:c4:81:32:7a:49:81:e8:16:a0:b3: 57:0e:1d:9a:1d:f5:e0:f2:d1:74:b1:aa:0c:ee:aa:96:64:b3: 85:1d:97:70:08:ff:50:28:ec:7e:79:6c:e5:a0:e3:76:f0:f4: 44:7b:c3:0e:7e:02:47:f2:89:91:34:03:d4:bf:4c:77:8a:c0: 2f:d1:09:c3:72:ca:c4:2f:b9:0e:38:ca:41:0e:38:bc:5a:07: 9e:c0:fc:7a:dc:3a:84:7a:5a:98:d4:30:53:cb:58:39:73:d6: 0e:1d:5f:2e:61:ba:79:6d:88:1a:e9:23:aa:51:a1:54:ac:8c: ca:2e:07:55:40:02:4e:a4:59:d3:4a:a5:d0:b6:55:9c:4f:07: eb:59:16:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkREMzYxMTAvBgNVBAUTKDA0REVEQUNCREJBRkE1QzFDMTRGOTI4MTdCOTZGN0Y1 MDMxMDBBMjgwHhcNMjUwNDE1MDUwMTI1WhcNMjUwNDIyMDUwMTI1WjAYMRYwFAYD VQQDEw02N2ZkZTgyNi1lYTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx8Y8o8j+lk867YMmwW+NH6E8TwPq2BUuFSCkZFSQAtIPAvKdDGyxfwG2aJhg rO1avB0ogIlWUpu0NInCLg6vRavWc0y+iQSs2Pi6j9oy3/iizwqLjM8GnVUYwW8i xTxHm6OKY9JQVHb7JSTQY3jttlrXuE8RXx1oPLS9ns47KSbRQ4FnGauelnDhdAy9 TUcALb0ik6ZbO6BsTfzzkVgUTbL9e+Y24Z38Yj8Fj5gGQxot+zoso4f5HAhoOt2+ k+HlG3SPawdejimYxwSAJ64RFweOMLJLQ88RBKUjjEspB/jhXP6C+gSLIY9eiAOc 1+2lyhnS5MgWuSf2MELwuyysVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIS+eqxi oTCysT6kL680cMAYwgguMB8GA1UdIwQYMBaAFATe2svbr6XBwU+SgXuW9/UDEAoo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREQzNi83RjQwMjNGMjI1 MzIxMUVGQkM5MzIxMUFDNEY5QUUwMi9CTjdheTl1dnBjSEJUNUtCZTViMzlRTVFD aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JON2F5OXV2cGNIQlQ1S0JlNWIzOVFNUUNpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REQzNi83RjQwMjNGMjI1MzIxMUVGQkM5MzIxMUFDNEY5QUUwMi9CTjdheTl1dnBj SEJUNUtCZTViMzlRTVFDaWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAnh95KX1lRTtJmc1tIynbl8e4flnr3q4xvKOEaoWJMi69PiMKbSnO 7uEJ6FptZBO0Knlr91iJaPIMc7H0f3ty5zk/FzyGx+VIcKTkPlVhHhq3IHu6C/CJ CAOvV2EyjZp82uZp2g8wkoFOFVOobMJHqNIbe8SBMnpJgegWoLNXDh2aHfXg8tF0 saoM7qqWZLOFHZdwCP9QKOx+eWzloON28PREe8MOfgJH8omRNAPUv0x3isAv0QnD csrEL7kOOMpBDji8WgeewPx63DqEelqY1DBTy1g5c9YOHV8uYbp5bYga6SOqUaFU rIzKLgdVQAJOpFnTSqXQtlWcTwfrWRaK -----END CERTIFICATE-----Generated at Wed Apr 16 22:21:44 2025 by rpki-client