$ rpki-client -vvf rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft File: bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft (raw, json) Hash identifier: rboo+9I1xhZP0jPFp2cOPryqgL4siOxR/hoTcNMAaOc= Subject key identifier: 0B:B0:E4:EC:37:4E:0B:BF:23:D8:22:3C:EE:CE:07:17:48:DD:EF:94 Authority key identifier: 6E:4E:69:BE:13:D6:13:A7:02:74:C0:CE:77:38:39:23:F1:56:27:2D Certificate issuer: /CN=A9130A53/serialNumber=6E4E69BE13D613A70274C0CE77383923F156272D Certificate serial: 08DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bk5pvhPWE6cCdMDOdzg5I_FWJy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft Manifest number: 08D1 Signing time: Wed 02 Apr 2025 20:28:32 +0000 Manifest this update: Wed 02 Apr 2025 20:28:32 +0000 Manifest next update: Wed 09 Apr 2025 20:28:32 +0000 Files and hashes: 1: bk5pvhPWE6cCdMDOdzg5I_FWJy0.crl (hash: h/uuTnNhNcRPF+CFIyfFhmO3Gx/0hCjONAE29Bi2D8A=) 2: F36A0E2EAB4B11EAA2CA585BC4F9AE02.roa (hash: BidxYSVmBabzb42KTEQRZnYy7Sbks/SN1w8y9yUGtJQ=) 3: F2CD89AAAB4B11EAA2CA585BC4F9AE02.roa (hash: OlzMxXAfrSP6Nj86W0pq9Qh2aWjxJmFySgPE4i+83ow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.crl rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bk5pvhPWE6cCdMDOdzg5I_FWJy0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 20:28:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2269 (0x8dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130A53 Validity Not Before: Apr 2 20:28:32 2025 GMT Not After : Apr 9 20:28:32 2025 GMT Subject: CN=67ed9df0-2220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8a:97:9b:c6:6f:c0:28:c2:90:3b:f3:27:b6: 8d:bb:24:8f:09:d3:89:b8:41:e9:3c:6e:03:f2:e6: d4:7b:07:ff:72:34:2a:7d:69:40:a1:24:58:b9:08: dc:dd:00:03:cd:1a:62:5b:bc:72:e6:dd:e5:df:b9: 7e:a8:b1:1b:14:c4:f2:47:d2:4a:63:44:a5:fe:c8: 18:c4:a3:2a:a0:ff:b5:b3:5b:68:e5:62:a2:b1:f0: 3f:f2:bd:af:65:3f:77:a7:e3:ab:4e:53:a2:d2:42: 47:b8:e5:37:20:fe:38:2e:18:34:25:16:8c:f8:74: a5:d6:83:11:96:fe:dc:87:a4:26:63:b4:21:4b:b2: 75:4b:d4:98:8b:24:13:a0:b1:2f:a9:26:ff:6c:da: 9c:b1:d0:f0:e0:09:0b:94:16:44:d1:c5:b1:56:d6: 99:a9:00:83:c7:61:f8:d2:97:b3:b1:29:6f:3c:5b: 0b:5c:f3:4d:52:05:7c:e9:f1:6f:fc:30:81:9f:5f: a2:c5:09:2a:39:43:a7:aa:c5:7b:c0:c3:8b:39:94: 48:4b:f9:df:8f:4d:52:1d:a9:0f:97:51:7c:b1:26: d0:44:3d:49:0a:44:4c:a9:9d:f7:c9:3e:6e:e1:58: d0:7b:48:52:2f:97:98:83:ff:3b:87:9f:08:45:36: f8:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:B0:E4:EC:37:4E:0B:BF:23:D8:22:3C:EE:CE:07:17:48:DD:EF:94 X509v3 Authority Key Identifier: keyid:6E:4E:69:BE:13:D6:13:A7:02:74:C0:CE:77:38:39:23:F1:56:27:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bk5pvhPWE6cCdMDOdzg5I_FWJy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:fd:bf:e0:36:30:38:a3:41:8e:b5:8e:72:bd:ee:5e:ea:21: 83:e6:b0:21:a6:d1:7f:da:34:7e:8f:1c:0a:a4:48:96:44:62: 76:70:3e:09:47:c8:29:1f:1f:82:42:d7:c0:f5:70:7f:8a:6b: 88:af:12:eb:e8:d0:8b:7a:44:4a:e8:3c:6e:12:dd:ab:7e:eb: 76:8a:81:84:be:f4:e3:f7:9d:fa:b0:64:85:53:f9:57:1f:2c: be:9d:4b:9b:76:d4:a2:d5:80:d5:fb:db:76:3a:7f:45:87:54: fa:12:10:b2:5a:7b:71:e8:87:ed:4f:45:fd:8c:f5:fd:2e:f8: 0e:57:15:22:78:4e:d0:94:84:32:0a:97:e8:83:08:30:b4:83: fb:f3:ff:f7:1d:97:13:0b:5c:28:fe:5d:e3:08:5a:a1:2d:cb: 04:38:0c:9c:cb:5e:f6:3f:0a:06:cc:88:12:3c:35:74:dd:58: 63:f2:6f:9a:82:c0:92:2b:e1:5c:d1:85:d8:2f:b1:63:d4:e1: 3c:46:58:12:5e:08:23:d8:41:f0:34:6f:4f:0b:ac:f1:22:80: 45:3a:79:29:b7:7b:38:63:cc:5f:43:94:64:d2:4e:33:c3:f8: 09:f7:25:85:86:2d:52:4b:4d:04:16:50:00:42:6d:c7:26:96: 38:3d:2b:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBBNTMxMTAvBgNVBAUTKDZFNEU2OUJFMTNENjEzQTcwMjc0QzBDRTc3MzgzOTIz RjE1NjI3MkQwHhcNMjUwNDAyMjAyODMyWhcNMjUwNDA5MjAyODMyWjAYMRYwFAYD VQQDEw02N2VkOWRmMC0yMjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv4qXm8ZvwCjCkDvzJ7aNuySPCdOJuEHpPG4D8ubUewf/cjQqfWlAoSRYuQjc 3QADzRpiW7xy5t3l37l+qLEbFMTyR9JKY0Sl/sgYxKMqoP+1s1to5WKisfA/8r2v ZT93p+OrTlOi0kJHuOU3IP44Lhg0JRaM+HSl1oMRlv7ch6QmY7QhS7J1S9SYiyQT oLEvqSb/bNqcsdDw4AkLlBZE0cWxVtaZqQCDx2H40pezsSlvPFsLXPNNUgV86fFv /DCBn1+ixQkqOUOnqsV7wMOLOZRIS/nfj01SHakPl1F8sSbQRD1JCkRMqZ33yT5u 4VjQe0hSL5eYg/87h58IRTb4qwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAuw5Ow3 Tgu/I9giPO7OBxdI3e+UMB8GA1UdIwQYMBaAFG5Oab4T1hOnAnTAznc4OSPxVict MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEE1My83MUI3RDQ3MEFC NEExMUVBODlEMTYzNTlDNEY5QUUwMi9iazVwdmhQV0U2Y0NkTURPZHpnNUlfRldK eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JrNXB2aFBXRTZjQ2RNRE9kemc1SV9GV0p5MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEE1My83MUI3RDQ3MEFCNEExMUVBODlEMTYzNTlDNEY5QUUwMi9iazVwdmhQV0U2 Y0NkTURPZHpnNUlfRldKeTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0/b/gNjA4o0GOtY5yve5e6iGD5rAhptF/2jR+jxwKpEiWRGJ2cD4J R8gpHx+CQtfA9XB/imuIrxLr6NCLekRK6DxuEt2rfut2ioGEvvTj9536sGSFU/lX Hyy+nUubdtSi1YDV+9t2On9Fh1T6EhCyWntx6IftT0X9jPX9LvgOVxUieE7QlIQy CpfogwgwtIP78//3HZcTC1wo/l3jCFqhLcsEOAycy172PwoGzIgSPDV03Vhj8m+a gsCSK+Fc0YXYL7Fj1OE8RlgSXggj2EHwNG9PC6zxIoBFOnkpt3s4Y8xfQ5Rk0k4z w/gJ9yWFhi1SS00EFlAAQm3HJpY4PSu4 -----END CERTIFICATE-----Generated at Fri Apr 4 18:27:48 2025 by rpki-client