$ rpki-client -vvf rpki.apnic.net/member_repository/A914949E/80785F50716911EEB51B380DC4F9AE02/bjRcAVVt4-2h2RNNSi1-pSOhSPk.mft File: bjRcAVVt4-2h2RNNSi1-pSOhSPk.mft (raw, json) Hash identifier: fEYd0fyoQw91Ew3lnsb39cP7Ti4v++IDhg0rAe8k6IE= Subject key identifier: 4D:09:9E:89:39:C4:1E:54:13:56:36:92:14:1C:5C:42:8B:86:D6:AD Authority key identifier: 6E:34:5C:01:55:6D:E3:ED:A1:D9:13:4D:4A:2D:7E:A5:23:A1:48:F9 Certificate issuer: /CN=A914949E/serialNumber=6E345C01556DE3EDA1D9134D4A2D7EA523A148F9 Certificate serial: 0113 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjRcAVVt4-2h2RNNSi1-pSOhSPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914949E/80785F50716911EEB51B380DC4F9AE02/bjRcAVVt4-2h2RNNSi1-pSOhSPk.mft Manifest number: 0111 Signing time: Sat 05 Apr 2025 04:14:50 +0000 Manifest this update: Sat 05 Apr 2025 04:14:50 +0000 Manifest next update: Sat 12 Apr 2025 04:14:50 +0000 Files and hashes: 1: bjRcAVVt4-2h2RNNSi1-pSOhSPk.crl (hash: H3m3O5+97d8+6/Rn8Ph5Kh4lsntEIpiLpDdaRiuhHbA=) 2: 52531292718111EEA2596A60C4F9AE02.roa (hash: kQ3J56aH6/4jSon9dbWp2nFY5S9v1Kdt8nNw03MV99U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914949E/80785F50716911EEB51B380DC4F9AE02/bjRcAVVt4-2h2RNNSi1-pSOhSPk.crl rsync://rpki.apnic.net/member_repository/A914949E/80785F50716911EEB51B380DC4F9AE02/bjRcAVVt4-2h2RNNSi1-pSOhSPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjRcAVVt4-2h2RNNSi1-pSOhSPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 04:14:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 275 (0x113) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914949E Validity Not Before: Apr 5 04:14:50 2025 GMT Not After : Apr 12 04:14:50 2025 GMT Subject: CN=67f0ae3a-f9ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:3f:1c:8e:27:7c:39:37:08:56:cc:81:eb:3c: 8c:67:13:d1:2d:26:d5:88:32:0d:25:f3:be:fe:bc: b1:5f:17:fe:15:93:ef:b5:3c:64:de:56:20:80:4c: 1f:3e:a9:9a:9c:b5:00:50:92:0a:02:1c:84:05:76: 40:81:ee:98:52:13:6d:c3:73:e2:5b:15:56:75:4a: 3b:5a:0e:19:c3:88:7e:03:c9:d6:34:47:6e:5b:d7: 78:57:74:f3:56:1f:45:5e:58:36:69:2b:56:71:22: dd:26:f1:9f:26:74:29:3f:22:f6:6d:d3:ff:3a:14: d2:4e:eb:c0:1b:71:85:25:60:a6:88:30:c0:a7:a0: eb:4f:3b:67:79:8c:ed:63:4e:1f:88:b5:70:b2:93: cc:0c:e7:32:37:3f:34:86:8e:d1:22:b6:a7:48:da: 72:50:49:85:05:fe:7a:8e:2d:16:7a:70:e1:5e:c5: e6:ed:d6:9e:e9:26:20:14:93:ab:7e:2c:9b:e4:08: 16:e4:ce:7d:1a:e1:d6:da:d9:60:7b:cd:55:1f:48: cf:2c:78:5d:c6:a7:bf:e6:ea:9c:0e:c7:e6:ce:d6: cd:ef:6c:ae:5d:fd:cc:8b:05:78:a8:ff:88:0b:3a: 75:c0:9f:a2:7b:67:c7:e9:8c:28:7b:7e:2b:a1:14: 09:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:09:9E:89:39:C4:1E:54:13:56:36:92:14:1C:5C:42:8B:86:D6:AD X509v3 Authority Key Identifier: keyid:6E:34:5C:01:55:6D:E3:ED:A1:D9:13:4D:4A:2D:7E:A5:23:A1:48:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914949E/80785F50716911EEB51B380DC4F9AE02/bjRcAVVt4-2h2RNNSi1-pSOhSPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjRcAVVt4-2h2RNNSi1-pSOhSPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914949E/80785F50716911EEB51B380DC4F9AE02/bjRcAVVt4-2h2RNNSi1-pSOhSPk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:3e:c3:81:7d:7d:09:7d:34:9b:21:15:ff:8b:b6:45:e3:c0: 16:01:31:a4:71:09:f7:76:0e:59:e7:01:44:f4:9b:53:38:8f: b1:cf:67:25:be:4c:dc:a9:67:eb:15:53:7c:04:cd:2e:5d:aa: a7:30:00:2e:e2:26:2e:7d:2e:d5:ab:fb:ed:75:2a:70:14:f5: d1:bc:49:ea:98:10:77:cf:b4:8a:df:24:8c:d5:a7:fc:9d:08: 49:60:6e:ec:f2:51:c7:96:c2:d1:e2:80:27:d7:c0:c7:75:20: 22:89:b3:ad:5c:70:05:79:00:6c:61:ee:01:03:77:27:b6:6a: d3:07:a3:e0:54:66:b8:53:b8:3a:5d:36:da:c8:4c:a7:2e:70: 1b:0a:9c:74:d8:11:af:af:c7:6e:3c:9d:c2:82:02:de:51:2c: 8c:87:ba:d5:12:ee:82:5f:6f:e1:4d:f2:d5:26:b2:26:81:ed: 58:91:c1:30:75:55:c2:16:fd:05:d4:d5:61:d3:34:4e:22:36: 53:8d:49:34:e4:e6:ad:4b:23:3f:1c:76:cd:ef:be:75:4b:59: fc:7e:b8:75:2a:16:85:a9:01:fe:66:15:6c:cd:4b:db:2a:cf: 30:ae:f8:e6:3c:16:56:38:e1:f8:1b:73:7b:44:0a:9c:81:14: 88:a4:6b:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk0OUUxMTAvBgNVBAUTKDZFMzQ1QzAxNTU2REUzRURBMUQ5MTM0RDRBMkQ3RUE1 MjNBMTQ4RjkwHhcNMjUwNDA1MDQxNDUwWhcNMjUwNDEyMDQxNDUwWjAYMRYwFAYD VQQDEw02N2YwYWUzYS1mOWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7z8cjid8OTcIVsyB6zyMZxPRLSbViDINJfO+/ryxXxf+FZPvtTxk3lYggEwf PqmanLUAUJIKAhyEBXZAge6YUhNtw3PiWxVWdUo7Wg4Zw4h+A8nWNEduW9d4V3Tz Vh9FXlg2aStWcSLdJvGfJnQpPyL2bdP/OhTSTuvAG3GFJWCmiDDAp6DrTztneYzt Y04fiLVwspPMDOcyNz80ho7RIranSNpyUEmFBf56ji0WenDhXsXm7dae6SYgFJOr fiyb5AgW5M59GuHW2tlge81VH0jPLHhdxqe/5uqcDsfmztbN72yuXf3MiwV4qP+I Czp1wJ+ie2fH6Ywoe34roRQJTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE0Jnok5 xB5UE1Y2khQcXEKLhtatMB8GA1UdIwQYMBaAFG40XAFVbePtodkTTUotfqUjoUj5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTQ5RS84MDc4NUY1MDcx NjkxMUVFQjUxQjM4MERDNEY5QUUwMi9ialJjQVZWdDQtMmgyUk5OU2kxLXBTT2hT UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JqUmNBVlZ0NC0yaDJSTk5TaTEtcFNPaFNQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTQ5RS84MDc4NUY1MDcxNjkxMUVFQjUxQjM4MERDNEY5QUUwMi9ialJjQVZWdDQt MmgyUk5OU2kxLXBTT2hTUGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmPsOBfX0JfTSbIRX/i7ZF48AWATGkcQn3dg5Z5wFE9JtTOI+xz2cl vkzcqWfrFVN8BM0uXaqnMAAu4iYufS7Vq/vtdSpwFPXRvEnqmBB3z7SK3ySM1af8 nQhJYG7s8lHHlsLR4oAn18DHdSAiibOtXHAFeQBsYe4BA3cntmrTB6PgVGa4U7g6 XTbayEynLnAbCpx02BGvr8duPJ3CggLeUSyMh7rVEu6CX2/hTfLVJrImge1YkcEw dVXCFv0F1NVh0zROIjZTjUk05OatSyM/HHbN7751S1n8frh1KhaFqQH+ZhVszUvb Ks8wrvjmPBZWOOH4G3N7RAqcgRSIpGti -----END CERTIFICATE-----Generated at Sat Apr 5 12:51:12 2025 by rpki-client