$ rpki-client -vvf rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft File: BtM8jWukpiIt_LkMK0Ckt5KTdno.mft (raw, json) Hash identifier: fLzkqJ6e4ZWkqtXqtbKaoJVo5fOs76waoCE4ou2Kkzs= Subject key identifier: 10:09:38:3E:89:91:D4:5B:16:A7:0E:D9:42:E8:87:A4:A7:1D:C1:AA Authority key identifier: 06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A Certificate issuer: /CN=A9152E70/serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A Certificate serial: 04DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft Manifest number: 04CA Signing time: Sat 29 Mar 2025 00:09:23 +0000 Manifest this update: Sat 29 Mar 2025 00:09:22 +0000 Manifest next update: Sat 05 Apr 2025 00:09:22 +0000 Files and hashes: 1: BtM8jWukpiIt_LkMK0Ckt5KTdno.crl (hash: tPGwlnywHtcLuoZPxraoZ+fo5N58+XB/TFpo1tfr+Hc=) 2: 5BC9A0B0C91211ED91C9A325C4F9AE02.roa (hash: bWFskxvhi7CkjX9KQtUg/L6OTceIBUoGJSArRRh8yOc=) 3: 900F6E92211E11ECAEED8632C4F9AE02.roa (hash: TEWGyyYFx9ktn3pEsyb60J6bTDtXfXp/IzUXg77M9qA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 00:09:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1244 (0x4dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152E70 Validity Not Before: Mar 29 00:09:22 2025 GMT Not After : Apr 5 00:09:22 2025 GMT Subject: CN=67e73a32-b235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:bf:a5:a7:a2:38:64:b1:fc:8e:a0:f0:42:03: 3f:2b:1d:71:45:88:d2:f8:4f:04:11:91:c7:24:a4: cd:7c:51:a6:6a:9b:84:05:b5:ea:0a:cc:6f:4c:53: f5:15:fa:a1:64:43:ec:d2:9c:cb:f1:ec:3b:71:af: 26:41:65:65:b6:b9:95:8d:59:b9:c4:ec:0d:24:07: dc:07:f2:98:e7:77:33:e0:88:6f:81:31:8c:6c:5f: ad:cf:3f:f8:1e:b8:b9:77:15:c4:00:cd:52:6f:34: 9f:56:20:3f:64:d8:45:0b:34:52:e3:81:24:26:71: 8b:4c:ad:df:49:6b:17:50:b3:31:27:a2:93:3c:b8: d6:82:51:b2:51:3c:d2:a5:fb:f2:f5:18:94:f3:cb: 09:de:6a:9b:6c:6f:f4:a7:39:c9:3a:70:01:06:40: a3:fe:34:9d:be:e8:e4:93:6e:41:c2:5c:5c:76:2a: 5d:5f:66:54:1b:f2:c4:f2:2b:d6:a3:97:2a:2e:c4: 2c:87:0a:b1:4e:76:26:b9:05:43:f9:72:54:af:f4: e7:f9:a8:88:94:fe:11:59:4e:2f:99:7f:82:01:5d: 5c:58:d7:9f:98:73:8d:99:59:d1:46:cf:7b:93:03: 3c:7a:a0:31:59:b9:bf:80:ac:e9:7c:ad:a2:7a:fd: be:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:09:38:3E:89:91:D4:5B:16:A7:0E:D9:42:E8:87:A4:A7:1D:C1:AA X509v3 Authority Key Identifier: keyid:06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:da:71:4f:52:e3:af:54:b6:89:4f:a9:70:41:70:b1:ce:ed: 10:13:12:79:b6:94:b4:4c:24:10:94:ef:13:f2:7b:e2:d0:70: be:77:63:0f:77:14:66:ff:e5:e9:02:f7:ed:6b:48:f2:17:3d: b9:20:f3:88:da:50:fd:36:bc:31:5b:61:7a:f3:ff:61:4c:24: de:c3:fb:e0:78:27:fc:21:e6:fc:bb:17:56:0d:b0:b0:6a:42: 11:d0:f4:4a:1e:e0:33:31:f7:cb:df:c2:e6:a2:ab:3f:11:10: c1:08:26:0f:04:c0:e5:11:b5:ed:2e:53:c9:97:2c:6c:f4:de: 71:12:1b:d4:f5:c7:31:21:3f:87:aa:05:8b:65:d3:3d:ec:b7: 8a:2c:38:bb:ce:85:16:58:93:cb:62:72:f3:c1:b4:5e:54:73: de:67:24:e8:c7:ba:60:19:a3:c1:ec:45:5b:fb:ae:fa:54:e3: cc:51:cf:5b:06:15:f1:61:07:74:f1:43:34:4d:01:2e:d0:14: 43:55:8a:2b:b8:13:9e:56:e9:35:26:dd:ff:c3:1c:b4:77:4e: bf:9f:0b:f7:e8:14:3c:51:0d:4d:31:8c:2a:e1:2f:00:28:9e: 48:dc:68:4c:6e:ce:33:4b:3b:03:4a:0e:f4:d7:46:15:f4:42: e3:3a:5d:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJFNzAxMTAvBgNVBAUTKDA2RDMzQzhENkJBNEE2MjIyREZDQjkwQzJCNDBBNEI3 OTI5Mzc2N0EwHhcNMjUwMzI5MDAwOTIyWhcNMjUwNDA1MDAwOTIyWjAYMRYwFAYD VQQDEw02N2U3M2EzMi1iMjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp7+lp6I4ZLH8jqDwQgM/Kx1xRYjS+E8EEZHHJKTNfFGmapuEBbXqCsxvTFP1 FfqhZEPs0pzL8ew7ca8mQWVltrmVjVm5xOwNJAfcB/KY53cz4IhvgTGMbF+tzz/4 Hri5dxXEAM1SbzSfViA/ZNhFCzRS44EkJnGLTK3fSWsXULMxJ6KTPLjWglGyUTzS pfvy9RiU88sJ3mqbbG/0pznJOnABBkCj/jSdvujkk25BwlxcdipdX2ZUG/LE8ivW o5cqLsQshwqxTnYmuQVD+XJUr/Tn+aiIlP4RWU4vmX+CAV1cWNefmHONmVnRRs97 kwM8eqAxWbm/gKzpfK2iev2+8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBAJOD6J kdRbFqcO2ULoh6SnHcGqMB8GA1UdIwQYMBaAFAbTPI1rpKYiLfy5DCtApLeSk3Z6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkU3MC9CRUM1Q0E3MjIx MUIxMUVDQjQ1RkQ0MkZDNEY5QUUwMi9CdE04ald1a3BpSXRfTGtNSzBDa3Q1S1Rk bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J0TThqV3VrcGlJdF9Ma01LMENrdDVLVGRuby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkU3MC9CRUM1Q0E3MjIxMUIxMUVDQjQ1RkQ0MkZDNEY5QUUwMi9CdE04ald1a3Bp SXRfTGtNSzBDa3Q1S1Rkbm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAm2nFPUuOvVLaJT6lwQXCxzu0QExJ5tpS0TCQQlO8T8nvi0HC+d2MP dxRm/+XpAvfta0jyFz25IPOI2lD9NrwxW2F68/9hTCTew/vgeCf8Ieb8uxdWDbCw akIR0PRKHuAzMffL38Lmoqs/ERDBCCYPBMDlEbXtLlPJlyxs9N5xEhvU9ccxIT+H qgWLZdM97LeKLDi7zoUWWJPLYnLzwbReVHPeZyTox7pgGaPB7EVb+676VOPMUc9b BhXxYQd08UM0TQEu0BRDVYoruBOeVuk1Jt3/wxy0d06/nwv36BQ8UQ1NMYwq4S8A KJ5I3GhMbs4zSzsDSg7010YV9ELjOl2u -----END CERTIFICATE-----Generated at Fri Apr 4 22:24:44 2025 by rpki-client