$ rpki-client -vvf rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.mft File: bJ4MK_6ffRsd4dbvYoJTqnCJKiU.mft (raw, json) Hash identifier: jjccrJHtzmS7iibxKHIhrM0FDiTCDUb3XKns+kmExU8= Subject key identifier: 8D:35:45:9B:90:96:C7:AD:AF:63:66:50:26:1D:A5:C3:A2:64:9C:42 Authority key identifier: 6C:9E:0C:2B:FE:9F:7D:1B:1D:E1:D6:EF:62:82:53:AA:70:89:2A:25 Certificate issuer: /CN=A9155A44/serialNumber=6C9E0C2BFE9F7D1B1DE1D6EF628253AA70892A25 Certificate serial: 0270 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.mft Manifest number: 026D Signing time: Thu 17 Apr 2025 01:20:02 +0000 Manifest this update: Thu 17 Apr 2025 01:20:02 +0000 Manifest next update: Thu 24 Apr 2025 01:20:02 +0000 Files and hashes: 1: bJ4MK_6ffRsd4dbvYoJTqnCJKiU.crl (hash: F56otM7y7YoI6lz5fK4wpZ0nbPGOJ5YSXnQ9ssmVeEQ=) 2: ED947C26088911EDA7D9A84AC4F9AE02.roa (hash: wd4QJR9Px8ImvSHEPaKQomQHqTQIJfzdAznmx8J+K4s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.crl rsync://rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 01:20:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 624 (0x270) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155A44, serialNumber=6C9E0C2BFE9F7D1B1DE1D6EF628253AA70892A25 Validity Not Before: Apr 17 01:20:02 2025 GMT Not After : Apr 24 01:20:02 2025 GMT Subject: CN=68005742-0029 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1b:3b:f3:3b:f1:4a:80:6c:63:5a:a3:87:e0: 1e:9b:22:62:0c:dd:46:07:c9:48:69:7b:b6:e2:19: a6:3f:df:21:78:76:fa:d0:fb:54:fc:d4:4d:41:fd: 7a:a1:91:db:65:b0:b0:5c:91:dd:08:c5:15:0c:f5: 6e:8f:57:14:a7:f3:2b:d6:ed:db:f8:8c:89:ce:c8: ea:fa:fc:c5:64:e8:79:11:af:f1:2f:25:7a:52:32: de:2d:84:37:80:e0:73:84:f7:b9:8f:1b:de:5e:32: 8b:0c:52:1b:35:06:d3:a0:d3:27:c3:a2:be:f3:34: 72:d1:cd:e2:31:4e:c0:67:6f:f9:89:cf:e5:89:49: f1:6c:b6:68:a2:b3:9f:17:a0:be:84:76:84:a3:05: 98:7a:33:33:2f:fc:f7:87:1c:d2:aa:f7:1d:a6:40: 93:bc:d7:06:b1:61:ed:7a:79:5e:58:14:59:b6:8d: d8:79:56:0c:f1:34:c9:7d:b8:b5:52:70:a3:f1:a3: e5:ab:5d:ed:69:6c:1f:a3:0a:8b:22:73:e0:26:bc: 62:2e:c7:98:c0:21:7a:42:a8:fe:09:22:ac:e0:45: f3:52:b1:a9:dc:38:d1:66:94:1a:46:8e:39:2b:e0: d5:3c:27:36:fc:20:1f:7a:c9:4c:19:5c:45:e1:c8: fb:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:35:45:9B:90:96:C7:AD:AF:63:66:50:26:1D:A5:C3:A2:64:9C:42 X509v3 Authority Key Identifier: keyid:6C:9E:0C:2B:FE:9F:7D:1B:1D:E1:D6:EF:62:82:53:AA:70:89:2A:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:71:ea:d6:2b:de:0d:e3:40:bb:5d:6f:f2:d8:98:57:56:cd: 7d:36:36:8a:ae:b8:24:6a:98:55:e7:14:fb:ff:ff:ed:12:f9: 3a:25:ba:d0:8d:8f:b1:1e:79:96:9d:d8:94:6e:d3:85:09:8a: 99:e0:36:15:9d:82:9e:94:75:ce:92:65:42:bb:8c:5f:f2:4f: aa:34:9e:e8:3e:f7:55:22:c5:86:c0:d8:f7:9b:1c:6a:41:e7: b2:43:5f:73:31:2f:84:c1:32:b5:93:58:62:40:34:4e:37:db: 6c:8c:be:04:60:11:04:ee:62:7e:18:6d:14:8a:78:3d:8a:f9: bf:88:8b:a4:53:51:84:ae:16:3b:ab:a3:29:68:e0:01:7e:10: 7a:90:51:22:00:67:61:90:0d:82:79:43:5c:d7:5c:68:e6:ef: 86:96:06:f2:86:9c:94:74:6f:4d:14:7e:0c:bb:e3:2a:ec:10: 72:94:82:af:b6:d2:6f:02:fd:d9:ee:56:20:a3:32:fd:19:ce: 6e:d0:aa:2a:3a:48:d3:5f:ef:ca:fd:37:5f:a9:a3:57:58:52: f0:87:fb:6a:90:94:e7:41:da:a1:e9:9b:53:76:89:07:d5:c5: 07:ed:35:8a:d5:bc:a6:8d:c5:e9:8b:4d:06:79:c0:51:ba:c9: 00:02:29:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTVBNDQxMTAvBgNVBAUTKDZDOUUwQzJCRkU5RjdEMUIxREUxRDZFRjYyODI1M0FB NzA4OTJBMjUwHhcNMjUwNDE3MDEyMDAyWhcNMjUwNDI0MDEyMDAyWjAYMRYwFAYD VQQDEw02ODAwNTc0Mi0wMDI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Bs78zvxSoBsY1qjh+AemyJiDN1GB8lIaXu24hmmP98heHb60PtU/NRNQf16 oZHbZbCwXJHdCMUVDPVuj1cUp/Mr1u3b+IyJzsjq+vzFZOh5Ea/xLyV6UjLeLYQ3 gOBzhPe5jxveXjKLDFIbNQbToNMnw6K+8zRy0c3iMU7AZ2/5ic/liUnxbLZoorOf F6C+hHaEowWYejMzL/z3hxzSqvcdpkCTvNcGsWHtenleWBRZto3YeVYM8TTJfbi1 UnCj8aPlq13taWwfowqLInPgJrxiLseYwCF6Qqj+CSKs4EXzUrGp3DjRZpQaRo45 K+DVPCc2/CAfeslMGVxF4cj7eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI01RZuQ lsetr2NmUCYdpcOiZJxCMB8GA1UdIwQYMBaAFGyeDCv+n30bHeHW72KCU6pwiSol MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NUE0NC8wRUM4RTQyQTA4 ODcxMUVEODkxRUU2NDRDNEY5QUUwMi9iSjRNS182ZmZSc2Q0ZGJ2WW9KVHFuQ0pL aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JKNE1LXzZmZlJzZDRkYnZZb0pUcW5DSktpVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NUE0NC8wRUM4RTQyQTA4ODcxMUVEODkxRUU2NDRDNEY5QUUwMi9iSjRNS182ZmZS c2Q0ZGJ2WW9KVHFuQ0pLaVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAcerWK94N40C7XW/y2JhXVs19NjaKrrgkaphV5xT7///tEvk6JbrQ jY+xHnmWndiUbtOFCYqZ4DYVnYKelHXOkmVCu4xf8k+qNJ7oPvdVIsWGwNj3mxxq QeeyQ19zMS+EwTK1k1hiQDRON9tsjL4EYBEE7mJ+GG0Uing9ivm/iIukU1GErhY7 q6MpaOABfhB6kFEiAGdhkA2CeUNc11xo5u+GlgbyhpyUdG9NFH4Mu+Mq7BBylIKv ttJvAv3Z7lYgozL9Gc5u0KoqOkjTX+/K/TdfqaNXWFLwh/tqkJTnQdqh6ZtTdokH 1cUH7TWK1bymjcXpi00GecBRuskAAikD -----END CERTIFICATE-----Generated at Sat Apr 19 01:03:57 2025 by rpki-client