$ rpki-client -vvf rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft File: D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft (raw, json) Hash identifier: uiL90tBSbhcnNOjkIjgXMrfrQ75S7qM3TzlJ7w64u5s= Subject key identifier: B7:C0:43:3C:D3:EF:AE:23:6A:76:CB:CD:9B:C4:02:6B:2B:9C:0A:06 Authority key identifier: 0F:E0:63:24:F1:78:7C:8F:21:4F:BE:AE:67:D8:86:D2:2F:81:67:02 Certificate issuer: /CN=A9156B5D/serialNumber=0FE06324F1787C8F214FBEAE67D886D22F816702 Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-BjJPF4fI8hT76uZ9iG0i-BZwI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft Manifest number: 14 Signing time: Sat 29 Mar 2025 07:19:41 +0000 Manifest this update: Sat 29 Mar 2025 07:19:40 +0000 Manifest next update: Sat 05 Apr 2025 07:19:40 +0000 Files and hashes: 1: D-BjJPF4fI8hT76uZ9iG0i-BZwI.crl (hash: 1Va6a5dRJ/UQLOK+EPM/+wCGD4WMKITLLSDaHXRJ+CQ=) 2: 8CF57F0EF1C111EFAC8BCA59C4F9AE02.roa (hash: BMK5egNvgRPb4zFSiHjhQ8AJphJuXdtk94523bl6Tzs=) 3: 41554C78F1C111EFA67D2459C4F9AE02.roa (hash: waSBCEbcYlolsmBXhQe06r7v3tswwJfsDI5vXs6FVRA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.crl rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-BjJPF4fI8hT76uZ9iG0i-BZwI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156B5D Validity Not Before: Mar 29 07:19:40 2025 GMT Not After : Apr 5 07:19:40 2025 GMT Subject: CN=67e79f0c-b52e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:0e:f8:6d:66:b7:1c:2d:85:4d:24:b7:4a:26: cb:9d:0f:f2:2e:cb:00:4b:34:ff:5f:29:85:52:bd: da:69:0a:71:44:58:1d:fc:67:13:d5:77:c9:44:f0: fd:9b:47:99:ff:f9:17:0f:59:3b:30:a2:a1:20:74: 39:66:8c:6d:88:b7:49:72:e2:5a:22:fb:e0:b5:da: 2c:75:a1:88:f7:73:52:8e:f5:b5:53:b4:67:e3:d9: 4a:44:64:d3:f7:2b:c5:f6:77:9c:56:9d:b3:34:77: ec:d1:e7:7b:b9:a0:bb:45:e5:26:26:6d:ad:7f:0e: e5:96:05:d6:dc:c8:4b:7e:50:56:4a:a0:fe:55:88: be:38:ec:4f:a9:5b:cf:ae:40:3d:70:40:d7:11:e8: 60:65:87:df:d3:6f:d8:f3:6a:d5:ce:6f:13:7f:8d: 17:9a:c5:c5:7b:54:cf:32:b0:23:fc:33:c3:99:28: df:5f:10:32:a4:cd:cb:bd:1c:a8:42:cf:2b:8e:8f: 75:ad:76:73:cd:a3:41:1a:69:56:72:de:e7:28:04: 23:5a:2e:fb:ff:7d:8d:4c:6b:80:ee:b1:8a:49:17: 0a:7e:c4:fd:bb:d9:d5:26:b7:5d:13:3b:01:90:ff: 3b:84:41:26:08:79:92:61:ea:37:60:c1:4f:7d:ef: 52:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:C0:43:3C:D3:EF:AE:23:6A:76:CB:CD:9B:C4:02:6B:2B:9C:0A:06 X509v3 Authority Key Identifier: keyid:0F:E0:63:24:F1:78:7C:8F:21:4F:BE:AE:67:D8:86:D2:2F:81:67:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-BjJPF4fI8hT76uZ9iG0i-BZwI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:9b:0c:72:7a:54:29:5f:5e:53:03:fd:a8:40:07:cf:5b:55: 50:fb:b9:9d:bd:96:75:ec:1b:5a:74:fa:e7:54:70:1d:97:e9: 58:fd:a2:fb:3f:0c:d3:bd:58:4e:e8:cc:2f:04:8e:b4:69:cd: ff:7a:d8:59:32:b0:70:38:17:5b:fa:a8:88:eb:63:c7:1b:81: 66:b4:87:94:4d:fb:31:38:00:02:68:d0:59:39:a8:ce:8c:60: ec:97:d5:1b:ef:de:5c:d3:81:5b:29:65:eb:1c:99:d6:05:dc: 93:a1:97:1e:92:f7:74:a7:60:6f:cc:66:de:99:19:2c:c8:37: e0:e4:1b:4f:d5:0b:01:f5:4e:82:19:81:ba:0a:64:30:8b:eb: 31:ee:2b:50:66:02:62:b3:b6:04:29:06:90:d0:f0:36:c6:b1: 97:fd:c5:8c:a6:e5:db:ff:2b:d8:7b:b3:2a:c8:49:2c:8d:a4: e9:54:b7:db:c0:ca:ba:40:ee:18:48:20:97:97:7d:2a:27:bb: b8:62:91:b8:80:4f:e0:9e:62:55:a7:ad:bf:9c:f5:b4:db:b3: a3:fa:23:25:d6:da:4d:89:9d:8a:9d:73:c4:7a:1d:38:53:26: ff:6f:bb:54:20:75:ad:18:eb:be:04:0f:60:cc:97:07:60:90: 77:66:79:c1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NkI1RDExMC8GA1UEBRMoMEZFMDYzMjRGMTc4N0M4RjIxNEZCRUFFNjdEODg2RDIy RjgxNjcwMjAeFw0yNTAzMjkwNzE5NDBaFw0yNTA0MDUwNzE5NDBaMBgxFjAUBgNV BAMTDTY3ZTc5ZjBjLWI1MmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCTDvhtZrccLYVNJLdKJsudD/IuywBLNP9fKYVSvdppCnFEWB38ZxPVd8lE8P2b R5n/+RcPWTswoqEgdDlmjG2It0ly4loi++C12ix1oYj3c1KO9bVTtGfj2UpEZNP3 K8X2d5xWnbM0d+zR53u5oLtF5SYmba1/DuWWBdbcyEt+UFZKoP5ViL447E+pW8+u QD1wQNcR6GBlh9/Tb9jzatXObxN/jReaxcV7VM8ysCP8M8OZKN9fEDKkzcu9HKhC zyuOj3WtdnPNo0EaaVZy3ucoBCNaLvv/fY1Ma4DusYpJFwp+xP272dUmt10TOwGQ /zuEQSYIeZJh6jdgwU9971IlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUt8BDPNPv riNqdsvNm8QCayucCgYwHwYDVR0jBBgwFoAUD+BjJPF4fI8hT76uZ9iG0i+BZwIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2QjVELzk4RkQxQTQyRjFD MDExRUZBNTcxNkI1NEM0RjlBRTAyL0QtQmpKUEY0Zkk4aFQ3NnVaOWlHMGktQlp3 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRC1CakpQRjRmSThoVDc2dVo5aUcwaS1CWndJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2 QjVELzk4RkQxQTQyRjFDMDExRUZBNTcxNkI1NEM0RjlBRTAyL0QtQmpKUEY0Zkk4 aFQ3NnVaOWlHMGktQlp3SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABObDHJ6VClfXlMD/ahAB89bVVD7uZ29lnXsG1p0+udUcB2X6Vj9ovs/ DNO9WE7ozC8EjrRpzf962FkysHA4F1v6qIjrY8cbgWa0h5RN+zE4AAJo0Fk5qM6M YOyX1Rvv3lzTgVspZescmdYF3JOhlx6S93SnYG/MZt6ZGSzIN+DkG0/VCwH1ToIZ gboKZDCL6zHuK1BmAmKztgQpBpDQ8DbGsZf9xYym5dv/K9h7syrISSyNpOlUt9vA yrpA7hhIIJeXfSonu7hikbiAT+CeYlWnrb+c9bTbs6P6IyXW2k2JnYqdc8R6HThT Jv9vu1Qgda0Y674ED2DMlwdgkHdmecE= -----END CERTIFICATE-----Generated at Fri Apr 4 18:35:50 2025 by rpki-client