$ rpki-client -vvf rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft File: BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft (raw, json) Hash identifier: m18XDbVfmCizX/FKOpZRUQv5TJ6fXG5xZD25CbeMeYw= Subject key identifier: 92:2E:29:1D:EF:C7:7C:39:68:CE:A1:40:96:38:D6:F4:37:58:30:2A Authority key identifier: 05:D2:4B:3B:8A:22:27:B6:FE:E9:2D:CD:25:D5:4B:F0:5E:E8:68:CA Certificate issuer: /CN=A9157724/serialNumber=05D24B3B8A2227B6FEE92DCD25D54BF05EE868CA Certificate serial: 010D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft Manifest number: 0108 Signing time: Mon 21 Apr 2025 03:59:06 +0000 Manifest this update: Mon 21 Apr 2025 03:59:05 +0000 Manifest next update: Mon 28 Apr 2025 03:59:05 +0000 Files and hashes: 1: BdJLO4oiJ7b-6S3NJdVL8F7oaMo.crl (hash: fE3ggMW8SzyPovybGmcWx5Bbkc+tbCTBabq+CqKPJsY=) 2: 6063C75CB6E411EE94471D14C4F9AE02.roa (hash: HDfP4LwrloNXU1nzvfFcUeha0pVa0Ubh8d+qNote20c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.crl rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 03:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 269 (0x10d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157724, serialNumber=05D24B3B8A2227B6FEE92DCD25D54BF05EE868CA Validity Not Before: Apr 21 03:59:05 2025 GMT Not After : Apr 28 03:59:05 2025 GMT Subject: CN=6805c28a-dd22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:cf:33:07:c9:ce:05:3e:bf:94:a8:1c:e9:50: 31:79:74:f9:3b:a1:9e:ee:ab:41:5f:81:d7:e1:08: 17:1c:8f:f8:26:9c:ba:04:3f:dc:c3:f6:d3:9b:1d: da:f0:03:f4:9e:17:e7:12:92:78:41:04:19:c5:88: 31:d9:1e:82:e7:1a:f3:34:c0:27:26:10:7c:6f:a8: 61:ab:4e:53:23:e8:d8:35:32:db:32:7e:35:6f:68: 62:b7:eb:16:67:2b:c7:2d:80:50:31:98:96:18:2c: 89:3e:37:8d:31:d6:7e:3e:39:e5:07:84:b9:26:3d: b1:70:87:0a:a3:2e:e1:73:2f:c0:9b:03:27:15:8d: ab:19:87:4b:0f:4b:97:a2:20:38:e8:cb:cf:68:5c: 62:46:d6:26:7e:a6:a7:30:37:de:54:95:ce:82:9f: f0:00:9c:f6:79:75:0f:74:02:94:0d:dd:73:88:70: de:20:98:be:0e:29:6d:77:b6:3b:8d:55:cf:9b:0f: a8:fe:aa:87:5f:24:54:c0:fe:43:a1:ef:46:88:7c: 87:f3:21:6d:55:fa:2f:3c:a4:7d:1e:aa:ba:e4:d5: 06:cc:c6:87:52:3f:99:26:61:1d:89:2c:82:93:d0: 9e:91:a9:08:ab:82:e6:86:df:51:b7:27:a1:d3:28: 89:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:2E:29:1D:EF:C7:7C:39:68:CE:A1:40:96:38:D6:F4:37:58:30:2A X509v3 Authority Key Identifier: keyid:05:D2:4B:3B:8A:22:27:B6:FE:E9:2D:CD:25:D5:4B:F0:5E:E8:68:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:dd:4a:8d:2c:d2:ab:52:a0:0b:87:4f:8b:fe:a4:0d:0b:dc: 2c:ae:e9:66:1d:db:93:04:df:68:d9:28:24:90:69:0a:df:c9: bb:d6:48:10:84:41:95:c3:d9:9b:e4:7c:50:7d:8e:c8:54:f5: 5e:53:ab:ff:74:f4:a3:7e:28:77:b6:57:ee:4a:41:d1:93:71: 12:29:c3:3f:d5:75:95:db:0d:14:59:ce:c8:dd:f4:dc:68:75: c1:45:88:5c:d3:cd:25:c5:f1:02:d0:99:fe:28:42:aa:77:b8: eb:7b:8b:25:0f:2b:e4:2b:bf:a4:17:64:90:51:2e:9d:b1:ea: 6c:e5:76:32:5b:3d:95:fe:28:7a:41:82:00:4a:1e:6b:c1:26: c4:1d:9b:8f:0e:f2:80:b6:1b:e1:06:02:99:0f:ba:6b:f6:9a: 8a:95:c1:3f:65:96:a6:d9:e9:0b:31:0f:b8:1e:3f:ec:42:78: 4d:be:91:75:ed:48:86:ac:b5:bd:df:86:54:69:e7:a9:8d:ba: 84:eb:d4:29:0e:a9:c1:11:40:2c:46:0a:da:14:02:e7:c0:a2: 84:16:f4:c6:a3:c3:4e:81:8a:bf:fd:8a:07:b3:c7:57:e3:dc: 69:eb:1d:72:22:0d:6e:5e:59:5f:41:97:37:9a:f1:53:00:89: b7:9c:f9:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTc3MjQxMTAvBgNVBAUTKDA1RDI0QjNCOEEyMjI3QjZGRUU5MkRDRDI1RDU0QkYw NUVFODY4Q0EwHhcNMjUwNDIxMDM1OTA1WhcNMjUwNDI4MDM1OTA1WjAYMRYwFAYD VQQDEw02ODA1YzI4YS1kZDIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6s8zB8nOBT6/lKgc6VAxeXT5O6Ge7qtBX4HX4QgXHI/4Jpy6BD/cw/bTmx3a 8AP0nhfnEpJ4QQQZxYgx2R6C5xrzNMAnJhB8b6hhq05TI+jYNTLbMn41b2hit+sW ZyvHLYBQMZiWGCyJPjeNMdZ+PjnlB4S5Jj2xcIcKoy7hcy/AmwMnFY2rGYdLD0uX oiA46MvPaFxiRtYmfqanMDfeVJXOgp/wAJz2eXUPdAKUDd1ziHDeIJi+Diltd7Y7 jVXPmw+o/qqHXyRUwP5Doe9GiHyH8yFtVfovPKR9Hqq65NUGzMaHUj+ZJmEdiSyC k9CekakIq4Lmht9Rtyeh0yiJHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJIuKR3v x3w5aM6hQJY41vQ3WDAqMB8GA1UdIwQYMBaAFAXSSzuKIie2/uktzSXVS/Be6GjK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzcyNC9ENzM5ODcyODk1 ODcxMUVFQUQzQkIyNjJDNEY5QUUwMi9CZEpMTzRvaUo3Yi02UzNOSmRWTDhGN29h TW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JkSkxPNG9pSjdiLTZTM05KZFZMOEY3b2FNby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzcyNC9ENzM5ODcyODk1ODcxMUVFQUQzQkIyNjJDNEY5QUUwMi9CZEpMTzRvaUo3 Yi02UzNOSmRWTDhGN29hTW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDG3UqNLNKrUqALh0+L/qQNC9wsrulmHduTBN9o2SgkkGkK38m71kgQ hEGVw9mb5HxQfY7IVPVeU6v/dPSjfih3tlfuSkHRk3ESKcM/1XWV2w0UWc7I3fTc aHXBRYhc080lxfEC0Jn+KEKqd7jre4slDyvkK7+kF2SQUS6dseps5XYyWz2V/ih6 QYIASh5rwSbEHZuPDvKAthvhBgKZD7pr9pqKlcE/ZZam2ekLMQ+4Hj/sQnhNvpF1 7UiGrLW934ZUaeepjbqE69QpDqnBEUAsRgraFALnwKKEFvTGo8NOgYq//YoHs8dX 49xp6x1yIg1uXllfQZc3mvFTAIm3nPkc -----END CERTIFICATE-----Generated at Mon Apr 21 11:17:30 2025 by rpki-client