$ rpki-client -vvf rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft File: BCkMsk7u8KOnhxh8tP_HR96GFzE.mft (raw, json) Hash identifier: mMxlyHpmalDxZEtQ0D1uMy/fn5Y/WaDNgyyfuDv2WFo= Subject key identifier: 2B:4F:2C:7F:8B:B2:EB:09:35:B0:51:60:AB:9A:50:AE:1A:B4:23:B1 Authority key identifier: 04:29:0C:B2:4E:EE:F0:A3:A7:87:18:7C:B4:FF:C7:47:DE:86:17:31 Certificate issuer: /CN=A915F316/serialNumber=04290CB24EEEF0A3A787187CB4FFC747DE861731 Certificate serial: 07BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft Manifest number: 07AD Signing time: Wed 02 Apr 2025 21:10:54 +0000 Manifest this update: Wed 02 Apr 2025 21:10:54 +0000 Manifest next update: Wed 09 Apr 2025 21:10:54 +0000 Files and hashes: 1: BCkMsk7u8KOnhxh8tP_HR96GFzE.crl (hash: 7D8xV83htlQqlLJERgH/b1MH3guO8oLwH7XYY/40NpM=) 2: 21A84DDAB4C811EE98BFC52CC4F9AE02.roa (hash: 7SByllehiBQ/m40nHfrULflQ9saC9b0OPbuO6uvzNcs=) 3: F72BF19CB4C711EE84AE602CC4F9AE02.roa (hash: UAlWYyICZSxgcc4gu4nDjPvk7Se5PSi+jbJb8ttieow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.crl rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 21:10:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1979 (0x7bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F316 Validity Not Before: Apr 2 21:10:54 2025 GMT Not After : Apr 9 21:10:54 2025 GMT Subject: CN=67eda7de-936d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:54:6b:d3:b4:f6:75:88:2f:95:61:db:a3:fb: f6:20:3e:52:43:64:6e:36:94:e2:ec:79:f9:81:e4: 4c:f5:78:1e:69:2c:10:85:21:7a:b9:7f:3a:e5:ad: 94:96:02:38:58:d7:24:a9:df:94:7c:90:05:db:2b: 8e:99:c1:6c:5a:80:11:7f:69:64:8f:1c:e2:c9:c2: 63:7b:90:12:be:8c:5c:d1:9e:cb:31:8b:7b:15:58: 33:ea:f4:7d:9c:44:1a:c0:f3:d6:97:c8:74:6a:6b: 1d:5b:7d:c7:c4:70:54:f0:c3:c7:10:87:de:3c:95: 9e:74:3d:00:a9:63:bf:1f:5b:f9:fc:6c:2a:db:6d: 17:28:45:92:62:f6:5e:d6:c4:ed:fa:dc:be:95:85: 5b:31:9b:de:aa:2d:8a:cd:30:26:91:f0:b8:c5:9b: 2e:76:c1:71:d0:3e:53:f3:51:62:7b:df:bb:8b:f7: 07:dd:c5:c1:72:6a:75:68:c5:14:b1:a3:3d:4f:5c: 16:6f:14:97:75:06:a9:b8:8f:8c:ea:3f:b9:b5:7d: 1d:12:89:26:fb:af:e8:f3:b6:1f:e0:3f:80:d2:88: 84:49:29:77:eb:7b:4e:7d:81:d6:64:f2:61:7e:e6: a4:ed:85:2d:fa:d2:07:3f:2f:42:5b:07:9c:de:f1: 91:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:4F:2C:7F:8B:B2:EB:09:35:B0:51:60:AB:9A:50:AE:1A:B4:23:B1 X509v3 Authority Key Identifier: keyid:04:29:0C:B2:4E:EE:F0:A3:A7:87:18:7C:B4:FF:C7:47:DE:86:17:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:28:b2:80:0c:8b:40:b0:a0:93:35:c4:e2:6f:9b:5c:bf:cf: 3c:91:40:53:da:c6:8b:93:38:d9:78:02:1f:f3:1f:8a:02:ca: f1:6f:0e:45:c6:f6:67:43:f4:5e:cd:dc:b3:fb:14:5c:30:c3: 97:0b:ea:e3:7a:09:56:d5:1e:fb:1f:03:4b:df:1b:bb:8e:fd: 1c:a0:ef:a1:07:56:3c:70:c6:42:a1:85:66:d1:f3:88:af:25: c3:12:aa:53:a6:cf:c8:03:19:67:bc:80:e9:be:e7:78:ff:82: cc:d2:83:ab:a6:a3:53:34:c2:d1:55:86:50:e2:4e:45:4e:a0: 28:12:50:28:ae:96:66:52:2c:5c:9f:32:0a:19:6f:08:19:de: 19:0f:fa:16:47:63:35:1e:d8:0c:e6:10:d4:3b:b6:e3:ea:55: 8e:07:ae:bb:85:e8:48:9c:da:7e:7d:ca:86:17:e5:71:7a:72: 95:67:9a:3b:cc:4b:12:27:74:a7:19:51:69:08:18:67:52:7b: fc:ad:6e:c4:83:5f:5d:2a:56:4c:1a:d5:fd:4e:03:2f:56:e1: f9:73:c9:8a:da:a4:50:34:fc:a7:2e:a1:7c:e3:d8:8e:83:f9: 17:51:12:49:db:b8:31:92:20:be:a8:4d:83:d1:37:38:f9:5b: 25:3d:14:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUYzMTYxMTAvBgNVBAUTKDA0MjkwQ0IyNEVFRUYwQTNBNzg3MTg3Q0I0RkZDNzQ3 REU4NjE3MzEwHhcNMjUwNDAyMjExMDU0WhcNMjUwNDA5MjExMDU0WjAYMRYwFAYD VQQDEw02N2VkYTdkZS05MzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt1Rr07T2dYgvlWHbo/v2ID5SQ2RuNpTi7Hn5geRM9XgeaSwQhSF6uX865a2U lgI4WNckqd+UfJAF2yuOmcFsWoARf2lkjxziycJje5ASvoxc0Z7LMYt7FVgz6vR9 nEQawPPWl8h0amsdW33HxHBU8MPHEIfePJWedD0AqWO/H1v5/Gwq220XKEWSYvZe 1sTt+ty+lYVbMZveqi2KzTAmkfC4xZsudsFx0D5T81Fie9+7i/cH3cXBcmp1aMUU saM9T1wWbxSXdQapuI+M6j+5tX0dEokm+6/o87Yf4D+A0oiESSl363tOfYHWZPJh fuak7YUt+tIHPy9CWwec3vGRWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCtPLH+L susJNbBRYKuaUK4atCOxMB8GA1UdIwQYMBaAFAQpDLJO7vCjp4cYfLT/x0fehhcx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjMxNi8yODFCOUQ2MEY2 RDExMUVBQTY5REU0MjlDNEY5QUUwMi9CQ2tNc2s3dThLT25oeGg4dFBfSFI5NkdG ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JDa01zazd1OEtPbmh4aDh0UF9IUjk2R0Z6RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RjMxNi8yODFCOUQ2MEY2RDExMUVBQTY5REU0MjlDNEY5QUUwMi9CQ2tNc2s3dThL T25oeGg4dFBfSFI5NkdGekUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7KLKADItAsKCTNcTib5tcv888kUBT2saLkzjZeAIf8x+KAsrxbw5F xvZnQ/Rezdyz+xRcMMOXC+rjeglW1R77HwNL3xu7jv0coO+hB1Y8cMZCoYVm0fOI ryXDEqpTps/IAxlnvIDpvud4/4LM0oOrpqNTNMLRVYZQ4k5FTqAoElAorpZmUixc nzIKGW8IGd4ZD/oWR2M1HtgM5hDUO7bj6lWOB667hehInNp+fcqGF+VxenKVZ5o7 zEsSJ3SnGVFpCBhnUnv8rW7Eg19dKlZMGtX9TgMvVuH5c8mK2qRQNPynLqF849iO g/kXURJJ27gxkiC+qE2D0Tc4+VslPRTQ -----END CERTIFICATE-----Generated at Fri Apr 4 22:47:48 2025 by rpki-client