$ rpki-client -vvf rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.mft File: bbZgfaaV3QngKYA6L_JiWtiDguM.mft (raw, json) Hash identifier: kJGIfUgSeQeUS2ASsSwv/95JNwp6FBjSZV9fxAWtTI4= Subject key identifier: 24:96:8F:5E:A6:A7:5A:B1:55:79:D4:27:25:F1:C9:E9:53:C9:C3:F9 Authority key identifier: 6D:B6:60:7D:A6:95:DD:09:E0:29:80:3A:2F:F2:62:5A:D8:83:82:E3 Certificate issuer: /CN=A91643F8/serialNumber=6DB6607DA695DD09E029803A2FF2625AD88382E3 Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bbZgfaaV3QngKYA6L_JiWtiDguM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.mft Manifest number: 65 Signing time: Thu 03 Apr 2025 06:15:52 +0000 Manifest this update: Thu 03 Apr 2025 06:15:52 +0000 Manifest next update: Thu 10 Apr 2025 06:15:52 +0000 Files and hashes: 1: bbZgfaaV3QngKYA6L_JiWtiDguM.crl (hash: P/rSA0jEkIFq5peC3NOq+kYH+pAOEndptfk4HPpoECw=) 2: F2F0E3FE882E11EFB58CD069C4F9AE02.roa (hash: xhTjRYAmVfOwQQSsGsr7HfgpLZrnPmaYeWIc+EpYBdU=) 3: 50A6B6427C6B11EFAB9AB658C4F9AE02.roa (hash: xeZt84UMp+B7UEH+ve0Je8d8/kwmPLcBVN2BEDa+kr8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.crl rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bbZgfaaV3QngKYA6L_JiWtiDguM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 06:15:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91643F8 Validity Not Before: Apr 3 06:15:52 2025 GMT Not After : Apr 10 06:15:52 2025 GMT Subject: CN=67ee2798-3048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:87:03:d6:88:93:ec:18:2f:63:04:d9:92:2e: db:bf:26:e9:21:8b:dc:80:c1:85:a9:2d:ae:1a:cc: 74:bc:be:8b:dd:0c:17:85:32:0c:3a:0c:f0:70:d3: be:d9:82:a6:27:56:fe:d1:a9:8b:17:69:9f:7f:6e: 01:79:a6:4c:35:5d:2a:76:f2:78:5d:2a:07:08:45: 39:e7:bc:80:df:7c:98:d2:7d:49:74:b2:93:1b:3c: 18:aa:02:1d:bf:a8:ec:ea:80:4c:e7:53:a5:51:fa: e6:e8:fa:80:cc:8f:6f:2d:96:2c:0f:97:5b:8a:2f: 19:f4:b5:af:6d:c6:9f:51:70:38:e7:10:0e:b2:78: 6c:9d:71:d0:20:9c:d9:81:73:43:69:82:b5:dd:ad: 14:ce:2a:f8:d3:40:f5:f0:14:87:a2:e6:6b:eb:86: 64:90:b9:54:02:58:ac:57:80:e0:9c:ea:06:c5:8c: a7:bb:42:a7:ba:6c:22:47:6e:c9:f0:c1:a2:49:71: 3c:ca:1c:c0:8e:b5:86:a6:bd:e4:1e:06:44:2e:71: 8f:08:e6:21:22:60:35:6e:d8:93:78:39:3a:0e:f7: ce:43:57:d7:8c:d2:de:b7:c5:95:0f:16:20:cc:1b: 02:06:ab:58:03:1a:52:0b:2c:68:d9:29:bc:d6:f5: 1c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:96:8F:5E:A6:A7:5A:B1:55:79:D4:27:25:F1:C9:E9:53:C9:C3:F9 X509v3 Authority Key Identifier: keyid:6D:B6:60:7D:A6:95:DD:09:E0:29:80:3A:2F:F2:62:5A:D8:83:82:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bbZgfaaV3QngKYA6L_JiWtiDguM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:58:28:08:a6:32:95:af:4b:08:ff:46:56:b1:e7:88:7d:06: 94:09:53:e7:0a:b5:36:9a:5f:23:5c:2b:4a:e1:4d:e1:b1:82: 1b:e6:21:cf:c5:b0:cd:70:8e:82:40:de:21:e2:8a:3d:c1:93: 75:12:a9:48:f6:30:5b:98:51:d1:24:f0:8a:2c:4d:df:f3:6e: 49:01:8b:91:16:21:6e:ae:3a:26:fc:74:03:85:4f:99:5e:57: 1b:c1:e0:09:ba:87:41:c5:b0:c6:4d:f5:c9:71:db:84:8d:30: 37:1f:78:02:91:44:27:e9:d7:7b:bb:42:bc:eb:6c:0c:4b:57: 3b:d5:de:ce:40:aa:e2:33:82:3f:1a:ca:d4:bf:08:0c:87:3d: f3:14:48:bc:bb:b5:95:c1:01:f6:14:c6:b5:a3:4b:11:61:74: c4:8d:43:2f:cc:d0:5d:8c:4d:ad:cc:41:d3:fb:5e:0a:f7:76: f1:60:2f:01:ed:e1:46:11:52:c7:60:4c:2c:0c:16:d8:c3:a0: 3b:48:a7:c1:08:30:b7:7e:9d:8d:cc:d4:54:22:b8:be:3a:94: df:95:9e:66:4f:7c:bc:99:19:a7:55:8a:1a:9f:8b:9c:3c:b1: 90:54:96:8d:5e:0b:0a:94:61:1b:38:65:30:13:fa:64:40:8e: c4:86:a2:8a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NDNGODExMC8GA1UEBRMoNkRCNjYwN0RBNjk1REQwOUUwMjk4MDNBMkZGMjYyNUFE ODgzODJFMzAeFw0yNTA0MDMwNjE1NTJaFw0yNTA0MTAwNjE1NTJaMBgxFjAUBgNV BAMTDTY3ZWUyNzk4LTMwNDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/hwPWiJPsGC9jBNmSLtu/Jukhi9yAwYWpLa4azHS8vovdDBeFMgw6DPBw077Z gqYnVv7RqYsXaZ9/bgF5pkw1XSp28nhdKgcIRTnnvIDffJjSfUl0spMbPBiqAh2/ qOzqgEznU6VR+ubo+oDMj28tliwPl1uKLxn0ta9txp9RcDjnEA6yeGydcdAgnNmB c0NpgrXdrRTOKvjTQPXwFIei5mvrhmSQuVQCWKxXgOCc6gbFjKe7Qqe6bCJHbsnw waJJcTzKHMCOtYamveQeBkQucY8I5iEiYDVu2JN4OToO985DV9eM0t63xZUPFiDM GwIGq1gDGlILLGjZKbzW9RxfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJJaPXqan WrFVedQnJfHJ6VPJw/kwHwYDVR0jBBgwFoAUbbZgfaaV3QngKYA6L/JiWtiDguMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0M0Y4L0Y3OTBDQzVBN0M2 QTExRUY5QTY4ODg1N0M0RjlBRTAyL2JiWmdmYWFWM1FuZ0tZQTZMX0ppV3RpRGd1 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYmJaZ2ZhYVYzUW5nS1lBNkxfSmlXdGlEZ3VNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0 M0Y4L0Y3OTBDQzVBN0M2QTExRUY5QTY4ODg1N0M0RjlBRTAyL2JiWmdmYWFWM1Fu Z0tZQTZMX0ppV3RpRGd1TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHVYKAimMpWvSwj/Rlax54h9BpQJU+cKtTaaXyNcK0rhTeGxghvmIc/F sM1wjoJA3iHiij3Bk3USqUj2MFuYUdEk8IosTd/zbkkBi5EWIW6uOib8dAOFT5le VxvB4Am6h0HFsMZN9clx24SNMDcfeAKRRCfp13u7QrzrbAxLVzvV3s5AquIzgj8a ytS/CAyHPfMUSLy7tZXBAfYUxrWjSxFhdMSNQy/M0F2MTa3MQdP7Xgr3dvFgLwHt 4UYRUsdgTCwMFtjDoDtIp8EIMLd+nY3M1FQiuL46lN+VnmZPfLyZGadVihqfi5w8 sZBUlo1eCwqUYRs4ZTAT+mRAjsSGooo= -----END CERTIFICATE-----Generated at Fri Apr 4 22:32:12 2025 by rpki-client