$ rpki-client -vvf rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.mft File: BXOVtIePsaZ_y61YJhe3uq8sMf8.mft (raw, json) Hash identifier: i5WQoCdWFmPE3KPeCtNQyfgIxxcPzmlhXEozC8sJcZs= Subject key identifier: 2F:65:3E:08:E3:16:C7:3C:9F:A3:E3:50:8C:D3:A3:3B:A1:8C:E7:7F Authority key identifier: 05:73:95:B4:87:8F:B1:A6:7F:CB:AD:58:26:17:B7:BA:AF:2C:31:FF Certificate issuer: /CN=A9176C8F/serialNumber=057395B4878FB1A67FCBAD582617B7BAAF2C31FF Certificate serial: 8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.mft Manifest number: 82 Signing time: Sat 29 Mar 2025 06:14:50 +0000 Manifest this update: Sat 29 Mar 2025 06:14:50 +0000 Manifest next update: Sat 05 Apr 2025 06:14:50 +0000 Files and hashes: 1: BXOVtIePsaZ_y61YJhe3uq8sMf8.crl (hash: iSb4/gH763DnGxFkVQZ6wdqV4W0TH/iixyK93IHphXQ=) 2: 7EFD7D08A10211EFBF75467FC4F9AE02.roa (hash: mGmTdvdeQ6LXmazTZifM5k7qicxGPPhPxrXFLCv01wE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.crl rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 143 (0x8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176C8F Validity Not Before: Mar 29 06:14:50 2025 GMT Not After : Apr 5 06:14:50 2025 GMT Subject: CN=67e78fda-e964 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:56:8d:f2:bb:9e:30:ce:0f:f2:ce:b5:66:b1: 74:da:fd:03:eb:03:cc:41:96:b6:7f:5d:44:1f:60: 56:89:b5:3e:c0:b3:0b:b2:7f:03:4b:d5:99:c9:fa: b7:0d:23:5b:f6:62:d9:18:47:94:1f:0f:7e:af:3b: fd:53:98:24:bf:22:b5:0f:d4:bb:e4:82:04:93:b0: 36:a3:4e:89:a0:6c:fa:ac:2a:8a:b2:40:56:f2:1b: 4d:6b:c6:6d:32:64:08:10:15:1c:6b:24:01:81:c4: fc:92:94:73:d4:3e:ab:15:9b:3f:b4:90:f1:50:25: 68:89:82:32:b0:61:bf:ca:e6:c2:e3:a1:d7:f8:fb: 80:49:17:2e:f8:80:d5:79:74:6d:51:c5:1a:25:c0: 4e:59:b0:13:e7:a2:9e:5d:c8:11:09:7b:4a:1b:31: f8:a6:e8:b7:5c:96:98:96:da:41:db:dd:f0:d0:00: de:f5:a0:13:f1:fc:c5:29:57:04:71:51:40:e1:58: bd:aa:6c:f4:a5:9d:e9:ff:24:38:b9:ef:fe:72:eb: 98:1f:db:15:4d:98:ee:03:1c:6a:91:3b:22:af:4b: 5d:3a:47:43:90:40:c0:cb:8b:16:13:c2:30:17:16: b6:fc:58:86:e3:94:22:23:55:fe:77:ce:9c:6a:26: a7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:65:3E:08:E3:16:C7:3C:9F:A3:E3:50:8C:D3:A3:3B:A1:8C:E7:7F X509v3 Authority Key Identifier: keyid:05:73:95:B4:87:8F:B1:A6:7F:CB:AD:58:26:17:B7:BA:AF:2C:31:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:10:b8:b3:68:a9:cf:52:fb:12:a2:95:14:17:71:c0:b1:90: 8e:19:e0:30:5b:7d:1d:11:89:b1:79:36:5c:b6:0e:b3:80:11: ce:e0:74:7e:5c:10:ca:c0:bd:dc:77:2a:17:17:0e:b2:7d:8b: 4c:0a:56:58:ae:14:ec:f4:70:3b:ba:23:fe:be:d5:75:b7:29: d1:c7:a0:b8:ac:f4:72:fe:60:9f:74:29:85:84:26:84:af:7a: 90:84:34:31:c6:9b:28:1c:17:01:49:6b:33:7c:bf:7a:5e:ca: 18:ac:99:ca:94:dc:63:35:14:11:47:bb:47:52:24:d1:5a:e5: d0:48:b6:9f:d6:6a:54:34:fa:f8:19:66:11:5f:66:d6:c8:31: 85:34:94:8a:16:f8:8a:4b:57:e0:4c:7a:8e:19:f5:8b:42:8a: dc:3a:8d:17:e3:d8:39:98:44:6b:1d:4a:a9:26:5b:01:6a:9f: 8f:bf:d7:ff:cd:7b:ea:fb:d5:d6:ef:c0:a7:f8:26:43:2e:d3: c3:12:cf:c9:66:63:50:b5:c8:ce:49:e7:31:29:82:5a:fa:a4: a6:ea:9b:ce:b7:b2:e2:cb:8e:e7:f5:fc:b4:b5:84:d9:e0:8f: 8e:9d:25:71:da:f5:c8:59:13:fc:e5:1f:42:48:29:cb:13:92: 65:84:8d:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzZDOEYxMTAvBgNVBAUTKDA1NzM5NUI0ODc4RkIxQTY3RkNCQUQ1ODI2MTdCN0JB QUYyQzMxRkYwHhcNMjUwMzI5MDYxNDUwWhcNMjUwNDA1MDYxNDUwWjAYMRYwFAYD VQQDEw02N2U3OGZkYS1lOTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVaN8rueMM4P8s61ZrF02v0D6wPMQZa2f11EH2BWibU+wLMLsn8DS9WZyfq3 DSNb9mLZGEeUHw9+rzv9U5gkvyK1D9S75IIEk7A2o06JoGz6rCqKskBW8htNa8Zt MmQIEBUcayQBgcT8kpRz1D6rFZs/tJDxUCVoiYIysGG/yubC46HX+PuASRcu+IDV eXRtUcUaJcBOWbAT56KeXcgRCXtKGzH4pui3XJaYltpB293w0ADe9aAT8fzFKVcE cVFA4Vi9qmz0pZ3p/yQ4ue/+cuuYH9sVTZjuAxxqkTsir0tdOkdDkEDAy4sWE8Iw Fxa2/FiG45QiI1X+d86caian3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC9lPgjj Fsc8n6PjUIzTozuhjOd/MB8GA1UdIwQYMBaAFAVzlbSHj7Gmf8utWCYXt7qvLDH/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkM4Ri9GQTBFMDVBNDZC NUExMUVGQkM5OTkyNUNDNEY5QUUwMi9CWE9WdEllUHNhWl95NjFZSmhlM3VxOHNN ZjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JYT1Z0SWVQc2FaX3k2MVlKaGUzdXE4c01mOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NkM4Ri9GQTBFMDVBNDZCNUExMUVGQkM5OTkyNUNDNEY5QUUwMi9CWE9WdEllUHNh Wl95NjFZSmhlM3VxOHNNZjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApELizaKnPUvsSopUUF3HAsZCOGeAwW30dEYmxeTZctg6zgBHO4HR+ XBDKwL3cdyoXFw6yfYtMClZYrhTs9HA7uiP+vtV1tynRx6C4rPRy/mCfdCmFhCaE r3qQhDQxxpsoHBcBSWszfL96XsoYrJnKlNxjNRQRR7tHUiTRWuXQSLaf1mpUNPr4 GWYRX2bWyDGFNJSKFviKS1fgTHqOGfWLQorcOo0X49g5mERrHUqpJlsBap+Pv9f/ zXvq+9XW78Cn+CZDLtPDEs/JZmNQtcjOSecxKYJa+qSm6pvOt7Liy47n9fy0tYTZ 4I+OnSVx2vXIWRP85R9CSCnLE5JlhI1d -----END CERTIFICATE-----Generated at Fri Apr 4 22:10:33 2025 by rpki-client