$ rpki-client -vvf rpki.apnic.net/member_repository/A9181380/0DF3B39A3EFB11EDB7DA7875C4F9AE02/bC3jjX43M-CH3e95d-MYOcCt7jc.mft File: bC3jjX43M-CH3e95d-MYOcCt7jc.mft (raw, json) Hash identifier: gVp9FBKoau6OpUguz6MSiJx7QCDvFT01bDDZNPvP5bA= Subject key identifier: F5:FC:BB:AA:E7:9B:6D:AD:57:EC:79:41:30:6A:44:B3:57:52:05:76 Authority key identifier: 6C:2D:E3:8D:7E:37:33:E0:87:DD:EF:79:77:E3:18:39:C0:AD:EE:37 Certificate issuer: /CN=A9181380/serialNumber=6C2DE38D7E3733E087DDEF7977E31839C0ADEE37 Certificate serial: 01E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bC3jjX43M-CH3e95d-MYOcCt7jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181380/0DF3B39A3EFB11EDB7DA7875C4F9AE02/bC3jjX43M-CH3e95d-MYOcCt7jc.mft Manifest number: 01E2 Signing time: Fri 11 Apr 2025 02:04:58 +0000 Manifest this update: Fri 11 Apr 2025 02:04:57 +0000 Manifest next update: Fri 18 Apr 2025 02:04:57 +0000 Files and hashes: 1: bC3jjX43M-CH3e95d-MYOcCt7jc.crl (hash: U72fOr7s4gssvsqH+glC+GDHCmfVZt1B5cA6JB48e54=) 2: 164993A63FBA11EDA5387132C4F9AE02.roa (hash: XYc2mxLenXQc+O8B80ZFK5EpIFxtXO429dywGYqqozs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181380/0DF3B39A3EFB11EDB7DA7875C4F9AE02/bC3jjX43M-CH3e95d-MYOcCt7jc.crl rsync://rpki.apnic.net/member_repository/A9181380/0DF3B39A3EFB11EDB7DA7875C4F9AE02/bC3jjX43M-CH3e95d-MYOcCt7jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bC3jjX43M-CH3e95d-MYOcCt7jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 02:04:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 486 (0x1e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181380, serialNumber=6C2DE38D7E3733E087DDEF7977E31839C0ADEE37 Validity Not Before: Apr 11 02:04:57 2025 GMT Not After : Apr 18 02:04:57 2025 GMT Subject: CN=67f878ca-fca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a6:a6:46:66:4f:4d:57:85:12:74:36:19:c4: 31:2f:69:e0:9a:5e:fb:af:38:34:ed:5c:d8:3f:74: da:ed:61:28:08:b7:a7:42:76:27:28:1b:61:55:f2: 81:00:d5:72:c9:95:44:c9:44:11:6e:09:5b:2c:b3: 96:3a:4b:ab:ae:da:11:6f:36:96:79:23:7f:9e:a9: a7:2d:8f:6c:1f:3c:52:21:8c:65:7c:20:8b:20:40: 26:73:4a:11:63:5b:28:17:9d:d0:19:bb:02:83:77: bf:b5:5d:c4:90:9e:b8:c8:8f:b7:f9:ca:3f:ce:1d: 4c:97:f6:4f:24:3e:f9:53:64:46:3b:48:b4:48:a5: a5:5f:5d:50:fa:0b:dc:cc:e3:48:e6:33:40:30:a7: d9:e4:f5:17:1d:75:99:23:6c:50:6c:9f:38:cf:36: 7f:3a:b2:f8:dc:74:3d:71:12:6b:6b:3d:24:7f:f1: 2c:b4:15:28:ac:f4:e7:25:15:e9:5c:cf:9f:32:3c: 70:60:84:e7:07:7e:3d:3a:e7:dc:ce:27:30:a2:eb: 38:6a:7d:1c:76:4f:99:00:13:37:a2:41:c8:29:08: 11:d1:c2:d3:33:b4:c3:34:3e:52:c5:6a:cd:4d:62: d3:90:01:99:a8:1e:c8:5c:60:4f:2e:07:f2:2e:15: 8b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:FC:BB:AA:E7:9B:6D:AD:57:EC:79:41:30:6A:44:B3:57:52:05:76 X509v3 Authority Key Identifier: keyid:6C:2D:E3:8D:7E:37:33:E0:87:DD:EF:79:77:E3:18:39:C0:AD:EE:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181380/0DF3B39A3EFB11EDB7DA7875C4F9AE02/bC3jjX43M-CH3e95d-MYOcCt7jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bC3jjX43M-CH3e95d-MYOcCt7jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181380/0DF3B39A3EFB11EDB7DA7875C4F9AE02/bC3jjX43M-CH3e95d-MYOcCt7jc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:78:e1:15:4b:38:89:06:57:59:70:2b:d0:a7:b5:40:11:d2: 05:6c:88:1b:0b:ce:4c:0c:32:0b:c4:4b:cc:cd:49:c4:7a:c0: 3c:5c:15:ac:24:d2:1a:0d:1e:38:ea:f5:df:8d:d9:04:26:91: fe:ef:e6:c9:38:e7:82:07:7e:47:7d:e3:b5:25:b1:4d:b7:e0: 80:7e:10:4c:ce:9f:df:7f:af:b2:a0:d4:ce:92:04:17:1d:ab: e7:38:c4:6c:24:80:bf:7c:59:4c:d3:69:42:1d:47:56:56:2b: 5a:03:d8:19:b1:69:08:ec:f0:25:3c:90:b9:c7:87:f8:4f:46: f4:73:64:08:10:15:b6:d2:bf:91:ef:47:94:89:bf:d3:36:b8: c7:9f:42:50:3a:5c:c0:53:53:32:54:39:ff:c0:f1:44:87:32: b4:ec:e1:a6:58:64:65:4d:3d:b4:88:e5:d3:41:fb:45:e5:70: 41:32:88:76:7f:4e:c6:ea:1d:af:0e:fa:e9:09:82:08:2d:a1: 25:a4:1d:1e:a5:da:ea:a3:1f:9f:83:2b:bc:52:74:92:8b:bb: 2e:b3:d3:46:6a:43:f4:69:db:35:99:b7:a5:14:fc:19:5b:21: 00:55:0f:a0:fc:95:83:c8:b7:4f:6b:da:2f:a0:0b:d8:00:06: 5a:51:64:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEzODAxMTAvBgNVBAUTKDZDMkRFMzhEN0UzNzMzRTA4N0RERUY3OTc3RTMxODM5 QzBBREVFMzcwHhcNMjUwNDExMDIwNDU3WhcNMjUwNDE4MDIwNDU3WjAYMRYwFAYD VQQDEw02N2Y4NzhjYS1mY2EzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt6amRmZPTVeFEnQ2GcQxL2ngml77rzg07VzYP3Ta7WEoCLenQnYnKBthVfKB ANVyyZVEyUQRbglbLLOWOkurrtoRbzaWeSN/nqmnLY9sHzxSIYxlfCCLIEAmc0oR Y1soF53QGbsCg3e/tV3EkJ64yI+3+co/zh1Ml/ZPJD75U2RGO0i0SKWlX11Q+gvc zONI5jNAMKfZ5PUXHXWZI2xQbJ84zzZ/OrL43HQ9cRJraz0kf/EstBUorPTnJRXp XM+fMjxwYITnB349Oufczicwous4an0cdk+ZABM3okHIKQgR0cLTM7TDND5SxWrN TWLTkAGZqB7IXGBPLgfyLhWLYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPX8u6rn m22tV+x5QTBqRLNXUgV2MB8GA1UdIwQYMBaAFGwt441+NzPgh93veXfjGDnAre43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTM4MC8wREYzQjM5QTNF RkIxMUVEQjdEQTc4NzVDNEY5QUUwMi9iQzNqalg0M00tQ0gzZTk1ZC1NWU9jQ3Q3 amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JDM2pqWDQzTS1DSDNlOTVkLU1ZT2NDdDdqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTM4MC8wREYzQjM5QTNFRkIxMUVEQjdEQTc4NzVDNEY5QUUwMi9iQzNqalg0M00t Q0gzZTk1ZC1NWU9jQ3Q3amMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASeOEVSziJBldZcCvQp7VAEdIFbIgbC85MDDILxEvMzUnEesA8XBWs JNIaDR446vXfjdkEJpH+7+bJOOeCB35HfeO1JbFNt+CAfhBMzp/ff6+yoNTOkgQX HavnOMRsJIC/fFlM02lCHUdWVitaA9gZsWkI7PAlPJC5x4f4T0b0c2QIEBW20r+R 70eUib/TNrjHn0JQOlzAU1MyVDn/wPFEhzK07OGmWGRlTT20iOXTQftF5XBBMoh2 f07G6h2vDvrpCYIILaElpB0epdrqox+fgyu8UnSSi7sus9NGakP0ads1mbelFPwZ WyEAVQ+g/JWDyLdPa9ovoAvYAAZaUWSH -----END CERTIFICATE-----Generated at Sat Apr 12 19:12:01 2025 by rpki-client