$ rpki-client -vvf rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.mft File: BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.mft (raw, json) Hash identifier: dK2AkBXWCbEj3j+xiZHQwl7T+7/iob6MyPFjNyugoyo= Subject key identifier: C7:40:99:FD:B4:C3:49:83:0C:AF:4D:A5:DE:9A:28:E2:31:10:09:77 Authority key identifier: 04:62:7D:CC:9B:80:84:2D:43:63:71:C4:CD:C7:3D:19:AB:7E:5D:BB Certificate issuer: /CN=A9196C96/serialNumber=04627DCC9B80842D436371C4CDC73D19AB7E5DBB Certificate serial: 0627 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.mft Manifest number: 0622 Signing time: Fri 04 Apr 2025 22:49:24 +0000 Manifest this update: Fri 04 Apr 2025 22:49:23 +0000 Manifest next update: Fri 11 Apr 2025 22:49:23 +0000 Files and hashes: 1: BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.crl (hash: P0xatDxpA/NaL2KkoQycerCyNjj3blxs0ybU4bL9hxU=) 2: D49D6040912311EB9DCD2A33C4F9AE02.roa (hash: aGdwS0nqIDPQmrDed9aL2d/6MVOmtEOC5VWnxIsYspE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.crl rsync://rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 22:49:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1575 (0x627) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196C96 Validity Not Before: Apr 4 22:49:23 2025 GMT Not After : Apr 11 22:49:23 2025 GMT Subject: CN=67f061f4-3c0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e5:77:70:4f:45:e3:0e:17:e2:05:af:07:b9: 41:05:2c:ba:3d:a6:a1:ea:bd:80:1c:db:44:8d:90: bf:58:57:c2:32:94:f2:ac:22:33:a3:63:87:3d:32: a5:b5:e0:50:9a:fc:0c:78:93:e9:27:fc:8e:9a:cc: 92:91:08:dc:a7:c6:5f:95:a5:34:05:a6:f8:22:8a: a4:0f:90:51:29:78:fd:8a:1c:80:bd:d3:c7:5d:c2: ad:a8:3b:56:f9:83:c2:ca:1a:f2:a4:c5:f6:23:7f: a9:3b:29:f7:79:ec:f1:1e:aa:6c:3d:2f:d0:66:21: 6b:fd:a9:e8:76:99:f8:86:2f:31:64:75:8d:21:ff: b6:e8:8f:89:28:b9:bc:63:34:c5:fc:c4:f4:43:40: ba:a7:00:f1:9b:34:f1:d6:7f:a5:7c:bd:58:00:52: b2:5c:fb:e9:f4:e2:22:21:35:50:0e:4d:d5:1e:b7: 50:8b:9e:69:4e:69:e2:2b:e1:44:53:f3:95:3b:d4: 30:28:07:a0:0f:50:d1:ea:96:46:81:5b:01:18:7f: cb:30:d0:9a:49:18:a5:1f:2a:0b:89:3e:19:84:b0: 89:50:67:aa:59:f5:a2:71:62:3a:8f:66:d7:ea:9c: f2:3d:7d:f8:a6:e0:f5:ca:ab:d7:69:a7:15:b0:7d: 60:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:40:99:FD:B4:C3:49:83:0C:AF:4D:A5:DE:9A:28:E2:31:10:09:77 X509v3 Authority Key Identifier: keyid:04:62:7D:CC:9B:80:84:2D:43:63:71:C4:CD:C7:3D:19:AB:7E:5D:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:c5:ea:90:03:30:2f:2a:33:17:63:81:90:09:37:26:03:5d: 41:4a:ff:6d:87:63:d7:60:bc:31:d2:18:fa:c3:d1:b5:15:7f: 43:5a:a1:f9:f9:c0:b4:f1:99:79:60:8a:76:5c:1f:ab:44:96: c7:48:45:83:71:9e:c6:79:ca:39:4c:a3:57:87:ad:83:b8:ae: ac:e7:9c:97:cc:93:58:ad:51:b9:3e:6f:ba:d7:d9:c4:3d:3e: 57:92:df:01:ef:18:f1:ee:74:03:a2:73:48:85:e9:36:b9:86: e4:25:67:c6:59:c4:7a:7d:d5:11:1a:ac:b4:dd:df:ea:6d:cb: 73:41:28:05:40:ef:c1:0e:9a:3f:21:79:a4:e6:27:a7:e3:d6: 43:9d:fa:84:bd:8d:8a:d3:66:be:4f:fa:b0:14:f9:65:3b:b8: 16:17:70:da:e3:46:64:3f:35:42:07:e5:ac:97:52:71:8e:cf: 57:b4:5d:3f:86:50:53:b7:23:7e:26:56:58:4f:4d:7e:8f:52: e5:98:28:ce:c4:7e:73:c0:7c:49:bb:fa:03:c2:98:ab:86:b1: c4:94:1b:c5:62:7a:3a:71:12:fa:60:55:8f:ed:b5:a0:19:85: 77:81:e2:8b:e5:fd:4a:66:27:7b:6a:15:de:46:52:8e:9b:9d: 7b:c6:aa:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZDOTYxMTAvBgNVBAUTKDA0NjI3RENDOUI4MDg0MkQ0MzYzNzFDNENEQzczRDE5 QUI3RTVEQkIwHhcNMjUwNDA0MjI0OTIzWhcNMjUwNDExMjI0OTIzWjAYMRYwFAYD VQQDEw02N2YwNjFmNC0zYzBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4+V3cE9F4w4X4gWvB7lBBSy6Paah6r2AHNtEjZC/WFfCMpTyrCIzo2OHPTKl teBQmvwMeJPpJ/yOmsySkQjcp8ZflaU0Bab4IoqkD5BRKXj9ihyAvdPHXcKtqDtW +YPCyhrypMX2I3+pOyn3eezxHqpsPS/QZiFr/anodpn4hi8xZHWNIf+26I+JKLm8 YzTF/MT0Q0C6pwDxmzTx1n+lfL1YAFKyXPvp9OIiITVQDk3VHrdQi55pTmniK+FE U/OVO9QwKAegD1DR6pZGgVsBGH/LMNCaSRilHyoLiT4ZhLCJUGeqWfWicWI6j2bX 6pzyPX34puD1yqvXaacVsH1g1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMdAmf20 w0mDDK9Npd6aKOIxEAl3MB8GA1UdIwQYMBaAFARifcybgIQtQ2NxxM3HPRmrfl27 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkM5Ni9BOEFFMEY5NDkw NDYxMUVCQkI4NEIyMjdDNEY5QUUwMi9CR0o5ekp1QWhDMURZM0hFemNjOUdhdC1Y YnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JHSjl6SnVBaEMxRFkzSEV6Y2M5R2F0LVhicy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkM5Ni9BOEFFMEY5NDkwNDYxMUVCQkI4NEIyMjdDNEY5QUUwMi9CR0o5ekp1QWhD MURZM0hFemNjOUdhdC1YYnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAexeqQAzAvKjMXY4GQCTcmA11BSv9th2PXYLwx0hj6w9G1FX9DWqH5 +cC08Zl5YIp2XB+rRJbHSEWDcZ7Geco5TKNXh62DuK6s55yXzJNYrVG5Pm+619nE PT5Xkt8B7xjx7nQDonNIhek2uYbkJWfGWcR6fdURGqy03d/qbctzQSgFQO/BDpo/ IXmk5ien49ZDnfqEvY2K02a+T/qwFPllO7gWF3Da40ZkPzVCB+Wsl1Jxjs9XtF0/ hlBTtyN+JlZYT01+j1LlmCjOxH5zwHxJu/oDwpirhrHElBvFYno6cRL6YFWP7bWg GYV3geKL5f1KZid7ahXeRlKOm517xqpV -----END CERTIFICATE-----Generated at Sun Apr 6 06:51:57 2025 by rpki-client