$ rpki-client -vvf rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.mft File: BXtTd0A4JnigePW_KExyZ5S50TQ.mft (raw, json) Hash identifier: Y1ehBdWrFr87CoVvscCmeOy3ycYU01j+cNfMItz0dnE= Subject key identifier: 15:DB:EA:AA:27:49:6E:5B:27:59:35:75:4B:07:A9:85:4D:39:E5:1A Authority key identifier: 05:7B:53:77:40:38:26:78:A0:78:F5:BF:28:4C:72:67:94:B9:D1:34 Certificate issuer: /CN=A91992FA/serialNumber=057B537740382678A078F5BF284C726794B9D134 Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXtTd0A4JnigePW_KExyZ5S50TQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.mft Manifest number: 19 Signing time: Thu 03 Apr 2025 07:12:21 +0000 Manifest this update: Thu 03 Apr 2025 07:12:20 +0000 Manifest next update: Thu 10 Apr 2025 07:12:20 +0000 Files and hashes: 1: BXtTd0A4JnigePW_KExyZ5S50TQ.crl (hash: CBNhToB0SVEgA9FeQuu/7o7P1pHt+IMy7nw9HDMyjos=) 2: 44A28FACEFEC11EF80EC123DC4F9AE02.roa (hash: kIHtM5yk/7E77z9qFDfBUJpQm2RMukSPxAc1zKCnuxc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.crl rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXtTd0A4JnigePW_KExyZ5S50TQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 07:12:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91992FA Validity Not Before: Apr 3 07:12:20 2025 GMT Not After : Apr 10 07:12:20 2025 GMT Subject: CN=67ee34d4-7797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:80:70:ac:5f:98:c7:b6:f2:44:3f:4d:21:83: b6:40:a0:e1:26:2b:11:30:d5:b0:62:ea:a2:a8:e6: f4:84:2a:14:bb:91:24:80:f3:bd:26:ce:8c:ac:72: 2e:91:3a:d8:f8:8b:cf:af:8f:73:c0:51:ac:43:30: 29:c0:32:21:08:de:1f:cb:b2:2f:11:e0:95:72:07: 09:9f:37:29:e4:c2:92:cf:c4:2d:79:46:b3:e3:ef: 29:94:fc:57:5e:2d:c2:18:62:94:81:a6:54:31:c6: dc:f8:8c:9a:1f:21:ec:9f:30:94:45:68:f6:b5:de: 69:90:ee:99:c6:76:2a:c9:36:ab:23:ca:fa:55:81: 61:6f:45:17:e3:14:fd:73:e2:e0:35:32:80:75:ac: 72:9a:8d:a9:dd:8c:1f:be:0e:e1:83:25:67:e0:8b: 1c:76:58:fd:2e:ad:e2:56:f8:34:d7:c0:cd:3f:53: 6e:48:bb:08:49:ed:44:e6:44:c7:d7:72:b0:ef:17: 9e:19:ac:90:85:0a:dd:ac:fe:a0:18:40:cd:f6:0b: 9f:de:39:70:e4:60:35:be:e1:86:80:85:42:85:23: b7:0f:0b:a6:a2:8d:cb:27:a3:90:78:56:cd:5b:ce: d5:ac:98:14:cb:ac:00:04:e9:f7:52:02:41:c1:bd: 89:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:DB:EA:AA:27:49:6E:5B:27:59:35:75:4B:07:A9:85:4D:39:E5:1A X509v3 Authority Key Identifier: keyid:05:7B:53:77:40:38:26:78:A0:78:F5:BF:28:4C:72:67:94:B9:D1:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXtTd0A4JnigePW_KExyZ5S50TQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:69:87:ca:e2:15:90:d1:74:23:3f:89:2d:1d:b0:01:fa:b6: 52:d0:11:96:13:a6:02:dd:b9:77:dc:4a:ec:09:c6:71:b9:99: 56:63:9a:ca:a6:e4:36:43:e1:0a:fc:4a:f0:22:f4:32:c5:bd: f1:f8:84:4f:a6:53:23:8c:fc:0a:19:a9:47:8a:76:e1:6d:dd: 11:5c:1a:35:e9:bc:8b:d9:e4:8c:56:1c:da:d2:ff:1e:c6:30: 31:72:8d:5d:75:1f:8f:4c:24:c7:d5:68:04:74:31:d3:51:82: 95:5a:d6:a0:52:77:13:60:84:4b:6f:86:db:dc:6c:2f:d1:74: 1c:da:85:c4:f2:18:c5:c5:3c:ee:7d:bc:2e:e7:6e:e3:26:b0: 98:6e:be:f5:3a:f4:e9:27:4e:dc:43:63:3d:aa:a4:08:11:c0: f0:0a:00:ed:31:fe:34:a3:b4:6f:0b:89:e9:f9:0e:d2:38:81: b1:64:00:c3:f0:57:bb:db:7b:fd:cf:d1:a8:f7:8a:fa:64:8d: 27:13:8c:ac:e6:be:97:f7:de:00:51:c3:e3:c3:4d:f9:a3:43: 4f:e3:ba:e9:24:85:52:d3:e0:bf:54:5a:d1:06:6d:7e:2c:b9: 80:bc:4a:da:36:96:cf:d0:72:7d:83:b4:97:63:19:95:14:d5: e5:00:a2:a5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 OTJGQTExMC8GA1UEBRMoMDU3QjUzNzc0MDM4MjY3OEEwNzhGNUJGMjg0QzcyNjc5 NEI5RDEzNDAeFw0yNTA0MDMwNzEyMjBaFw0yNTA0MTAwNzEyMjBaMBgxFjAUBgNV BAMTDTY3ZWUzNGQ0LTc3OTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDagHCsX5jHtvJEP00hg7ZAoOEmKxEw1bBi6qKo5vSEKhS7kSSA870mzoysci6R Otj4i8+vj3PAUaxDMCnAMiEI3h/Lsi8R4JVyBwmfNynkwpLPxC15RrPj7ymU/Fde LcIYYpSBplQxxtz4jJofIeyfMJRFaPa13mmQ7pnGdirJNqsjyvpVgWFvRRfjFP1z 4uA1MoB1rHKajandjB++DuGDJWfgixx2WP0ureJW+DTXwM0/U25IuwhJ7UTmRMfX crDvF54ZrJCFCt2s/qAYQM32C5/eOXDkYDW+4YaAhUKFI7cPC6aijcsno5B4Vs1b ztWsmBTLrAAE6fdSAkHBvYlTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFdvqqidJ blsnWTV1SwephU055RowHwYDVR0jBBgwFoAUBXtTd0A4JnigePW/KExyZ5S50TQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5MkZBL0ZBNDZFMEQyRUUw MzExRUY5QzJCOEE0OUM0RjlBRTAyL0JYdFRkMEE0Sm5pZ2VQV19LRXh5WjVTNTBU US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQlh0VGQwQTRKbmlnZVBXX0tFeHlaNVM1MFRRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5 MkZBL0ZBNDZFMEQyRUUwMzExRUY5QzJCOEE0OUM0RjlBRTAyL0JYdFRkMEE0Sm5p Z2VQV19LRXh5WjVTNTBUUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIlph8riFZDRdCM/iS0dsAH6tlLQEZYTpgLduXfcSuwJxnG5mVZjmsqm 5DZD4Qr8SvAi9DLFvfH4hE+mUyOM/AoZqUeKduFt3RFcGjXpvIvZ5IxWHNrS/x7G MDFyjV11H49MJMfVaAR0MdNRgpVa1qBSdxNghEtvhtvcbC/RdBzahcTyGMXFPO59 vC7nbuMmsJhuvvU69OknTtxDYz2qpAgRwPAKAO0x/jSjtG8Lien5DtI4gbFkAMPw V7vbe/3P0aj3ivpkjScTjKzmvpf33gBRw+PDTfmjQ0/juukkhVLT4L9UWtEGbX4s uYC8Sto2ls/Qcn2DtJdjGZUU1eUAoqU= -----END CERTIFICATE-----Generated at Fri Apr 4 18:45:35 2025 by rpki-client