$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft File: BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft (raw, json) Hash identifier: b90ZOMZAJyQdxFEB1ieGhYfT+z7RYGQz2rt6XVtkPow= Subject key identifier: B9:90:B4:73:7F:D9:D1:F7:1E:0E:21:C3:29:D2:64:B9:44:9C:EA:92 Authority key identifier: 05:A3:36:F6:46:C6:83:37:89:B6:AE:7C:92:07:2B:7F:94:D9:DC:29 Certificate issuer: /CN=A9199B85/serialNumber=05A336F646C6833789B6AE7C92072B7F94D9DC29 Certificate serial: DA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BaM29kbGgzeJtq58kgcrf5TZ3Ck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft Manifest number: DA Signing time: Sat 05 Apr 2025 01:42:26 +0000 Manifest this update: Sat 05 Apr 2025 01:42:25 +0000 Manifest next update: Sat 12 Apr 2025 01:42:25 +0000 Files and hashes: 1: BaM29kbGgzeJtq58kgcrf5TZ3Ck.crl (hash: OFUxNsWgyo6j7sCve8R1dFmy7yVnwSphnwUbw6Xj7ks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.crl rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BaM29kbGgzeJtq58kgcrf5TZ3Ck.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 01:42:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 218 (0xda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199B85 Validity Not Before: Apr 5 01:42:25 2025 GMT Not After : Apr 12 01:42:25 2025 GMT Subject: CN=67f08a81-468f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:94:31:0e:0a:4a:51:c6:a7:39:ec:1c:a0:c8: 41:a3:8d:6f:16:df:2e:ef:a1:f1:26:30:08:0e:9b: 6f:54:96:d2:9f:0f:9c:93:02:35:14:20:72:f3:3e: 1b:8d:0b:d5:f0:cc:c8:c7:32:77:92:57:18:48:4c: 21:72:35:cc:b7:e1:fe:72:fe:a2:7e:08:10:00:8e: 55:1a:3b:ac:d8:b9:e7:b7:1a:b3:e3:cb:b7:e4:94: 86:1e:54:15:c3:d9:3a:2e:61:ca:2a:d6:33:5e:a1: 90:a6:30:7e:ea:fb:13:a0:bd:62:4b:c8:ff:7a:69: 30:3f:35:46:57:31:d7:cb:5c:0b:b9:71:17:62:d4: 04:cc:b8:18:2a:39:13:d2:bf:93:ec:d6:0a:e2:8b: 34:63:1e:e4:3f:24:cc:11:3d:00:14:1d:05:66:85: e0:2c:c5:7d:18:47:c0:1d:6c:5d:15:d2:7c:a7:ee: 24:0c:8e:ee:bc:7c:47:14:45:de:5d:21:3a:c9:78: f1:16:b7:d3:9d:68:18:86:69:47:9d:97:12:0f:f9: 05:07:4b:38:30:a6:ab:5a:24:30:b3:17:93:93:d0: 9b:e6:ed:32:a1:1a:ad:a9:03:00:58:dc:51:6c:b5: cf:d7:8b:b5:6f:85:10:28:cb:91:bb:c2:97:3e:38: 4d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:90:B4:73:7F:D9:D1:F7:1E:0E:21:C3:29:D2:64:B9:44:9C:EA:92 X509v3 Authority Key Identifier: keyid:05:A3:36:F6:46:C6:83:37:89:B6:AE:7C:92:07:2B:7F:94:D9:DC:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BaM29kbGgzeJtq58kgcrf5TZ3Ck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:4b:7c:f0:84:e5:e1:8b:7e:b4:c6:e3:c2:d9:b0:11:51:e0: 87:73:60:40:5d:26:e4:7a:cf:cc:42:8c:35:05:58:b4:87:2e: 6b:6c:38:11:bf:6b:7e:9f:1d:da:f5:58:e9:ba:b2:e2:04:74: 57:d0:04:8c:4b:cf:8d:45:1d:49:01:97:c3:21:f1:e6:be:a8: 95:06:5c:52:78:d4:25:57:16:6a:a0:67:eb:98:25:9b:52:84: 95:b1:aa:57:f7:25:fd:e6:8c:20:cc:ce:26:3f:28:58:76:84: 23:67:15:ae:ea:49:f8:59:ce:81:a6:ac:8d:c8:65:35:57:a4: 1c:3e:98:50:3d:ea:fa:ba:4e:1b:23:51:b3:4d:4c:13:db:7c: 19:b9:ff:94:cd:23:d7:6b:b1:64:5d:72:b1:e7:28:34:16:b7: e8:4d:c3:51:15:e2:17:e7:63:36:4e:54:b5:a4:89:1a:eb:b9: 52:b7:45:1e:3a:82:67:f0:7d:60:0b:4f:9d:f5:00:31:3e:0d: 1a:52:71:4e:6c:6a:8b:84:9a:3a:53:ea:33:77:bc:0b:ad:b1: 22:bd:8b:80:8c:8d:8b:62:5c:12:de:9f:18:89:5f:0e:ae:6b: 29:79:ec:0e:db:9d:6a:11:11:72:b4:a4:90:64:e3:3f:af:38: 3f:9f:0c:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCODUxMTAvBgNVBAUTKDA1QTMzNkY2NDZDNjgzMzc4OUI2QUU3QzkyMDcyQjdG OTREOURDMjkwHhcNMjUwNDA1MDE0MjI1WhcNMjUwNDEyMDE0MjI1WjAYMRYwFAYD VQQDEw02N2YwOGE4MS00NjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw5QxDgpKUcanOewcoMhBo41vFt8u76HxJjAIDptvVJbSnw+ckwI1FCBy8z4b jQvV8MzIxzJ3klcYSEwhcjXMt+H+cv6ifggQAI5VGjus2Lnntxqz48u35JSGHlQV w9k6LmHKKtYzXqGQpjB+6vsToL1iS8j/emkwPzVGVzHXy1wLuXEXYtQEzLgYKjkT 0r+T7NYK4os0Yx7kPyTMET0AFB0FZoXgLMV9GEfAHWxdFdJ8p+4kDI7uvHxHFEXe XSE6yXjxFrfTnWgYhmlHnZcSD/kFB0s4MKarWiQwsxeTk9Cb5u0yoRqtqQMAWNxR bLXP14u1b4UQKMuRu8KXPjhNnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLmQtHN/ 2dH3Hg4hwynSZLlEnOqSMB8GA1UdIwQYMBaAFAWjNvZGxoM3ibaufJIHK3+U2dwp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUI4NS83RDg2QTIzOEM2 MTUxMUVFQTcxOEUzMzhDNEY5QUUwMi9CYU0yOWtiR2d6ZUp0cTU4a2djcmY1VFoz Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JhTTI5a2JHZ3plSnRxNThrZ2NyZjVUWjNDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUI4NS83RDg2QTIzOEM2MTUxMUVFQTcxOEUzMzhDNEY5QUUwMi9CYU0yOWtiR2d6 ZUp0cTU4a2djcmY1VFozQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVS3zwhOXhi360xuPC2bARUeCHc2BAXSbkes/MQow1BVi0hy5rbDgR v2t+nx3a9VjpurLiBHRX0ASMS8+NRR1JAZfDIfHmvqiVBlxSeNQlVxZqoGfrmCWb UoSVsapX9yX95owgzM4mPyhYdoQjZxWu6kn4Wc6BpqyNyGU1V6QcPphQPer6uk4b I1GzTUwT23wZuf+UzSPXa7FkXXKx5yg0FrfoTcNRFeIX52M2TlS1pIka67lSt0Ue OoJn8H1gC0+d9QAxPg0aUnFObGqLhJo6U+ozd7wLrbEivYuAjI2LYlwS3p8YiV8O rmspeewO251qERFytKSQZOM/rzg/nwy+ -----END CERTIFICATE-----Generated at Mon Apr 7 01:43:42 2025 by rpki-client