$ rpki-client -vvf rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft File: bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft (raw, json) Hash identifier: Sc3VxY/1YO0Ey9IOrpeqfLvyeTvrTGT53ayNfSKMlcM= Subject key identifier: 8D:B7:9A:35:72:7D:81:10:8F:7C:28:84:B4:18:8C:79:FF:CC:CD:86 Authority key identifier: 6C:5A:58:9F:92:4C:E9:BE:D1:FD:89:F5:AF:F6:30:C9:27:57:44:20 Certificate issuer: /CN=A91A546E/serialNumber=6C5A589F924CE9BED1FD89F5AFF630C927574420 Certificate serial: 08FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft Manifest number: 08C6 Signing time: Fri 04 Apr 2025 20:44:24 +0000 Manifest this update: Fri 04 Apr 2025 20:44:24 +0000 Manifest next update: Fri 11 Apr 2025 20:44:24 +0000 Files and hashes: 1: bFpYn5JM6b7R_Yn1r_YwySdXRCA.crl (hash: gtfu6zMSb4jjr/MndkygTU3oBMeqpl2Pq+TxdHOxOM8=) 2: 46948AC87B8511EDB9E3E055C4F9AE02.roa (hash: ZxtXXsjPmgBn3QuaEolbOSfh14MSz6fJKNljAALoKTY=) 3: A69F92BE090911F084AAF925C4F9AE02.roa (hash: JAD+Foc1J+GOz5pKNPlHnr3Zrw5SjVxBWNoZZgDQ44M=) 4: 88252000B55C11ECA9565039C4F9AE02.roa (hash: ROM2aBA2uOLvGraWZ2OMfhtRxZ5DusfnSKSNI9N61E8=) 5: CCBF0CF6B55911EC9256FE19C4F9AE02.roa (hash: J9pnyjCXshJdQFSggqWmHXW0nySYEfDGHTCaX/EZOYk=) 6: CC3B5938B55911EC9256FE19C4F9AE02.roa (hash: Ejx3yVkwMIGPx4PH4VpagQp/pASvV9ahz0Vqhx7EKZo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.crl rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 20:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2299 (0x8fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A546E Validity Not Before: Apr 4 20:44:24 2025 GMT Not After : Apr 11 20:44:24 2025 GMT Subject: CN=67f044a8-dee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7f:d7:99:59:61:05:9f:f7:b4:fa:3b:22:a8: 08:2f:e6:6e:bb:20:7d:a7:71:ef:2c:66:fc:88:0c: 5b:06:6b:b4:40:a9:2d:ab:c0:46:54:ef:44:f7:29: 59:d2:58:9d:ae:00:cf:92:16:59:32:3c:e5:ae:7a: 4a:fb:6b:83:8e:7b:de:68:7f:bf:f3:8c:83:33:2a: bb:bc:31:75:46:e5:48:23:68:84:6a:4f:e8:c3:1c: 2b:e7:78:96:0d:80:65:04:8b:fe:46:8e:f4:8f:c7: bb:3f:93:1a:bf:89:97:c7:24:eb:51:b1:19:30:19: 91:73:89:d3:b3:6c:d6:f0:8c:9e:6a:26:46:5e:23: 31:c9:c1:22:c1:47:66:b7:a5:06:85:e2:a4:2c:ca: dd:ad:17:06:26:72:d3:1b:7e:b1:7d:d2:32:1d:19: 86:bb:f1:51:0a:63:86:f1:5b:f2:a8:f9:b1:93:f8: da:51:6c:69:64:04:2b:01:76:2c:1f:97:af:2d:59: b1:6a:27:14:62:01:9a:09:e7:1b:42:ed:82:6d:b1: 88:7f:7e:5a:52:78:81:29:f2:54:dc:95:25:fb:b5: 95:d8:82:88:70:88:c4:69:f7:b6:3e:45:1d:80:90: 42:f3:27:51:01:f7:4d:fa:7d:08:6d:32:df:18:0d: fc:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:B7:9A:35:72:7D:81:10:8F:7C:28:84:B4:18:8C:79:FF:CC:CD:86 X509v3 Authority Key Identifier: keyid:6C:5A:58:9F:92:4C:E9:BE:D1:FD:89:F5:AF:F6:30:C9:27:57:44:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:50:59:d9:fe:78:75:63:8e:de:9b:8d:6d:b9:20:1c:a5:03: 4d:82:18:c8:f6:26:c5:f6:47:df:1d:45:2a:f4:02:1d:59:ab: 81:15:b0:2e:bc:01:43:cf:15:35:e7:e3:3b:39:15:06:1c:f6: 16:c7:7a:fe:71:d1:fd:3b:78:b3:94:9a:52:ce:f8:ca:cf:09: 65:b0:22:10:62:92:5d:a3:3f:89:f6:6d:06:48:ba:e8:f0:4d: 5a:f2:4c:b2:97:ce:3d:8b:b3:25:1a:1a:ea:c7:7d:5b:f0:2a: 54:b9:5a:94:76:39:81:d5:6f:b6:b8:6a:f6:b0:85:09:58:d8: cd:e0:bd:c9:aa:49:e0:3c:30:4f:55:8d:3b:5b:aa:7c:14:5a: c6:64:a2:5b:fb:8c:c5:09:19:62:95:1f:4b:2a:49:a1:70:31: 23:97:63:33:c9:6d:9f:82:13:c0:98:e2:84:48:d0:87:1b:f9: 72:13:6c:68:50:bd:26:55:b7:ce:df:14:69:69:e3:bf:68:19: be:b8:43:d5:fd:88:d2:a6:48:1b:aa:7d:19:7a:5f:64:83:b8: 6c:44:96:34:a7:07:ea:25:72:b0:bb:9d:04:c7:db:dc:24:64: 25:ba:13:43:2f:5d:ec:7c:76:7b:7b:14:e7:ae:bd:79:1d:99: 45:00:ca:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU0NkUxMTAvBgNVBAUTKDZDNUE1ODlGOTI0Q0U5QkVEMUZEODlGNUFGRjYzMEM5 Mjc1NzQ0MjAwHhcNMjUwNDA0MjA0NDI0WhcNMjUwNDExMjA0NDI0WjAYMRYwFAYD VQQDEw02N2YwNDRhOC1kZWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwH/XmVlhBZ/3tPo7IqgIL+ZuuyB9p3HvLGb8iAxbBmu0QKktq8BGVO9E9ylZ 0lidrgDPkhZZMjzlrnpK+2uDjnveaH+/84yDMyq7vDF1RuVII2iEak/owxwr53iW DYBlBIv+Ro70j8e7P5Mav4mXxyTrUbEZMBmRc4nTs2zW8IyeaiZGXiMxycEiwUdm t6UGheKkLMrdrRcGJnLTG36xfdIyHRmGu/FRCmOG8VvyqPmxk/jaUWxpZAQrAXYs H5evLVmxaicUYgGaCecbQu2CbbGIf35aUniBKfJU3JUl+7WV2IKIcIjEafe2PkUd gJBC8ydRAfdN+n0IbTLfGA38hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI23mjVy fYEQj3wohLQYjHn/zM2GMB8GA1UdIwQYMBaAFGxaWJ+STOm+0f2J9a/2MMknV0Qg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTQ2RS8wQ0Q0MURBOEI3 NkExMUVBODE0RjUwODRDNEY5QUUwMi9iRnBZbjVKTTZiN1JfWW4xcl9Zd3lTZFhS Q0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JGcFluNUpNNmI3Ul9ZbjFyX1l3eVNkWFJDQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTQ2RS8wQ0Q0MURBOEI3NkExMUVBODE0RjUwODRDNEY5QUUwMi9iRnBZbjVKTTZi N1JfWW4xcl9Zd3lTZFhSQ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRUFnZ/nh1Y47em41tuSAcpQNNghjI9ibF9kffHUUq9AIdWauBFbAu vAFDzxU15+M7ORUGHPYWx3r+cdH9O3izlJpSzvjKzwllsCIQYpJdoz+J9m0GSLro 8E1a8kyyl849i7MlGhrqx31b8CpUuVqUdjmB1W+2uGr2sIUJWNjN4L3JqkngPDBP VY07W6p8FFrGZKJb+4zFCRlilR9LKkmhcDEjl2MzyW2fghPAmOKESNCHG/lyE2xo UL0mVbfO3xRpaeO/aBm+uEPV/YjSpkgbqn0Zel9kg7hsRJY0pwfqJXKwu50Ex9vc JGQluhNDL13sfHZ7exTnrr15HZlFAMpF -----END CERTIFICATE-----Generated at Sat Apr 5 07:10:11 2025 by rpki-client