$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.mft File: bjPVE5klw9tNCFk3zmms03vqeU0.mft (raw, json) Hash identifier: rliN/G81FO40tE47EuQb2pjACQVlBgusOKcyIFcFFhM= Subject key identifier: 52:44:E4:B1:45:B0:90:AE:22:C2:FE:4D:AF:75:E1:08:1F:32:94:F7 Authority key identifier: 6E:33:D5:13:99:25:C3:DB:4D:08:59:37:CE:69:AC:D3:7B:EA:79:4D Certificate issuer: /CN=A91A8CD2/serialNumber=6E33D5139925C3DB4D085937CE69ACD37BEA794D Certificate serial: 056F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjPVE5klw9tNCFk3zmms03vqeU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.mft Manifest number: 056B Signing time: Thu 10 Apr 2025 23:16:27 +0000 Manifest this update: Thu 10 Apr 2025 23:16:26 +0000 Manifest next update: Thu 17 Apr 2025 23:16:26 +0000 Files and hashes: 1: bjPVE5klw9tNCFk3zmms03vqeU0.crl (hash: wlAjqAxn0ZnAPzZqmBIiAF2vHC296ZZwJFY8oF7ip1U=) 2: 5D10DEF0D8E811EB8ACD3C66C4F9AE02.roa (hash: l/rvxQeqO+VdRHgLRLz7RrPQYKHzDkdt1MLwmoA9TZg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.crl rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjPVE5klw9tNCFk3zmms03vqeU0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 23:16:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1391 (0x56f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8CD2, serialNumber=6E33D5139925C3DB4D085937CE69ACD37BEA794D Validity Not Before: Apr 10 23:16:26 2025 GMT Not After : Apr 17 23:16:26 2025 GMT Subject: CN=67f8514b-6ae0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e7:a1:14:3f:35:0d:98:06:d9:fe:9f:23:4e: ea:81:32:ef:6b:fc:b2:3c:0b:79:83:3d:33:fd:3e: 9b:7d:78:ee:96:7b:61:18:6a:44:5c:e9:90:2f:40: 28:8b:08:97:c5:71:8f:25:bf:da:a4:d6:47:c9:04: 06:01:e9:06:e3:de:93:c3:15:55:fb:cc:f9:7c:d5: f1:00:98:66:03:67:15:2a:73:04:c0:1f:8c:1f:e6: ce:ea:d4:ca:05:42:f1:7a:e1:0c:ac:05:08:a6:45: 58:10:42:2d:87:57:6c:63:43:52:92:20:64:40:b9: 87:e4:fa:f3:a8:0a:4d:70:a3:15:29:3a:5c:72:3d: 94:1a:54:f4:8d:ad:5c:1c:c3:21:35:c6:10:b4:60: 67:8d:48:bd:a9:05:9e:37:03:9e:bc:8a:45:f1:17: 40:ed:57:cf:85:d3:ff:3a:63:38:f3:02:c0:31:78: f2:8d:02:60:11:86:8a:10:41:97:f1:2e:96:cb:ee: b0:9c:23:65:1c:bb:f5:ba:b1:7e:b1:c6:fd:d6:cf: 0b:1f:a5:eb:c2:6f:44:6a:ab:f1:78:e5:0e:26:ee: 95:c8:a4:a8:78:0c:0e:b7:4b:cc:22:fa:df:15:35: a2:70:24:5e:69:0c:f2:cd:cf:b3:71:e5:8f:18:19: 7b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:44:E4:B1:45:B0:90:AE:22:C2:FE:4D:AF:75:E1:08:1F:32:94:F7 X509v3 Authority Key Identifier: keyid:6E:33:D5:13:99:25:C3:DB:4D:08:59:37:CE:69:AC:D3:7B:EA:79:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjPVE5klw9tNCFk3zmms03vqeU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:ea:9f:50:01:59:60:21:47:13:d7:30:ea:45:ab:54:24:88: 6f:a7:b9:99:63:21:4f:24:1a:66:6b:3f:3f:6a:d9:3b:64:63: 61:e8:32:b2:ad:dd:4d:00:8c:76:fa:f6:27:b5:e4:af:23:06: a4:cd:e1:1a:c9:82:c7:06:1e:76:7d:81:c7:fa:91:4c:a7:56: b8:d8:78:d0:60:e9:30:c3:c6:0f:bc:7f:d5:8f:81:8e:c5:eb: 8b:a7:b4:ee:c8:e6:9b:53:5f:f3:23:c9:72:67:ff:ba:22:30: 28:a8:d3:20:90:7f:dd:ef:b8:47:7c:9e:0d:a4:d4:da:4c:48: cc:1a:e0:c1:8f:8b:00:c7:ae:f9:10:79:af:ac:4e:34:e5:af: 84:a3:9e:b8:60:09:5e:8e:bd:40:1d:61:93:8e:58:4d:e2:08: 78:5f:2a:18:a5:ca:bc:40:09:bc:6c:36:e3:eb:70:b1:f3:b9: 72:94:89:1e:4a:bf:fe:59:99:9b:6a:aa:0d:5f:67:ed:ee:4d: cd:7e:73:d1:47:6e:0d:d2:17:b1:06:27:5e:eb:ef:e5:77:a3: 33:fe:f6:76:16:71:b0:72:df:31:0d:be:1b:29:ea:3f:5a:ee: a0:08:bd:fe:0d:07:20:e7:f6:b9:fc:9b:0e:b0:cf:76:65:de: 1a:94:07:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThDRDIxMTAvBgNVBAUTKDZFMzNENTEzOTkyNUMzREI0RDA4NTkzN0NFNjlBQ0Qz N0JFQTc5NEQwHhcNMjUwNDEwMjMxNjI2WhcNMjUwNDE3MjMxNjI2WjAYMRYwFAYD VQQDEw02N2Y4NTE0Yi02YWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxOehFD81DZgG2f6fI07qgTLva/yyPAt5gz0z/T6bfXjulnthGGpEXOmQL0Ao iwiXxXGPJb/apNZHyQQGAekG496TwxVV+8z5fNXxAJhmA2cVKnMEwB+MH+bO6tTK BULxeuEMrAUIpkVYEEIth1dsY0NSkiBkQLmH5PrzqApNcKMVKTpccj2UGlT0ja1c HMMhNcYQtGBnjUi9qQWeNwOevIpF8RdA7VfPhdP/OmM48wLAMXjyjQJgEYaKEEGX 8S6Wy+6wnCNlHLv1urF+scb91s8LH6Xrwm9EaqvxeOUOJu6VyKSoeAwOt0vMIvrf FTWicCReaQzyzc+zceWPGBl74wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFJE5LFF sJCuIsL+Ta914QgfMpT3MB8GA1UdIwQYMBaAFG4z1ROZJcPbTQhZN85prNN76nlN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOENEMi8wNDNDNkFGNEQ4 RTUxMUVCODA2ODVENUZDNEY5QUUwMi9ialBWRTVrbHc5dE5DRmszem1tczAzdnFl VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JqUFZFNWtsdzl0TkNGazN6bW1zMDN2cWVVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OENEMi8wNDNDNkFGNEQ4RTUxMUVCODA2ODVENUZDNEY5QUUwMi9ialBWRTVrbHc5 dE5DRmszem1tczAzdnFlVTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAT6p9QAVlgIUcT1zDqRatUJIhvp7mZYyFPJBpmaz8/atk7ZGNh6DKy rd1NAIx2+vYnteSvIwakzeEayYLHBh52fYHH+pFMp1a42HjQYOkww8YPvH/Vj4GO xeuLp7TuyOabU1/zI8lyZ/+6IjAoqNMgkH/d77hHfJ4NpNTaTEjMGuDBj4sAx675 EHmvrE405a+Eo564YAlejr1AHWGTjlhN4gh4XyoYpcq8QAm8bDbj63Cx87lylIke Sr/+WZmbaqoNX2ft7k3NfnPRR24N0hexBide6+/ld6Mz/vZ2FnGwct8xDb4bKeo/ Wu6gCL3+DQcg5/a5/JsOsM92Zd4alAcO -----END CERTIFICATE-----Generated at Sat Apr 12 18:32:17 2025 by rpki-client