$ rpki-client -vvf rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft File: bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft (raw, json) Hash identifier: +0cSewJcpBvy2Dm7m58V4sxI3GCw5VdPUPxaZCSw25I= Subject key identifier: FE:7D:7F:2B:42:76:35:32:37:96:F4:A7:5B:5A:E3:86:54:6B:42:EB Authority key identifier: 6E:92:6B:CE:61:9E:4F:50:0A:BF:A4:24:FD:B0:76:4D:25:8C:AB:53 Certificate issuer: /CN=A91A91A2/serialNumber=6E926BCE619E4F500ABFA424FDB0764D258CAB53 Certificate serial: 09DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft Manifest number: 09D5 Signing time: Fri 18 Apr 2025 20:00:54 +0000 Manifest this update: Fri 18 Apr 2025 20:00:54 +0000 Manifest next update: Fri 25 Apr 2025 20:00:54 +0000 Files and hashes: 1: bpJrzmGeT1AKv6Qk_bB2TSWMq1M.crl (hash: bmqy7d9v+EoSaFcRSAply0ChbiDGbUMaomCk43vmOjs=) 2: 10238C387B1411EA8C690465C4F9AE02.roa (hash: 72pvQSlnT9rABWVd/v/7K5BYXphu+YLZZNPRawfEZ8Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.crl rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 20:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2525 (0x9dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A91A2, serialNumber=6E926BCE619E4F500ABFA424FDB0764D258CAB53 Validity Not Before: Apr 18 20:00:54 2025 GMT Not After : Apr 25 20:00:54 2025 GMT Subject: CN=6802af76-a4da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:7d:06:45:97:29:8b:15:ac:e5:ba:29:cc:6b: 7d:92:f8:1b:a0:6b:3f:6b:fa:27:51:64:70:22:c9: 24:33:cb:4c:25:dd:28:73:fa:f9:fa:7d:0e:1b:5d: 86:a4:38:e8:e3:0a:24:68:2f:b5:9b:f5:23:17:2f: 3f:35:d2:38:1a:73:2f:e2:ad:90:48:a8:e9:00:e8: ec:4d:a4:97:ee:0d:94:b8:fd:75:2f:6f:ce:f5:17: 7a:80:ef:9c:fb:7b:67:94:90:6a:23:0f:a3:3c:6a: 56:db:db:87:1b:55:ba:c2:f8:55:d6:45:58:d6:f8: 16:b9:a2:85:75:fc:57:1f:70:6f:20:e7:65:50:b7: 82:cd:c1:23:dd:16:7c:da:80:3a:7e:95:e2:90:c3: e5:59:5b:fb:35:a1:ea:1d:6b:67:78:39:57:de:a5: 40:d1:05:10:69:e9:ac:c5:71:fd:4b:ec:45:5e:90: 0d:28:45:87:1e:4e:37:9e:4d:48:77:cf:27:0a:3d: 8e:09:2b:c7:ca:4d:1c:2e:9c:41:85:c9:ca:25:98: be:d7:c8:a6:f9:81:ac:84:5b:ee:f5:37:73:9d:b1: 4d:2c:fe:a8:93:02:d2:d4:dc:d8:3e:fa:e7:a3:1b: df:de:fa:a6:04:2e:f0:2e:54:66:e3:42:0f:1b:09: 69:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:7D:7F:2B:42:76:35:32:37:96:F4:A7:5B:5A:E3:86:54:6B:42:EB X509v3 Authority Key Identifier: keyid:6E:92:6B:CE:61:9E:4F:50:0A:BF:A4:24:FD:B0:76:4D:25:8C:AB:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:6f:6a:a9:e5:fb:46:cb:8e:83:c1:03:dc:d8:ef:9b:cb:af: ad:c0:1f:18:e0:ae:45:d1:1a:1f:1c:ac:4d:48:6b:b0:1c:b1: a9:12:23:fb:05:6e:93:ac:5a:8e:94:3c:e0:f4:85:2c:07:6a: 41:e3:ff:04:8f:6b:8d:86:42:bf:a6:0e:f9:49:2b:9b:da:52: 4a:77:0d:bc:25:da:5f:15:06:ba:e6:80:93:77:a4:89:61:87: e7:4e:3a:de:11:ea:b0:fa:b9:4c:e3:1c:d0:4d:03:99:f7:3f: 36:af:22:be:00:07:0d:6f:0c:f2:d1:37:eb:5b:c7:54:ec:2a: 99:58:67:38:23:2f:08:1c:25:b8:1c:1e:33:a4:ed:44:19:9c: 31:22:0f:51:a3:ba:32:b6:a0:90:46:24:21:e4:78:35:4b:3e: a6:5b:cf:d0:12:5c:85:fb:60:09:8d:76:53:7e:18:99:b1:b3: 33:3f:6b:2a:d7:9a:a2:65:24:fb:23:b6:5c:22:16:1f:29:5f: 9c:01:bc:3e:59:55:9a:1f:68:a6:d6:db:96:1f:72:8f:ca:eb: 95:08:f8:35:69:64:70:ac:3f:3f:95:72:5a:60:ea:48:d9:60: 1a:1b:ce:3e:cd:27:b8:fc:1a:ad:c8:5f:f5:b0:4a:2c:51:ee: 44:72:a8:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkxQTIxMTAvBgNVBAUTKDZFOTI2QkNFNjE5RTRGNTAwQUJGQTQyNEZEQjA3NjRE MjU4Q0FCNTMwHhcNMjUwNDE4MjAwMDU0WhcNMjUwNDI1MjAwMDU0WjAYMRYwFAYD VQQDEw02ODAyYWY3Ni1hNGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA730GRZcpixWs5bopzGt9kvgboGs/a/onUWRwIskkM8tMJd0oc/r5+n0OG12G pDjo4wokaC+1m/UjFy8/NdI4GnMv4q2QSKjpAOjsTaSX7g2UuP11L2/O9Rd6gO+c +3tnlJBqIw+jPGpW29uHG1W6wvhV1kVY1vgWuaKFdfxXH3BvIOdlULeCzcEj3RZ8 2oA6fpXikMPlWVv7NaHqHWtneDlX3qVA0QUQaemsxXH9S+xFXpANKEWHHk43nk1I d88nCj2OCSvHyk0cLpxBhcnKJZi+18im+YGshFvu9TdznbFNLP6okwLS1NzYPvrn oxvf3vqmBC7wLlRm40IPGwlp6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP59fytC djUyN5b0p1ta44ZUa0LrMB8GA1UdIwQYMBaAFG6Sa85hnk9QCr+kJP2wdk0ljKtT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTFBMi84OTcxMzA5QzdC MTIxMUVBQTkyMTBGNjBDNEY5QUUwMi9icEpyem1HZVQxQUt2NlFrX2JCMlRTV01x MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JwSnJ6bUdlVDFBS3Y2UWtfYkIyVFNXTXExTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTFBMi84OTcxMzA5QzdCMTIxMUVBQTkyMTBGNjBDNEY5QUUwMi9icEpyem1HZVQx QUt2NlFrX2JCMlRTV01xMU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZb2qp5ftGy46DwQPc2O+by6+twB8Y4K5F0RofHKxNSGuwHLGpEiP7 BW6TrFqOlDzg9IUsB2pB4/8Ej2uNhkK/pg75SSub2lJKdw28JdpfFQa65oCTd6SJ YYfnTjreEeqw+rlM4xzQTQOZ9z82ryK+AAcNbwzy0TfrW8dU7CqZWGc4Iy8IHCW4 HB4zpO1EGZwxIg9Ro7oytqCQRiQh5Hg1Sz6mW8/QElyF+2AJjXZTfhiZsbMzP2sq 15qiZST7I7ZcIhYfKV+cAbw+WVWaH2im1tuWH3KPyuuVCPg1aWRwrD8/lXJaYOpI 2WAaG84+zSe4/BqtyF/1sEosUe5Ecqhc -----END CERTIFICATE-----Generated at Sun Apr 20 04:09:14 2025 by rpki-client