$ rpki-client -vvf rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft File: bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft (raw, json) Hash identifier: 1WGzNPhgmIQ0i6/ltZHRor4uzqzbW96+pOLtd7uJFko= Subject key identifier: E0:A0:EE:2B:16:B3:F1:30:F7:20:37:B4:B6:64:14:13:4C:A3:B1:7A Authority key identifier: 6E:8E:A1:E3:24:0C:0B:B3:D1:3B:4D:27:5C:6C:03:26:A5:68:EC:87 Certificate issuer: /CN=A91B933A/serialNumber=6E8EA1E3240C0BB3D13B4D275C6C0326A568EC87 Certificate serial: 250A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bo6h4yQMC7PRO00nXGwDJqVo7Ic.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft Manifest number: 24F0 Signing time: Tue 08 Apr 2025 15:46:31 +0000 Manifest this update: Tue 08 Apr 2025 15:46:31 +0000 Manifest next update: Tue 15 Apr 2025 15:46:31 +0000 Files and hashes: 1: bo6h4yQMC7PRO00nXGwDJqVo7Ic.crl (hash: WMAvNathatMePHv6WdHkPxNvHccBtHincmvcAIQ/rHo=) 2: C61B734AB0AA11E580DBF725C4F9AE02.roa (hash: Z754LG6nGQ06ZpUuHnHm6+5+zZq4bCVd8VqoVX/cCxs=) 3: AFB65238AFDC11EAB3910C71C4F9AE02.roa (hash: fuh0LlQyz61TwsZ3SUhqE5lyOndp84sYnyIIyPcvMCo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.crl rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bo6h4yQMC7PRO00nXGwDJqVo7Ic.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 15:46:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9482 (0x250a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B933A Validity Not Before: Apr 8 15:46:31 2025 GMT Not After : Apr 15 15:46:31 2025 GMT Subject: CN=67f544d7-4bca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:da:95:10:1b:97:f6:bf:bf:61:d7:29:fd:7a: ed:f5:5e:89:9c:7f:56:f4:cf:be:72:60:55:68:e0: fe:62:8e:b7:32:f3:d5:ea:5b:8e:99:d0:a0:8e:a5: 1b:01:77:c0:ec:c8:b4:63:fe:b0:04:46:6b:8d:ae: 16:e8:90:d9:00:04:4b:92:08:be:7d:bf:c4:15:c2: de:18:8c:eb:ac:06:31:39:d3:1c:af:8a:7b:eb:81: f6:f4:1f:0a:be:e9:b6:77:29:59:83:43:1b:59:10: d2:6c:22:74:b0:bb:99:e4:05:f9:2a:78:98:81:59: 34:c2:5a:6f:12:de:25:92:90:e0:b5:62:44:a9:40: c2:87:fc:ab:33:0c:22:4b:ce:2b:18:6a:f8:29:da: e8:04:7c:78:21:9a:ce:e5:ad:35:7e:74:c2:28:1b: b1:16:eb:a4:ea:20:58:d6:b9:14:21:7e:3e:91:ad: 15:7a:47:1c:cd:46:56:be:b2:15:17:bf:af:1a:f4: 65:4b:6c:cd:35:10:77:a1:28:87:09:e4:37:5d:90: e0:26:e6:1d:fa:8b:b0:38:92:b4:83:f0:67:7b:e3: 91:36:e4:02:0b:99:3f:60:e2:72:12:2e:ae:62:7f: 60:e4:0c:69:40:ae:b3:75:17:ae:09:55:dd:63:f8: 41:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:A0:EE:2B:16:B3:F1:30:F7:20:37:B4:B6:64:14:13:4C:A3:B1:7A X509v3 Authority Key Identifier: keyid:6E:8E:A1:E3:24:0C:0B:B3:D1:3B:4D:27:5C:6C:03:26:A5:68:EC:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bo6h4yQMC7PRO00nXGwDJqVo7Ic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:f6:a8:fb:98:21:a8:32:95:ff:8d:09:2e:6a:6c:a9:42:11: d2:ad:9a:da:f4:4c:70:04:f1:a1:f5:2e:ec:7b:7b:0a:b5:86: d1:84:e2:3d:bc:f9:27:1f:6c:a0:fa:59:4c:05:a0:e1:33:8d: 16:22:ad:76:3e:c2:ca:6f:ee:17:79:7a:7d:74:b1:f7:0b:16: 9d:48:4d:c4:dd:07:59:78:54:b2:05:26:9d:f1:31:e9:9b:b8: 4c:a1:00:09:ee:bb:21:94:5a:8f:1a:53:3e:0f:cc:87:f2:af: 49:3c:bb:1d:71:f6:bb:d9:da:b7:c3:6f:8a:77:5c:4f:a9:48: 97:59:59:b8:77:0d:b3:57:10:f6:bb:92:21:f1:2b:05:6f:94: e7:14:6d:a4:03:93:7f:7e:46:07:1c:ec:6a:47:f3:3b:ad:50: 41:59:de:87:8e:eb:b1:5f:82:d5:e9:24:0b:89:ab:ff:bf:ef: 8b:80:0c:e7:09:c1:74:28:c4:06:f9:c0:61:1b:5a:6d:1b:1b: de:68:04:6b:66:a5:c2:9e:43:44:24:3a:e5:ba:18:85:21:da: b7:9c:7c:3c:5c:19:31:72:2d:81:83:d9:60:ad:6d:98:c4:43: f3:e4:af:9f:95:28:48:79:8f:8a:08:6b:2f:7c:2d:51:2e:34: bd:40:f6:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkzM0ExMTAvBgNVBAUTKDZFOEVBMUUzMjQwQzBCQjNEMTNCNEQyNzVDNkMwMzI2 QTU2OEVDODcwHhcNMjUwNDA4MTU0NjMxWhcNMjUwNDE1MTU0NjMxWjAYMRYwFAYD VQQDEw02N2Y1NDRkNy00YmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzNqVEBuX9r+/Ydcp/Xrt9V6JnH9W9M++cmBVaOD+Yo63MvPV6luOmdCgjqUb AXfA7Mi0Y/6wBEZrja4W6JDZAARLkgi+fb/EFcLeGIzrrAYxOdMcr4p764H29B8K vum2dylZg0MbWRDSbCJ0sLuZ5AX5KniYgVk0wlpvEt4lkpDgtWJEqUDCh/yrMwwi S84rGGr4KdroBHx4IZrO5a01fnTCKBuxFuuk6iBY1rkUIX4+ka0VekcczUZWvrIV F7+vGvRlS2zNNRB3oSiHCeQ3XZDgJuYd+ouwOJK0g/Bne+ORNuQCC5k/YOJyEi6u Yn9g5AxpQK6zdReuCVXdY/hB5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOCg7isW s/Ew9yA3tLZkFBNMo7F6MB8GA1UdIwQYMBaAFG6OoeMkDAuz0TtNJ1xsAyalaOyH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTMzQS81M0ZFMUVGQTJC NjQxMUU1OEEyRjA3NTRDNEY5QUUwMi9ibzZoNHlRTUM3UFJPMDBuWEd3REpxVm83 SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JvNmg0eVFNQzdQUk8wMG5YR3dESnFWbzdJYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTMzQS81M0ZFMUVGQTJCNjQxMUU1OEEyRjA3NTRDNEY5QUUwMi9ibzZoNHlRTUM3 UFJPMDBuWEd3REpxVm83SWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCT9qj7mCGoMpX/jQkuamypQhHSrZra9ExwBPGh9S7se3sKtYbRhOI9 vPknH2yg+llMBaDhM40WIq12PsLKb+4XeXp9dLH3CxadSE3E3QdZeFSyBSad8THp m7hMoQAJ7rshlFqPGlM+D8yH8q9JPLsdcfa72dq3w2+Kd1xPqUiXWVm4dw2zVxD2 u5Ih8SsFb5TnFG2kA5N/fkYHHOxqR/M7rVBBWd6HjuuxX4LV6SQLiav/v++LgAzn CcF0KMQG+cBhG1ptGxveaARrZqXCnkNEJDrluhiFIdq3nHw8XBkxci2Bg9lgrW2Y xEPz5K+flShIeY+KCGsvfC1RLjS9QPZg -----END CERTIFICATE-----Generated at Thu Apr 10 11:41:44 2025 by rpki-client