$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft File: bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft (raw, json) Hash identifier: sweQuYwls/zbxr0yVbuSdTTMAdgFcYYtT8dW/N3NfRQ= Subject key identifier: 6A:36:D7:F0:DA:FA:F9:75:E8:39:32:A0:67:10:CC:41:4C:6F:BB:28 Authority key identifier: 6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25 Certificate issuer: /CN=A91C2C8A/serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325 Certificate serial: AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft Manifest number: 9E Signing time: Sat 29 Mar 2025 05:40:16 +0000 Manifest this update: Sat 29 Mar 2025 05:40:15 +0000 Manifest next update: Sat 05 Apr 2025 05:40:15 +0000 Files and hashes: 1: bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl (hash: QX/AK2LEBILt8KZ2lKLRLT7wTfkVNEbIZgwl15Ixe60=) 2: AA97516E24CA11EFB59A9379C4F9AE02.roa (hash: vY7AsZ08Pw1TlHVY7hGbU3NQuV3eecatAeSNrTUiOFk=) 3: A1732A0E24CA11EF93486579C4F9AE02.roa (hash: c1fiRMTzx+sKc+PUXDGG2MhU2IceNjiS5ZTGcmsSFDc=) 4: 41A8950C272F11EF9D0A0C5CC4F9AE02.roa (hash: Zeo9E1pvK7pqXxcoNJpNgvy4k5rrUkurswNhSqNf24s=) 5: A074721624CA11EF93486579C4F9AE02.roa (hash: EAuwmClXGMo+6npZ19N/RRkMj4x/6MUGDRCOhMDeS9A=) 6: 0E49D1E024CC11EFB113A27BC4F9AE02.roa (hash: NR/+YgQkm7A4mmhSV+xz9O4OYp+ZS9oT3gP6zL7oedM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 171 (0xab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2C8A Validity Not Before: Mar 29 05:40:15 2025 GMT Not After : Apr 5 05:40:15 2025 GMT Subject: CN=67e787bf-c725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1b:d3:69:9d:f6:e3:f2:06:76:55:7c:0f:f7: 4b:91:50:bd:d4:b6:7d:85:f1:de:c1:4a:a6:44:d0: 9a:c6:72:d0:81:1b:79:e4:af:ac:33:14:41:d2:e5: d0:cf:18:4a:75:fd:56:b0:8a:c6:ee:a4:63:4d:9d: 96:3b:38:a1:41:cd:00:7f:a9:bf:6b:75:27:ff:c5: 40:39:15:ef:fe:ce:8b:f6:37:70:51:29:70:b4:4c: 7d:60:d7:b9:e4:18:0d:5a:74:20:3f:6b:6d:6a:a7: 4f:24:9f:7f:9a:34:02:59:b0:6f:04:2f:4e:f2:83: f7:82:92:79:e5:eb:43:c1:41:56:66:13:b6:37:01: 02:8e:e7:8b:83:ec:a0:d4:39:ac:58:b6:30:ca:0b: 9f:e7:8d:6f:25:8e:e7:8a:b6:58:c1:16:4f:2e:be: 63:30:28:c9:99:3d:a2:64:3b:2f:c7:f0:e5:f7:63: 04:cf:fa:67:42:9b:1f:b7:87:f7:15:a0:b1:e6:0d: d0:08:3b:28:cf:0f:44:cf:20:44:46:e5:34:1c:9e: 62:62:87:a6:58:dd:61:1c:4b:d8:0f:43:af:6c:fe: 00:4b:f2:0f:bb:45:01:98:7e:3a:a9:69:6f:5e:eb: ae:22:0e:46:3d:b0:ea:1a:b2:88:4b:68:85:a1:da: 21:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:36:D7:F0:DA:FA:F9:75:E8:39:32:A0:67:10:CC:41:4C:6F:BB:28 X509v3 Authority Key Identifier: keyid:6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:16:23:09:76:50:92:28:da:47:06:51:f8:74:d0:d9:01:d0: eb:a1:3b:e0:87:94:a0:4b:a6:44:c9:e8:48:71:9f:c0:ad:68: e8:1a:33:62:55:76:61:2f:4d:62:9e:86:a6:31:54:f7:b5:08: ca:7d:d3:d2:16:54:e9:a6:31:ef:f1:6c:bd:4b:e2:ef:88:d8: 94:79:60:c3:d9:2f:6b:2e:2c:4d:b5:0d:30:df:68:78:1b:fa: 21:e0:43:68:94:90:54:51:04:a6:aa:60:cc:39:cc:a3:87:c9: 9e:12:4a:c2:ca:7e:4a:1c:8b:c1:65:2b:13:cd:8b:d1:7c:e3: 6a:8b:ed:4c:68:68:d1:8f:ad:df:78:5f:da:0b:d8:29:73:b3: 9d:49:e2:dc:5f:fe:17:63:4b:ec:52:44:1a:80:fd:96:b8:fd: 0e:2c:f6:7b:92:69:f7:0e:fa:06:17:1f:49:3a:86:dc:f3:85: 42:b8:03:7a:da:a2:fb:32:8f:da:87:4d:39:a1:d1:03:91:cb: 4f:ec:34:ff:9b:bf:2f:f1:5b:c6:c3:ed:33:ed:8f:87:ca:83: 37:a7:e5:c3:c8:6e:26:f9:19:a2:3d:ae:6c:09:4d:e6:6d:33: 16:e4:c8:d0:9c:15:c0:6c:01:53:86:60:06:fb:36:78:73:57: e4:23:f6:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJDOEExMTAvBgNVBAUTKDZDRTdCNTc1MEU2RTE3RDNEMzlFQjVCMDg3RkQzRkFE NTk1OUYzMjUwHhcNMjUwMzI5MDU0MDE1WhcNMjUwNDA1MDU0MDE1WjAYMRYwFAYD VQQDEw02N2U3ODdiZi1jNzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvxvTaZ324/IGdlV8D/dLkVC91LZ9hfHewUqmRNCaxnLQgRt55K+sMxRB0uXQ zxhKdf1WsIrG7qRjTZ2WOzihQc0Af6m/a3Un/8VAORXv/s6L9jdwUSlwtEx9YNe5 5BgNWnQgP2ttaqdPJJ9/mjQCWbBvBC9O8oP3gpJ55etDwUFWZhO2NwECjueLg+yg 1DmsWLYwyguf541vJY7nirZYwRZPLr5jMCjJmT2iZDsvx/Dl92MEz/pnQpsft4f3 FaCx5g3QCDsozw9EzyBERuU0HJ5iYoemWN1hHEvYD0OvbP4AS/IPu0UBmH46qWlv XuuuIg5GPbDqGrKIS2iFodohcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGo21/Da +vl16DkyoGcQzEFMb7soMB8GA1UdIwQYMBaAFGzntXUObhfT0561sIf9P61ZWfMl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkM4QS82MUVDNDkxNjI0 QzkxMUVGOUM4QzYyNTlDNEY5QUUwMi9iT2UxZFE1dUY5UFRucld3aF8wX3JWbFo4 eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JPZTFkUTV1RjlQVG5yV3doXzBfclZsWjh5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkM4QS82MUVDNDkxNjI0QzkxMUVGOUM4QzYyNTlDNEY5QUUwMi9iT2UxZFE1dUY5 UFRucld3aF8wX3JWbFo4eVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvFiMJdlCSKNpHBlH4dNDZAdDroTvgh5SgS6ZEyehIcZ/ArWjoGjNi VXZhL01inoamMVT3tQjKfdPSFlTppjHv8Wy9S+LviNiUeWDD2S9rLixNtQ0w32h4 G/oh4ENolJBUUQSmqmDMOcyjh8meEkrCyn5KHIvBZSsTzYvRfONqi+1MaGjRj63f eF/aC9gpc7OdSeLcX/4XY0vsUkQagP2WuP0OLPZ7kmn3DvoGFx9JOobc84VCuAN6 2qL7Mo/ah005odEDkctP7DT/m78v8VvGw+0z7Y+HyoM3p+XDyG4m+RmiPa5sCU3m bTMW5MjQnBXAbAFThmAG+zZ4c1fkI/Zf -----END CERTIFICATE-----Generated at Fri Apr 4 22:22:15 2025 by rpki-client