$ rpki-client -vvf rpki.apnic.net/member_repository/A91C40D1/CC7830B0C30911E8900E5F21C4F9AE02/bLMNwI7ylzDp3wScVPOVgquFvpQ.mft File: bLMNwI7ylzDp3wScVPOVgquFvpQ.mft (raw, json) Hash identifier: 4DptjROilI5by5/BOz3k/GSucxKVCVrXFtgVzT5qqGU= Subject key identifier: 2C:4E:C5:93:78:A9:F2:34:E6:F9:16:7A:02:85:CD:9F:1E:F0:79:C4 Authority key identifier: 6C:B3:0D:C0:8E:F2:97:30:E9:DF:04:9C:54:F3:95:82:AB:85:BE:94 Certificate issuer: /CN=A91C40D1/serialNumber=6CB30DC08EF29730E9DF049C54F39582AB85BE94 Certificate serial: 12A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLMNwI7ylzDp3wScVPOVgquFvpQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C40D1/CC7830B0C30911E8900E5F21C4F9AE02/bLMNwI7ylzDp3wScVPOVgquFvpQ.mft Manifest number: 129E Signing time: Sun 20 Apr 2025 16:59:59 +0000 Manifest this update: Sun 20 Apr 2025 16:59:59 +0000 Manifest next update: Sun 27 Apr 2025 16:59:59 +0000 Files and hashes: 1: bLMNwI7ylzDp3wScVPOVgquFvpQ.crl (hash: XhjMTZAohwpb+sUCxoW5Va6mLfE512F1sPIe5135E00=) 2: 18272628C30B11E8A6851824C4F9AE02.roa (hash: zhAB02c7MO6g0ZjU60Q0NOMxZrMu/KXiBvCTRD/ktbM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C40D1/CC7830B0C30911E8900E5F21C4F9AE02/bLMNwI7ylzDp3wScVPOVgquFvpQ.crl rsync://rpki.apnic.net/member_repository/A91C40D1/CC7830B0C30911E8900E5F21C4F9AE02/bLMNwI7ylzDp3wScVPOVgquFvpQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLMNwI7ylzDp3wScVPOVgquFvpQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 16:59:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4777 (0x12a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C40D1, serialNumber=6CB30DC08EF29730E9DF049C54F39582AB85BE94 Validity Not Before: Apr 20 16:59:59 2025 GMT Not After : Apr 27 16:59:59 2025 GMT Subject: CN=6805280f-b7e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8e:f9:69:9a:c5:5b:f8:5f:23:ad:f1:29:5b: ce:e8:74:19:22:b1:3e:ad:7b:30:81:78:5b:cb:6d: f8:5c:8f:13:da:f4:c6:7c:d0:22:ab:6e:35:7b:da: 0f:9f:87:c5:f0:5e:63:74:f0:68:a9:2f:d8:c4:7c: e1:e8:db:4f:56:7f:f6:a3:6a:d5:ca:4d:5e:4f:b7: 7d:71:5c:4e:da:9c:00:cd:ce:39:b7:cd:a9:d6:4d: 1e:5f:37:7c:59:f5:2b:92:d7:2a:65:27:b1:f3:98: 0b:c9:80:86:4c:00:53:81:ac:28:cc:4f:f3:9c:d9: 22:00:e7:20:ce:45:d1:92:6b:7a:dd:ef:d8:6e:a4: d9:30:db:69:8f:71:bd:1f:34:5a:6e:84:69:cd:f9: 06:ca:ba:d3:10:24:69:9b:f2:81:a6:72:f5:17:7d: 99:ec:3a:36:6c:39:d0:b1:20:be:0f:de:7d:41:ed: 50:f9:53:b6:da:e9:14:58:d6:ef:ad:45:35:11:cd: 1f:46:21:d4:2b:88:24:04:60:72:ee:1f:16:31:a9: b7:4a:04:96:36:9c:2a:8a:f8:34:38:61:72:be:5f: 44:3a:19:4b:99:5f:5b:53:be:4d:e8:f4:8b:ea:8b: 39:55:1f:25:04:b9:69:20:e4:82:d5:f4:e9:38:a8: db:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:4E:C5:93:78:A9:F2:34:E6:F9:16:7A:02:85:CD:9F:1E:F0:79:C4 X509v3 Authority Key Identifier: keyid:6C:B3:0D:C0:8E:F2:97:30:E9:DF:04:9C:54:F3:95:82:AB:85:BE:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C40D1/CC7830B0C30911E8900E5F21C4F9AE02/bLMNwI7ylzDp3wScVPOVgquFvpQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLMNwI7ylzDp3wScVPOVgquFvpQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C40D1/CC7830B0C30911E8900E5F21C4F9AE02/bLMNwI7ylzDp3wScVPOVgquFvpQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:5f:07:dc:ff:23:b8:42:2b:e8:a8:93:0b:47:b9:77:4a:14: fa:83:2c:c4:37:84:9d:bd:7a:8c:fd:88:a9:c1:1a:84:ff:39: 04:50:95:6f:cd:29:4c:c7:cf:9b:dd:ce:df:f4:d1:40:ba:46: 7a:85:32:84:f7:03:d8:60:c8:7f:a4:4b:61:d4:9a:e1:ad:93: e5:47:56:66:da:00:da:20:af:ca:99:34:81:d9:4a:52:d3:81: 96:14:9b:92:05:a4:ef:a9:9b:16:7b:c8:06:43:43:0b:45:b8: 06:54:ca:84:30:6a:ec:70:9c:27:54:20:a8:53:d1:6f:75:f8: 10:32:35:a9:5d:31:0f:0c:50:ec:9e:c8:5b:3e:26:49:e1:45: 5c:ac:37:d8:0a:7b:35:65:7e:eb:16:49:6c:97:60:da:31:d2: 8d:0c:bd:66:77:7b:6b:e8:09:e9:37:19:87:91:0e:7e:f5:84: 21:94:15:a4:cc:de:94:bc:68:b1:ad:e6:c9:6d:94:16:26:cc: 1a:35:5f:61:de:41:75:0a:ec:69:fd:a6:b1:a2:a7:b7:ff:41: cb:f9:1d:30:01:a8:89:ed:37:35:d4:e8:0e:19:f6:c4:7f:fb: f4:6c:86:ab:4e:8c:5b:d7:82:79:af:69:ed:b2:d0:63:6d:bb: c1:3b:10:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQwRDExMTAvBgNVBAUTKDZDQjMwREMwOEVGMjk3MzBFOURGMDQ5QzU0RjM5NTgy QUI4NUJFOTQwHhcNMjUwNDIwMTY1OTU5WhcNMjUwNDI3MTY1OTU5WjAYMRYwFAYD VQQDEw02ODA1MjgwZi1iN2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt475aZrFW/hfI63xKVvO6HQZIrE+rXswgXhby234XI8T2vTGfNAiq241e9oP n4fF8F5jdPBoqS/YxHzh6NtPVn/2o2rVyk1eT7d9cVxO2pwAzc45t82p1k0eXzd8 WfUrktcqZSex85gLyYCGTABTgawozE/znNkiAOcgzkXRkmt63e/YbqTZMNtpj3G9 HzRaboRpzfkGyrrTECRpm/KBpnL1F32Z7Do2bDnQsSC+D959Qe1Q+VO22ukUWNbv rUU1Ec0fRiHUK4gkBGBy7h8WMam3SgSWNpwqivg0OGFyvl9EOhlLmV9bU75N6PSL 6os5VR8lBLlpIOSC1fTpOKjbIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCxOxZN4 qfI05vkWegKFzZ8e8HnEMB8GA1UdIwQYMBaAFGyzDcCO8pcw6d8EnFTzlYKrhb6U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDBEMS9DQzc4MzBCMEMz MDkxMUU4OTAwRTVGMjFDNEY5QUUwMi9iTE1Od0k3eWx6RHAzd1NjVlBPVmdxdUZ2 cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JMTU53STd5bHpEcDN3U2NWUE9WZ3F1RnZwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDBEMS9DQzc4MzBCMEMzMDkxMUU4OTAwRTVGMjFDNEY5QUUwMi9iTE1Od0k3eWx6 RHAzd1NjVlBPVmdxdUZ2cFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXXwfc/yO4QivoqJMLR7l3ShT6gyzEN4SdvXqM/YipwRqE/zkEUJVv zSlMx8+b3c7f9NFAukZ6hTKE9wPYYMh/pEth1JrhrZPlR1Zm2gDaIK/KmTSB2UpS 04GWFJuSBaTvqZsWe8gGQ0MLRbgGVMqEMGrscJwnVCCoU9FvdfgQMjWpXTEPDFDs nshbPiZJ4UVcrDfYCns1ZX7rFklsl2DaMdKNDL1md3tr6AnpNxmHkQ5+9YQhlBWk zN6UvGixrebJbZQWJswaNV9h3kF1Cuxp/aaxoqe3/0HL+R0wAaiJ7Tc11OgOGfbE f/v0bIarToxb14J5r2ntstBjbbvBOxDG -----END CERTIFICATE-----Generated at Tue Apr 22 16:32:05 2025 by rpki-client