$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.mft File: bLOCDaWkqEstlAm98H8lRf5tCxE.mft (raw, json) Hash identifier: hBANcvgTf+FlYijBZ2s4lQDcaNPUQwLDmj2Ph3ncUm0= Subject key identifier: CE:FC:D1:FA:B0:2D:7B:88:E4:AA:7C:5A:66:0D:B2:FB:5F:FF:1B:68 Authority key identifier: 6C:B3:82:0D:A5:A4:A8:4B:2D:94:09:BD:F0:7F:25:45:FE:6D:0B:11 Certificate issuer: /CN=A91CB063/serialNumber=6CB3820DA5A4A84B2D9409BDF07F2545FE6D0B11 Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLOCDaWkqEstlAm98H8lRf5tCxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.mft Manifest number: 28 Signing time: Thu 03 Apr 2025 07:01:30 +0000 Manifest this update: Thu 03 Apr 2025 07:01:29 +0000 Manifest next update: Thu 10 Apr 2025 07:01:29 +0000 Files and hashes: 1: bLOCDaWkqEstlAm98H8lRf5tCxE.crl (hash: qWeTimh2J9heo2vt5d9rKqOe+FN1rHSpvEnLpzuEJGY=) 2: 3D3827F2D6EE11EFB955866CC4F9AE02.roa (hash: 4d4Ou4cSb0acdXH9Bn2waQ4IMkbvtakYfcIPMGQdXao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.crl rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLOCDaWkqEstlAm98H8lRf5tCxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 07:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB063 Validity Not Before: Apr 3 07:01:29 2025 GMT Not After : Apr 10 07:01:29 2025 GMT Subject: CN=67ee3249-4a27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:84:7f:c1:76:71:ec:3b:54:45:99:2b:9d:11: 1b:7e:d9:c6:6a:f6:3f:9f:2b:4f:39:74:af:ab:d5: 59:1f:fd:04:10:99:23:78:b5:95:7f:b9:c1:61:0c: 9e:22:6c:71:b6:d8:61:06:5c:78:42:c4:00:92:04: 1a:43:e7:80:99:ec:cc:25:e6:c9:71:33:c9:a3:1e: 46:49:86:f6:8f:fe:e0:2f:4e:d1:97:88:1e:0b:18: 27:a6:06:21:11:77:89:7d:f0:42:ce:55:cb:c2:52: 9a:17:9f:7e:d8:a9:f0:f1:92:fb:87:33:ff:57:d2: ec:78:c7:be:01:ec:9d:93:8d:37:ce:76:78:ce:0b: 24:92:bc:be:17:4c:e1:58:31:c7:32:72:d5:2e:a0: 15:4e:59:22:c6:38:b0:6c:1d:60:cc:7a:5c:6b:b3: 43:97:bf:24:2a:0f:85:24:4a:fb:73:8d:9e:04:e9: 64:6c:9e:ed:1e:b3:d1:bd:e2:21:a2:b9:79:67:33: dc:5f:86:66:27:80:32:d9:f7:34:30:0f:5f:e8:05: f3:78:de:06:46:d0:e5:53:dd:88:47:98:18:19:b1: 4a:fd:e3:2f:80:58:6e:5e:68:6e:6b:9d:95:a8:41: cc:94:fa:ad:02:66:15:07:87:87:c6:77:82:ed:37: f2:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:FC:D1:FA:B0:2D:7B:88:E4:AA:7C:5A:66:0D:B2:FB:5F:FF:1B:68 X509v3 Authority Key Identifier: keyid:6C:B3:82:0D:A5:A4:A8:4B:2D:94:09:BD:F0:7F:25:45:FE:6D:0B:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLOCDaWkqEstlAm98H8lRf5tCxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:94:73:02:37:8d:c0:ba:47:d6:26:f2:21:36:86:4f:5c:b3: 15:10:48:57:fa:85:39:b7:e7:5b:e2:de:cc:ef:ad:9e:91:0b: 6d:79:a1:3b:cb:f1:e8:07:ba:8b:5a:67:a9:ba:46:5f:73:8c: 8a:fa:0a:df:a0:2e:d1:fc:8d:f4:89:14:84:45:ee:9a:95:ae: 95:7e:de:f3:0c:2b:65:8a:23:7d:03:1a:83:56:41:d9:26:a4: b6:79:52:95:c5:68:3a:55:f6:87:44:3a:83:24:55:ab:17:fe: 12:fa:43:dd:3d:d4:4d:5a:b6:6f:8b:52:4d:18:19:4e:51:cc: b5:8a:a4:83:26:0e:f2:56:cf:9f:6a:2c:b5:91:57:9d:70:f7: c5:11:66:df:94:37:01:3b:96:be:a9:9e:96:2b:14:1d:4b:cb: ac:04:62:e8:b1:6d:b3:76:fa:3c:bd:0d:23:ae:a7:6c:fd:84: 08:02:8f:00:40:93:82:6d:a2:44:b8:dd:99:f2:df:c7:90:09: 6d:bb:fa:6c:f3:37:9b:2d:cc:d7:32:ef:e1:28:4a:21:c3:1c: d2:72:55:6d:77:e7:b4:34:71:3b:78:9e:95:c7:ff:e8:55:88: 14:4a:1e:11:20:92:2e:64:9e:52:1d:81:1b:49:00:87:ff:1d: 45:6c:f7:87 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QjA2MzExMC8GA1UEBRMoNkNCMzgyMERBNUE0QTg0QjJEOTQwOUJERjA3RjI1NDVG RTZEMEIxMTAeFw0yNTA0MDMwNzAxMjlaFw0yNTA0MTAwNzAxMjlaMBgxFjAUBgNV BAMTDTY3ZWUzMjQ5LTRhMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzhH/BdnHsO1RFmSudERt+2cZq9j+fK085dK+r1Vkf/QQQmSN4tZV/ucFhDJ4i bHG22GEGXHhCxACSBBpD54CZ7Mwl5slxM8mjHkZJhvaP/uAvTtGXiB4LGCemBiER d4l98ELOVcvCUpoXn37YqfDxkvuHM/9X0ux4x74B7J2TjTfOdnjOCySSvL4XTOFY MccyctUuoBVOWSLGOLBsHWDMelxrs0OXvyQqD4UkSvtzjZ4E6WRsnu0es9G94iGi uXlnM9xfhmYngDLZ9zQwD1/oBfN43gZG0OVT3YhHmBgZsUr94y+AWG5eaG5rnZWo QcyU+q0CZhUHh4fGd4LtN/JTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzvzR+rAt e4jkqnxaZg2y+1//G2gwHwYDVR0jBBgwFoAUbLOCDaWkqEstlAm98H8lRf5tCxEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNCMDYzLzZDMEY5NjEwRDZF RDExRUY5RDlCRjM2QUM0RjlBRTAyL2JMT0NEYVdrcUVzdGxBbTk4SDhsUmY1dEN4 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYkxPQ0RhV2txRXN0bEFtOThIOGxSZjV0Q3hFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNC MDYzLzZDMEY5NjEwRDZFRDExRUY5RDlCRjM2QUM0RjlBRTAyL2JMT0NEYVdrcUVz dGxBbTk4SDhsUmY1dEN4RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAyUcwI3jcC6R9Ym8iE2hk9csxUQSFf6hTm351vi3szvrZ6RC215oTvL 8egHuotaZ6m6Rl9zjIr6Ct+gLtH8jfSJFIRF7pqVrpV+3vMMK2WKI30DGoNWQdkm pLZ5UpXFaDpV9odEOoMkVasX/hL6Q9091E1atm+LUk0YGU5RzLWKpIMmDvJWz59q LLWRV51w98URZt+UNwE7lr6pnpYrFB1Ly6wEYuixbbN2+jy9DSOup2z9hAgCjwBA k4JtokS43Zny38eQCW27+mzzN5stzNcy7+EoSiHDHNJyVW1357Q0cTt4npXH/+hV iBRKHhEgki5knlIdgRtJAIf/HUVs94c= -----END CERTIFICATE-----Generated at Fri Apr 4 21:58:06 2025 by rpki-client