$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft File: BH7xoc9llmNJhmdnZVZI7vkRDFo.mft (raw, json) Hash identifier: KUCVR6HkyOz385TDNuVkDxZJOYFv26roCkulAFbyVDs= Subject key identifier: 78:7B:C7:EC:E7:DF:28:A2:06:EC:45:04:8C:27:09:E4:40:56:76:55 Authority key identifier: 04:7E:F1:A1:CF:65:96:63:49:86:67:67:65:56:48:EE:F9:11:0C:5A Certificate issuer: /CN=A91CE4C1/serialNumber=047EF1A1CF65966349866767655648EEF9110C5A Certificate serial: 27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft Manifest number: 20 Signing time: Sat 29 Mar 2025 07:15:29 +0000 Manifest this update: Sat 29 Mar 2025 07:15:28 +0000 Manifest next update: Sat 05 Apr 2025 07:15:28 +0000 Files and hashes: 1: BH7xoc9llmNJhmdnZVZI7vkRDFo.crl (hash: 1uTNJMxfFLbItUJYe6NdG9KuiQKXtMZh0pRv8WGokqc=) 2: 459E12EAE9C611EFB8012F10C4F9AE02.roa (hash: /RmfZz46so9ge+fbPNaFv77MZSPZTzTOQnyx59sNwag=) 3: FB4C0514E9C311EFADA7270AC4F9AE02.roa (hash: b+8Vf+1PI1yNyvvstVRxJPifoMZ8KqBIQc0NBIzO5qc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.crl rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE4C1 Validity Not Before: Mar 29 07:15:28 2025 GMT Not After : Apr 5 07:15:28 2025 GMT Subject: CN=67e79e10-bfaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fc:47:ce:3f:cd:cf:e8:7f:a4:b4:a7:d1:e9: 79:ed:ca:96:e4:b6:3f:84:9e:a9:ce:a5:7f:e6:f3: 0f:f2:64:38:02:c7:bf:cb:e5:75:0d:70:a2:f3:f6: 56:5f:a3:d2:9e:b8:61:60:43:21:1e:3b:c8:39:23: ac:06:e6:f3:29:94:98:97:94:57:9b:2c:d3:90:9b: ea:7a:8e:45:f1:65:59:68:ca:8a:60:1a:4d:37:d6: b6:e1:24:b1:49:d4:38:5a:47:c9:05:e3:80:4f:f5: 49:00:63:06:9c:1a:2d:63:4d:e6:98:11:48:a5:eb: d9:2e:a8:88:44:29:d8:e1:9c:7f:db:64:a9:7d:80: f2:a8:83:ef:47:d2:9f:94:99:da:27:55:1b:76:a7: f1:79:cd:58:2c:5c:49:5e:ea:91:ee:7b:36:df:05: a5:74:28:9e:1e:bd:5e:46:58:87:f0:98:03:01:23: 95:dd:7a:67:81:9c:64:96:80:84:6a:b8:70:c3:98: 66:df:21:3b:d7:34:05:09:dc:59:fb:cc:05:7e:e8: 98:88:6f:b1:7c:62:f1:f5:b2:14:a2:17:fa:99:49: 93:8f:b3:e0:fd:84:cd:de:65:1a:7b:5a:6a:4d:e4: 5c:04:cd:4c:c0:8e:21:15:bc:1a:71:a6:86:31:5e: 63:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:7B:C7:EC:E7:DF:28:A2:06:EC:45:04:8C:27:09:E4:40:56:76:55 X509v3 Authority Key Identifier: keyid:04:7E:F1:A1:CF:65:96:63:49:86:67:67:65:56:48:EE:F9:11:0C:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:a5:2e:dd:e0:b9:d3:0a:c1:e6:06:47:41:3d:f5:a5:53:56: 6d:a3:ce:d2:f0:a0:b5:51:01:6e:a8:1c:6c:40:ab:75:57:a0: 29:3c:91:6f:f5:8a:5f:4f:b0:85:e4:5d:3c:b9:31:ab:64:64: b9:9f:11:62:a4:6c:2a:69:36:9f:b4:80:be:c2:bc:50:4c:81: 55:e4:0e:48:77:d6:35:c4:44:98:90:68:c3:68:cd:08:25:57: 74:d6:d9:1c:d4:16:38:a3:0d:78:a4:75:db:a2:77:59:e9:f8: 18:3b:43:3c:f5:3f:35:c2:56:94:7d:3b:25:a6:bc:fb:8c:53: c9:ae:82:a1:91:dd:32:b6:a6:79:73:75:3c:1d:11:e7:8d:c9: 37:d3:f7:e4:c2:8b:4d:d6:f1:0b:3e:d0:40:a6:e4:29:a7:57: b4:b5:86:09:d3:a3:29:6c:25:4b:e4:3a:97:fa:92:d0:61:86: 8c:c7:52:3e:41:91:a9:9d:ac:ac:f3:72:cb:10:63:d0:d6:6d: 94:7f:ff:6a:0a:3b:c0:87:8d:a1:e9:3b:21:8b:22:39:d9:9e: 73:ca:c5:ed:b5:31:26:3e:47:13:92:ca:98:4a:a8:01:76:6a: d5:7f:7c:d3:ba:e1:c3:71:44:7e:e7:be:f8:46:c3:06:f5:3b: 0f:9c:ff:2b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RTRDMTExMC8GA1UEBRMoMDQ3RUYxQTFDRjY1OTY2MzQ5ODY2NzY3NjU1NjQ4RUVG OTExMEM1QTAeFw0yNTAzMjkwNzE1MjhaFw0yNTA0MDUwNzE1MjhaMBgxFjAUBgNV BAMTDTY3ZTc5ZTEwLWJmYWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDF/EfOP83P6H+ktKfR6Xntypbktj+EnqnOpX/m8w/yZDgCx7/L5XUNcKLz9lZf o9KeuGFgQyEeO8g5I6wG5vMplJiXlFebLNOQm+p6jkXxZVloyopgGk031rbhJLFJ 1DhaR8kF44BP9UkAYwacGi1jTeaYEUil69kuqIhEKdjhnH/bZKl9gPKog+9H0p+U mdonVRt2p/F5zVgsXEle6pHuezbfBaV0KJ4evV5GWIfwmAMBI5XdemeBnGSWgIRq uHDDmGbfITvXNAUJ3Fn7zAV+6JiIb7F8YvH1shSiF/qZSZOPs+D9hM3eZRp7WmpN 5FwEzUzAjiEVvBpxpoYxXmPjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUeHvH7Off KKIG7EUEjCcJ5EBWdlUwHwYDVR0jBBgwFoAUBH7xoc9llmNJhmdnZVZI7vkRDFow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNFNEMxLzM2NDQ4ODdBRTlC QjExRUZCQUFDOUQ3MEM0RjlBRTAyL0JIN3hvYzlsbG1OSmhtZG5aVlpJN3ZrUkRG by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQkg3eG9jOWxsbU5KaG1kblpWWkk3dmtSREZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNF NEMxLzM2NDQ4ODdBRTlCQjExRUZCQUFDOUQ3MEM0RjlBRTAyL0JIN3hvYzlsbG1O SmhtZG5aVlpJN3ZrUkRGby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE2lLt3gudMKweYGR0E99aVTVm2jztLwoLVRAW6oHGxAq3VXoCk8kW/1 il9PsIXkXTy5MatkZLmfEWKkbCppNp+0gL7CvFBMgVXkDkh31jXERJiQaMNozQgl V3TW2RzUFjijDXikdduid1np+Bg7Qzz1PzXCVpR9OyWmvPuMU8mugqGR3TK2pnlz dTwdEeeNyTfT9+TCi03W8Qs+0ECm5CmnV7S1hgnToylsJUvkOpf6ktBhhozHUj5B kamdrKzzcssQY9DWbZR//2oKO8CHjaHpOyGLIjnZnnPKxe21MSY+RxOSyphKqAF2 atV/fNO64cNxRH7nvvhGwwb1Ow+c/ys= -----END CERTIFICATE-----Generated at Fri Apr 4 22:17:51 2025 by rpki-client