$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5BA2/14FEC2EC579311ECBA2FB048C4F9AE02/bKwrcgiF6COCTBln7fw2Psh0do0.mft File: bKwrcgiF6COCTBln7fw2Psh0do0.mft (raw, json) Hash identifier: DIgrqAFMEy8YkiJScr5WpAWjXEq0iT+Otns4wJUl9n0= Subject key identifier: 53:AB:32:A4:73:D2:53:55:9A:32:9F:08:DC:B1:E3:91:A1:EC:C5:79 Authority key identifier: 6C:AC:2B:72:08:85:E8:23:82:4C:19:67:ED:FC:36:3E:C8:74:76:8D Certificate issuer: /CN=A91D5BA2/serialNumber=6CAC2B720885E823824C1967EDFC363EC874768D Certificate serial: 042F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKwrcgiF6COCTBln7fw2Psh0do0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5BA2/14FEC2EC579311ECBA2FB048C4F9AE02/bKwrcgiF6COCTBln7fw2Psh0do0.mft Manifest number: 042A Signing time: Sat 29 Mar 2025 00:36:41 +0000 Manifest this update: Sat 29 Mar 2025 00:36:41 +0000 Manifest next update: Sat 05 Apr 2025 00:36:41 +0000 Files and hashes: 1: bKwrcgiF6COCTBln7fw2Psh0do0.crl (hash: FjmJyiXOctdX3GUuYCo08wAaTL6g9wRogJHT6nl8A5o=) 2: AA5ADA7C579511ECA9BDE14AC4F9AE02.roa (hash: /NgK3u5jqw1d//qoTXrGcCnkIoepRe7WzeoPLGdtL+k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5BA2/14FEC2EC579311ECBA2FB048C4F9AE02/bKwrcgiF6COCTBln7fw2Psh0do0.crl rsync://rpki.apnic.net/member_repository/A91D5BA2/14FEC2EC579311ECBA2FB048C4F9AE02/bKwrcgiF6COCTBln7fw2Psh0do0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKwrcgiF6COCTBln7fw2Psh0do0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 00:36:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1071 (0x42f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5BA2 Validity Not Before: Mar 29 00:36:41 2025 GMT Not After : Apr 5 00:36:41 2025 GMT Subject: CN=67e74099-2fca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f1:c4:1e:3f:33:47:7f:50:49:b6:2d:cc:e5: bf:7e:ea:64:07:91:a6:33:6c:16:12:22:a9:3a:58: d4:ff:da:85:6e:18:b6:38:a2:e7:df:21:d4:97:d3: a2:b6:8b:03:5f:0d:17:02:f1:e3:d8:c2:1e:0d:09: 30:41:9e:3e:29:bf:44:40:3c:fa:c0:58:35:9a:25: ae:1e:75:e4:43:a6:89:c7:ca:9a:11:92:7e:47:8a: 30:e3:2d:2f:78:56:30:88:31:f9:0b:e7:25:6c:18: ab:13:7f:e2:ea:23:a4:6f:d8:7e:a0:3e:d1:f6:4d: 30:d1:2f:73:c3:b9:c8:dc:f4:b1:1a:9f:31:a6:70: 01:dd:34:14:97:ac:5c:b2:55:c3:32:ae:c1:c6:08: e9:eb:b7:58:30:31:07:35:67:b9:8e:ac:70:ae:ec: 7a:28:1c:10:f9:4a:86:42:42:e0:17:4d:4b:90:f4: 30:2e:b6:d6:56:ef:16:2e:fa:26:ee:13:02:6d:89: ac:6e:94:0d:6d:f4:e5:03:f3:97:83:f6:2c:2a:8b: cf:de:f6:d6:87:21:89:fc:d6:f8:98:fc:0c:57:f8: 91:d4:e0:0e:77:72:f6:b3:e1:25:cc:fc:1b:d5:47: c2:2d:d4:e2:f2:4c:bd:42:44:18:71:ec:85:c3:60: 34:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:AB:32:A4:73:D2:53:55:9A:32:9F:08:DC:B1:E3:91:A1:EC:C5:79 X509v3 Authority Key Identifier: keyid:6C:AC:2B:72:08:85:E8:23:82:4C:19:67:ED:FC:36:3E:C8:74:76:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5BA2/14FEC2EC579311ECBA2FB048C4F9AE02/bKwrcgiF6COCTBln7fw2Psh0do0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKwrcgiF6COCTBln7fw2Psh0do0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5BA2/14FEC2EC579311ECBA2FB048C4F9AE02/bKwrcgiF6COCTBln7fw2Psh0do0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:ad:62:f9:c0:b1:7c:af:b0:31:d3:37:bf:7d:65:7a:ae:46: b1:59:35:2d:c0:5b:32:ee:85:3e:c7:b6:92:65:c9:91:c0:41: 54:34:aa:91:99:3f:d5:b5:15:90:2f:fc:90:b8:5b:4d:30:b7: 34:22:36:45:89:dc:eb:c0:da:d8:e6:50:82:b3:4b:e2:ab:43: 2e:b2:a9:95:60:31:4c:3b:5c:2b:2c:65:60:27:ae:b9:a0:6f: a4:0e:22:bc:81:8c:2a:58:e0:89:ff:19:41:bb:76:34:e0:cb: 07:6b:c2:52:02:0c:06:19:cf:47:b6:5a:ab:2d:7a:c6:7f:d8: 37:62:4b:1f:ab:db:3f:6d:77:bc:ad:ae:aa:7a:39:24:25:6e: e6:f8:cc:31:ae:13:fd:77:3a:77:31:9e:f6:ee:d5:a4:b7:26: 8d:7c:2b:d8:7b:e5:d7:c5:9b:b7:1c:91:2f:a5:89:9f:63:66: f5:9f:6c:35:06:00:43:0a:33:b1:80:89:94:e9:78:5d:04:13: 96:45:8a:fb:8b:61:17:82:87:dc:35:f8:51:a6:a8:8b:8c:5e: a8:fc:44:77:7b:52:89:cb:8b:49:f6:e0:9c:8c:88:50:5a:8e: a8:5a:9f:d8:81:72:80:9b:58:63:8c:6b:98:43:05:b3:88:d0: fe:7f:ea:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBC8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVCQTIxMTAvBgNVBAUTKDZDQUMyQjcyMDg4NUU4MjM4MjRDMTk2N0VERkMzNjNF Qzg3NDc2OEQwHhcNMjUwMzI5MDAzNjQxWhcNMjUwNDA1MDAzNjQxWjAYMRYwFAYD VQQDEw02N2U3NDA5OS0yZmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApPHEHj8zR39QSbYtzOW/fupkB5GmM2wWEiKpOljU/9qFbhi2OKLn3yHUl9Oi tosDXw0XAvHj2MIeDQkwQZ4+Kb9EQDz6wFg1miWuHnXkQ6aJx8qaEZJ+R4ow4y0v eFYwiDH5C+clbBirE3/i6iOkb9h+oD7R9k0w0S9zw7nI3PSxGp8xpnAB3TQUl6xc slXDMq7Bxgjp67dYMDEHNWe5jqxwrux6KBwQ+UqGQkLgF01LkPQwLrbWVu8WLvom 7hMCbYmsbpQNbfTlA/OXg/YsKovP3vbWhyGJ/Nb4mPwMV/iR1OAOd3L2s+ElzPwb 1UfCLdTi8ky9QkQYceyFw2A0BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFOrMqRz 0lNVmjKfCNyx45Gh7MV5MB8GA1UdIwQYMBaAFGysK3IIhegjgkwZZ+38Nj7IdHaN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUJBMi8xNEZFQzJFQzU3 OTMxMUVDQkEyRkIwNDhDNEY5QUUwMi9iS3dyY2dpRjZDT0NUQmxuN2Z3MlBzaDBk bzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JLd3JjZ2lGNkNPQ1RCbG43ZncyUHNoMGRvMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUJBMi8xNEZFQzJFQzU3OTMxMUVDQkEyRkIwNDhDNEY5QUUwMi9iS3dyY2dpRjZD T0NUQmxuN2Z3MlBzaDBkbzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvrWL5wLF8r7Ax0ze/fWV6rkaxWTUtwFsy7oU+x7aSZcmRwEFUNKqR mT/VtRWQL/yQuFtNMLc0IjZFidzrwNrY5lCCs0viq0MusqmVYDFMO1wrLGVgJ665 oG+kDiK8gYwqWOCJ/xlBu3Y04MsHa8JSAgwGGc9HtlqrLXrGf9g3Yksfq9s/bXe8 ra6qejkkJW7m+MwxrhP9dzp3MZ727tWktyaNfCvYe+XXxZu3HJEvpYmfY2b1n2w1 BgBDCjOxgImU6XhdBBOWRYr7i2EXgofcNfhRpqiLjF6o/ER3e1KJy4tJ9uCcjIhQ Wo6oWp/YgXKAm1hjjGuYQwWziND+f+qX -----END CERTIFICATE-----Generated at Fri Apr 4 21:47:28 2025 by rpki-client