$ rpki-client -vvf rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft File: BHT0BqF40ixU1e9yTGssLJo7a5g.mft (raw, json) Hash identifier: E0tEFL0pVCbV+z3/rxTSAeKWHsW88TMdK2KFRfiuGdY= Subject key identifier: 3A:ED:81:40:55:34:6E:16:32:89:5A:F6:5F:7A:AD:05:03:B1:25:71 Authority key identifier: 04:74:F4:06:A1:78:D2:2C:54:D5:EF:72:4C:6B:2C:2C:9A:3B:6B:98 Certificate issuer: /CN=A91D60CF/serialNumber=0474F406A178D22C54D5EF724C6B2C2C9A3B6B98 Certificate serial: 9F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BHT0BqF40ixU1e9yTGssLJo7a5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft Manifest number: 9C Signing time: Sat 05 Apr 2025 05:35:58 +0000 Manifest this update: Sat 05 Apr 2025 05:35:58 +0000 Manifest next update: Sat 12 Apr 2025 05:35:58 +0000 Files and hashes: 1: BHT0BqF40ixU1e9yTGssLJo7a5g.crl (hash: 2MTzdcPklDkAqh3GQWOmIPa/rrF2FRJyMoBBPsijrz0=) 2: B56F40DEE9DB11EFBDD8BD26C4F9AE02.roa (hash: dk/mJ6WLbx1un0lM/kEaDG7s+C714fNxg9o9daVbyM4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.crl rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BHT0BqF40ixU1e9yTGssLJo7a5g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 05:35:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 159 (0x9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D60CF Validity Not Before: Apr 5 05:35:58 2025 GMT Not After : Apr 12 05:35:58 2025 GMT Subject: CN=67f0c13e-b899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:27:1e:87:ac:31:e9:04:4b:d9:2a:5b:2c:8a: 88:0a:f7:83:76:30:5a:b1:94:bd:b5:c6:ba:e1:8c: 1f:1e:13:c2:dc:04:c6:38:fd:d3:2e:ad:92:54:be: 8e:de:13:1e:90:42:57:6c:be:1c:f2:33:78:b3:c4: 7c:78:f6:81:61:d8:59:80:ef:86:1b:8a:79:c1:9e: e1:08:17:b5:54:54:38:7e:ba:00:a0:6c:f4:94:e1: 61:db:88:2d:bd:a0:73:04:0c:51:78:b9:84:f0:63: 83:b1:29:c9:e0:73:15:94:ee:ce:22:da:55:37:2e: 1d:3f:af:3e:7a:ba:ee:7f:7b:ed:08:2f:4e:f4:ce: aa:4f:5b:5c:ee:c5:f2:e4:07:af:31:32:31:6b:8d: 58:42:c9:0d:ed:a5:ef:8b:64:20:ab:3a:02:bf:3f: 2e:1c:f7:82:69:c6:77:8e:73:00:d7:a2:71:b8:71: 1c:b9:28:a0:e2:4a:cb:43:58:f3:cd:11:87:cb:df: 02:4d:59:85:f2:fc:c9:1f:9b:3a:25:d5:69:e5:e6: 9a:c1:fe:33:1d:94:16:90:f6:49:59:69:12:9b:da: 85:bb:c0:ba:d6:d0:f5:2b:60:7b:65:a1:af:1a:d4: ff:0d:be:08:bb:52:22:23:82:82:f7:8e:9f:0e:98: 1f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:ED:81:40:55:34:6E:16:32:89:5A:F6:5F:7A:AD:05:03:B1:25:71 X509v3 Authority Key Identifier: keyid:04:74:F4:06:A1:78:D2:2C:54:D5:EF:72:4C:6B:2C:2C:9A:3B:6B:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BHT0BqF40ixU1e9yTGssLJo7a5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:e9:ae:dd:22:23:6a:f5:44:61:83:5b:20:41:28:a2:3e:0e: 56:56:2a:8d:1f:02:a7:79:4a:da:1b:d1:5a:97:7d:0b:20:97: 50:89:cc:3b:59:3b:47:5c:d7:9a:25:21:01:6c:49:5c:52:c5: 47:89:04:6a:b7:9d:65:7f:e5:50:b1:08:24:0d:a0:b3:38:05: af:37:ac:f1:0e:d2:3f:05:75:d4:69:2b:0f:1e:5b:65:87:21: 6e:95:37:3c:27:c1:89:f2:03:74:e0:da:42:9f:da:d6:30:ee: c4:6e:44:c8:45:54:11:cc:9d:80:d7:c8:35:73:93:b6:0e:50: cd:e8:5a:8f:bc:07:aa:7b:de:0b:e6:1b:a0:cf:5e:80:c8:07: cf:68:7f:52:21:45:99:5e:4b:14:95:39:d3:a8:91:99:29:dd: a9:b4:81:da:d2:13:c2:c4:d5:29:37:fb:77:ac:fb:86:fc:c4: 49:04:6e:dc:2c:38:35:84:1f:9b:18:9a:36:61:e8:e9:40:70: 25:e3:01:c9:49:bc:16:45:d5:7e:dc:ba:75:8a:96:0e:f5:6d: e0:71:bf:f6:4f:53:c7:b7:0a:43:d1:cd:f6:5c:81:b0:99:f7: a1:1f:dc:62:6a:c7:1e:63:a5:ea:cc:fa:8d:8c:22:61:26:8c: fd:40:dc:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYwQ0YxMTAvBgNVBAUTKDA0NzRGNDA2QTE3OEQyMkM1NEQ1RUY3MjRDNkIyQzJD OUEzQjZCOTgwHhcNMjUwNDA1MDUzNTU4WhcNMjUwNDEyMDUzNTU4WjAYMRYwFAYD VQQDEw02N2YwYzEzZS1iODk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsSceh6wx6QRL2SpbLIqICveDdjBasZS9tca64YwfHhPC3ATGOP3TLq2SVL6O 3hMekEJXbL4c8jN4s8R8ePaBYdhZgO+GG4p5wZ7hCBe1VFQ4froAoGz0lOFh24gt vaBzBAxReLmE8GODsSnJ4HMVlO7OItpVNy4dP68+erruf3vtCC9O9M6qT1tc7sXy 5AevMTIxa41YQskN7aXvi2QgqzoCvz8uHPeCacZ3jnMA16JxuHEcuSig4krLQ1jz zRGHy98CTVmF8vzJH5s6JdVp5eaawf4zHZQWkPZJWWkSm9qFu8C61tD1K2B7ZaGv GtT/Db4Iu1IiI4KC946fDpgfgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDrtgUBV NG4WMola9l96rQUDsSVxMB8GA1UdIwQYMBaAFAR09AaheNIsVNXvckxrLCyaO2uY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjBDRi9FNTM2MDhGMDJB RkMxMUVGQTAyNDNDNEFDNEY5QUUwMi9CSFQwQnFGNDBpeFUxZTl5VEdzc0xKbzdh NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JIVDBCcUY0MGl4VTFlOXlUR3NzTEpvN2E1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjBDRi9FNTM2MDhGMDJBRkMxMUVGQTAyNDNDNEFDNEY5QUUwMi9CSFQwQnFGNDBp eFUxZTl5VEdzc0xKbzdhNWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAd6a7dIiNq9URhg1sgQSiiPg5WViqNHwKneUraG9Fal30LIJdQicw7 WTtHXNeaJSEBbElcUsVHiQRqt51lf+VQsQgkDaCzOAWvN6zxDtI/BXXUaSsPHltl hyFulTc8J8GJ8gN04NpCn9rWMO7EbkTIRVQRzJ2A18g1c5O2DlDN6FqPvAeqe94L 5hugz16AyAfPaH9SIUWZXksUlTnTqJGZKd2ptIHa0hPCxNUpN/t3rPuG/MRJBG7c LDg1hB+bGJo2YejpQHAl4wHJSbwWRdV+3Lp1ipYO9W3gcb/2T1PHtwpD0c32XIGw mfehH9xiasceY6XqzPqNjCJhJoz9QNy5 -----END CERTIFICATE-----Generated at Sun Apr 6 15:07:25 2025 by rpki-client