$ rpki-client -vvf rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.mft File: Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.mft (raw, json) Hash identifier: mXl0jTLcsvGh8vJ5ydjU3MxY9S8FzdsY8kweXlTTlRA= Subject key identifier: 2F:AF:E1:CD:1A:23:4A:E3:C6:DF:E9:23:77:44:6D:C3:EE:32:9B:B1 Authority key identifier: 05:BE:F3:B7:64:63:56:CE:40:9F:C5:63:F2:A6:90:78:67:79:5E:F7 Certificate issuer: /CN=A91D795B/serialNumber=05BEF3B7646356CE409FC563F2A6907867795EF7 Certificate serial: 050F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.mft Manifest number: 050A Signing time: Wed 16 Apr 2025 23:17:35 +0000 Manifest this update: Wed 16 Apr 2025 23:17:35 +0000 Manifest next update: Wed 23 Apr 2025 23:17:35 +0000 Files and hashes: 1: Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.crl (hash: Vm2Mjx7OV1V5aNIbkiWIKrvsObUU2HhLXpeCdPjcf3g=) 2: 7C05ACEE75B311EF83EC6F78C4F9AE02.roa (hash: 4HbuRwfGRyDZiXaifrjrnY5mPijGwg/rzxNxMS6Fugs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.crl rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 23:17:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1295 (0x50f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D795B, serialNumber=05BEF3B7646356CE409FC563F2A6907867795EF7 Validity Not Before: Apr 16 23:17:35 2025 GMT Not After : Apr 23 23:17:35 2025 GMT Subject: CN=68003a8f-2162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:aa:16:cd:67:47:58:b8:4b:bb:bc:36:07:e0: 12:66:a8:28:21:8c:eb:d8:6d:1e:a6:0a:db:2c:6b: 33:3c:d4:b8:44:93:13:1d:3a:b4:95:9f:b5:0f:dc: ca:7c:d2:67:27:a4:1f:eb:2a:e4:ad:c4:34:dc:45: 7f:73:63:0f:02:47:e2:64:f6:21:cb:41:87:13:57: 69:40:34:e9:22:d9:f6:92:6a:36:f3:2b:92:76:e9: 22:f9:b1:27:59:a3:6f:41:5a:0e:e3:d0:2c:12:96: e1:58:96:c4:b9:d6:0a:00:c2:b0:3b:9f:99:79:d2: dc:ef:66:5b:41:c5:b9:9d:83:09:ee:5b:dd:76:ab: ee:3b:dc:4e:68:5d:20:6a:db:68:2f:0f:2e:d9:06: fe:77:e3:7e:76:ef:5c:57:17:0b:e7:98:83:b1:56: 9b:e9:c1:69:e5:07:d9:20:05:99:e1:4f:98:1f:2b: a2:87:97:36:9a:53:2d:55:63:ae:77:3b:1e:70:56: e7:61:66:d3:b0:a0:28:09:56:4f:7b:e4:2f:3e:b7: f1:57:78:5e:45:e6:05:34:94:66:71:89:58:a2:64: 9c:e7:78:c6:62:32:62:4e:45:e1:00:df:8c:34:45: 32:be:b3:8c:b5:b0:35:05:c4:87:4a:12:89:86:45: dc:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:AF:E1:CD:1A:23:4A:E3:C6:DF:E9:23:77:44:6D:C3:EE:32:9B:B1 X509v3 Authority Key Identifier: keyid:05:BE:F3:B7:64:63:56:CE:40:9F:C5:63:F2:A6:90:78:67:79:5E:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:83:0e:fb:6c:21:f7:f3:78:cf:09:1a:7f:5e:e3:34:77:1f: d9:fd:19:88:9e:b7:8c:e9:21:45:f1:62:e3:72:87:d7:99:e8: c1:42:80:0e:75:a3:05:77:fa:f9:83:93:6a:90:c0:b6:8a:84: 96:20:63:9e:e4:90:ed:7f:4d:9b:81:66:e1:2a:4f:c4:b3:9a: bf:bf:a7:8a:cd:86:f2:e8:3b:bb:c2:67:79:45:3e:cd:f6:4f: 52:de:7f:ba:13:f2:2f:8b:b0:f2:b1:55:f9:9c:c9:c8:78:ed: 3e:af:8b:86:e1:57:d1:37:14:7b:3c:d2:4e:b4:3a:db:84:0b: 16:77:d9:43:52:cb:ce:1e:0b:0b:21:06:f8:a6:70:30:bd:9a: b6:b4:b7:b7:66:3a:49:37:55:32:21:b2:7e:ab:03:8b:41:ca: d4:1c:92:9b:c0:dd:0d:a7:ea:3d:8f:7a:7c:92:73:1d:2f:9e: 6f:3c:ae:9e:2e:99:5a:33:0c:eb:fc:c2:fc:26:72:93:b0:c7: b8:55:a0:8c:ae:3a:f5:19:c9:c1:73:d0:91:f5:be:ac:1b:53: 3e:66:26:f5:31:97:93:c8:1f:76:63:3c:ba:d4:c9:13:24:13: 83:1c:9c:5c:fc:b2:28:18:51:74:8f:d5:4b:26:2d:80:ef:c3: b1:c1:c4:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc5NUIxMTAvBgNVBAUTKDA1QkVGM0I3NjQ2MzU2Q0U0MDlGQzU2M0YyQTY5MDc4 Njc3OTVFRjcwHhcNMjUwNDE2MjMxNzM1WhcNMjUwNDIzMjMxNzM1WjAYMRYwFAYD VQQDEw02ODAwM2E4Zi0yMTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwKoWzWdHWLhLu7w2B+ASZqgoIYzr2G0epgrbLGszPNS4RJMTHTq0lZ+1D9zK fNJnJ6Qf6yrkrcQ03EV/c2MPAkfiZPYhy0GHE1dpQDTpItn2kmo28yuSduki+bEn WaNvQVoO49AsEpbhWJbEudYKAMKwO5+ZedLc72ZbQcW5nYMJ7lvddqvuO9xOaF0g attoLw8u2Qb+d+N+du9cVxcL55iDsVab6cFp5QfZIAWZ4U+YHyuih5c2mlMtVWOu dzsecFbnYWbTsKAoCVZPe+QvPrfxV3heReYFNJRmcYlYomSc53jGYjJiTkXhAN+M NEUyvrOMtbA1BcSHShKJhkXcaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC+v4c0a I0rjxt/pI3dEbcPuMpuxMB8GA1UdIwQYMBaAFAW+87dkY1bOQJ/FY/KmkHhneV73 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzk1Qi9BODhGQjNFMjAw QzAxMUVDOTZDMkQ1ODNDNEY5QUUwMi9CYjd6dDJSalZzNUFuOFZqOHFhUWVHZDVY dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JiN3p0MlJqVnM1QW44Vmo4cWFRZUdkNVh2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Nzk1Qi9BODhGQjNFMjAwQzAxMUVDOTZDMkQ1ODNDNEY5QUUwMi9CYjd6dDJSalZz NUFuOFZqOHFhUWVHZDVYdmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmgw77bCH383jPCRp/XuM0dx/Z/RmInreM6SFF8WLjcofXmejBQoAO daMFd/r5g5NqkMC2ioSWIGOe5JDtf02bgWbhKk/Es5q/v6eKzYby6Du7wmd5RT7N 9k9S3n+6E/Ivi7DysVX5nMnIeO0+r4uG4VfRNxR7PNJOtDrbhAsWd9lDUsvOHgsL IQb4pnAwvZq2tLe3ZjpJN1UyIbJ+qwOLQcrUHJKbwN0Np+o9j3p8knMdL55vPK6e LplaMwzr/ML8JnKTsMe4VaCMrjr1GcnBc9CR9b6sG1M+Zib1MZeTyB92Yzy61MkT JBODHJxc/LIoGFF0j9VLJi2A78OxwcTV -----END CERTIFICATE-----Generated at Fri Apr 18 10:33:16 2025 by rpki-client