$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft File: bicEPDr0D8Xll5OLFU9ci-D9_2w.mft (raw, json) Hash identifier: iIwTqnpH+F+ApmsRgrixFuSmEo9EPG9uA2ATGCRjqlw= Subject key identifier: 45:91:03:E0:55:74:E5:FB:24:BA:77:25:B2:30:31:5A:4A:CE:B6:BA Authority key identifier: 6E:27:04:3C:3A:F4:0F:C5:E5:97:93:8B:15:4F:5C:8B:E0:FD:FF:6C Certificate issuer: /CN=A91E01F7/serialNumber=6E27043C3AF40FC5E597938B154F5C8BE0FDFF6C Certificate serial: 0727 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bicEPDr0D8Xll5OLFU9ci-D9_2w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft Manifest number: 0722 Signing time: Fri 28 Mar 2025 22:05:41 +0000 Manifest this update: Fri 28 Mar 2025 22:05:41 +0000 Manifest next update: Fri 04 Apr 2025 22:05:41 +0000 Files and hashes: 1: bicEPDr0D8Xll5OLFU9ci-D9_2w.crl (hash: aA3AZOV8SDypIWEDrLA8m3BKCAwN/xx385PmUFlHW7A=) 2: C4E6FFAE2A5C11EB9D022535C4F9AE02.roa (hash: 0mX5AyQ3/wAE6Y3GapFs8PrduN5XApUo77DD01nsgSE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.crl rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bicEPDr0D8Xll5OLFU9ci-D9_2w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 22:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1831 (0x727) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E01F7 Validity Not Before: Mar 28 22:05:41 2025 GMT Not After : Apr 4 22:05:41 2025 GMT Subject: CN=67e71d35-040f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b1:aa:13:7a:33:76:0f:bd:45:a0:f7:58:f3: 44:63:c5:a1:c0:54:47:fa:3e:dd:f7:34:ab:67:57: 30:4d:d2:74:3a:bc:5d:5b:fa:ff:e0:d7:5d:b9:9c: e7:fd:63:24:c9:3b:9f:e0:a1:9e:42:22:dc:79:36: bd:43:28:b3:1d:6e:6e:a3:b2:b6:42:9c:5d:44:38: f2:18:1d:be:d9:01:d9:d4:a5:dd:29:73:c4:67:2f: 05:ab:f1:4c:6f:23:24:cc:27:38:8b:e7:19:9b:7f: 89:3f:5b:76:16:5e:33:e9:58:eb:4e:f9:34:eb:d9: 6c:b7:bf:67:ac:9f:00:1b:08:ed:a9:0c:52:3c:21: 8e:fb:e4:db:6f:7c:82:2d:25:e9:73:25:43:49:ce: 2c:d6:88:2e:d3:d1:9b:a0:9f:58:b2:a5:57:ca:36: aa:8f:5d:68:7b:a6:76:69:15:06:3d:fa:52:72:24: eb:39:9f:25:c7:bf:5b:fa:b1:22:d0:5c:92:e5:ab: 40:9a:c1:54:a8:46:d8:47:ed:88:e8:db:62:cf:d1: 34:ca:c8:88:d8:2a:d4:13:81:50:9a:82:81:3b:a6: 3f:2e:52:d5:68:6a:20:f2:fb:a5:c3:75:da:82:fd: e8:f5:7a:40:3e:5a:a0:7a:aa:4b:bf:d1:87:ba:fd: d3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:91:03:E0:55:74:E5:FB:24:BA:77:25:B2:30:31:5A:4A:CE:B6:BA X509v3 Authority Key Identifier: keyid:6E:27:04:3C:3A:F4:0F:C5:E5:97:93:8B:15:4F:5C:8B:E0:FD:FF:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bicEPDr0D8Xll5OLFU9ci-D9_2w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:24:4d:fc:21:49:84:49:17:23:ec:1a:1a:24:47:08:f4:c1: da:d9:8e:7b:19:1d:d3:5d:85:ed:74:a7:bb:4d:3a:76:74:6f: d7:79:ba:5a:cf:78:92:00:75:44:6e:73:d3:24:7b:bf:8f:57: c1:7b:a4:a9:15:23:a0:5b:f2:df:75:34:f8:27:6a:26:a8:aa: 75:4f:f2:58:ba:2b:e8:12:bc:a4:b2:5d:52:06:f0:f1:6d:ee: 5d:88:19:1b:5f:c4:ba:f7:a0:94:5a:a4:fd:6c:5a:58:aa:94: 3f:29:97:63:7e:95:4e:26:1a:21:aa:31:93:3d:9b:d5:34:e1: ac:8e:5e:1b:32:0e:f5:52:9a:1f:3b:f8:ee:d7:1d:97:5a:55: 12:8c:d4:6c:41:b9:d4:54:bb:01:c7:11:f1:32:b1:0a:9d:a0: 16:b0:3d:b4:ef:16:5f:88:e0:4c:2f:85:f9:4d:7a:e9:bd:80: 92:01:9e:d7:5e:1c:92:08:9e:a9:a6:cc:c2:ce:ee:50:2f:c8: 33:ec:ed:f0:34:d3:aa:0c:7a:ff:ba:f3:8f:21:8e:14:60:b9: 93:5a:9f:d1:16:75:f0:ef:e1:51:88:48:cb:c1:96:a9:d6:65: d1:80:42:22:6d:06:1b:5a:0c:ac:07:d1:7f:03:2a:a6:31:c0: 4b:d0:f7:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBycwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAxRjcxMTAvBgNVBAUTKDZFMjcwNDNDM0FGNDBGQzVFNTk3OTM4QjE1NEY1QzhC RTBGREZGNkMwHhcNMjUwMzI4MjIwNTQxWhcNMjUwNDA0MjIwNTQxWjAYMRYwFAYD VQQDEw02N2U3MWQzNS0wNDBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2rGqE3ozdg+9RaD3WPNEY8WhwFRH+j7d9zSrZ1cwTdJ0OrxdW/r/4NdduZzn /WMkyTuf4KGeQiLceTa9QyizHW5uo7K2QpxdRDjyGB2+2QHZ1KXdKXPEZy8Fq/FM byMkzCc4i+cZm3+JP1t2Fl4z6VjrTvk069lst79nrJ8AGwjtqQxSPCGO++Tbb3yC LSXpcyVDSc4s1ogu09GboJ9YsqVXyjaqj11oe6Z2aRUGPfpSciTrOZ8lx79b+rEi 0FyS5atAmsFUqEbYR+2I6Ntiz9E0ysiI2CrUE4FQmoKBO6Y/LlLVaGog8vulw3Xa gv3o9XpAPlqgeqpLv9GHuv3T9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEWRA+BV dOX7JLp3JbIwMVpKzra6MB8GA1UdIwQYMBaAFG4nBDw69A/F5ZeTixVPXIvg/f9s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDFGNy9GOTFEMEQyODJB NUIxMUVCQjg5MjFDMzVDNEY5QUUwMi9iaWNFUERyMEQ4WGxsNU9MRlU5Y2ktRDlf MncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JpY0VQRHIwRDhYbGw1T0xGVTljaS1EOV8ydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDFGNy9GOTFEMEQyODJBNUIxMUVCQjg5MjFDMzVDNEY5QUUwMi9iaWNFUERyMEQ4 WGxsNU9MRlU5Y2ktRDlfMncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkJE38IUmESRcj7BoaJEcI9MHa2Y57GR3TXYXtdKe7TTp2dG/Xebpa z3iSAHVEbnPTJHu/j1fBe6SpFSOgW/LfdTT4J2omqKp1T/JYuivoEryksl1SBvDx be5diBkbX8S696CUWqT9bFpYqpQ/KZdjfpVOJhohqjGTPZvVNOGsjl4bMg71Upof O/ju1x2XWlUSjNRsQbnUVLsBxxHxMrEKnaAWsD207xZfiOBML4X5TXrpvYCSAZ7X XhySCJ6ppszCzu5QL8gz7O3wNNOqDHr/uvOPIY4UYLmTWp/RFnXw7+FRiEjLwZap 1mXRgEIibQYbWgysB9F/AyqmMcBL0Pfo -----END CERTIFICATE-----Generated at Fri Apr 4 18:36:01 2025 by rpki-client