$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.mft File: bBl9pJIs_dxOmMiEbgOn19DkC3E.mft (raw, json) Hash identifier: tgiVHqFnl9+kBtVbGa7xcnd4c3SoA7lLbN27eBUhDr0= Subject key identifier: BF:11:DA:29:A0:1E:3E:78:03:D9:4E:CF:9D:50:31:25:71:A7:56:9A Authority key identifier: 6C:19:7D:A4:92:2C:FD:DC:4E:98:C8:84:6E:03:A7:D7:D0:E4:0B:71 Certificate issuer: /CN=A91EF2E1/serialNumber=6C197DA4922CFDDC4E98C8846E03A7D7D0E40B71 Certificate serial: 065F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBl9pJIs_dxOmMiEbgOn19DkC3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.mft Manifest number: 064E Signing time: Fri 04 Apr 2025 22:35:49 +0000 Manifest this update: Fri 04 Apr 2025 22:35:49 +0000 Manifest next update: Fri 11 Apr 2025 22:35:49 +0000 Files and hashes: 1: bBl9pJIs_dxOmMiEbgOn19DkC3E.crl (hash: TKmZ4EXmHHk9jXUFOXFi/GCIxpHQJXzrL8Ifc3IukDY=) 2: ECCDCA04809A11EB9093216EC4F9AE02.roa (hash: qTJ268wwQytdjg2xmDrgJYTCKvbgN+TXWt8f/k8okt0=) 3: 397ED08A2F7911ED93B17C0FC4F9AE02.roa (hash: zfaY1cNWt+kwCxFOi06ByxEpzX/DlmwX7UsrdOWHxWY=) 4: 7D6F53547F0411EBB8CAEE2BC4F9AE02.roa (hash: MuS1D/2+8EGkgIkIccTnkaRbLVS0UhbQOaZ6Z/zRhQ0=) 5: 08C849682F6E11EDA8ABA74BC4F9AE02.roa (hash: IpyajZd4jSVUSR24GGQE7LMlZvvtmRcKtdSc4wuIgfg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.crl rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBl9pJIs_dxOmMiEbgOn19DkC3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 22:35:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1631 (0x65f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF2E1 Validity Not Before: Apr 4 22:35:49 2025 GMT Not After : Apr 11 22:35:49 2025 GMT Subject: CN=67f05ec5-ba55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d0:64:6d:e8:52:99:ff:18:f9:d9:35:40:80: 0f:d5:fc:72:33:cc:76:56:e5:78:06:78:8d:64:37: fa:c7:10:d4:f6:e5:95:c6:fd:05:71:06:00:ac:0d: 6f:63:35:29:8c:53:c6:58:29:4b:4f:05:44:ac:c6: f5:55:0c:38:92:ff:e9:48:d6:7f:46:9c:8d:1f:f3: de:2c:46:0f:41:30:ab:60:44:b6:45:a2:0d:be:d2: 92:2f:c0:35:ca:83:df:5e:8f:69:6d:39:a9:1c:b0: e0:b7:8d:31:51:60:fa:c3:1d:16:f9:d0:b1:05:5a: 25:ac:ee:47:24:21:e5:a5:8b:85:48:2a:51:72:f1: ef:9d:26:20:57:7a:2b:21:1d:b3:e2:bb:b1:f4:9b: 85:07:37:da:6c:ae:65:be:e2:f9:3e:0a:2c:66:29: 87:79:20:f4:e5:b9:a7:53:80:11:c3:2d:60:3b:fd: 88:94:7c:cd:65:ee:70:af:f4:64:41:9e:80:27:24: c9:d3:13:55:c4:5d:53:42:22:5b:4e:be:0c:c3:58: 81:e7:c0:f4:9a:37:8d:69:81:6f:0f:10:f8:0c:26: 02:32:c0:1a:0d:ee:68:11:f3:9f:16:f9:71:34:10: 7f:c6:9f:07:2b:5c:f6:a3:18:7d:28:72:cf:2e:52: 86:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:11:DA:29:A0:1E:3E:78:03:D9:4E:CF:9D:50:31:25:71:A7:56:9A X509v3 Authority Key Identifier: keyid:6C:19:7D:A4:92:2C:FD:DC:4E:98:C8:84:6E:03:A7:D7:D0:E4:0B:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBl9pJIs_dxOmMiEbgOn19DkC3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:4d:3c:8a:3e:39:51:83:c0:a6:d9:e9:97:cc:3d:aa:65:17: 99:aa:c3:51:6f:05:42:73:f8:f2:52:14:91:cd:98:c1:d7:c3: cc:be:bb:0d:c4:61:cd:78:67:fd:ab:85:ae:91:7e:43:2b:a9: 2e:9c:c3:fd:78:f4:dc:85:ca:77:c7:01:40:56:8d:85:c1:85: 49:3f:cd:fa:80:c3:04:e7:1e:7f:9c:a7:f0:ea:88:d3:aa:5c: 1d:de:4f:91:df:fb:89:f5:6b:29:92:9e:f0:fb:de:73:11:fc: e0:60:6f:67:42:43:9c:42:48:e4:1f:08:48:52:fc:70:1f:7d: df:a2:f6:e0:0e:1c:6d:c1:32:3f:e7:46:8f:dd:69:0e:23:4e: ba:3a:ba:0d:d4:dc:e5:5b:e3:10:96:f8:8d:79:99:15:2c:73: 0b:24:5b:d7:ef:d7:8d:28:66:a7:a4:bc:f3:35:38:e4:73:8f: e4:2c:9a:d7:dc:fa:17:b6:90:b0:5e:12:7b:23:a2:0f:fd:b6: 54:4e:06:ab:25:a2:2b:6a:a5:62:ac:8a:77:2b:84:f6:8f:fb: a8:1c:dc:4d:c6:94:fb:41:54:84:99:6b:cb:b0:e9:77:7c:dd: 94:0b:e1:07:73:71:45:31:db:27:4f:0e:4f:c6:d5:62:9e:5d: 7a:72:6c:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYyRTExMTAvBgNVBAUTKDZDMTk3REE0OTIyQ0ZEREM0RTk4Qzg4NDZFMDNBN0Q3 RDBFNDBCNzEwHhcNMjUwNDA0MjIzNTQ5WhcNMjUwNDExMjIzNTQ5WjAYMRYwFAYD VQQDEw02N2YwNWVjNS1iYTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAydBkbehSmf8Y+dk1QIAP1fxyM8x2VuV4BniNZDf6xxDU9uWVxv0FcQYArA1v YzUpjFPGWClLTwVErMb1VQw4kv/pSNZ/RpyNH/PeLEYPQTCrYES2RaINvtKSL8A1 yoPfXo9pbTmpHLDgt40xUWD6wx0W+dCxBVolrO5HJCHlpYuFSCpRcvHvnSYgV3or IR2z4rux9JuFBzfabK5lvuL5PgosZimHeSD05bmnU4ARwy1gO/2IlHzNZe5wr/Rk QZ6AJyTJ0xNVxF1TQiJbTr4Mw1iB58D0mjeNaYFvDxD4DCYCMsAaDe5oEfOfFvlx NBB/xp8HK1z2oxh9KHLPLlKGhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL8R2img Hj54A9lOz51QMSVxp1aaMB8GA1UdIwQYMBaAFGwZfaSSLP3cTpjIhG4Dp9fQ5Atx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjJFMS8zRjY5Q0M2NjdG MDMxMUVCQTA4MUEwMkJDNEY5QUUwMi9iQmw5cEpJc19keE9tTWlFYmdPbjE5RGtD M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JCbDlwSklzX2R4T21NaUViZ09uMTlEa0MzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjJFMS8zRjY5Q0M2NjdGMDMxMUVCQTA4MUEwMkJDNEY5QUUwMi9iQmw5cEpJc19k eE9tTWlFYmdPbjE5RGtDM0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZTTyKPjlRg8Cm2emXzD2qZReZqsNRbwVCc/jyUhSRzZjB18PMvrsN xGHNeGf9q4WukX5DK6kunMP9ePTchcp3xwFAVo2FwYVJP836gMME5x5/nKfw6ojT qlwd3k+R3/uJ9Wspkp7w+95zEfzgYG9nQkOcQkjkHwhIUvxwH33fovbgDhxtwTI/ 50aP3WkOI066OroN1NzlW+MQlviNeZkVLHMLJFvX79eNKGanpLzzNTjkc4/kLJrX 3PoXtpCwXhJ7I6IP/bZUTgarJaIraqVirIp3K4T2j/uoHNxNxpT7QVSEmWvLsOl3 fN2UC+EHc3FFMdsnTw5PxtVinl16cmzv -----END CERTIFICATE-----Generated at Sat Apr 5 18:47:13 2025 by rpki-client