$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.mft File: BZOGVctKEp6P3fsJQsICA-N-G8E.mft (raw, json) Hash identifier: fJhWVUVcxxB/zFfoIrTkNAKAkntUDmq+aDgSFAba7QM= Subject key identifier: AE:DA:80:FE:B8:36:C1:88:34:D5:78:7A:51:B5:5D:B1:A8:50:D9:EF Authority key identifier: 05:93:86:55:CB:4A:12:9E:8F:DD:FB:09:42:C2:02:03:E3:7E:1B:C1 Certificate issuer: /CN=A91EF5AE/serialNumber=05938655CB4A129E8FDDFB0942C20203E37E1BC1 Certificate serial: 0386 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BZOGVctKEp6P3fsJQsICA-N-G8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.mft Manifest number: 0381 Signing time: Thu 03 Apr 2025 00:51:43 +0000 Manifest this update: Thu 03 Apr 2025 00:51:42 +0000 Manifest next update: Thu 10 Apr 2025 00:51:42 +0000 Files and hashes: 1: BZOGVctKEp6P3fsJQsICA-N-G8E.crl (hash: sfdryl/VR9I8R0G4gFSyh3e8IfqVOcLALKJixgKhJoU=) 2: 1D45733C9AAB11ECBDD79E1EC4F9AE02.roa (hash: IDcKfjrcD970kwyhuo4LacbpxchYwfNjnBXBdXrdXbs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.crl rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BZOGVctKEp6P3fsJQsICA-N-G8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 00:51:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 902 (0x386) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF5AE Validity Not Before: Apr 3 00:51:42 2025 GMT Not After : Apr 10 00:51:42 2025 GMT Subject: CN=67eddb9e-da93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:07:e1:21:89:61:54:b0:84:19:d0:26:c3:25: ea:b2:a7:d6:66:3a:d4:c3:9c:4f:74:b1:40:8c:87: 61:f5:6e:e1:9d:19:43:6c:af:ee:b9:e2:a7:1a:fd: 9d:2e:2c:7f:65:8b:6e:eb:fa:14:79:c5:f9:9e:fa: 0f:9b:d9:f5:7b:44:3b:56:ba:2e:6b:ed:b7:e4:f9: 8d:45:b8:11:f0:3f:88:05:11:5a:d8:97:97:2c:79: 37:c7:ad:02:cb:28:70:47:b3:23:df:cc:27:fc:bb: 36:77:74:5c:f8:9a:ac:34:71:46:0e:14:fc:43:5f: a1:17:d1:a0:2f:81:7c:f9:ef:6f:af:93:ee:61:9a: e1:08:fc:26:10:ca:a7:05:d2:5f:89:3e:b3:a1:3e: f2:04:9b:6f:c1:0d:ca:70:6b:c4:36:b5:4f:6d:df: 36:06:20:5f:e9:58:97:6e:a5:06:ca:fb:8a:6d:93: f3:bf:29:59:da:64:c8:49:a9:a6:62:76:cd:23:75: 61:2a:46:a4:59:e8:c2:6e:ec:eb:67:dd:3f:fb:98: f0:14:e0:fd:4b:5b:e5:36:eb:ac:1c:4c:16:18:76: ae:48:ee:40:3d:e3:f7:19:1b:69:5f:0f:71:7f:4c: 4d:42:2c:b4:03:f4:42:05:6e:40:b5:1e:cb:77:74: 1c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:DA:80:FE:B8:36:C1:88:34:D5:78:7A:51:B5:5D:B1:A8:50:D9:EF X509v3 Authority Key Identifier: keyid:05:93:86:55:CB:4A:12:9E:8F:DD:FB:09:42:C2:02:03:E3:7E:1B:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BZOGVctKEp6P3fsJQsICA-N-G8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:92:a2:19:79:29:f9:03:e1:f4:d6:66:ba:26:8b:b3:4f:92: 3c:e9:73:6b:53:a2:c6:ae:e9:e4:8d:08:54:e9:92:27:40:dc: 33:3e:ef:99:d3:02:13:d6:1e:18:4c:6e:f1:07:11:98:ec:97: c2:d2:06:19:f7:cf:14:0e:80:08:7c:54:d1:11:b6:77:c4:f2: fa:29:ac:40:a6:16:10:53:35:b9:38:61:6e:4f:bf:0d:1f:43: 8f:9f:5e:6f:90:6d:fc:61:a2:4a:7b:df:8f:02:4c:c5:53:71: ea:34:44:1b:2c:8f:1b:7c:48:39:c2:5e:03:80:eb:99:58:f5: 6f:53:2c:64:29:20:43:9d:b0:ab:40:4a:2f:a6:eb:80:2b:da: 0e:46:3f:7f:a1:f7:10:2c:04:e1:d2:2e:f6:5c:4c:6b:9c:69: 5b:ec:14:8d:df:57:cf:1a:a4:a6:6e:9b:49:c2:06:a4:ff:b9: 6f:3d:2c:10:6e:0f:2d:f9:f6:9d:88:f4:4b:dc:58:04:ea:5d: 6c:20:50:2e:97:ae:6b:f9:d5:68:2b:46:23:20:22:3e:54:78: 90:ab:d5:3f:c6:96:44:70:18:73:f6:a3:a7:2d:c5:2b:1c:7e: e9:09:1c:3e:de:cb:1d:6d:44:44:60:bf:78:d0:1f:af:1e:16: 4b:8b:b9:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY1QUUxMTAvBgNVBAUTKDA1OTM4NjU1Q0I0QTEyOUU4RkRERkIwOTQyQzIwMjAz RTM3RTFCQzEwHhcNMjUwNDAzMDA1MTQyWhcNMjUwNDEwMDA1MTQyWjAYMRYwFAYD VQQDEw02N2VkZGI5ZS1kYTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyQfhIYlhVLCEGdAmwyXqsqfWZjrUw5xPdLFAjIdh9W7hnRlDbK/uueKnGv2d Lix/ZYtu6/oUecX5nvoPm9n1e0Q7Vroua+235PmNRbgR8D+IBRFa2JeXLHk3x60C yyhwR7Mj38wn/Ls2d3Rc+JqsNHFGDhT8Q1+hF9GgL4F8+e9vr5PuYZrhCPwmEMqn BdJfiT6zoT7yBJtvwQ3KcGvENrVPbd82BiBf6ViXbqUGyvuKbZPzvylZ2mTISamm YnbNI3VhKkakWejCbuzrZ90/+5jwFOD9S1vlNuusHEwWGHauSO5APeP3GRtpXw9x f0xNQiy0A/RCBW5AtR7Ld3QcmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK7agP64 NsGINNV4elG1XbGoUNnvMB8GA1UdIwQYMBaAFAWThlXLShKej937CULCAgPjfhvB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjVBRS81RTZFMjA3ODlB QTgxMUVDODlENDI0NzRDNEY5QUUwMi9CWk9HVmN0S0VwNlAzZnNKUXNJQ0EtTi1H OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JaT0dWY3RLRXA2UDNmc0pRc0lDQS1OLUc4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjVBRS81RTZFMjA3ODlBQTgxMUVDODlENDI0NzRDNEY5QUUwMi9CWk9HVmN0S0Vw NlAzZnNKUXNJQ0EtTi1HOEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATkqIZeSn5A+H01ma6JouzT5I86XNrU6LGrunkjQhU6ZInQNwzPu+Z 0wIT1h4YTG7xBxGY7JfC0gYZ988UDoAIfFTREbZ3xPL6KaxAphYQUzW5OGFuT78N H0OPn15vkG38YaJKe9+PAkzFU3HqNEQbLI8bfEg5wl4DgOuZWPVvUyxkKSBDnbCr QEovpuuAK9oORj9/ofcQLATh0i72XExrnGlb7BSN31fPGqSmbptJwgak/7lvPSwQ bg8t+fadiPRL3FgE6l1sIFAul65r+dVoK0YjICI+VHiQq9U/xpZEcBhz9qOnLcUr HH7pCRw+3ssdbUREYL940B+vHhZLi7m0 -----END CERTIFICATE-----Generated at Fri Apr 4 22:17:50 2025 by rpki-client