$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3D37/5EE9782ADCEE11ED8C38D031C4F9AE02/bPYEPvYahE8I4lOhk9XZRlSWJ50.mft File: bPYEPvYahE8I4lOhk9XZRlSWJ50.mft (raw, json) Hash identifier: wkeESEngl786elGKBmc2+N1Z7fw6SCYPnMWOClue1XI= Subject key identifier: FD:6B:AE:4A:01:88:D7:15:1F:E0:C3:8A:47:52:BC:46:E8:23:82:18 Authority key identifier: 6C:F6:04:3E:F6:1A:84:4F:08:E2:53:A1:93:D5:D9:46:54:96:27:9D Certificate issuer: /CN=A91F3D37/serialNumber=6CF6043EF61A844F08E253A193D5D9465496279D Certificate serial: 0174 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPYEPvYahE8I4lOhk9XZRlSWJ50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3D37/5EE9782ADCEE11ED8C38D031C4F9AE02/bPYEPvYahE8I4lOhk9XZRlSWJ50.mft Manifest number: 0171 Signing time: Thu 03 Apr 2025 03:07:38 +0000 Manifest this update: Thu 03 Apr 2025 03:07:37 +0000 Manifest next update: Thu 10 Apr 2025 03:07:37 +0000 Files and hashes: 1: bPYEPvYahE8I4lOhk9XZRlSWJ50.crl (hash: /S+cAsjKbnfPgsq9C6CRoQsAzpvZQIo9BkRmDh0oMi0=) 2: 6F67CF8CDCF111ED9828F232C4F9AE02.roa (hash: UUhAaQeYrl7H0iCSeqj7JAOZrw6JcIfsjlzbvaWf61k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3D37/5EE9782ADCEE11ED8C38D031C4F9AE02/bPYEPvYahE8I4lOhk9XZRlSWJ50.crl rsync://rpki.apnic.net/member_repository/A91F3D37/5EE9782ADCEE11ED8C38D031C4F9AE02/bPYEPvYahE8I4lOhk9XZRlSWJ50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPYEPvYahE8I4lOhk9XZRlSWJ50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 03:07:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 372 (0x174) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3D37 Validity Not Before: Apr 3 03:07:37 2025 GMT Not After : Apr 10 03:07:37 2025 GMT Subject: CN=67edfb79-a48e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:43:dc:47:cb:29:73:04:a7:09:0c:60:6c:0a: 82:84:8e:32:dc:cc:b1:28:ce:f0:8d:c0:ff:9e:34: 24:d1:8c:74:0a:d2:1d:7b:54:07:69:47:60:c0:81: e1:3a:f2:a5:11:dc:cf:93:59:05:6d:14:33:94:04: 41:06:ae:ae:6d:f2:14:50:f0:5b:ad:ba:49:f6:38: 31:9d:0c:64:a1:d9:4e:be:8b:2c:69:8d:e2:24:95: 19:79:72:0e:6c:69:9e:21:d7:18:a0:14:f4:a9:f0: 9f:dd:2e:64:88:87:6a:8c:5a:25:fa:08:1c:ad:0c: 34:04:4a:0a:c7:8f:94:76:12:b4:31:53:48:c7:18: 2f:96:05:97:7f:2f:bd:7b:82:de:b1:0a:ec:6e:97: 4a:fc:35:ad:2a:8b:e2:71:d8:fc:81:0c:9f:f4:67: 78:56:3a:de:82:c8:72:74:5d:c1:a7:dd:e7:a3:67: 9f:87:65:29:49:28:fc:22:1e:b0:b1:1b:8c:ef:4f: da:eb:e2:31:16:f4:aa:1a:35:74:f5:3c:b0:fe:1d: 18:e4:da:89:75:44:6b:db:c2:f7:4d:48:70:da:d4: 4d:91:46:4a:fc:63:ed:82:bb:b4:35:0b:d9:40:68: 23:44:c0:18:67:1e:45:f2:fb:ee:37:8c:7e:26:a7: f8:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:6B:AE:4A:01:88:D7:15:1F:E0:C3:8A:47:52:BC:46:E8:23:82:18 X509v3 Authority Key Identifier: keyid:6C:F6:04:3E:F6:1A:84:4F:08:E2:53:A1:93:D5:D9:46:54:96:27:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3D37/5EE9782ADCEE11ED8C38D031C4F9AE02/bPYEPvYahE8I4lOhk9XZRlSWJ50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPYEPvYahE8I4lOhk9XZRlSWJ50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3D37/5EE9782ADCEE11ED8C38D031C4F9AE02/bPYEPvYahE8I4lOhk9XZRlSWJ50.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:b7:4e:16:6a:b0:d2:93:59:aa:80:2f:6e:bc:12:dd:b0:df: 45:9d:e4:03:45:0a:5e:87:bc:61:82:74:c5:ea:c0:c7:cb:97: db:00:d9:a4:e1:8b:af:ae:fe:19:0b:2b:2d:56:56:7d:b4:12: ab:20:d8:aa:d8:b7:68:d2:a6:be:df:f9:9e:a2:4d:7c:74:1b: 13:59:00:ab:3c:71:f2:cd:06:45:4a:14:56:84:c0:bc:b7:6e: a8:3f:88:b3:4a:82:d4:a1:0c:39:40:e9:6b:3e:d7:6d:75:ae: 03:e3:30:73:f5:39:e6:b1:b9:0d:81:17:c1:c5:87:36:f0:b5: 05:a1:41:69:fc:a5:6d:7d:84:0c:d1:56:72:73:99:07:bc:5f: 31:21:e2:87:87:cc:e9:1d:aa:e2:2d:8a:f1:b7:34:3d:d2:4f: d4:dd:fb:56:04:55:1f:06:75:0e:14:83:59:2e:ef:b6:d6:48: b1:ed:82:02:cc:20:4a:5d:bb:05:42:1f:82:8f:31:d4:7e:f1: 59:98:2d:8d:c6:e3:98:30:69:e2:11:ee:0b:5b:67:1c:ad:20: 4d:0d:b4:a0:14:8d:77:8e:83:34:da:20:c8:47:b6:97:91:cb: c3:4b:2a:c4:be:0c:60:c6:a8:76:45:30:05:40:01:04:e7:d2: 00:dd:d9:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNEMzcxMTAvBgNVBAUTKDZDRjYwNDNFRjYxQTg0NEYwOEUyNTNBMTkzRDVEOTQ2 NTQ5NjI3OUQwHhcNMjUwNDAzMDMwNzM3WhcNMjUwNDEwMDMwNzM3WjAYMRYwFAYD VQQDEw02N2VkZmI3OS1hNDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvkPcR8spcwSnCQxgbAqChI4y3MyxKM7wjcD/njQk0Yx0CtIde1QHaUdgwIHh OvKlEdzPk1kFbRQzlARBBq6ubfIUUPBbrbpJ9jgxnQxkodlOvossaY3iJJUZeXIO bGmeIdcYoBT0qfCf3S5kiIdqjFol+ggcrQw0BEoKx4+UdhK0MVNIxxgvlgWXfy+9 e4LesQrsbpdK/DWtKovicdj8gQyf9Gd4VjregshydF3Bp93no2efh2UpSSj8Ih6w sRuM70/a6+IxFvSqGjV09Tyw/h0Y5NqJdURr28L3TUhw2tRNkUZK/GPtgru0NQvZ QGgjRMAYZx5F8vvuN4x+Jqf4xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP1rrkoB iNcVH+DDikdSvEboI4IYMB8GA1UdIwQYMBaAFGz2BD72GoRPCOJToZPV2UZUlied MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0QzNy81RUU5NzgyQURD RUUxMUVEOEMzOEQwMzFDNEY5QUUwMi9iUFlFUHZZYWhFOEk0bE9oazlYWlJsU1dK NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JQWUVQdllhaEU4STRsT2hrOVhaUmxTV0o1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0QzNy81RUU5NzgyQURDRUUxMUVEOEMzOEQwMzFDNEY5QUUwMi9iUFlFUHZZYWhF OEk0bE9oazlYWlJsU1dKNTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyt04WarDSk1mqgC9uvBLdsN9FneQDRQpeh7xhgnTF6sDHy5fbANmk 4Yuvrv4ZCystVlZ9tBKrINiq2Ldo0qa+3/meok18dBsTWQCrPHHyzQZFShRWhMC8 t26oP4izSoLUoQw5QOlrPtdtda4D4zBz9TnmsbkNgRfBxYc28LUFoUFp/KVtfYQM 0VZyc5kHvF8xIeKHh8zpHariLYrxtzQ90k/U3ftWBFUfBnUOFINZLu+21kix7YIC zCBKXbsFQh+CjzHUfvFZmC2NxuOYMGniEe4LW2ccrSBNDbSgFI13joM02iDIR7aX kcvDSyrEvgxgxqh2RTAFQAEE59IA3dln -----END CERTIFICATE-----Generated at Sat Apr 5 03:50:10 2025 by rpki-client