$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.mft File: bIAwUr-WwqtKuqntJqOptGOWBaM.mft (raw, json) Hash identifier: qqHMzk5ld0fL/+HMHc6e0+q5uKF2iBodYUz/sdP2x90= Subject key identifier: 10:BC:5F:27:6D:02:4D:CC:46:9D:13:56:15:65:AB:1A:16:EE:55:B5 Authority key identifier: 6C:80:30:52:BF:96:C2:AB:4A:BA:A9:ED:26:A3:A9:B4:63:96:05:A3 Certificate issuer: /CN=A91F89A2/serialNumber=6C803052BF96C2AB4ABAA9ED26A3A9B4639605A3 Certificate serial: D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bIAwUr-WwqtKuqntJqOptGOWBaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.mft Manifest number: D7 Signing time: Sat 29 Mar 2025 04:58:33 +0000 Manifest this update: Sat 29 Mar 2025 04:58:32 +0000 Manifest next update: Sat 05 Apr 2025 04:58:32 +0000 Files and hashes: 1: bIAwUr-WwqtKuqntJqOptGOWBaM.crl (hash: Bhjyy2UzAN6SKhq4VW5Ad3R/qBhQGpbqN+QpjOb+7H0=) 2: 0FBF57D2F16611EEB75BE640C4F9AE02.roa (hash: th+RZ3xcn9sdtuIwJJBmfy4OKtZmVHO5KksRG1wLXTE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.crl rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bIAwUr-WwqtKuqntJqOptGOWBaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 04:58:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 216 (0xd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F89A2 Validity Not Before: Mar 29 04:58:32 2025 GMT Not After : Apr 5 04:58:32 2025 GMT Subject: CN=67e77df9-799c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:69:66:0a:8a:ed:f4:df:21:82:d9:d7:32:d1: 0d:94:27:e9:77:6c:d7:c9:51:87:8f:bb:07:07:38: 08:77:ce:a1:7b:c1:a5:47:aa:65:fb:68:ad:9f:12: a9:40:4d:c6:c1:bc:74:0b:75:a8:4a:a5:85:50:e5: 99:3d:d0:fb:aa:47:3f:b1:1d:59:c1:73:64:36:a3: b4:16:d7:db:de:42:8d:0e:d7:79:44:bc:6c:9a:8d: c4:8a:4f:be:48:c0:fe:20:b7:ba:65:76:ed:06:f4: fc:bd:ab:7d:34:ea:70:90:4c:9f:e1:d7:7a:1d:be: b7:3a:7f:1d:93:53:e6:31:db:6f:8b:50:85:5b:19: 78:7f:9e:a1:a5:b9:39:61:bf:bd:25:dc:48:9c:cc: c2:6e:5a:60:5c:d7:df:13:c8:6e:8b:9e:d0:b7:9a: 2e:c2:c9:ec:1c:0a:da:69:13:6d:66:20:30:c0:ad: 43:36:51:cb:9f:f6:70:e3:38:74:45:a7:b4:5b:22: 90:f1:6e:f3:eb:ff:63:ca:a0:37:f2:6c:be:f4:f5: c6:57:15:59:d6:c9:12:17:4b:96:0e:6d:f3:4b:5d: b6:98:c7:62:97:86:d0:cc:0f:e9:0f:79:4a:94:b1: a5:22:a8:25:64:e6:cf:e2:a6:dc:a0:2a:5d:ef:0f: 9b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:BC:5F:27:6D:02:4D:CC:46:9D:13:56:15:65:AB:1A:16:EE:55:B5 X509v3 Authority Key Identifier: keyid:6C:80:30:52:BF:96:C2:AB:4A:BA:A9:ED:26:A3:A9:B4:63:96:05:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bIAwUr-WwqtKuqntJqOptGOWBaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:b0:78:8e:1a:58:10:8a:84:a8:2d:c2:65:0c:c0:a3:40:dd: f4:87:ca:4b:86:cf:ce:8a:18:df:0c:aa:f5:2d:f0:b1:d2:8b: ee:60:4a:19:63:7c:d8:47:18:e2:5b:c1:6c:49:7f:38:b4:49: 9d:76:bd:12:89:52:f4:66:35:73:31:9a:9c:c7:6e:39:36:e9: b8:34:1e:05:4b:e5:29:86:f7:ab:5c:97:14:8d:7e:ac:81:fc: 15:22:d0:13:a1:b4:17:b5:63:df:ec:60:83:0d:7a:02:98:3d: 8f:95:6d:4b:fa:2f:3f:1b:42:cd:f2:25:66:61:e5:bb:ac:bc: 73:86:df:ac:85:c4:80:9f:15:a5:92:4e:94:56:c7:54:5a:49: 30:41:f8:03:25:85:e6:1b:5b:c1:ca:87:2f:38:7f:1f:76:68: ed:2c:49:35:6c:34:3b:af:d6:37:22:cd:43:79:b6:b8:45:eb: 22:17:02:f9:52:85:e1:19:0d:1f:10:59:f5:4e:f5:fc:3c:a1: b0:10:5d:e3:a2:3e:55:b9:00:02:9f:5b:fe:36:d5:fe:06:93: 75:8f:01:95:dd:da:7b:f1:9e:bd:ec:1b:ea:bf:31:08:58:79: d0:73:61:5a:54:8a:42:e2:47:65:9c:8b:29:04:00:ee:1c:30: 60:20:6c:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5QTIxMTAvBgNVBAUTKDZDODAzMDUyQkY5NkMyQUI0QUJBQTlFRDI2QTNBOUI0 NjM5NjA1QTMwHhcNMjUwMzI5MDQ1ODMyWhcNMjUwNDA1MDQ1ODMyWjAYMRYwFAYD VQQDEw02N2U3N2RmOS03OTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyWlmCort9N8hgtnXMtENlCfpd2zXyVGHj7sHBzgId86he8GlR6pl+2itnxKp QE3Gwbx0C3WoSqWFUOWZPdD7qkc/sR1ZwXNkNqO0Ftfb3kKNDtd5RLxsmo3Eik++ SMD+ILe6ZXbtBvT8vat9NOpwkEyf4dd6Hb63On8dk1PmMdtvi1CFWxl4f56hpbk5 Yb+9JdxInMzCblpgXNffE8hui57Qt5ouwsnsHAraaRNtZiAwwK1DNlHLn/Zw4zh0 Rae0WyKQ8W7z6/9jyqA38my+9PXGVxVZ1skSF0uWDm3zS122mMdil4bQzA/pD3lK lLGlIqglZObP4qbcoCpd7w+b4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBC8Xydt Ak3MRp0TVhVlqxoW7lW1MB8GA1UdIwQYMBaAFGyAMFK/lsKrSrqp7SajqbRjlgWj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODlBMi9CQ0JBRTBDRUM1 NDExMUVFQUJDMkMzODVDNEY5QUUwMi9iSUF3VXItV3dxdEt1cW50SnFPcHRHT1dC YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JJQXdVci1Xd3F0S3VxbnRKcU9wdEdPV0JhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODlBMi9CQ0JBRTBDRUM1NDExMUVFQUJDMkMzODVDNEY5QUUwMi9iSUF3VXItV3dx dEt1cW50SnFPcHRHT1dCYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTsHiOGlgQioSoLcJlDMCjQN30h8pLhs/OihjfDKr1LfCx0ovuYEoZ Y3zYRxjiW8FsSX84tEmddr0SiVL0ZjVzMZqcx245Num4NB4FS+UphverXJcUjX6s gfwVItATobQXtWPf7GCDDXoCmD2PlW1L+i8/G0LN8iVmYeW7rLxzht+shcSAnxWl kk6UVsdUWkkwQfgDJYXmG1vByocvOH8fdmjtLEk1bDQ7r9Y3Is1Deba4ResiFwL5 UoXhGQ0fEFn1TvX8PKGwEF3joj5VuQACn1v+NtX+BpN1jwGV3dp78Z697BvqvzEI WHnQc2FaVIpC4kdlnIspBADuHDBgIGwp -----END CERTIFICATE-----Generated at Fri Apr 4 22:04:14 2025 by rpki-client