$ rpki-client -vvf rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/BWvvRscxWDfrrepBeAueQaP7fqA.mft File: BWvvRscxWDfrrepBeAueQaP7fqA.mft (raw, json) Hash identifier: BoRefnuX6F8JeT6ZIM2WZum3/8TE0fhmf7mmK1apsfg= Subject key identifier: 88:18:23:14:3B:BF:84:F1:F9:15:A3:0F:49:BE:F3:88:F1:0B:19:1C Authority key identifier: 05:6B:EF:46:C7:31:58:37:EB:AD:EA:41:78:0B:9E:41:A3:FB:7E:A0 Certificate issuer: /CN=A912391D/serialNumber=056BEF46C7315837EBADEA41780B9E41A3FB7EA0 Certificate serial: 0278 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BWvvRscxWDfrrepBeAueQaP7fqA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/BWvvRscxWDfrrepBeAueQaP7fqA.mft Manifest number: 0274 Signing time: Sat 31 May 2025 01:53:57 +0000 Manifest this update: Sat 31 May 2025 01:53:56 +0000 Manifest next update: Sat 07 Jun 2025 01:53:56 +0000 Files and hashes: 1: BWvvRscxWDfrrepBeAueQaP7fqA.crl (hash: 92Md8yZ6IKNmEAKFWgzEPisFppe07Qa8KKOko0795lI=) 2: 207B27560EE411EDA32ABE0FC4F9AE02.roa (hash: 6uwFx8/ukSzKKH+6QOFIRRiywJ0AdBaXItyBqWPv0ck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/BWvvRscxWDfrrepBeAueQaP7fqA.crl rsync://rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/BWvvRscxWDfrrepBeAueQaP7fqA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BWvvRscxWDfrrepBeAueQaP7fqA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:53:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 632 (0x278) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912391D, serialNumber=056BEF46C7315837EBADEA41780B9E41A3FB7EA0 Validity Not Before: May 31 01:53:56 2025 GMT Not After : Jun 7 01:53:56 2025 GMT Subject: CN=683a6134-571a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9f:a6:37:c7:eb:b9:d8:57:33:34:82:a0:e6: 07:aa:84:89:65:e9:fa:03:32:4e:6a:85:ff:b8:f6: c2:04:33:87:bb:58:44:43:4d:81:fd:83:61:0c:45: 4e:4f:65:7a:fb:1c:fd:6e:73:f7:db:a2:e8:88:31: 6a:5d:23:f1:c2:3a:9a:3d:b5:9d:00:c3:52:bc:27: 9c:88:69:2a:96:af:da:7d:e9:c2:b2:34:37:67:50: 5e:aa:33:9c:30:2a:74:7e:86:cc:4a:d5:c6:e8:38: 34:31:2d:fa:0b:d4:80:d6:fa:68:fb:63:65:e4:d2: 88:84:ec:28:cf:e6:97:56:6d:b3:cd:ea:41:f2:43: 33:e4:f0:2c:78:ba:e9:55:ee:e9:a8:05:db:dc:5f: 3f:99:38:80:4d:15:0f:69:8f:f8:aa:ad:0d:19:02: b0:1c:62:15:46:f3:c6:c0:e0:8c:3f:49:d1:fe:aa: c1:45:58:6c:bb:6f:3c:f7:76:15:4b:34:c2:7d:f0: c4:f1:ae:14:9b:1a:35:e8:79:0e:f8:d6:8e:a3:f0: 7f:ac:24:66:0a:dc:e4:6b:79:47:8b:81:6b:e7:a2: b0:e1:50:47:89:14:03:b4:52:79:d1:16:9e:0a:bf: c0:c3:ee:8e:9f:00:b4:25:f8:d3:1a:5a:f3:56:a9: f4:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:18:23:14:3B:BF:84:F1:F9:15:A3:0F:49:BE:F3:88:F1:0B:19:1C X509v3 Authority Key Identifier: keyid:05:6B:EF:46:C7:31:58:37:EB:AD:EA:41:78:0B:9E:41:A3:FB:7E:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/BWvvRscxWDfrrepBeAueQaP7fqA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BWvvRscxWDfrrepBeAueQaP7fqA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/BWvvRscxWDfrrepBeAueQaP7fqA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:60:64:a4:3e:26:95:e1:96:47:3a:5c:c2:7e:95:c2:30:49: 61:17:a6:57:31:f9:88:96:cb:18:8b:4a:7c:47:95:5a:0b:bc: 43:e2:27:c0:df:45:00:cc:43:b5:f2:59:eb:3f:31:77:0e:50: 89:5e:3e:c7:1b:5c:0f:bb:68:d6:9d:09:bf:e4:c1:f5:0e:ec: b4:c8:ee:44:ce:8c:23:e7:2a:93:20:09:ad:7a:9f:e7:9e:68: 37:32:ee:9b:36:64:ae:d5:ab:b0:bc:8e:83:75:97:40:71:e7: 68:9a:74:fa:38:f0:99:c7:6d:76:2e:b2:e6:00:72:3d:85:69: 85:0d:31:c1:95:1a:bc:81:3d:80:a9:b7:f5:1a:ec:86:6a:30: 6b:5d:04:4e:65:f0:20:59:27:b8:6c:e9:18:d0:87:a4:1a:b3: 39:66:7a:55:00:7a:75:00:40:9b:6f:f1:36:5e:3f:8c:c3:1c: 1d:83:56:f9:0f:df:54:37:51:c0:fc:65:ce:c3:97:1a:53:1e: bd:c1:9a:68:be:53:e5:31:a9:8d:f8:d3:f4:43:47:d6:67:05: f1:2f:c3:3c:f0:b4:00:bb:db:82:98:3a:c3:a6:f5:04:0f:20: 23:82:11:b9:01:5e:5e:90:8d:91:3e:59:96:f3:2e:3f:d3:2b: 89:e1:b2:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM5MUQxMTAvBgNVBAUTKDA1NkJFRjQ2QzczMTU4MzdFQkFERUE0MTc4MEI5RTQx QTNGQjdFQTAwHhcNMjUwNTMxMDE1MzU2WhcNMjUwNjA3MDE1MzU2WjAYMRYwFAYD VQQDEw02ODNhNjEzNC01NzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtZ+mN8frudhXMzSCoOYHqoSJZen6AzJOaoX/uPbCBDOHu1hEQ02B/YNhDEVO T2V6+xz9bnP326LoiDFqXSPxwjqaPbWdAMNSvCeciGkqlq/afenCsjQ3Z1BeqjOc MCp0fobMStXG6Dg0MS36C9SA1vpo+2Nl5NKIhOwoz+aXVm2zzepB8kMz5PAseLrp Ve7pqAXb3F8/mTiATRUPaY/4qq0NGQKwHGIVRvPGwOCMP0nR/qrBRVhsu28893YV SzTCffDE8a4Umxo16HkO+NaOo/B/rCRmCtzka3lHi4Fr56Kw4VBHiRQDtFJ50Rae Cr/Aw+6OnwC0JfjTGlrzVqn0GQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIgYIxQ7 v4Tx+RWjD0m+84jxCxkcMB8GA1UdIwQYMBaAFAVr70bHMVg3663qQXgLnkGj+36g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzkxRC9CNTcxQ0NCRTBF RTExMUVEODQ2NzRDMEVDNEY5QUUwMi9CV3Z2UnNjeFdEZnJyZXBCZUF1ZVFhUDdm cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JXdnZSc2N4V0RmcnJlcEJlQXVlUWFQN2ZxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzkxRC9CNTcxQ0NCRTBFRTExMUVEODQ2NzRDMEVDNEY5QUUwMi9CV3Z2UnNjeFdE ZnJyZXBCZUF1ZVFhUDdmcUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPYGSkPiaV4ZZHOlzCfpXCMElhF6ZXMfmIlssYi0p8R5VaC7xD4ifA 30UAzEO18lnrPzF3DlCJXj7HG1wPu2jWnQm/5MH1Duy0yO5Ezowj5yqTIAmtep/n nmg3Mu6bNmSu1auwvI6DdZdAcedomnT6OPCZx212LrLmAHI9hWmFDTHBlRq8gT2A qbf1GuyGajBrXQROZfAgWSe4bOkY0IekGrM5ZnpVAHp1AECbb/E2Xj+Mwxwdg1b5 D99UN1HA/GXOw5caUx69wZpovlPlMamN+NP0Q0fWZwXxL8M88LQAu9uCmDrDpvUE DyAjghG5AV5ekI2RPlmW8y4/0yuJ4bL4 -----END CERTIFICATE-----Generated at Sat May 31 17:16:11 2025 by rpki-client