$ rpki-client -vvf rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.mft File: BgI9tGNNXG41YYCoL7vPgLlHir4.mft (raw, json) Hash identifier: 9W4uXek8A1CSMl9fqyHBOaSPt493f9Vzn2C6LS10kd0= Subject key identifier: B4:A3:74:46:41:4C:D6:BF:8E:8D:E5:2C:7D:1A:D6:FF:8D:22:7F:E6 Authority key identifier: 06:02:3D:B4:63:4D:5C:6E:35:61:80:A8:2F:BB:CF:80:B9:47:8A:BE Certificate issuer: /CN=A91490F7/serialNumber=06023DB4634D5C6E356180A82FBBCF80B9478ABE Certificate serial: 0155 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BgI9tGNNXG41YYCoL7vPgLlHir4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.mft Manifest number: 0155 Signing time: Sat 31 May 2025 03:47:43 +0000 Manifest this update: Sat 31 May 2025 03:47:42 +0000 Manifest next update: Sat 07 Jun 2025 03:47:42 +0000 Files and hashes: 1: BgI9tGNNXG41YYCoL7vPgLlHir4.crl (hash: 2yrrXn4FpN+WByhj1Hta9XD1/yGp82SLgjPtvFZuX4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.crl rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BgI9tGNNXG41YYCoL7vPgLlHir4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 341 (0x155) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91490F7, serialNumber=06023DB4634D5C6E356180A82FBBCF80B9478ABE Validity Not Before: May 31 03:47:42 2025 GMT Not After : Jun 7 03:47:42 2025 GMT Subject: CN=683a7bde-3c3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:25:26:cf:47:8c:93:48:09:a2:2c:85:33:ac: d8:48:ab:7f:56:ba:bf:43:24:4c:9b:c7:a6:1f:d0: 94:03:c8:9b:6c:c2:ae:60:72:bd:da:40:5c:9e:9f: 29:79:c6:68:ae:25:6d:af:e2:39:7e:71:72:18:a3: 9c:ce:4b:d5:83:81:08:39:d2:59:49:f1:43:5d:a2: b6:86:e8:e6:9f:33:db:eb:ae:a5:c8:90:13:8d:53: ef:c8:e6:1e:22:ab:c2:6d:d9:c8:2b:4a:7b:86:47: ab:f1:00:2c:f0:d3:11:17:67:52:05:a3:7a:ed:cb: 19:d8:3b:7e:e0:b0:21:ca:73:2d:e5:f4:52:5e:5a: 59:bd:f1:50:6c:96:ae:02:d5:f3:51:ae:34:27:3e: 4b:3e:9d:6c:4f:8e:90:be:31:e0:d1:f6:ea:df:41: af:b2:8a:f7:41:7c:7f:58:a7:61:40:f1:11:58:fc: 46:8a:96:ed:06:46:13:82:42:4f:82:f2:48:ec:4b: 2c:cd:1f:6d:61:ca:c3:13:c0:75:04:2d:b0:96:0b: 64:68:e3:b3:72:45:b7:f5:e6:19:76:9c:df:30:9c: 9c:87:42:77:c5:a6:e8:e8:4c:99:cc:b1:5f:eb:51: 3d:cc:22:2a:3d:34:3d:12:cf:1c:1d:4d:8a:d8:0f: 20:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:A3:74:46:41:4C:D6:BF:8E:8D:E5:2C:7D:1A:D6:FF:8D:22:7F:E6 X509v3 Authority Key Identifier: keyid:06:02:3D:B4:63:4D:5C:6E:35:61:80:A8:2F:BB:CF:80:B9:47:8A:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BgI9tGNNXG41YYCoL7vPgLlHir4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:ab:5b:6b:45:1a:59:d6:4a:f2:99:9f:d7:f7:b4:db:c6:f1: c1:54:0c:82:70:0b:1f:86:35:3b:7b:eb:8e:89:cd:bf:29:c3: 9e:f6:74:de:20:61:93:e0:46:ae:be:e8:89:1c:2d:fd:c7:25: 46:95:d7:6a:80:da:5d:13:42:bc:7e:bd:dd:d0:9b:0d:88:10: c2:ad:3c:6f:45:b5:69:80:42:16:9c:ad:55:d6:ff:81:d4:cc: df:41:c1:79:a4:73:a2:62:d9:a1:b6:18:13:98:f7:1b:f0:60: 09:5c:26:ae:44:0c:b1:a1:55:4d:b9:bf:d6:16:12:56:39:19: 2d:0e:00:6f:03:a5:2d:d1:4f:d4:86:7d:9a:d8:25:a4:c7:5c: 51:4a:9b:70:2d:ff:fd:cc:1b:59:f3:c2:0f:c6:2b:44:34:3a: 04:47:34:4b:41:a2:4c:d7:fd:44:6c:ed:01:6f:00:d3:80:bd: 9e:db:99:14:89:55:7b:13:77:fe:af:63:e4:a2:40:b9:b7:82: 01:87:96:0d:57:d3:3c:d3:83:db:65:4d:08:ac:37:a5:2d:14: 64:75:04:a1:e7:c4:ba:0c:79:76:c1:fc:0f:42:20:da:d8:e8: ee:9d:11:7a:01:99:4e:1f:6e:3e:34:1a:88:17:8b:b0:16:c3: 8c:c9:1d:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDkwRjcxMTAvBgNVBAUTKDA2MDIzREI0NjM0RDVDNkUzNTYxODBBODJGQkJDRjgw Qjk0NzhBQkUwHhcNMjUwNTMxMDM0NzQyWhcNMjUwNjA3MDM0NzQyWjAYMRYwFAYD VQQDEw02ODNhN2JkZS0zYzNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5SUmz0eMk0gJoiyFM6zYSKt/Vrq/QyRMm8emH9CUA8ibbMKuYHK92kBcnp8p ecZoriVtr+I5fnFyGKOczkvVg4EIOdJZSfFDXaK2hujmnzPb666lyJATjVPvyOYe IqvCbdnIK0p7hker8QAs8NMRF2dSBaN67csZ2Dt+4LAhynMt5fRSXlpZvfFQbJau AtXzUa40Jz5LPp1sT46QvjHg0fbq30Gvsor3QXx/WKdhQPERWPxGipbtBkYTgkJP gvJI7EsszR9tYcrDE8B1BC2wlgtkaOOzckW39eYZdpzfMJych0J3xabo6EyZzLFf 61E9zCIqPTQ9Es8cHU2K2A8gbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLSjdEZB TNa/jo3lLH0a1v+NIn/mMB8GA1UdIwQYMBaAFAYCPbRjTVxuNWGAqC+7z4C5R4q+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTBGNy9EOEQzQjRGMjM1 QTkxMUVFOTRCNDhENTdDNEY5QUUwMi9CZ0k5dEdOTlhHNDFZWUNvTDd2UGdMbEhp cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JnSTl0R05OWEc0MVlZQ29MN3ZQZ0xsSGlyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTBGNy9EOEQzQjRGMjM1QTkxMUVFOTRCNDhENTdDNEY5QUUwMi9CZ0k5dEdOTlhH NDFZWUNvTDd2UGdMbEhpcjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfq1trRRpZ1krymZ/X97TbxvHBVAyCcAsfhjU7e+uOic2/KcOe9nTe IGGT4EauvuiJHC39xyVGlddqgNpdE0K8fr3d0JsNiBDCrTxvRbVpgEIWnK1V1v+B 1MzfQcF5pHOiYtmhthgTmPcb8GAJXCauRAyxoVVNub/WFhJWORktDgBvA6Ut0U/U hn2a2CWkx1xRSptwLf/9zBtZ88IPxitENDoERzRLQaJM1/1EbO0BbwDTgL2e25kU iVV7E3f+r2PkokC5t4IBh5YNV9M804PbZU0IrDelLRRkdQSh58S6DHl2wfwPQiDa 2OjunRF6AZlOH24+NBqIF4uwFsOMyR0e -----END CERTIFICATE-----Generated at Sat May 31 17:12:55 2025 by rpki-client