$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F22/C6F55FA88F2F11EE9CBFD961C4F9AE02/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.mft File: BjuvPte0EHGpDZ-uQQ_0eIjwvt8.mft (raw, json) Hash identifier: /heVhOmFVNqshKZ5DNKA+dhwMaQdSn6ItJ1P4U7kqw8= Subject key identifier: 28:08:1A:44:C5:C1:44:AD:FB:84:C7:CF:B4:E3:30:F2:21:6A:CD:32 Authority key identifier: 06:3B:AF:3E:D7:B4:10:71:A9:0D:9F:AE:41:0F:F4:78:88:F0:BE:DF Certificate issuer: /CN=A9179F22/serialNumber=063BAF3ED7B41071A90D9FAE410FF47888F0BEDF Certificate serial: 0107 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179F22/C6F55FA88F2F11EE9CBFD961C4F9AE02/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.mft Manifest number: 0101 Signing time: Sat 05 Apr 2025 04:27:33 +0000 Manifest this update: Sat 05 Apr 2025 04:27:33 +0000 Manifest next update: Sat 12 Apr 2025 04:27:33 +0000 Files and hashes: 1: BjuvPte0EHGpDZ-uQQ_0eIjwvt8.crl (hash: 84ye0GsGwf8wm6e3N26kaTiWv36poBGeXESlmwwMX9Y=) 2: 2CDC448608D811EF8DFDE781C4F9AE02.roa (hash: MTTFGh5YkmdwhwwN1nHMTKtVnxi1AywOBLIUbo7ublw=) 3: 2D7A0C2A08D811EF8DFDE781C4F9AE02.roa (hash: gdMasLbSqNJyfYRq8rjx2FDE2x25ny6/BOPxzTslPtc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179F22/C6F55FA88F2F11EE9CBFD961C4F9AE02/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.crl rsync://rpki.apnic.net/member_repository/A9179F22/C6F55FA88F2F11EE9CBFD961C4F9AE02/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 263 (0x107) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179F22 Validity Not Before: Apr 5 04:27:33 2025 GMT Not After : Apr 12 04:27:33 2025 GMT Subject: CN=67f0b135-c6b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:13:b1:c4:b3:b7:51:81:11:88:3e:2b:ec:27: 2c:c5:90:d4:39:44:c4:44:79:87:7a:3c:c0:d8:ce: ce:e9:63:57:fc:06:c3:95:74:ee:7b:1a:b3:99:aa: a8:08:ea:49:e3:53:9a:2b:c8:52:4e:9b:ea:aa:36: 1b:20:27:b1:e2:45:3e:9e:b9:50:66:80:24:0c:da: 54:c8:0d:a4:27:5c:5f:47:e9:d6:2c:59:7e:e6:0d: 1f:3d:05:fe:52:15:0f:62:24:51:5c:4d:fc:ac:da: 88:49:fa:0c:f8:02:bd:77:26:82:b5:3d:7d:56:7c: 70:82:e4:f0:50:4e:78:b4:5a:b5:d1:c0:4a:69:17: 44:35:b4:8c:f3:1b:7e:51:21:44:0e:67:73:99:17: 28:4c:d5:9a:db:f2:49:d7:ea:8a:ef:9d:36:54:30: 60:7c:66:0b:eb:be:80:c7:b7:50:44:e7:07:56:72: 83:0b:fa:a2:fd:8b:a6:3d:de:c8:cc:84:e7:3e:57: ff:e4:53:e8:cb:63:1b:3f:4b:6a:52:1e:10:4b:94: 88:85:df:cf:cd:d1:69:19:f7:25:a9:20:1c:8b:69: 30:49:a1:56:9d:52:35:09:bd:84:0f:5c:c8:04:96: 0e:ce:8d:93:21:ef:86:03:b7:60:5d:13:1c:2c:7b: cd:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:08:1A:44:C5:C1:44:AD:FB:84:C7:CF:B4:E3:30:F2:21:6A:CD:32 X509v3 Authority Key Identifier: keyid:06:3B:AF:3E:D7:B4:10:71:A9:0D:9F:AE:41:0F:F4:78:88:F0:BE:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179F22/C6F55FA88F2F11EE9CBFD961C4F9AE02/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F22/C6F55FA88F2F11EE9CBFD961C4F9AE02/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:6f:80:71:e9:cc:a2:99:55:ff:c0:ce:62:97:c1:19:a8:35: 3a:d5:71:0c:1d:f2:e8:f0:6d:22:5b:c3:74:4e:e7:59:0f:ab: 27:06:cf:37:57:8f:93:b8:2c:fa:a6:3b:8d:79:14:44:22:aa: 98:2a:fb:ed:24:79:d4:92:43:4c:a6:60:94:6a:6f:93:c4:6e: 03:b3:d5:0c:9d:8a:40:d4:bb:05:9c:fa:a0:a0:4b:9f:5d:35: c0:27:87:e7:e5:d5:d9:73:6b:0e:c5:62:b9:3e:90:4f:a1:ab: 70:2f:54:ba:7d:a1:3b:0a:e5:f6:6f:dd:4a:a9:ea:85:87:c9: 37:67:b8:62:24:c3:0f:48:d6:e1:52:d0:d1:19:f7:fe:63:21: ca:df:3f:f0:4b:90:ca:94:06:6f:5c:68:f9:cb:a0:01:78:01: 59:4c:30:b8:06:06:95:0f:3e:71:b7:62:b3:69:0c:69:2e:74: 50:c4:7f:72:8c:8b:a9:e9:f5:7e:8a:59:9b:24:c5:eb:e6:98: bb:9c:09:36:af:1c:26:12:3b:8e:1e:5a:36:ad:7e:c9:65:f9: 8c:71:44:0c:db:d1:91:54:8c:5e:0a:89:9b:15:7b:8a:52:df: bc:a5:d8:31:16:6b:47:9a:4f:8e:57:54:64:60:de:47:a3:3b: 5b:d4:82:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlGMjIxMTAvBgNVBAUTKDA2M0JBRjNFRDdCNDEwNzFBOTBEOUZBRTQxMEZGNDc4 ODhGMEJFREYwHhcNMjUwNDA1MDQyNzMzWhcNMjUwNDEyMDQyNzMzWjAYMRYwFAYD VQQDEw02N2YwYjEzNS1jNmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1xOxxLO3UYERiD4r7CcsxZDUOUTERHmHejzA2M7O6WNX/AbDlXTuexqzmaqo COpJ41OaK8hSTpvqqjYbICex4kU+nrlQZoAkDNpUyA2kJ1xfR+nWLFl+5g0fPQX+ UhUPYiRRXE38rNqISfoM+AK9dyaCtT19VnxwguTwUE54tFq10cBKaRdENbSM8xt+ USFEDmdzmRcoTNWa2/JJ1+qK7502VDBgfGYL676Ax7dQROcHVnKDC/qi/YumPd7I zITnPlf/5FPoy2MbP0tqUh4QS5SIhd/PzdFpGfclqSAci2kwSaFWnVI1Cb2ED1zI BJYOzo2TIe+GA7dgXRMcLHvNiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCgIGkTF wUSt+4THz7TjMPIhas0yMB8GA1UdIwQYMBaAFAY7rz7XtBBxqQ2frkEP9HiI8L7f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUYyMi9DNkY1NUZBODhG MkYxMUVFOUNCRkQ5NjFDNEY5QUUwMi9CanV2UHRlMEVIR3BEWi11UVFfMGVJand2 dDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JqdXZQdGUwRUhHcERaLXVRUV8wZUlqd3Z0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUYyMi9DNkY1NUZBODhGMkYxMUVFOUNCRkQ5NjFDNEY5QUUwMi9CanV2UHRlMEVI R3BEWi11UVFfMGVJand2dDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOb4Bx6cyimVX/wM5il8EZqDU61XEMHfLo8G0iW8N0TudZD6snBs83 V4+TuCz6pjuNeRREIqqYKvvtJHnUkkNMpmCUam+TxG4Ds9UMnYpA1LsFnPqgoEuf XTXAJ4fn5dXZc2sOxWK5PpBPoatwL1S6faE7CuX2b91KqeqFh8k3Z7hiJMMPSNbh UtDRGff+YyHK3z/wS5DKlAZvXGj5y6ABeAFZTDC4BgaVDz5xt2KzaQxpLnRQxH9y jIup6fV+ilmbJMXr5pi7nAk2rxwmEjuOHlo2rX7JZfmMcUQM29GRVIxeCombFXuK Ut+8pdgxFmtHmk+OV1RkYN5Hoztb1IK2 -----END CERTIFICATE-----Generated at Sat Apr 5 08:22:09 2025 by rpki-client