$ rpki-client -vvf rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.mft File: BYQh3nB4BzBHPlzFRboK5dubTAo.mft (raw, json) Hash identifier: l3lXjotFDOLd2y5DOhzzuFNp9GKf7u1RQdGpeadW2f0= Subject key identifier: 78:21:AC:49:F6:03:D8:69:B8:AD:15:09:76:20:4E:49:14:A3:DD:F8 Authority key identifier: 05:84:21:DE:70:78:07:30:47:3E:5C:C5:45:BA:0A:E5:DB:9B:4C:0A Certificate issuer: /CN=A91862F7/serialNumber=058421DE70780730473E5CC545BA0AE5DB9B4C0A Certificate serial: 0992 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYQh3nB4BzBHPlzFRboK5dubTAo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.mft Manifest number: 0986 Signing time: Fri 30 May 2025 17:30:42 +0000 Manifest this update: Fri 30 May 2025 17:30:42 +0000 Manifest next update: Fri 06 Jun 2025 17:30:42 +0000 Files and hashes: 1: BYQh3nB4BzBHPlzFRboK5dubTAo.crl (hash: oA3A7rHwQFuK30QvMHoyxsKBx8EmvNkFaRqJf9wPj+0=) 2: 0619825C2F2A11ED9F62040DC4F9AE02.roa (hash: kL+XFv+JIBMzJ5k9XXPNiC6YLDiIMa15JQqj4/UV838=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.crl rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYQh3nB4BzBHPlzFRboK5dubTAo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:30:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2450 (0x992) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862F7, serialNumber=058421DE70780730473E5CC545BA0AE5DB9B4C0A Validity Not Before: May 30 17:30:42 2025 GMT Not After : Jun 6 17:30:42 2025 GMT Subject: CN=6839eb42-4bb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f3:f5:74:6e:03:18:41:58:70:45:5f:7e:36: 39:5d:9d:7f:e2:36:8b:8c:ab:f6:1d:0b:e6:a4:31: ec:54:7a:7e:7b:3c:ae:f7:7c:48:a0:92:4e:58:00: 5d:dc:e0:d8:8b:8f:08:94:51:a4:79:b7:d8:d9:16: 85:32:ef:79:a1:45:a4:4d:56:44:8e:c9:a7:90:5d: c5:28:ef:a1:42:7e:36:12:b2:34:61:6a:68:1c:66: 9f:ef:fe:e3:a0:31:ad:5c:46:3c:0e:60:44:9b:15: bd:c1:46:ae:f0:f8:d4:eb:9d:50:5a:14:56:6e:dc: c7:58:4c:d2:94:6b:1a:5a:6b:bc:cc:b5:22:e2:3e: 50:19:43:f1:0d:5f:33:d3:60:eb:55:c5:69:ef:78: 43:0e:52:09:3a:1c:b9:a5:41:c6:be:6b:45:dd:b4: 22:75:cf:6e:29:c3:a2:12:2f:6b:01:3d:1c:6b:32: 2b:02:93:26:ea:31:8d:fb:d5:05:74:9a:37:0e:41: 4e:b7:b3:27:f8:60:d8:0e:66:bd:f6:6b:5b:39:48: 4a:83:9c:f1:16:9e:e4:df:53:d2:76:61:42:b0:8f: 95:cf:ca:26:c6:51:b7:d0:54:8b:37:96:d7:7a:0d: d7:d5:9a:e6:99:c6:cd:1e:c9:f7:9d:fd:84:d4:f0: f8:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:21:AC:49:F6:03:D8:69:B8:AD:15:09:76:20:4E:49:14:A3:DD:F8 X509v3 Authority Key Identifier: keyid:05:84:21:DE:70:78:07:30:47:3E:5C:C5:45:BA:0A:E5:DB:9B:4C:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYQh3nB4BzBHPlzFRboK5dubTAo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:1d:6f:72:31:dd:32:a1:fb:37:54:81:da:c0:59:34:e2:d2: 12:cf:cf:ba:05:75:a7:06:c4:b1:3f:cc:ae:3a:a2:1d:9d:f9: 08:16:6b:68:99:7f:a1:a5:05:80:9e:9f:f7:29:97:03:a2:9d: c0:37:1b:d6:5b:39:b5:4a:04:bd:cc:48:35:31:c8:a1:d8:5a: 7c:0a:e4:f8:52:c4:4d:86:33:66:64:c5:77:ab:81:e6:9c:ab: d7:38:38:b3:9e:fc:9b:8c:71:d5:ac:5e:4d:7d:76:4c:f0:09: 44:30:6b:c2:e4:b8:d2:8a:70:49:b2:7f:e7:74:81:c2:55:a2: 5f:ef:28:f9:fc:6e:91:8a:06:6b:5e:5f:32:0c:28:bb:9a:52: 88:47:45:e6:93:67:61:e6:c8:e4:b2:a4:4a:6c:05:3b:7e:9f: 61:10:88:58:8d:f7:7c:dd:97:4c:c7:f6:70:39:4b:6a:04:9a: 67:df:8d:1d:5d:5e:19:37:7a:4a:2d:28:86:16:86:45:83:f2: 3e:50:90:0d:ea:aa:3f:7d:85:aa:31:59:aa:23:c0:99:53:10: ee:54:4b:37:25:c5:85:73:7d:7f:22:cc:2d:2c:a0:6a:a8:51: c0:51:eb:32:de:f8:a8:43:eb:3d:3c:ed:83:47:20:13:c8:92: ce:64:16:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyRjcxMTAvBgNVBAUTKDA1ODQyMURFNzA3ODA3MzA0NzNFNUNDNTQ1QkEwQUU1 REI5QjRDMEEwHhcNMjUwNTMwMTczMDQyWhcNMjUwNjA2MTczMDQyWjAYMRYwFAYD VQQDEw02ODM5ZWI0Mi00YmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyPP1dG4DGEFYcEVffjY5XZ1/4jaLjKv2HQvmpDHsVHp+ezyu93xIoJJOWABd 3ODYi48IlFGkebfY2RaFMu95oUWkTVZEjsmnkF3FKO+hQn42ErI0YWpoHGaf7/7j oDGtXEY8DmBEmxW9wUau8PjU651QWhRWbtzHWEzSlGsaWmu8zLUi4j5QGUPxDV8z 02DrVcVp73hDDlIJOhy5pUHGvmtF3bQidc9uKcOiEi9rAT0cazIrApMm6jGN+9UF dJo3DkFOt7Mn+GDYDma99mtbOUhKg5zxFp7k31PSdmFCsI+Vz8omxlG30FSLN5bX eg3X1ZrmmcbNHsn3nf2E1PD46wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHghrEn2 A9hpuK0VCXYgTkkUo934MB8GA1UdIwQYMBaAFAWEId5weAcwRz5cxUW6CuXbm0wK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjJGNy81RUFDNjE0NDhG QTYxMUVBOUFDQjdFN0ZDNEY5QUUwMi9CWVFoM25CNEJ6QkhQbHpGUmJvSzVkdWJU QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JZUWgzbkI0QnpCSFBsekZSYm9LNWR1YlRBby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjJGNy81RUFDNjE0NDhGQTYxMUVBOUFDQjdFN0ZDNEY5QUUwMi9CWVFoM25CNEJ6 QkhQbHpGUmJvSzVkdWJUQW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtHW9yMd0yofs3VIHawFk04tISz8+6BXWnBsSxP8yuOqIdnfkIFmto mX+hpQWAnp/3KZcDop3ANxvWWzm1SgS9zEg1Mcih2Fp8CuT4UsRNhjNmZMV3q4Hm nKvXODiznvybjHHVrF5NfXZM8AlEMGvC5LjSinBJsn/ndIHCVaJf7yj5/G6RigZr Xl8yDCi7mlKIR0Xmk2dh5sjksqRKbAU7fp9hEIhYjfd83ZdMx/ZwOUtqBJpn340d XV4ZN3pKLSiGFoZFg/I+UJAN6qo/fYWqMVmqI8CZUxDuVEs3JcWFc31/IswtLKBq qFHAUesy3vioQ+s9PO2DRyATyJLOZBYh -----END CERTIFICATE-----Generated at Sat May 31 16:38:52 2025 by rpki-client