$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft File: Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft (raw, json) Hash identifier: 2IkXQjqKuswgpLYLk4QQN4ifYE2nfHDRDNyY64sW+qo= Subject key identifier: 57:99:91:2F:3F:2D:69:A0:6A:CA:C1:3A:4B:48:AA:2C:1A:3C:83:BF Authority key identifier: 05:FD:2D:51:9D:40:CB:20:89:37:BF:8A:8E:46:3E:6D:84:2C:C0:7D Certificate issuer: /CN=A91A3526/serialNumber=05FD2D519D40CB208937BF8A8E463E6D842CC07D Certificate serial: 011E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft Manifest number: 0117 Signing time: Sat 31 May 2025 04:32:21 +0000 Manifest this update: Sat 31 May 2025 04:32:20 +0000 Manifest next update: Sat 07 Jun 2025 04:32:20 +0000 Files and hashes: 1: Bf0tUZ1AyyCJN7-KjkY-bYQswH0.crl (hash: +tIOXaYeYATDUOP3iMn9OAKwXGUq0QYBGfaS5sYU4gA=) 2: 134D519098B711EE99FD1F09C4F9AE02.roa (hash: vJ2YKh1qvo6z7EsNb01ZnfIC7WfZlHkFbVKbRaXaFP0=) 3: 13E4471298B711EE99FD1F09C4F9AE02.roa (hash: /ZzSx5BufcsBFJm8hzU4SO+vyDuIxcR/d9CCuElSRT0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.crl rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:32:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 286 (0x11e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3526, serialNumber=05FD2D519D40CB208937BF8A8E463E6D842CC07D Validity Not Before: May 31 04:32:20 2025 GMT Not After : Jun 7 04:32:20 2025 GMT Subject: CN=683a8655-5d2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f3:7e:76:07:df:6b:f4:3b:41:6e:51:0c:54: eb:76:08:4a:2a:09:0d:2e:78:7c:f8:b0:5e:38:1e: 3c:66:6f:06:db:22:13:f7:84:ef:a7:d5:31:ae:b2: 4e:10:75:9b:d5:0b:b2:53:fe:8d:1a:f9:0d:fe:8c: 14:f6:c7:bd:e5:d3:c3:33:f1:06:0f:73:d6:5b:fb: fc:80:7b:a0:d4:d1:5a:54:b2:a8:dd:25:30:11:62: 7c:86:e4:58:3e:26:1d:c3:72:de:5c:32:4c:5a:68: 9f:b0:3e:56:6a:5b:e0:3b:64:9a:ad:86:d1:84:74: ba:b0:a0:25:cf:a9:db:1a:31:4e:84:6d:ba:cc:91: 1f:e8:ea:11:d0:60:18:63:ee:26:a7:cc:7b:08:f7: 79:7b:f9:bc:52:89:4f:6d:92:7c:49:7d:02:e1:5c: cd:89:09:09:8f:9a:8b:82:7a:f4:8a:6b:35:bb:12: 9d:75:7c:27:22:2f:90:ea:ae:7a:23:0a:a3:d3:11: a2:71:76:8f:c3:c8:77:5b:3d:fd:62:3a:3f:f2:3f: 06:6d:6a:57:5c:da:40:29:62:09:5f:22:26:9a:b9: 12:08:c7:ac:b4:c8:31:c8:dc:76:03:59:87:eb:62: 06:a5:2c:41:9a:5d:70:58:95:02:e3:fc:b6:9d:4f: e6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:99:91:2F:3F:2D:69:A0:6A:CA:C1:3A:4B:48:AA:2C:1A:3C:83:BF X509v3 Authority Key Identifier: keyid:05:FD:2D:51:9D:40:CB:20:89:37:BF:8A:8E:46:3E:6D:84:2C:C0:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:a5:b7:e3:7c:83:3e:c2:5d:b4:0c:d7:13:c1:a2:7a:ad:0d: 36:05:02:aa:5d:9b:ae:fb:d8:e0:6a:06:e4:31:17:ae:ea:9e: 6a:f1:da:75:60:ff:0a:0e:26:da:a4:b8:d3:33:48:d5:28:ee: f8:8b:4d:c0:9e:41:c7:56:6a:d8:4d:ad:95:6b:82:22:8f:f0: e1:ea:2f:df:1a:95:16:f2:d7:b3:43:ae:b0:59:ff:e8:88:53: c6:29:89:0a:11:ab:ef:33:9b:16:a6:7d:33:a3:2b:2f:67:b4: 14:48:16:ab:43:d3:42:c6:23:a4:b8:de:48:be:85:13:82:42: 2b:1e:94:77:a4:95:43:c9:c1:7c:f7:de:20:dc:f8:5c:e3:5a: b1:24:1f:24:a9:a3:92:0a:37:ab:24:d4:e6:96:3b:4d:ae:2e: 25:80:2a:7c:8d:f5:31:80:e6:fc:a1:98:8a:1c:c9:59:d2:f2: 29:57:fa:a5:7a:9d:9a:bf:a2:19:65:ad:69:25:43:10:d1:db: 03:c7:86:15:bd:93:1e:f3:a7:e2:a6:b9:16:5c:26:b7:3f:15: 3b:e9:17:e7:cc:1c:67:9c:bb:fe:c3:8c:31:2f:49:79:c8:60: 6c:b3:93:a1:ab:ac:0e:a7:6b:8a:fe:33:db:a0:b1:4b:4c:38: 9e:21:79:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM1MjYxMTAvBgNVBAUTKDA1RkQyRDUxOUQ0MENCMjA4OTM3QkY4QThFNDYzRTZE ODQyQ0MwN0QwHhcNMjUwNTMxMDQzMjIwWhcNMjUwNjA3MDQzMjIwWjAYMRYwFAYD VQQDEw02ODNhODY1NS01ZDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwPN+dgffa/Q7QW5RDFTrdghKKgkNLnh8+LBeOB48Zm8G2yIT94Tvp9UxrrJO EHWb1QuyU/6NGvkN/owU9se95dPDM/EGD3PWW/v8gHug1NFaVLKo3SUwEWJ8huRY PiYdw3LeXDJMWmifsD5WalvgO2SarYbRhHS6sKAlz6nbGjFOhG26zJEf6OoR0GAY Y+4mp8x7CPd5e/m8UolPbZJ8SX0C4VzNiQkJj5qLgnr0ims1uxKddXwnIi+Q6q56 Iwqj0xGicXaPw8h3Wz39Yjo/8j8GbWpXXNpAKWIJXyImmrkSCMestMgxyNx2A1mH 62IGpSxBml1wWJUC4/y2nU/miwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFeZkS8/ LWmgasrBOktIqiwaPIO/MB8GA1UdIwQYMBaAFAX9LVGdQMsgiTe/io5GPm2ELMB9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzUyNi9BMTNDNTVDRTk4 QjYxMUVFOEI0OTA0ODdDNEY5QUUwMi9CZjB0VVoxQXl5Q0pONy1LamtZLWJZUXN3 SDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JmMHRVWjFBeXlDSk43LUtqa1ktYllRc3dIMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzUyNi9BMTNDNTVDRTk4QjYxMUVFOEI0OTA0ODdDNEY5QUUwMi9CZjB0VVoxQXl5 Q0pONy1LamtZLWJZUXN3SDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqpbfjfIM+wl20DNcTwaJ6rQ02BQKqXZuu+9jgagbkMReu6p5q8dp1 YP8KDibapLjTM0jVKO74i03AnkHHVmrYTa2Va4Iij/Dh6i/fGpUW8tezQ66wWf/o iFPGKYkKEavvM5sWpn0zoysvZ7QUSBarQ9NCxiOkuN5IvoUTgkIrHpR3pJVDycF8 994g3Phc41qxJB8kqaOSCjerJNTmljtNri4lgCp8jfUxgOb8oZiKHMlZ0vIpV/ql ep2av6IZZa1pJUMQ0dsDx4YVvZMe86fiprkWXCa3PxU76RfnzBxnnLv+w4wxL0l5 yGBss5Ohq6wOp2uK/jPboLFLTDieIXlm -----END CERTIFICATE-----Generated at Sat May 31 17:37:40 2025 by rpki-client