$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.mft File: bjPVE5klw9tNCFk3zmms03vqeU0.mft (raw, json) Hash identifier: 30apq9oha5nzufyeShDkkyADdCDFFFCYEcROYaE2pEU= Subject key identifier: A5:33:1F:91:29:2F:46:75:8D:CF:9D:59:05:7F:1F:BD:60:54:E2:86 Authority key identifier: 6E:33:D5:13:99:25:C3:DB:4D:08:59:37:CE:69:AC:D3:7B:EA:79:4D Certificate issuer: /CN=A91A8CD2/serialNumber=6E33D5139925C3DB4D085937CE69ACD37BEA794D Certificate serial: 0587 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjPVE5klw9tNCFk3zmms03vqeU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.mft Manifest number: 0583 Signing time: Fri 30 May 2025 23:27:32 +0000 Manifest this update: Fri 30 May 2025 23:27:32 +0000 Manifest next update: Fri 06 Jun 2025 23:27:32 +0000 Files and hashes: 1: bjPVE5klw9tNCFk3zmms03vqeU0.crl (hash: vqIA86xuoaiXyEpX7fgL/SUaB+ygstNbfoEUPVpR7XU=) 2: 5D10DEF0D8E811EB8ACD3C66C4F9AE02.roa (hash: l/rvxQeqO+VdRHgLRLz7RrPQYKHzDkdt1MLwmoA9TZg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.crl rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjPVE5klw9tNCFk3zmms03vqeU0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1415 (0x587) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8CD2, serialNumber=6E33D5139925C3DB4D085937CE69ACD37BEA794D Validity Not Before: May 30 23:27:32 2025 GMT Not After : Jun 6 23:27:32 2025 GMT Subject: CN=683a3ee4-fa11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:67:3c:8f:7c:f0:cc:25:2a:aa:ba:fb:92:04: a2:9e:af:8e:35:ec:38:83:5b:c9:a5:a5:b2:0c:94: 65:64:4e:a3:3a:50:44:bc:2b:44:0e:3e:9f:ef:bf: b7:4e:fd:16:a9:38:54:80:81:e2:ae:8d:25:0a:c1: 14:59:f4:6b:1a:c3:96:e3:6a:2c:64:3b:b5:79:a0: 6f:6d:7f:cf:14:c8:a0:76:60:ef:95:11:47:a9:b3: dc:d5:67:f0:1e:d1:e9:b9:c6:ad:de:27:16:de:b1: c7:60:49:b0:b8:95:bf:c2:b3:13:b0:81:4c:1a:34: 18:14:13:1c:cd:a6:02:65:08:10:d8:19:e9:3b:b9: 82:85:03:10:a2:fc:23:b3:25:46:07:4a:fc:d6:09: 24:69:c1:bd:32:0f:8c:50:16:bc:96:0b:94:66:1e: 99:2b:86:e2:ec:5e:43:ed:93:3f:c6:e2:1c:e3:62: ad:5d:5b:48:36:79:9a:a9:3f:1b:cd:2c:9d:10:e1: b8:ea:c5:1a:9b:51:21:37:e9:13:89:c6:cf:09:59: 8d:5d:0e:15:63:94:37:7d:f5:78:1b:17:88:13:6b: 81:ef:b3:b7:35:16:1e:44:e3:98:d7:30:19:2e:11: 85:31:b9:2e:bb:d7:6d:28:ce:b9:3d:c1:6d:34:73: 01:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:33:1F:91:29:2F:46:75:8D:CF:9D:59:05:7F:1F:BD:60:54:E2:86 X509v3 Authority Key Identifier: keyid:6E:33:D5:13:99:25:C3:DB:4D:08:59:37:CE:69:AC:D3:7B:EA:79:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjPVE5klw9tNCFk3zmms03vqeU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:06:a4:18:6f:bf:0e:cf:c9:56:e5:b1:5e:d5:3c:5b:58:9f: 41:22:07:f0:d5:03:17:bc:8c:57:6a:bb:06:9a:06:32:e2:df: 11:97:7d:d1:b4:8c:63:24:7a:be:cc:d9:4c:f7:5b:92:5f:5b: f7:74:85:11:57:47:fb:36:01:ea:cd:42:7f:ff:44:7c:44:b7: 98:62:a1:76:a2:51:39:93:85:39:f5:c6:3d:4c:07:e7:41:53: 2d:65:51:59:b3:4a:d9:9e:00:0c:5d:38:2c:3b:0e:3a:35:ed: f0:0c:45:c3:e7:fd:2c:3a:39:72:57:ce:50:40:58:bf:74:a0: 68:af:7e:d8:d2:58:c1:52:ea:b6:ee:fe:88:e5:a3:7d:63:79: ab:57:b0:20:38:b9:90:9b:84:0c:f6:7d:cb:40:11:4f:42:94: 79:6e:63:fd:1d:84:59:72:28:a1:28:74:10:8a:d6:ba:34:d9: 20:20:b6:41:f6:aa:e4:7f:b2:f7:b4:5a:ca:ae:ac:47:b2:83: bd:15:43:e4:32:7e:ae:5f:71:28:65:78:ce:d2:61:49:7b:77: 7d:12:7c:e2:0d:d8:3a:37:cc:9d:3f:31:23:f5:00:f3:d3:f7: c5:a1:4b:6e:2f:01:6a:09:37:60:17:08:35:a6:f9:ac:ae:68: 58:42:8e:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThDRDIxMTAvBgNVBAUTKDZFMzNENTEzOTkyNUMzREI0RDA4NTkzN0NFNjlBQ0Qz N0JFQTc5NEQwHhcNMjUwNTMwMjMyNzMyWhcNMjUwNjA2MjMyNzMyWjAYMRYwFAYD VQQDEw02ODNhM2VlNC1mYTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyGc8j3zwzCUqqrr7kgSinq+ONew4g1vJpaWyDJRlZE6jOlBEvCtEDj6f77+3 Tv0WqThUgIHiro0lCsEUWfRrGsOW42osZDu1eaBvbX/PFMigdmDvlRFHqbPc1Wfw HtHpucat3icW3rHHYEmwuJW/wrMTsIFMGjQYFBMczaYCZQgQ2BnpO7mChQMQovwj syVGB0r81gkkacG9Mg+MUBa8lguUZh6ZK4bi7F5D7ZM/xuIc42KtXVtINnmaqT8b zSydEOG46sUam1EhN+kTicbPCVmNXQ4VY5Q3ffV4GxeIE2uB77O3NRYeROOY1zAZ LhGFMbkuu9dtKM65PcFtNHMBIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKUzH5Ep L0Z1jc+dWQV/H71gVOKGMB8GA1UdIwQYMBaAFG4z1ROZJcPbTQhZN85prNN76nlN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOENEMi8wNDNDNkFGNEQ4 RTUxMUVCODA2ODVENUZDNEY5QUUwMi9ialBWRTVrbHc5dE5DRmszem1tczAzdnFl VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JqUFZFNWtsdzl0TkNGazN6bW1zMDN2cWVVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OENEMi8wNDNDNkFGNEQ4RTUxMUVCODA2ODVENUZDNEY5QUUwMi9ialBWRTVrbHc5 dE5DRmszem1tczAzdnFlVTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9BqQYb78Oz8lW5bFe1TxbWJ9BIgfw1QMXvIxXarsGmgYy4t8Rl33R tIxjJHq+zNlM91uSX1v3dIURV0f7NgHqzUJ//0R8RLeYYqF2olE5k4U59cY9TAfn QVMtZVFZs0rZngAMXTgsOw46Ne3wDEXD5/0sOjlyV85QQFi/dKBor37Y0ljBUuq2 7v6I5aN9Y3mrV7AgOLmQm4QM9n3LQBFPQpR5bmP9HYRZciihKHQQita6NNkgILZB 9qrkf7L3tFrKrqxHsoO9FUPkMn6uX3EoZXjO0mFJe3d9EnziDdg6N8ydPzEj9QDz 0/fFoUtuLwFqCTdgFwg1pvmsrmhYQo59 -----END CERTIFICATE-----Generated at Sat May 31 16:27:45 2025 by rpki-client