$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft File: BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft (raw, json) Hash identifier: /UOsJ3YObf+30K+fX+sXNSaBTd8HPpbMuTyKYfLZUdY= Subject key identifier: 8D:C9:3C:A7:55:59:C6:35:D3:E2:3B:20:D2:2A:C7:87:FE:3D:A8:FD Authority key identifier: 04:CF:57:F2:A7:FF:CA:72:C0:74:68:A8:C6:D5:F2:45:17:FF:46:B9 Certificate issuer: /CN=A91B4AA0/serialNumber=04CF57F2A7FFCA72C07468A8C6D5F24517FF46B9 Certificate serial: 080D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BM9X8qf_ynLAdGioxtXyRRf_Rrk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft Manifest number: 0802 Signing time: Fri 30 May 2025 21:10:16 +0000 Manifest this update: Fri 30 May 2025 21:10:15 +0000 Manifest next update: Fri 06 Jun 2025 21:10:15 +0000 Files and hashes: 1: BM9X8qf_ynLAdGioxtXyRRf_Rrk.crl (hash: AjFIIaJhe/Mg139qr0lhBJjR7yJ62szjPYrM9NUskTw=) 2: 02F863F6C09211EC8950E57AC4F9AE02.roa (hash: YNUo90dPfw7aNa6aT24Mb69b4ZpufKscErkIIX/bwoA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.crl rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BM9X8qf_ynLAdGioxtXyRRf_Rrk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:10:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2061 (0x80d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4AA0, serialNumber=04CF57F2A7FFCA72C07468A8C6D5F24517FF46B9 Validity Not Before: May 30 21:10:15 2025 GMT Not After : Jun 6 21:10:15 2025 GMT Subject: CN=683a1eb7-2fea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:06:cf:a0:d3:6f:80:f2:08:14:58:69:59:08: 5b:bb:32:05:5a:d2:99:9d:b3:aa:11:a6:dc:f6:4b: 93:aa:c1:1f:c2:5c:23:5e:c4:fb:82:b4:10:7b:d2: 65:ac:4c:d9:65:75:ed:f3:e3:c1:84:54:b9:89:d5: 72:be:7a:23:66:02:54:c5:81:d9:77:72:61:37:f3: 94:6d:eb:3a:45:c7:88:ce:84:3e:00:32:a9:0e:8a: 8a:3f:5b:03:18:66:5b:e8:31:f6:4f:88:23:bd:3e: 8b:9a:0e:ca:a0:d2:eb:10:05:a0:41:4b:fa:68:94: 8f:ae:35:7e:dc:6b:d8:78:07:4e:48:ea:00:4d:4b: 3d:96:bc:0d:d0:34:87:3e:56:c1:22:29:57:65:55: d4:77:27:81:d2:73:3c:34:15:7e:2d:c4:29:05:a2: de:24:48:46:38:2d:0a:8a:d2:7b:2f:ab:ff:7c:99: ef:38:b7:c5:1b:a8:62:c3:37:5a:17:71:4e:cb:7a: 31:0b:a1:5a:bf:56:bb:c4:b8:33:5b:82:6f:dc:3c: 9a:e2:8d:9c:2b:9e:0e:80:ea:1e:d7:3f:b9:9d:74: c1:70:ac:b8:7b:43:fd:7d:8d:c2:af:f9:55:db:bb: 4b:05:df:d8:5b:a9:f0:11:89:84:c0:16:c1:55:9a: 04:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:C9:3C:A7:55:59:C6:35:D3:E2:3B:20:D2:2A:C7:87:FE:3D:A8:FD X509v3 Authority Key Identifier: keyid:04:CF:57:F2:A7:FF:CA:72:C0:74:68:A8:C6:D5:F2:45:17:FF:46:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BM9X8qf_ynLAdGioxtXyRRf_Rrk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:79:f5:05:c9:44:c9:c7:31:89:34:48:c4:83:41:10:c7:bd: d9:c3:b1:60:32:86:fd:02:51:7b:4a:32:89:c5:8b:40:f5:e2: 9f:16:19:38:cd:77:53:fa:9d:df:18:9b:17:bf:cb:5b:64:b4: b8:fa:e2:d4:48:01:8c:05:f5:b2:23:f8:55:01:52:c6:36:e3: d1:ce:c1:a5:ac:7b:13:6e:8d:83:64:5b:da:58:af:00:18:3c: 32:2e:af:6b:9f:f7:63:54:fd:b2:0c:6d:0c:81:1b:e3:b4:b9: e8:3a:7f:66:3c:fb:05:1a:5a:53:e9:4f:6b:e9:9a:bb:bd:87: 9a:23:ce:a3:cf:22:8b:9f:1e:c6:91:65:22:ca:4a:83:5f:24: 18:ab:02:57:ec:c9:ed:10:4f:68:be:9e:37:91:04:e2:41:d6: ff:a1:cd:75:0a:ca:eb:0b:30:a1:46:be:6a:d4:3e:9d:fb:a2: cc:19:0f:12:79:7b:b1:ff:ce:ce:18:17:c5:5b:16:33:8e:d4: 49:b7:39:cb:cc:21:93:dd:1f:14:06:21:20:fa:08:d3:f0:c3: f6:79:de:45:a9:2b:d5:47:10:c1:4b:17:49:25:36:3a:d6:33: 62:14:79:d5:a4:12:d6:4f:6a:4f:9b:38:1f:f1:f8:5b:d0:02: f5:a3:9e:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCA0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRBQTAxMTAvBgNVBAUTKDA0Q0Y1N0YyQTdGRkNBNzJDMDc0NjhBOEM2RDVGMjQ1 MTdGRjQ2QjkwHhcNMjUwNTMwMjExMDE1WhcNMjUwNjA2MjExMDE1WjAYMRYwFAYD VQQDEw02ODNhMWViNy0yZmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwgbPoNNvgPIIFFhpWQhbuzIFWtKZnbOqEabc9kuTqsEfwlwjXsT7grQQe9Jl rEzZZXXt8+PBhFS5idVyvnojZgJUxYHZd3JhN/OUbes6RceIzoQ+ADKpDoqKP1sD GGZb6DH2T4gjvT6Lmg7KoNLrEAWgQUv6aJSPrjV+3GvYeAdOSOoATUs9lrwN0DSH PlbBIilXZVXUdyeB0nM8NBV+LcQpBaLeJEhGOC0KitJ7L6v/fJnvOLfFG6hiwzda F3FOy3oxC6Fav1a7xLgzW4Jv3Dya4o2cK54OgOoe1z+5nXTBcKy4e0P9fY3Cr/lV 27tLBd/YW6nwEYmEwBbBVZoE+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI3JPKdV WcY10+I7INIqx4f+Paj9MB8GA1UdIwQYMBaAFATPV/Kn/8pywHRoqMbV8kUX/0a5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEFBMC8xMDQxRTVFQUUy QzMxMUVBQjgxOEQxN0ZDNEY5QUUwMi9CTTlYOHFmX3luTEFkR2lveHRYeVJSZl9S cmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JNOVg4cWZfeW5MQWRHaW94dFh5UlJmX1Jyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEFBMC8xMDQxRTVFQUUyQzMxMUVBQjgxOEQxN0ZDNEY5QUUwMi9CTTlYOHFmX3lu TEFkR2lveHRYeVJSZl9ScmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8efUFyUTJxzGJNEjEg0EQx73Zw7FgMob9AlF7SjKJxYtA9eKfFhk4 zXdT+p3fGJsXv8tbZLS4+uLUSAGMBfWyI/hVAVLGNuPRzsGlrHsTbo2DZFvaWK8A GDwyLq9rn/djVP2yDG0MgRvjtLnoOn9mPPsFGlpT6U9r6Zq7vYeaI86jzyKLnx7G kWUiykqDXyQYqwJX7MntEE9ovp43kQTiQdb/oc11CsrrCzChRr5q1D6d+6LMGQ8S eXux/87OGBfFWxYzjtRJtznLzCGT3R8UBiEg+gjT8MP2ed5FqSvVRxDBSxdJJTY6 1jNiFHnVpBLWT2pPmzgf8fhb0AL1o55d -----END CERTIFICATE-----Generated at Sat May 31 16:34:02 2025 by rpki-client