$ rpki-client -vvf rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft File: bAgKK6farJXU2TSIqQAVGuOlnfg.mft (raw, json) Hash identifier: 0yXWqcWJv15MtYjAourDTPf+Ke/eohHGL/aB+zKk5SQ= Subject key identifier: F2:3D:91:29:28:23:A0:09:9C:B1:5D:41:45:94:5C:4D:ED:D4:CC:A2 Authority key identifier: 6C:08:0A:2B:A7:DA:AC:95:D4:D9:34:88:A9:00:15:1A:E3:A5:9D:F8 Certificate issuer: /CN=A91B74E8/serialNumber=6C080A2BA7DAAC95D4D93488A900151AE3A59DF8 Certificate serial: 04AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft Manifest number: 0494 Signing time: Sat 31 May 2025 00:17:15 +0000 Manifest this update: Sat 31 May 2025 00:17:14 +0000 Manifest next update: Sat 07 Jun 2025 00:17:14 +0000 Files and hashes: 1: bAgKK6farJXU2TSIqQAVGuOlnfg.crl (hash: DLs+YAJt6ARGSOpqrN9kyb5a5lmyHho+J5yyvd55iK4=) 2: 51FD604CE08711EFA06D6434C4F9AE02.roa (hash: doR4Y7/9fJwk4I8rzXTdhySC0dSmOygHgP5L2cehpw4=) 3: CCF1692CC85111EFAEC7B83FC4F9AE02.roa (hash: YNmXXeohBLlW644lJk9sQ0wTlKH8+7poI39Ki1Khyx0=) 4: AD5EE696C0A711EE97A2E984C4F9AE02.roa (hash: 8jti7DRjplfPDOWY06XiRJGfKvNLpJCDztlNbOL025A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.crl rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:17:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1198 (0x4ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B74E8, serialNumber=6C080A2BA7DAAC95D4D93488A900151AE3A59DF8 Validity Not Before: May 31 00:17:14 2025 GMT Not After : Jun 7 00:17:14 2025 GMT Subject: CN=683a4a8a-d8d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:56:10:e8:1a:51:d2:d2:c7:68:60:fa:e0:43: 9a:98:38:78:b6:c7:9b:c8:4e:eb:1e:ab:43:57:cc: b4:d8:20:4e:db:5d:c4:fa:90:2a:66:a5:5a:43:9e: 59:14:d0:16:de:c2:2a:3a:fa:f0:40:70:e6:ce:64: 70:60:64:ac:9a:ff:fe:f6:a9:e8:71:fc:cf:51:5e: 61:04:5b:47:b1:d3:1d:4e:fa:8f:63:9c:8b:93:b0: c7:ed:20:a3:85:e6:4d:55:2e:dc:61:75:46:f1:86: 2f:26:6c:c3:81:2d:4b:b4:d3:94:af:0d:b2:b6:e9: 72:88:5d:de:d6:fe:ec:ff:22:51:0d:cb:4b:8b:c8: b7:71:5e:b1:5d:a6:a6:38:ab:b6:e2:c9:4f:72:a2: 84:68:b6:82:b6:e2:f2:71:c8:46:92:43:cd:39:de: 48:6e:a3:c5:bf:27:0e:ca:85:82:9b:f9:08:13:77: d0:3e:82:48:92:6a:9a:51:f5:0d:21:eb:a9:f6:f6: 6d:4c:53:51:d3:1f:33:45:09:29:10:58:dd:20:ca: 66:f8:e4:9c:1a:15:f1:86:53:97:b5:55:17:de:5d: 37:3f:15:0f:a0:ee:9b:bf:d4:cb:84:8f:7f:2e:95: db:78:58:ea:ae:5e:66:04:49:df:b6:3e:51:a7:73: 7b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:3D:91:29:28:23:A0:09:9C:B1:5D:41:45:94:5C:4D:ED:D4:CC:A2 X509v3 Authority Key Identifier: keyid:6C:08:0A:2B:A7:DA:AC:95:D4:D9:34:88:A9:00:15:1A:E3:A5:9D:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:f8:08:c4:cc:42:7a:a2:ed:0c:9a:2a:e6:c1:de:c2:73:ac: 95:7e:35:dc:d0:42:ff:47:c8:60:97:07:8f:08:ca:1d:03:a0: c1:ab:9b:e3:2c:db:0b:62:f6:49:9f:43:e0:c9:22:64:c7:1d: 95:fa:96:53:6b:29:1f:c0:6c:94:83:a4:d2:ff:b9:89:a2:e6: 52:e5:56:95:af:c9:d0:f7:54:3c:7c:94:eb:65:0e:4d:20:9c: b4:c8:68:28:9e:a0:fd:f5:bd:f8:7c:16:e3:ba:7a:00:a1:e7: 36:49:7d:66:ef:1b:f1:89:42:25:37:8b:72:06:92:b8:82:81: c7:48:78:16:b1:8f:28:09:b1:1b:2e:81:17:68:ef:88:37:2f: d8:67:c0:d0:57:f3:09:ae:5f:88:be:c2:a1:fe:bf:78:7b:0c: f0:f7:e1:83:69:a1:29:7b:ac:7a:1e:34:25:89:46:da:0b:17: 07:e1:59:ef:1e:c0:18:47:ce:9f:92:ac:b5:88:7f:dd:c9:d2: da:a3:1d:48:bf:a9:fa:bf:55:bb:c0:eb:6d:0e:77:91:5f:40: c4:98:02:71:db:57:7b:32:a0:5f:53:19:ac:bf:e2:a6:9f:08: 2b:cd:d7:34:26:31:aa:7c:33:24:65:89:2c:87:1e:b8:ce:e3: 3e:b0:01:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc0RTgxMTAvBgNVBAUTKDZDMDgwQTJCQTdEQUFDOTVENEQ5MzQ4OEE5MDAxNTFB RTNBNTlERjgwHhcNMjUwNTMxMDAxNzE0WhcNMjUwNjA3MDAxNzE0WjAYMRYwFAYD VQQDEw02ODNhNGE4YS1kOGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtlYQ6BpR0tLHaGD64EOamDh4tsebyE7rHqtDV8y02CBO213E+pAqZqVaQ55Z FNAW3sIqOvrwQHDmzmRwYGSsmv/+9qnocfzPUV5hBFtHsdMdTvqPY5yLk7DH7SCj heZNVS7cYXVG8YYvJmzDgS1LtNOUrw2ytulyiF3e1v7s/yJRDctLi8i3cV6xXaam OKu24slPcqKEaLaCtuLycchGkkPNOd5IbqPFvycOyoWCm/kIE3fQPoJIkmqaUfUN Ieup9vZtTFNR0x8zRQkpEFjdIMpm+OScGhXxhlOXtVUX3l03PxUPoO6bv9TLhI9/ LpXbeFjqrl5mBEnftj5Rp3N7gQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPI9kSko I6AJnLFdQUWUXE3t1MyiMB8GA1UdIwQYMBaAFGwICiun2qyV1Nk0iKkAFRrjpZ34 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzRFOC80N0Y2MjAxMjQz RUExMUVDODRBQjYzNDdDNEY5QUUwMi9iQWdLSzZmYXJKWFUyVFNJcVFBVkd1T2xu ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JBZ0tLNmZhckpYVTJUU0lxUUFWR3VPbG5mZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzRFOC80N0Y2MjAxMjQzRUExMUVDODRBQjYzNDdDNEY5QUUwMi9iQWdLSzZmYXJK WFUyVFNJcVFBVkd1T2xuZmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBU+AjEzEJ6ou0Mmirmwd7Cc6yVfjXc0EL/R8hglwePCModA6DBq5vj LNsLYvZJn0PgySJkxx2V+pZTaykfwGyUg6TS/7mJouZS5VaVr8nQ91Q8fJTrZQ5N IJy0yGgonqD99b34fBbjunoAoec2SX1m7xvxiUIlN4tyBpK4goHHSHgWsY8oCbEb LoEXaO+INy/YZ8DQV/MJrl+IvsKh/r94ewzw9+GDaaEpe6x6HjQliUbaCxcH4Vnv HsAYR86fkqy1iH/dydLaox1Iv6n6v1W7wOttDneRX0DEmAJx21d7MqBfUxmsv+Km nwgrzdc0JjGqfDMkZYkshx64zuM+sAFI -----END CERTIFICATE-----Generated at Sat May 31 17:18:52 2025 by rpki-client