$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft File: bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft (raw, json) Hash identifier: //JzBG1B6xT3/OY7p3UtLEbawttChpw1Jmv6qp1+FS4= Subject key identifier: DA:46:EE:5F:88:49:74:3E:69:47:6A:0C:ED:36:F6:D1:89:69:F2:3F Authority key identifier: 6C:BB:67:67:F6:3A:0C:B9:B7:A7:49:14:B4:A6:57:41:7E:4C:57:8A Certificate issuer: /CN=A91B9008/serialNumber=6CBB6767F63A0CB9B7A74914B4A657417E4C578A Certificate serial: 0109 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft Manifest number: 0105 Signing time: Sat 31 May 2025 04:42:20 +0000 Manifest this update: Sat 31 May 2025 04:42:19 +0000 Manifest next update: Sat 07 Jun 2025 04:42:19 +0000 Files and hashes: 1: bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl (hash: bcEzNfFDBsleNzqgFmUgpgEZAv908oChz+ccXHSGXzE=) 2: 4CFDF03AB4DB11EE9FF6FB59C4F9AE02.roa (hash: AnEWPP8X1N6dt7l7V3XsTmB0MKThvDc5dt35NbkXnzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:42:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 265 (0x109) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9008, serialNumber=6CBB6767F63A0CB9B7A74914B4A657417E4C578A Validity Not Before: May 31 04:42:19 2025 GMT Not After : Jun 7 04:42:19 2025 GMT Subject: CN=683a88ac-f5a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f2:5b:33:91:53:5f:1f:b6:78:be:71:e5:da: 3c:6d:a9:88:38:06:ee:22:b5:45:31:04:3d:f8:8e: 3b:f4:6f:4b:fb:a5:2a:f7:a6:19:3d:e4:f6:66:97: c4:15:f6:28:90:5a:55:1b:a9:75:83:67:11:bb:cd: 62:70:1b:12:ca:17:dc:ad:85:ae:3a:a9:e4:a2:6c: 5c:65:8f:ef:1e:74:36:0b:a4:b9:d1:dd:d9:e3:37: 22:cc:a1:25:6c:52:ff:21:e8:8c:af:04:aa:08:8a: a5:19:32:f9:38:75:2a:dd:91:fd:a1:d0:19:fc:81: 43:e5:41:cf:50:e7:1c:19:92:fa:e7:cb:5a:d3:66: 51:46:ca:fe:96:36:72:f2:b2:5c:8c:a7:06:2a:19: 11:73:2e:40:53:2a:ab:24:fb:df:30:ac:22:85:3c: e1:e4:53:90:c0:b0:61:b1:33:c9:6a:75:37:94:bd: 9c:af:1d:bb:f6:cb:90:a3:47:20:43:57:bb:c1:13: 41:60:13:b5:4c:8d:cc:19:f9:1b:88:51:de:98:52: 6a:6d:c4:38:32:8a:07:17:16:d8:9b:32:43:bf:f4: f8:db:22:61:f4:93:27:0a:a3:42:42:6b:b5:a1:c5: 33:99:b0:17:d6:13:9e:4f:87:95:38:eb:0c:c3:d8: 9e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:46:EE:5F:88:49:74:3E:69:47:6A:0C:ED:36:F6:D1:89:69:F2:3F X509v3 Authority Key Identifier: keyid:6C:BB:67:67:F6:3A:0C:B9:B7:A7:49:14:B4:A6:57:41:7E:4C:57:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:3a:6b:d1:76:f1:01:a7:90:5b:29:8d:34:eb:75:6e:fd:f8: 3e:75:12:fa:bd:f1:aa:a6:db:1f:24:36:27:5b:eb:e9:0e:fd: 3a:8d:a4:1f:8c:9e:c8:dd:eb:36:3d:2f:b3:95:a7:8b:56:cb: 80:4c:e6:13:ac:87:49:96:03:fe:66:3e:01:a6:4b:a8:42:d6: e3:d0:a3:c7:80:fe:8a:2c:a6:7c:31:b9:d2:a1:cd:e9:1d:ed: 4f:4a:ef:1e:39:bd:ed:b5:fa:07:a1:0a:45:62:98:16:83:32: 6b:b0:c2:1b:98:ee:68:f1:45:da:07:d7:3d:6f:73:c4:ea:2b: 14:00:f5:8d:21:ad:5f:a4:fa:98:13:87:85:50:1c:7d:56:8c: 28:d5:bb:f7:58:57:55:7c:44:37:4c:51:ba:0e:50:cb:b8:28: 3b:b3:20:a5:35:f0:ba:54:75:fb:75:ee:c6:70:f1:2e:f9:e1: 36:1f:00:d3:b2:a7:f6:26:e6:22:9e:63:83:2e:d1:7b:10:ad: 13:5d:87:85:96:71:5e:9b:e9:df:3b:70:64:05:f6:b4:c9:b4: 15:f8:c8:fc:23:15:63:3d:2c:08:79:51:2e:10:18:1b:50:b1: ab:3e:6c:9f:3b:df:cb:30:0a:f4:18:b6:ae:96:32:07:db:f3: 7a:5e:0b:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkwMDgxMTAvBgNVBAUTKDZDQkI2NzY3RjYzQTBDQjlCN0E3NDkxNEI0QTY1NzQx N0U0QzU3OEEwHhcNMjUwNTMxMDQ0MjE5WhcNMjUwNjA3MDQ0MjE5WjAYMRYwFAYD VQQDEw02ODNhODhhYy1mNWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr/JbM5FTXx+2eL5x5do8bamIOAbuIrVFMQQ9+I479G9L+6Uq96YZPeT2ZpfE FfYokFpVG6l1g2cRu81icBsSyhfcrYWuOqnkomxcZY/vHnQ2C6S50d3Z4zcizKEl bFL/IeiMrwSqCIqlGTL5OHUq3ZH9odAZ/IFD5UHPUOccGZL658ta02ZRRsr+ljZy 8rJcjKcGKhkRcy5AUyqrJPvfMKwihTzh5FOQwLBhsTPJanU3lL2crx279suQo0cg Q1e7wRNBYBO1TI3MGfkbiFHemFJqbcQ4MooHFxbYmzJDv/T42yJh9JMnCqNCQmu1 ocUzmbAX1hOeT4eVOOsMw9iecQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNpG7l+I SXQ+aUdqDO029tGJafI/MB8GA1UdIwQYMBaAFGy7Z2f2Ogy5t6dJFLSmV0F+TFeK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTAwOC8wQThGQkIxQUI0 MzIxMUVFQTI2NDQ0MENDNEY5QUUwMi9iTHRuWl9ZNkRMbTNwMGtVdEtaWFFYNU1W NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JMdG5aX1k2RExtM3Awa1V0S1pYUVg1TVY0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTAwOC8wQThGQkIxQUI0MzIxMUVFQTI2NDQ0MENDNEY5QUUwMi9iTHRuWl9ZNkRM bTNwMGtVdEtaWFFYNU1WNG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTOmvRdvEBp5BbKY0063Vu/fg+dRL6vfGqptsfJDYnW+vpDv06jaQf jJ7I3es2PS+zlaeLVsuATOYTrIdJlgP+Zj4BpkuoQtbj0KPHgP6KLKZ8MbnSoc3p He1PSu8eOb3ttfoHoQpFYpgWgzJrsMIbmO5o8UXaB9c9b3PE6isUAPWNIa1fpPqY E4eFUBx9Vowo1bv3WFdVfEQ3TFG6DlDLuCg7syClNfC6VHX7de7GcPEu+eE2HwDT sqf2JuYinmODLtF7EK0TXYeFlnFem+nfO3BkBfa0ybQV+Mj8IxVjPSwIeVEuEBgb ULGrPmyfO9/LMAr0GLauljIH2/N6Xgvk -----END CERTIFICATE-----Generated at Sat May 31 15:06:09 2025 by rpki-client