$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.mft File: BAiuYP82i4xPzZMY6lKlnIcolJw.mft (raw, json) Hash identifier: Zw2tlAIa9mcNh5cRVFydokYrJ2oSDSjYwb/hveOIpZs= Subject key identifier: 60:ED:9A:82:5B:12:C0:10:3C:4A:CC:87:C0:FE:26:22:78:D7:80:34 Authority key identifier: 04:08:AE:60:FF:36:8B:8C:4F:CD:93:18:EA:52:A5:9C:87:28:94:9C Certificate issuer: /CN=A91BA0AE/serialNumber=0408AE60FF368B8C4FCD9318EA52A59C8728949C Certificate serial: 0862 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BAiuYP82i4xPzZMY6lKlnIcolJw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.mft Manifest number: 0A32 Signing time: Mon 02 Jun 2025 20:53:43 +0000 Manifest this update: Mon 02 Jun 2025 20:53:43 +0000 Manifest next update: Mon 09 Jun 2025 20:53:43 +0000 Files and hashes: 1: BAiuYP82i4xPzZMY6lKlnIcolJw.crl (hash: cw7Zr+1k451fYkM+SGzvtBqgXbUbZn32ZxbfeNr1gpE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.crl rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BAiuYP82i4xPzZMY6lKlnIcolJw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 20:53:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2146 (0x862) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA0AE, serialNumber=0408AE60FF368B8C4FCD9318EA52A59C8728949C Validity Not Before: Jun 2 20:53:43 2025 GMT Not After : Jun 9 20:53:43 2025 GMT Subject: CN=683e0f57-7403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:09:ed:a0:24:80:e0:96:77:dc:be:b2:82:c4: 30:8f:ef:9a:22:da:cc:34:3d:3f:2e:a6:79:4d:ff: 5e:86:47:b1:56:12:b0:97:91:70:16:c1:49:54:1e: 1d:aa:03:80:2a:bb:4c:67:f3:f1:c8:41:52:bb:e4: 18:e3:ad:5c:8d:f7:4f:10:e5:48:9e:b4:50:78:f7: ae:f8:26:a9:d9:76:8c:a3:60:d0:7c:3e:2b:f4:35: fd:05:80:d6:bd:76:25:bf:4e:6f:b3:e7:11:4c:c4: a7:fb:4f:ab:a6:83:0e:1f:a7:5f:df:ea:5b:6f:e0: de:26:de:39:46:ef:9c:7e:60:63:a4:7c:6c:13:84: e8:56:3b:52:df:ac:72:90:7a:23:33:03:cf:51:03: a5:f9:f0:00:95:73:7c:c2:65:6d:47:9e:3c:64:b7: c0:d0:17:b2:73:5f:0e:a2:50:f5:15:26:2d:84:e9: 1e:11:2a:42:77:84:39:06:9f:e6:5f:ee:5b:45:7b: 9b:cc:b8:28:41:fb:b6:c7:52:bf:11:c6:ab:a7:df: 99:59:c0:f7:64:35:7b:29:54:81:e3:a6:6c:06:f4: c7:2a:be:4d:a1:47:4d:5a:70:9d:94:cb:42:68:e1: fb:d0:8d:2a:44:ec:20:0a:a2:98:08:b4:37:33:eb: 93:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:ED:9A:82:5B:12:C0:10:3C:4A:CC:87:C0:FE:26:22:78:D7:80:34 X509v3 Authority Key Identifier: keyid:04:08:AE:60:FF:36:8B:8C:4F:CD:93:18:EA:52:A5:9C:87:28:94:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BAiuYP82i4xPzZMY6lKlnIcolJw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:e3:11:9c:eb:65:df:6a:65:14:98:46:35:8f:83:5a:9d:40: cb:e8:ae:31:5c:c0:09:f8:5c:63:e5:13:6c:81:4c:f9:53:4d: c6:8f:3f:97:00:3f:71:0d:7c:6e:32:ee:be:9a:20:fc:45:c8: 47:8b:bb:b1:85:6e:44:76:21:80:ad:48:e1:6e:59:f6:0d:74: 79:14:46:1b:22:f1:17:2e:74:ca:f0:b0:d8:87:54:1e:2b:44: 9b:13:0e:bf:7f:c1:d6:af:17:76:0f:37:15:bc:82:23:11:60: 98:7f:16:e3:7c:0d:b0:5a:ff:7d:2b:5c:6d:7e:bf:bc:db:73: 27:88:af:8b:36:36:a4:09:83:9d:9f:26:d7:49:2e:16:fe:f3: e5:25:72:ba:e8:d9:a0:22:91:ef:6b:90:e9:b2:74:cf:b8:0d: b6:7e:fa:21:ad:e3:c0:70:63:cb:f0:87:a1:a5:7c:4b:56:43: ea:87:48:7a:c0:b6:f6:69:f2:55:5e:96:78:ca:c5:f5:6b:f8: 58:9d:aa:4c:cd:c4:45:bc:cc:f6:25:02:a3:2b:9b:45:ec:73: 1c:24:da:79:ed:a2:4b:06:58:f2:c5:3d:03:fc:94:83:11:ce: 36:f6:a4:4a:5e:cb:08:b5:9c:f7:c7:a9:43:de:2f:9e:d2:c8: 8b:98:6c:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEwQUUxMTAvBgNVBAUTKDA0MDhBRTYwRkYzNjhCOEM0RkNEOTMxOEVBNTJBNTlD ODcyODk0OUMwHhcNMjUwNjAyMjA1MzQzWhcNMjUwNjA5MjA1MzQzWjAYMRYwFAYD VQQDEw02ODNlMGY1Ny03NDAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxgntoCSA4JZ33L6ygsQwj++aItrMND0/LqZ5Tf9ehkexVhKwl5FwFsFJVB4d qgOAKrtMZ/PxyEFSu+QY461cjfdPEOVInrRQePeu+Cap2XaMo2DQfD4r9DX9BYDW vXYlv05vs+cRTMSn+0+rpoMOH6df3+pbb+DeJt45Ru+cfmBjpHxsE4ToVjtS36xy kHojMwPPUQOl+fAAlXN8wmVtR548ZLfA0Beyc18OolD1FSYthOkeESpCd4Q5Bp/m X+5bRXubzLgoQfu2x1K/Ecarp9+ZWcD3ZDV7KVSB46ZsBvTHKr5NoUdNWnCdlMtC aOH70I0qROwgCqKYCLQ3M+uTKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGDtmoJb EsAQPErMh8D+JiJ414A0MB8GA1UdIwQYMBaAFAQIrmD/NouMT82TGOpSpZyHKJSc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTBBRS8zN0VCMEM2NkM5 NjQxMUVBQTEwNkU4NTlDNEY5QUUwMi9CQWl1WVA4Mmk0eFB6Wk1ZNmxLbG5JY29s SncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JBaXVZUDgyaTR4UHpaTVk2bEtsbkljb2xKdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTBBRS8zN0VCMEM2NkM5NjQxMUVBQTEwNkU4NTlDNEY5QUUwMi9CQWl1WVA4Mmk0 eFB6Wk1ZNmxLbG5JY29sSncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB94xGc62XfamUUmEY1j4NanUDL6K4xXMAJ+Fxj5RNsgUz5U03Gjz+X AD9xDXxuMu6+miD8RchHi7uxhW5EdiGArUjhbln2DXR5FEYbIvEXLnTK8LDYh1Qe K0SbEw6/f8HWrxd2DzcVvIIjEWCYfxbjfA2wWv99K1xtfr+823MniK+LNjakCYOd nybXSS4W/vPlJXK66NmgIpHva5DpsnTPuA22fvohrePAcGPL8IehpXxLVkPqh0h6 wLb2afJVXpZ4ysX1a/hYnapMzcRFvMz2JQKjK5tF7HMcJNp57aJLBljyxT0D/JSD Ec429qRKXssItZz3x6lD3i+e0siLmGw5 -----END CERTIFICATE-----Generated at Tue Jun 3 23:58:44 2025 by rpki-client