$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft File: bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft (raw, json) Hash identifier: m+ZwFyowvCQSKLkpkuifkmLwSTFxqYFDQPX1EazaElY= Subject key identifier: 1E:44:43:35:7D:1A:AE:28:0C:44:8B:7B:75:8F:C0:C9:85:63:ED:5F Authority key identifier: 6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25 Certificate issuer: /CN=A91C2C8A/serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325 Certificate serial: CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft Manifest number: BD Signing time: Sat 31 May 2025 05:31:35 +0000 Manifest this update: Sat 31 May 2025 05:31:35 +0000 Manifest next update: Sat 07 Jun 2025 05:31:35 +0000 Files and hashes: 1: bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl (hash: vSY/jiIN+Lexlaj/np46WOc+BX1761ojLF/XIwrVnQs=) 2: AA97516E24CA11EFB59A9379C4F9AE02.roa (hash: vY7AsZ08Pw1TlHVY7hGbU3NQuV3eecatAeSNrTUiOFk=) 3: A1732A0E24CA11EF93486579C4F9AE02.roa (hash: c1fiRMTzx+sKc+PUXDGG2MhU2IceNjiS5ZTGcmsSFDc=) 4: 41A8950C272F11EF9D0A0C5CC4F9AE02.roa (hash: Zeo9E1pvK7pqXxcoNJpNgvy4k5rrUkurswNhSqNf24s=) 5: A074721624CA11EF93486579C4F9AE02.roa (hash: EAuwmClXGMo+6npZ19N/RRkMj4x/6MUGDRCOhMDeS9A=) 6: 0E49D1E024CC11EFB113A27BC4F9AE02.roa (hash: NR/+YgQkm7A4mmhSV+xz9O4OYp+ZS9oT3gP6zL7oedM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:31:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2C8A, serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325 Validity Not Before: May 31 05:31:35 2025 GMT Not After : Jun 7 05:31:35 2025 GMT Subject: CN=683a9437-f671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:8b:45:7d:d3:56:cf:77:9f:b7:fe:83:58:96: 1c:b4:a7:5f:6a:87:8a:a5:73:e7:2b:02:a0:e6:4d: 59:52:7d:f6:80:15:aa:c8:a3:c5:23:3a:9b:dd:79: b4:7f:8a:f7:60:b1:f3:42:97:a3:b7:78:dd:23:c7: 9f:d9:5d:0a:85:cd:77:fb:ad:4c:0d:99:1c:df:58: 43:e9:a5:f4:bd:4f:1c:17:8b:99:03:12:cd:c5:35: fb:0c:2f:5c:3e:c4:50:34:c9:27:41:91:ba:81:e3: 9a:29:cf:d0:ea:2a:b1:d1:17:32:08:b3:2a:b4:81: e7:b5:1b:f3:23:65:33:04:0d:99:37:be:a3:34:f6: 74:af:de:cd:5b:d1:b6:92:e9:5c:01:25:c0:31:66: 62:01:23:33:4b:fb:62:de:8f:45:bc:e9:4e:af:47: 61:48:e5:d2:71:83:b3:c1:0e:7c:1d:de:dd:75:14: e6:d8:85:9c:86:5b:c8:6b:f9:f9:27:c4:0c:84:b1: 62:9a:9b:91:88:1d:c0:d5:31:eb:c4:30:89:58:72: b5:d0:a6:2b:b8:09:d0:c5:04:e1:7a:6b:3b:e8:5c: 54:2e:d9:88:37:fe:fe:bb:9d:16:5d:74:b0:fc:2f: e6:69:c1:0f:20:cd:88:e0:c5:c8:05:12:e1:6d:c0: ed:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:44:43:35:7D:1A:AE:28:0C:44:8B:7B:75:8F:C0:C9:85:63:ED:5F X509v3 Authority Key Identifier: keyid:6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:09:df:0c:b4:94:cf:88:ab:cf:df:8d:f4:1e:b2:e9:44:49: 2b:c5:e8:09:92:2a:8d:60:eb:a8:0a:c6:fa:d4:47:0e:de:34: 00:83:4f:d8:43:27:03:1b:19:e2:27:f4:7f:e2:3b:29:c3:c8: 8b:36:fb:9e:34:55:1e:e1:76:9f:3f:d9:53:82:90:7d:82:f4: 13:ca:34:ce:41:bb:60:26:2c:78:76:1d:58:dd:26:c3:e2:19: 62:0e:12:d5:b0:55:f5:a8:2e:0a:d1:64:46:7a:fa:e4:da:3e: 1b:89:bc:2e:bd:15:53:82:4d:3f:05:23:f4:09:e6:2e:9e:39: 51:16:6e:7b:e2:32:ac:a2:46:81:2b:7a:6b:7a:8c:65:c4:a2: c2:c4:38:ca:ec:55:4e:28:76:d5:54:36:35:7e:3a:01:ae:39: 45:e7:58:fc:70:77:5a:3d:a6:42:d2:71:fe:61:ef:f8:4f:b8: 6a:dc:89:32:ce:3a:ad:27:ff:89:b6:9c:76:1e:1c:68:46:4f: c6:8f:fd:5f:79:c0:e3:c6:f8:89:7e:bb:da:f7:f2:06:6d:3f: f2:15:38:48:cc:ce:f5:2f:19:f7:0f:61:3c:32:b8:14:05:eb: 5c:8b:b9:8d:05:76:88:40:c5:47:db:62:b1:e1:94:2b:fb:74: 32:75:ba:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJDOEExMTAvBgNVBAUTKDZDRTdCNTc1MEU2RTE3RDNEMzlFQjVCMDg3RkQzRkFE NTk1OUYzMjUwHhcNMjUwNTMxMDUzMTM1WhcNMjUwNjA3MDUzMTM1WjAYMRYwFAYD VQQDEw02ODNhOTQzNy1mNjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmotFfdNWz3eft/6DWJYctKdfaoeKpXPnKwKg5k1ZUn32gBWqyKPFIzqb3Xm0 f4r3YLHzQpejt3jdI8ef2V0Khc13+61MDZkc31hD6aX0vU8cF4uZAxLNxTX7DC9c PsRQNMknQZG6geOaKc/Q6iqx0RcyCLMqtIHntRvzI2UzBA2ZN76jNPZ0r97NW9G2 kulcASXAMWZiASMzS/ti3o9FvOlOr0dhSOXScYOzwQ58Hd7ddRTm2IWchlvIa/n5 J8QMhLFimpuRiB3A1THrxDCJWHK10KYruAnQxQThems76FxULtmIN/7+u50WXXSw /C/macEPIM2I4MXIBRLhbcDt2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB5EQzV9 Gq4oDESLe3WPwMmFY+1fMB8GA1UdIwQYMBaAFGzntXUObhfT0561sIf9P61ZWfMl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkM4QS82MUVDNDkxNjI0 QzkxMUVGOUM4QzYyNTlDNEY5QUUwMi9iT2UxZFE1dUY5UFRucld3aF8wX3JWbFo4 eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JPZTFkUTV1RjlQVG5yV3doXzBfclZsWjh5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkM4QS82MUVDNDkxNjI0QzkxMUVGOUM4QzYyNTlDNEY5QUUwMi9iT2UxZFE1dUY5 UFRucld3aF8wX3JWbFo4eVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhCd8MtJTPiKvP3430HrLpREkrxegJkiqNYOuoCsb61EcO3jQAg0/Y QycDGxniJ/R/4jspw8iLNvueNFUe4XafP9lTgpB9gvQTyjTOQbtgJix4dh1Y3SbD 4hliDhLVsFX1qC4K0WRGevrk2j4bibwuvRVTgk0/BSP0CeYunjlRFm574jKsokaB K3preoxlxKLCxDjK7FVOKHbVVDY1fjoBrjlF51j8cHdaPaZC0nH+Ye/4T7hq3Iky zjqtJ/+Jtpx2HhxoRk/Gj/1fecDjxviJfrva9/IGbT/yFThIzM71Lxn3D2E8MrgU Betci7mNBXaIQMVH22Kx4ZQr+3QydbqB -----END CERTIFICATE-----Generated at Sat May 31 17:32:51 2025 by rpki-client