$ rpki-client -vvf rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft File: Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft (raw, json) Hash identifier: u2h2Z/bjoiZ1mBhlVp4PZGOcsPLtXeaI8419C3l/XMQ= Subject key identifier: 14:DD:26:12:20:0D:43:8E:EB:79:B0:6B:B1:C6:35:31:8E:79:93:19 Authority key identifier: 07:1F:81:19:17:14:41:80:2B:E3:26:1F:15:62:7D:AF:28:9D:B3:36 Certificate issuer: /CN=A91C37ED/serialNumber=071F8119171441802BE3261F15627DAF289DB336 Certificate serial: 0137 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx-BGRcUQYAr4yYfFWJ9ryidszY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft Manifest number: 0135 Signing time: Sat 31 May 2025 04:07:01 +0000 Manifest this update: Sat 31 May 2025 04:07:00 +0000 Manifest next update: Sat 07 Jun 2025 04:07:00 +0000 Files and hashes: 1: Bx-BGRcUQYAr4yYfFWJ9ryidszY.crl (hash: tNna5CtmhztCI7LirNd73thJmPPzrp2G9lO+LHwAuic=) 2: 6CE66CFC630E11EEA9EDC20FC4F9AE02.roa (hash: GWZ2MHtEWnxPiTCBVRb6cUY0T8WOEUXRXli5S8fNKVc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.crl rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx-BGRcUQYAr4yYfFWJ9ryidszY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:07:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 311 (0x137) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C37ED, serialNumber=071F8119171441802BE3261F15627DAF289DB336 Validity Not Before: May 31 04:07:00 2025 GMT Not After : Jun 7 04:07:00 2025 GMT Subject: CN=683a8065-8024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fd:bc:cd:8c:b5:81:07:dd:07:6d:f8:ee:40: c6:a7:8a:b9:e2:29:a3:86:db:ec:80:9b:2d:60:08: 86:2f:40:c1:27:8f:1d:fa:5b:f3:1e:aa:41:74:cf: 55:e6:27:cb:11:1c:3e:5e:43:64:32:69:30:d2:2e: 48:83:14:bf:79:e7:79:34:7e:70:f6:25:a8:c0:07: 5e:0d:2f:4a:e5:d6:3b:fa:ae:de:d4:4c:07:c6:39: 77:c1:48:45:7c:59:4f:76:cf:05:d3:27:0e:ed:27: 5b:0c:01:89:87:0b:10:06:7f:b0:10:58:00:1e:21: 72:a1:5c:ad:55:1e:31:bf:b7:8c:b5:c0:61:52:a4: 26:3a:82:2d:e0:77:0f:f0:08:08:d4:25:70:68:15: c4:5e:e1:cb:2c:8d:6a:2b:31:ac:0c:d8:14:da:37: 49:98:d0:3c:8f:7b:a2:8e:58:ee:29:58:03:93:ed: 0c:bf:8e:50:2c:f2:f0:6c:0c:78:ac:85:f9:ea:29: 4c:3f:02:88:85:5c:a5:9d:4b:ff:5d:e0:65:78:d2: 91:93:f8:8e:17:41:da:2f:07:8d:a6:13:69:5c:e1: af:d7:97:e1:c3:bc:8c:b3:4f:55:37:0f:25:d4:c6: 85:b6:f7:b0:8f:cd:5a:84:79:c7:94:b8:b0:c0:46: 0a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:DD:26:12:20:0D:43:8E:EB:79:B0:6B:B1:C6:35:31:8E:79:93:19 X509v3 Authority Key Identifier: keyid:07:1F:81:19:17:14:41:80:2B:E3:26:1F:15:62:7D:AF:28:9D:B3:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx-BGRcUQYAr4yYfFWJ9ryidszY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:f5:64:ba:f3:9b:32:aa:00:96:c2:47:5f:f1:82:4d:55:b8: 19:e0:be:bb:7a:fe:79:93:d9:75:91:fc:f1:ce:d3:55:d6:b9: c8:c5:dd:e8:00:dc:d0:e9:d1:23:13:ee:b2:8d:0e:9a:cf:05: 21:0d:e9:f6:62:92:68:30:dd:06:9c:c7:53:5f:75:b7:ae:c7: 71:20:a3:bf:fd:7f:f9:cf:0a:76:36:b1:64:75:6f:79:76:1e: 44:b9:95:a1:4b:51:dd:f9:c0:63:c2:c0:6b:75:12:ab:06:05: 12:e9:6e:bd:0c:10:43:d9:b6:e0:de:de:b5:05:19:2c:35:b7: ae:eb:1f:33:0a:75:17:7d:8c:f7:6c:65:68:bf:64:6d:69:da: f8:54:79:f4:21:69:34:10:cb:16:41:f9:23:32:5d:b7:48:b6: 1a:36:82:38:44:f9:27:7d:7b:ad:3a:10:ab:96:d2:c5:ee:25: 0a:f1:0e:bf:e9:bc:a0:e8:02:57:c7:9a:ba:a7:1e:c5:94:fc: 9b:59:f2:b6:af:e6:57:ef:9f:63:b2:1e:cb:e2:a8:ea:eb:6e: ef:b1:4a:dd:35:77:9e:aa:fb:90:d4:fd:5e:90:21:cc:2e:3b: dc:b7:e0:49:d7:0c:78:4e:ed:6c:90:d5:52:3b:2c:e1:46:9c: a9:39:a2:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzM3RUQxMTAvBgNVBAUTKDA3MUY4MTE5MTcxNDQxODAyQkUzMjYxRjE1NjI3REFG Mjg5REIzMzYwHhcNMjUwNTMxMDQwNzAwWhcNMjUwNjA3MDQwNzAwWjAYMRYwFAYD VQQDEw02ODNhODA2NS04MDI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvv28zYy1gQfdB2347kDGp4q54imjhtvsgJstYAiGL0DBJ48d+lvzHqpBdM9V 5ifLERw+XkNkMmkw0i5IgxS/eed5NH5w9iWowAdeDS9K5dY7+q7e1EwHxjl3wUhF fFlPds8F0ycO7SdbDAGJhwsQBn+wEFgAHiFyoVytVR4xv7eMtcBhUqQmOoIt4HcP 8AgI1CVwaBXEXuHLLI1qKzGsDNgU2jdJmNA8j3uijljuKVgDk+0Mv45QLPLwbAx4 rIX56ilMPwKIhVylnUv/XeBleNKRk/iOF0HaLweNphNpXOGv15fhw7yMs09VNw8l 1MaFtvewj81ahHnHlLiwwEYKnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBTdJhIg DUOO63mwa7HGNTGOeZMZMB8GA1UdIwQYMBaAFAcfgRkXFEGAK+MmHxVifa8onbM2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzdFRC82REI5NTRBMjYy QTMxMUVFODJCOTAwNzRDNEY5QUUwMi9CeC1CR1JjVVFZQXI0eVlmRldKOXJ5aWRz elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J4LUJHUmNVUVlBcjR5WWZGV0o5cnlpZHN6WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzdFRC82REI5NTRBMjYyQTMxMUVFODJCOTAwNzRDNEY5QUUwMi9CeC1CR1JjVVFZ QXI0eVlmRldKOXJ5aWRzelkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZ9WS685syqgCWwkdf8YJNVbgZ4L67ev55k9l1kfzxztNV1rnIxd3o ANzQ6dEjE+6yjQ6azwUhDen2YpJoMN0GnMdTX3W3rsdxIKO//X/5zwp2NrFkdW95 dh5EuZWhS1Hd+cBjwsBrdRKrBgUS6W69DBBD2bbg3t61BRksNbeu6x8zCnUXfYz3 bGVov2Rtadr4VHn0IWk0EMsWQfkjMl23SLYaNoI4RPknfXutOhCrltLF7iUK8Q6/ 6byg6AJXx5q6px7FlPybWfK2r+ZX759jsh7L4qjq627vsUrdNXeeqvuQ1P1ekCHM Ljvct+BJ1wx4Tu1skNVSOyzhRpypOaKH -----END CERTIFICATE-----Generated at Sat May 31 17:06:25 2025 by rpki-client