$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.mft File: bLOCDaWkqEstlAm98H8lRf5tCxE.mft (raw, json) Hash identifier: 3E7u36xaiQ2aEPshFE20mKk2jSJPK/1CEh88VHCXElg= Subject key identifier: 74:27:3D:20:7E:7A:62:89:4F:02:1B:DB:B3:95:71:96:8D:AF:95:BB Authority key identifier: 6C:B3:82:0D:A5:A4:A8:4B:2D:94:09:BD:F0:7F:25:45:FE:6D:0B:11 Certificate issuer: /CN=A91CB063/serialNumber=6CB3820DA5A4A84B2D9409BDF07F2545FE6D0B11 Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLOCDaWkqEstlAm98H8lRf5tCxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.mft Manifest number: 44 Signing time: Sat 31 May 2025 07:00:08 +0000 Manifest this update: Sat 31 May 2025 07:00:07 +0000 Manifest next update: Sat 07 Jun 2025 07:00:06 +0000 Files and hashes: 1: bLOCDaWkqEstlAm98H8lRf5tCxE.crl (hash: Bops1hZgTHmy8Xc37SsAHFdmXtkokQKvAZlPyQn36vo=) 2: 3D3827F2D6EE11EFB955866CC4F9AE02.roa (hash: 4d4Ou4cSb0acdXH9Bn2waQ4IMkbvtakYfcIPMGQdXao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.crl rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLOCDaWkqEstlAm98H8lRf5tCxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB063, serialNumber=6CB3820DA5A4A84B2D9409BDF07F2545FE6D0B11 Validity Not Before: May 31 07:00:07 2025 GMT Not After : Jun 7 07:00:06 2025 GMT Subject: CN=683aa8f7-0566 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:15:d7:77:b2:11:fe:e3:ba:bd:b3:c0:85:06: c8:af:3d:71:11:75:71:30:de:8f:20:4e:d7:63:c1: 5b:00:ce:ef:44:c5:53:16:e3:c2:90:d9:43:64:0e: 6b:76:4a:23:78:2a:87:39:c4:a4:26:bd:5c:45:db: bd:58:e6:2e:8a:b6:1a:5a:6b:4e:03:a4:2a:38:f6: 98:b6:9b:a4:d6:2f:98:e6:5f:4e:e5:77:e2:e0:69: 2b:ba:a2:03:a8:3c:2c:8a:b9:72:01:44:56:bc:0c: b5:e8:a5:43:08:0c:06:97:4b:75:1a:87:07:a6:4b: ac:a0:86:60:e1:be:da:ec:9f:dc:32:03:94:58:49: 4e:ae:96:9a:d8:8d:8f:23:06:63:6f:9f:41:b0:b4: a8:80:ab:62:c4:0b:26:66:39:85:93:51:7d:c1:90: 84:6f:44:73:95:4a:7f:34:87:b6:2d:12:e0:4d:16: 80:30:44:38:d2:ca:99:d5:cb:16:e8:f7:83:e6:00: a0:02:57:a8:12:5a:b4:f6:1b:9d:19:35:a6:aa:28: b6:ad:36:4f:18:32:de:ed:be:5b:e2:22:11:e4:bf: 1b:92:28:88:f3:38:61:4f:10:c5:46:e4:1a:b3:9e: 8e:ca:ea:00:fc:8d:46:cb:e6:d8:b5:13:6f:de:0a: d0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:27:3D:20:7E:7A:62:89:4F:02:1B:DB:B3:95:71:96:8D:AF:95:BB X509v3 Authority Key Identifier: keyid:6C:B3:82:0D:A5:A4:A8:4B:2D:94:09:BD:F0:7F:25:45:FE:6D:0B:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLOCDaWkqEstlAm98H8lRf5tCxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:44:2d:a1:77:c6:3a:c7:ee:04:13:00:6a:a1:d7:a5:5e:28: c1:14:a0:b1:eb:71:d9:33:87:c3:6f:28:26:c0:40:4d:6f:4a: 92:6d:c3:ba:a7:e6:7d:bc:72:fd:83:c7:92:77:fc:10:b7:4f: 8f:48:28:25:ed:9b:6e:f0:0f:75:2a:5c:84:67:70:d2:04:97: 67:c8:e6:ae:34:21:34:9b:ce:2e:2e:26:6a:35:c1:18:ad:71: 22:2e:59:38:6d:e3:6a:48:8a:b9:84:89:fa:62:3f:fe:b7:34: 84:0d:0d:7c:02:f3:bb:b6:48:bf:e2:86:74:a0:52:fd:0f:9d: 74:3d:56:2b:31:83:0f:f4:65:af:12:6d:b6:cd:8d:9f:54:40: 4e:3a:d9:6c:26:e4:81:79:66:5d:08:5f:fd:ea:ba:a1:9f:ba: b2:f8:40:ac:7b:d3:63:78:51:07:74:4a:67:24:42:69:7a:5d: 61:e4:07:eb:3c:62:78:47:2f:0c:24:e3:f0:bf:c4:48:7d:98: 65:be:1e:41:ec:20:14:1d:25:d1:a1:f0:cb:23:6c:16:4f:0f: 8b:d1:38:3e:87:d1:05:0f:c4:e6:71:88:81:69:55:98:96:a7: 06:98:48:23:29:f1:8e:19:b3:80:14:87:01:df:e9:69:4d:fe: c6:07:db:eb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QjA2MzExMC8GA1UEBRMoNkNCMzgyMERBNUE0QTg0QjJEOTQwOUJERjA3RjI1NDVG RTZEMEIxMTAeFw0yNTA1MzEwNzAwMDdaFw0yNTA2MDcwNzAwMDZaMBgxFjAUBgNV BAMTDTY4M2FhOGY3LTA1NjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8Fdd3shH+47q9s8CFBsivPXERdXEw3o8gTtdjwVsAzu9ExVMW48KQ2UNkDmt2 SiN4Koc5xKQmvVxF271Y5i6Kthpaa04DpCo49pi2m6TWL5jmX07ld+LgaSu6ogOo PCyKuXIBRFa8DLXopUMIDAaXS3UahwemS6yghmDhvtrsn9wyA5RYSU6ulprYjY8j BmNvn0GwtKiAq2LECyZmOYWTUX3BkIRvRHOVSn80h7YtEuBNFoAwRDjSypnVyxbo 94PmAKACV6gSWrT2G50ZNaaqKLatNk8YMt7tvlviIhHkvxuSKIjzOGFPEMVG5Bqz no7K6gD8jUbL5ti1E2/eCtChAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdCc9IH56 YolPAhvbs5Vxlo2vlbswHwYDVR0jBBgwFoAUbLOCDaWkqEstlAm98H8lRf5tCxEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNCMDYzLzZDMEY5NjEwRDZF RDExRUY5RDlCRjM2QUM0RjlBRTAyL2JMT0NEYVdrcUVzdGxBbTk4SDhsUmY1dEN4 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYkxPQ0RhV2txRXN0bEFtOThIOGxSZjV0Q3hFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNC MDYzLzZDMEY5NjEwRDZFRDExRUY5RDlCRjM2QUM0RjlBRTAyL2JMT0NEYVdrcUVz dGxBbTk4SDhsUmY1dEN4RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFlELaF3xjrH7gQTAGqh16VeKMEUoLHrcdkzh8NvKCbAQE1vSpJtw7qn 5n28cv2Dx5J3/BC3T49IKCXtm27wD3UqXIRncNIEl2fI5q40ITSbzi4uJmo1wRit cSIuWTht42pIirmEifpiP/63NIQNDXwC87u2SL/ihnSgUv0PnXQ9Visxgw/0Za8S bbbNjZ9UQE462Wwm5IF5Zl0IX/3quqGfurL4QKx702N4UQd0SmckQml6XWHkB+s8 YnhHLwwk4/C/xEh9mGW+HkHsIBQdJdGh8MsjbBZPD4vROD6H0QUPxOZxiIFpVZiW pwaYSCMp8Y4Zs4AUhwHf6WlN/sYH2+s= -----END CERTIFICATE-----Generated at Sat May 31 16:56:09 2025 by rpki-client