$ rpki-client -vvf rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft File: BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft (raw, json) Hash identifier: vSb+O6KABZ6aVtWbL5yaqEqSPI4QjVvZ75juIpBQgpE= Subject key identifier: 4F:59:46:BC:F4:76:85:1D:FA:3A:FB:55:8D:2F:CF:B6:61:A3:BC:07 Authority key identifier: 04:8A:A9:8F:3E:C5:4A:90:60:E5:BC:30:05:9D:5C:42:20:D7:C2:F7 Certificate issuer: /CN=A91D425A/serialNumber=048AA98F3EC54A9060E5BC30059D5C4220D7C2F7 Certificate serial: 0B13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft Manifest number: 0B0C Signing time: Fri 30 May 2025 19:27:47 +0000 Manifest this update: Fri 30 May 2025 19:27:47 +0000 Manifest next update: Fri 06 Jun 2025 19:27:47 +0000 Files and hashes: 1: BIqpjz7FSpBg5bwwBZ1cQiDXwvc.crl (hash: kcFTJiMMGeHFF+KULoWvADZKqZWlcmtAObBhNzk45TI=) 2: 494B4070419C11EAAE836772C4F9AE02.roa (hash: Y3JTz6x7Gh76YU/+03lkuBO3MY94CeW1sP7iPG9gZfk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.crl rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2835 (0xb13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D425A, serialNumber=048AA98F3EC54A9060E5BC30059D5C4220D7C2F7 Validity Not Before: May 30 19:27:47 2025 GMT Not After : Jun 6 19:27:47 2025 GMT Subject: CN=683a06b3-4878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:55:f6:14:9c:35:c0:81:be:79:47:ef:a7:c5: f4:b0:34:c5:59:fb:15:34:49:3f:a5:09:12:c6:53: 3e:84:04:fa:a5:e2:c3:7c:39:4d:79:5a:c5:4a:f2: 97:2e:8f:b1:99:ca:8f:4e:b0:c5:bf:be:0b:f4:54: ea:91:d5:1c:70:2c:5b:d2:df:71:83:07:76:10:55: da:1d:5c:a8:98:ed:9c:34:ba:99:be:78:ae:5b:63: 34:8f:e0:c1:95:98:44:d2:de:a2:f6:54:34:5f:da: a5:c0:66:f4:89:21:0d:e9:95:a6:35:72:12:7f:4b: de:3b:c3:ec:a3:d6:a2:a2:86:71:08:09:d6:05:48: b1:47:e1:5d:c8:84:f6:b0:dd:cf:31:dd:29:9e:02: 5f:d1:e4:5f:ec:0c:40:d8:82:8b:63:3a:a9:19:01: 90:78:c0:37:d9:23:94:78:53:d0:fb:ff:a5:2a:29: 19:55:b9:f5:46:2e:b9:ec:f9:0b:9c:09:15:e4:cd: 85:63:43:e9:b8:a5:ea:20:e5:c2:a8:97:1e:6a:9b: 66:a0:50:30:58:cb:d7:9c:9e:d4:40:46:71:e6:c3: 91:fc:bf:eb:ec:7c:72:ff:79:f9:c3:c0:bb:2f:f1: e0:af:b7:85:a2:81:c7:a4:d7:1b:f7:0e:29:73:b7: a3:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:59:46:BC:F4:76:85:1D:FA:3A:FB:55:8D:2F:CF:B6:61:A3:BC:07 X509v3 Authority Key Identifier: keyid:04:8A:A9:8F:3E:C5:4A:90:60:E5:BC:30:05:9D:5C:42:20:D7:C2:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:3f:fc:dd:23:2e:9e:83:e0:28:3e:f0:07:40:a0:a3:89:a7: a2:48:d8:53:78:d0:8a:08:ba:f2:a2:f0:c3:46:58:98:c2:26: cb:00:87:31:44:30:35:d6:02:79:30:55:76:46:55:e0:20:4c: b2:65:66:7c:21:e0:ee:a7:1b:3c:dd:e4:fa:0b:8c:ef:65:70: 91:9f:87:3a:e7:e8:de:e5:3b:95:fc:8d:39:89:23:f8:6d:08: 14:9f:b4:fd:90:6b:f3:dc:59:14:be:fe:6c:0e:e2:05:35:a1: e5:0a:a6:76:dd:b1:34:21:9b:41:ce:d2:cc:c9:91:43:06:c5: 3c:d0:20:d7:0f:c4:09:17:09:8c:0e:ab:e4:06:d3:b9:28:ee: 4b:a6:78:31:fd:3d:bb:52:d1:87:7f:57:57:21:35:c9:ec:97: 25:4d:5c:a3:8b:07:b1:f0:a9:f1:a8:64:b7:cf:70:02:56:be: b3:b4:ad:d8:97:44:c0:d5:69:d1:29:d3:5f:43:89:76:af:5d: e6:0b:90:3f:3d:86:32:cd:5c:56:f3:b6:9b:87:cf:8b:4a:78: d2:6c:9b:99:5f:e4:29:a6:84:b7:90:77:03:41:42:20:cb:2c: ac:b0:c8:3f:d0:74:f5:43:a0:aa:d2:15:06:4a:13:6d:fa:58: b2:58:d3:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQyNUExMTAvBgNVBAUTKDA0OEFBOThGM0VDNTRBOTA2MEU1QkMzMDA1OUQ1QzQy MjBEN0MyRjcwHhcNMjUwNTMwMTkyNzQ3WhcNMjUwNjA2MTkyNzQ3WjAYMRYwFAYD VQQDEw02ODNhMDZiMy00ODc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxFX2FJw1wIG+eUfvp8X0sDTFWfsVNEk/pQkSxlM+hAT6peLDfDlNeVrFSvKX Lo+xmcqPTrDFv74L9FTqkdUccCxb0t9xgwd2EFXaHVyomO2cNLqZvniuW2M0j+DB lZhE0t6i9lQ0X9qlwGb0iSEN6ZWmNXISf0veO8Pso9aiooZxCAnWBUixR+FdyIT2 sN3PMd0pngJf0eRf7AxA2IKLYzqpGQGQeMA32SOUeFPQ+/+lKikZVbn1Ri657PkL nAkV5M2FY0PpuKXqIOXCqJceaptmoFAwWMvXnJ7UQEZx5sOR/L/r7Hxy/3n5w8C7 L/Hgr7eFooHHpNcb9w4pc7ejgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE9ZRrz0 doUd+jr7VY0vz7Zho7wHMB8GA1UdIwQYMBaAFASKqY8+xUqQYOW8MAWdXEIg18L3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDI1QS8wMjRDMjRGODQx NkMxMUVBODNDM0VGNUFDNEY5QUUwMi9CSXFwano3RlNwQmc1Ynd3QloxY1FpRFh3 dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JJcXBqejdGU3BCZzVid3dCWjFjUWlEWHd2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDI1QS8wMjRDMjRGODQxNkMxMUVBODNDM0VGNUFDNEY5QUUwMi9CSXFwano3RlNw Qmc1Ynd3QloxY1FpRFh3dmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLP/zdIy6eg+AoPvAHQKCjiaeiSNhTeNCKCLryovDDRliYwibLAIcx RDA11gJ5MFV2RlXgIEyyZWZ8IeDupxs83eT6C4zvZXCRn4c65+je5TuV/I05iSP4 bQgUn7T9kGvz3FkUvv5sDuIFNaHlCqZ23bE0IZtBztLMyZFDBsU80CDXD8QJFwmM DqvkBtO5KO5Lpngx/T27UtGHf1dXITXJ7JclTVyjiwex8KnxqGS3z3ACVr6ztK3Y l0TA1WnRKdNfQ4l2r13mC5A/PYYyzVxW87abh8+LSnjSbJuZX+QppoS3kHcDQUIg yyyssMg/0HT1Q6Cq0hUGShNt+liyWNOg -----END CERTIFICATE-----Generated at Sat May 31 16:40:45 2025 by rpki-client