$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft File: bicEPDr0D8Xll5OLFU9ci-D9_2w.mft (raw, json) Hash identifier: Wuz18ziGEt8vPeM2yslHJMFmym6h+qfKEMrI0IHGEuc= Subject key identifier: 3E:30:F0:B3:43:6A:62:64:E8:42:CF:33:A6:97:64:7A:84:C8:B0:F8 Authority key identifier: 6E:27:04:3C:3A:F4:0F:C5:E5:97:93:8B:15:4F:5C:8B:E0:FD:FF:6C Certificate issuer: /CN=A91E01F7/serialNumber=6E27043C3AF40FC5E597938B154F5C8BE0FDFF6C Certificate serial: 0746 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bicEPDr0D8Xll5OLFU9ci-D9_2w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft Manifest number: 0741 Signing time: Fri 30 May 2025 21:56:08 +0000 Manifest this update: Fri 30 May 2025 21:56:08 +0000 Manifest next update: Fri 06 Jun 2025 21:56:08 +0000 Files and hashes: 1: bicEPDr0D8Xll5OLFU9ci-D9_2w.crl (hash: sdgztTIipLRIyHwyq8OkmqTCJIryrn+CLDblrCh4RIY=) 2: C4E6FFAE2A5C11EB9D022535C4F9AE02.roa (hash: 0mX5AyQ3/wAE6Y3GapFs8PrduN5XApUo77DD01nsgSE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.crl rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bicEPDr0D8Xll5OLFU9ci-D9_2w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:56:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1862 (0x746) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E01F7, serialNumber=6E27043C3AF40FC5E597938B154F5C8BE0FDFF6C Validity Not Before: May 30 21:56:08 2025 GMT Not After : Jun 6 21:56:08 2025 GMT Subject: CN=683a2978-cd87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f6:00:14:9f:8e:86:c8:b3:de:48:d6:22:46: a1:41:46:98:22:a2:c3:d0:6a:93:f9:e0:c3:ad:37: 6a:12:75:8d:aa:1a:49:ec:23:63:5d:80:1e:00:8e: 82:03:71:69:bd:2f:39:d5:6c:c4:4b:30:c1:68:75: 19:d8:6e:ec:6d:d4:2e:ed:97:a2:43:4e:25:cd:42: 6c:f3:a9:ef:2a:06:5f:7e:42:d3:0e:3e:2c:b3:29: 42:20:50:b6:d6:f9:d5:f5:d6:62:84:26:cd:01:ee: 2e:86:13:ca:77:bd:69:e5:02:10:0e:b6:9e:e0:65: 41:2f:4f:2f:22:cf:4a:e3:1f:db:72:03:e2:96:9f: 9f:56:99:c8:09:9c:82:1b:0a:0e:6e:cf:47:78:5f: 10:17:b4:24:9a:e8:d5:bf:05:bb:42:63:58:e9:64: 43:47:e8:22:dc:bd:9a:1d:5b:38:eb:b0:76:e9:d8: 27:35:84:ae:d2:81:7b:e3:ed:bd:ea:cc:ab:c4:7e: 7a:1c:1b:36:c8:07:a2:fb:ff:69:c1:a6:cf:09:fc: 3e:b6:9e:fd:d5:41:c4:3a:84:d6:06:0c:96:c9:1f: 01:05:e2:dc:19:8e:ec:3f:1f:6e:df:d0:66:8c:11: 49:c1:01:62:e3:cc:d9:73:8a:f0:4e:3b:dc:2c:91: 5b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:30:F0:B3:43:6A:62:64:E8:42:CF:33:A6:97:64:7A:84:C8:B0:F8 X509v3 Authority Key Identifier: keyid:6E:27:04:3C:3A:F4:0F:C5:E5:97:93:8B:15:4F:5C:8B:E0:FD:FF:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bicEPDr0D8Xll5OLFU9ci-D9_2w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:af:3d:88:a0:cb:82:25:b6:b9:9d:9b:1b:11:a4:a7:9f:0c: 3f:21:09:8e:2c:af:8e:92:94:5c:2b:33:8a:0e:7d:69:bb:50: 68:fa:75:3f:41:9f:91:c4:31:c0:5a:2b:e6:25:d2:ac:2b:45: b6:22:a0:bd:4b:12:bf:70:4a:60:61:eb:82:4e:a0:c3:69:42: 77:aa:14:8b:56:93:61:1f:e0:7d:2c:f4:d8:3d:1c:59:3c:85: 19:4e:c0:8a:4d:f7:3b:90:b7:8d:9c:10:11:eb:e6:9d:e0:5d: 73:d0:6f:8d:d1:0a:df:82:0c:af:3a:bb:70:60:57:c4:96:3c: f9:4e:2e:b7:79:d7:20:02:eb:f0:0d:30:e8:a3:26:47:4b:85: 4c:b4:db:e2:80:f2:3e:67:02:69:d2:7c:94:95:97:7f:f9:29: fa:9c:79:ab:1a:81:60:cc:b3:cf:9f:e0:8b:dc:1e:7e:9e:6c: f1:c4:ce:2b:4c:3b:6f:4e:cb:d7:f0:22:50:b7:0d:78:43:00: 1a:13:9b:b4:23:9c:3a:ff:5f:ad:92:b3:43:6e:92:a5:97:c8: 99:8f:85:6d:01:f5:e3:8f:49:5d:cf:2b:d5:53:07:c4:0f:b2: 9c:ac:7b:48:3f:aa:d7:2e:ec:79:17:14:3e:e3:1e:67:c2:6f: 1c:2c:9f:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAxRjcxMTAvBgNVBAUTKDZFMjcwNDNDM0FGNDBGQzVFNTk3OTM4QjE1NEY1QzhC RTBGREZGNkMwHhcNMjUwNTMwMjE1NjA4WhcNMjUwNjA2MjE1NjA4WjAYMRYwFAYD VQQDEw02ODNhMjk3OC1jZDg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0fYAFJ+Ohsiz3kjWIkahQUaYIqLD0GqT+eDDrTdqEnWNqhpJ7CNjXYAeAI6C A3FpvS851WzESzDBaHUZ2G7sbdQu7ZeiQ04lzUJs86nvKgZffkLTDj4ssylCIFC2 1vnV9dZihCbNAe4uhhPKd71p5QIQDrae4GVBL08vIs9K4x/bcgPilp+fVpnICZyC GwoObs9HeF8QF7QkmujVvwW7QmNY6WRDR+gi3L2aHVs467B26dgnNYSu0oF74+29 6syrxH56HBs2yAei+/9pwabPCfw+tp791UHEOoTWBgyWyR8BBeLcGY7sPx9u39Bm jBFJwQFi48zZc4rwTjvcLJFbSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD4w8LND amJk6ELPM6aXZHqEyLD4MB8GA1UdIwQYMBaAFG4nBDw69A/F5ZeTixVPXIvg/f9s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDFGNy9GOTFEMEQyODJB NUIxMUVCQjg5MjFDMzVDNEY5QUUwMi9iaWNFUERyMEQ4WGxsNU9MRlU5Y2ktRDlf MncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JpY0VQRHIwRDhYbGw1T0xGVTljaS1EOV8ydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDFGNy9GOTFEMEQyODJBNUIxMUVCQjg5MjFDMzVDNEY5QUUwMi9iaWNFUERyMEQ4 WGxsNU9MRlU5Y2ktRDlfMncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHrz2IoMuCJba5nZsbEaSnnww/IQmOLK+OkpRcKzOKDn1pu1Bo+nU/ QZ+RxDHAWivmJdKsK0W2IqC9SxK/cEpgYeuCTqDDaUJ3qhSLVpNhH+B9LPTYPRxZ PIUZTsCKTfc7kLeNnBAR6+ad4F1z0G+N0QrfggyvOrtwYFfEljz5Ti63edcgAuvw DTDooyZHS4VMtNvigPI+ZwJp0nyUlZd/+Sn6nHmrGoFgzLPPn+CL3B5+nmzxxM4r TDtvTsvX8CJQtw14QwAaE5u0I5w6/1+tkrNDbpKll8iZj4VtAfXjj0ldzyvVUwfE D7KcrHtIP6rXLux5FxQ+4x5nwm8cLJ/S -----END CERTIFICATE-----Generated at Sat May 31 17:51:36 2025 by rpki-client