$ rpki-client -vvf rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft File: BO4Hal36lIw4-DyMrCD-Do6G2As.mft (raw, json) Hash identifier: nDYrKnHDxcJPumGoF1Dv3HTosTNRTgb99DRlbrczC3M= Subject key identifier: A7:C5:69:2F:F7:2D:C8:E9:7C:20:79:B9:DA:FF:16:9E:6F:13:D1:4F Authority key identifier: 04:EE:07:6A:5D:FA:94:8C:38:F8:3C:8C:AC:20:FE:0E:8E:86:D8:0B Certificate issuer: /CN=A91E504E/serialNumber=04EE076A5DFA948C38F83C8CAC20FE0E8E86D80B Certificate serial: 039B Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft Manifest number: 0392 Signing time: Sat 05 Apr 2025 00:54:47 +0000 Manifest this update: Sat 05 Apr 2025 00:54:47 +0000 Manifest next update: Sat 12 Apr 2025 00:54:47 +0000 Files and hashes: 1: BO4Hal36lIw4-DyMrCD-Do6G2As.crl (hash: QQ4Lz3z5SdvRI9woIF0M6SaZsONU71hZNVS/0LjkHu0=) 2: 29D2F7BE0CA711ED98CF681AC4F9AE02.roa (hash: pTLG0WiZ5krYcSGHfWJAPWz+llPAx5qbifmNwzqhPMM=) 3: ACC1DEB0960A11EC8BB4F586C4F9AE02.roa (hash: /9wYxqntRiGnvgXxlBbc4/94IQMO4HOR9thkiSTkR6A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.crl rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 00:54:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 923 (0x39b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E504E Validity Not Before: Apr 5 00:54:47 2025 GMT Not After : Apr 12 00:54:47 2025 GMT Subject: CN=67f07f57-1680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:84:ec:3b:52:67:ef:c0:e4:f7:0c:07:ea:68: 19:2a:72:31:89:ef:dc:61:a0:2c:01:14:26:fb:05: b1:a9:3d:7e:26:bd:e3:e0:ed:a2:f1:e2:93:25:e7: b4:ba:ff:dc:22:a2:00:75:62:a0:27:74:02:aa:16: 2c:85:0b:bd:ad:84:f8:62:64:f8:9e:a5:a1:54:5f: 45:85:4d:df:3d:1d:eb:97:9d:aa:b1:2b:57:e7:8d: 58:59:90:44:c2:e4:84:3a:14:bb:99:aa:c7:0f:d5: 13:20:8a:62:5e:21:8e:95:61:13:cc:a0:9f:b1:d9: 80:5b:5e:63:6d:d7:b6:53:ae:ce:d4:84:9e:b8:bf: 15:69:52:5c:c4:c2:fa:06:14:f9:05:5e:6e:3f:4f: ef:cc:ae:ff:fa:f9:2a:73:56:06:39:bb:26:70:4c: da:28:f1:7f:93:fa:85:72:13:24:fd:b3:2f:05:94: 35:4d:66:a5:0d:d5:61:64:ef:8e:54:65:c2:2b:7f: 3b:23:47:b3:00:66:86:ff:ae:09:6f:73:96:fe:e6: 6e:ee:de:31:d8:73:48:f8:49:ce:2c:8e:82:18:e2: 53:23:5c:0f:b9:86:4a:a2:b8:fd:7a:41:84:7e:1f: 47:57:c1:2a:b7:aa:45:f6:a7:8b:f4:8e:78:04:37: 35:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:C5:69:2F:F7:2D:C8:E9:7C:20:79:B9:DA:FF:16:9E:6F:13:D1:4F X509v3 Authority Key Identifier: keyid:04:EE:07:6A:5D:FA:94:8C:38:F8:3C:8C:AC:20:FE:0E:8E:86:D8:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:00:68:0f:ad:45:b1:db:6a:7e:22:58:02:3d:d7:c4:76:4d: 8e:4a:56:03:70:5a:d7:00:1a:40:f2:7c:69:5b:c3:fd:07:67: 3c:0c:41:0a:95:03:fc:65:08:68:21:62:db:69:13:d0:8e:26: ec:01:58:c3:3a:db:fb:39:73:c5:45:cd:3c:ef:25:7e:2e:fe: 52:2b:9f:f8:fd:b7:71:81:8e:77:57:76:af:05:4d:78:c2:06: f3:e5:67:c7:1f:45:54:50:23:99:a5:88:b9:b7:60:6f:28:e0: d7:52:84:fb:82:52:5b:96:ba:a8:bf:55:b2:d4:90:e8:56:35: 37:9c:c9:a3:df:32:cf:83:f0:69:12:2f:b7:12:6a:d6:6b:91: 82:c4:37:63:b1:66:07:27:64:da:b8:25:b8:94:0d:69:f6:f1: c0:f3:45:7e:76:67:5d:7f:34:40:fe:17:12:d9:bc:bb:8b:a6: f4:3f:13:23:b2:25:23:d0:c0:2c:96:44:05:8d:24:45:d9:93: 92:a2:6e:88:e5:60:7c:48:f2:58:50:ff:81:45:89:e8:6e:fd: 06:f5:bb:d2:53:a2:48:f7:9b:e5:19:d6:ad:6a:e2:23:ee:81: 00:58:0b:4c:f8:8e:1b:58:c2:ff:b1:fb:1e:93:f3:fe:76:9f: 0b:7d:fa:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTUwNEUxMTAvBgNVBAUTKDA0RUUwNzZBNURGQTk0OEMzOEY4M0M4Q0FDMjBGRTBF OEU4NkQ4MEIwHhcNMjUwNDA1MDA1NDQ3WhcNMjUwNDEyMDA1NDQ3WjAYMRYwFAYD VQQDEw02N2YwN2Y1Ny0xNjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1YTsO1Jn78Dk9wwH6mgZKnIxie/cYaAsARQm+wWxqT1+Jr3j4O2i8eKTJee0 uv/cIqIAdWKgJ3QCqhYshQu9rYT4YmT4nqWhVF9FhU3fPR3rl52qsStX541YWZBE wuSEOhS7marHD9UTIIpiXiGOlWETzKCfsdmAW15jbde2U67O1ISeuL8VaVJcxML6 BhT5BV5uP0/vzK7/+vkqc1YGObsmcEzaKPF/k/qFchMk/bMvBZQ1TWalDdVhZO+O VGXCK387I0ezAGaG/64Jb3OW/uZu7t4x2HNI+EnOLI6CGOJTI1wPuYZKorj9ekGE fh9HV8Eqt6pF9qeL9I54BDc18wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKfFaS/3 LcjpfCB5udr/Fp5vE9FPMB8GA1UdIwQYMBaAFATuB2pd+pSMOPg8jKwg/g6OhtgL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTA0RS80NEE1MTk0ODk2 MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9CTzRIYWwzNmxJdzQtRHlNckNELURvNkcy QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0JPNEhhbDM2bEl3NC1EeU1yQ0QtRG82RzJBcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTA0RS80NEE1MTk0ODk2MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9CTzRIYWwzNmxJ dzQtRHlNckNELURvNkcyQXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuAGgPrUWx22p+IlgCPdfEdk2OSlYDcFrXABpA8nxpW8P9B2c8DEEK lQP8ZQhoIWLbaRPQjibsAVjDOtv7OXPFRc087yV+Lv5SK5/4/bdxgY53V3avBU14 wgbz5WfHH0VUUCOZpYi5t2BvKODXUoT7glJblrqov1Wy1JDoVjU3nMmj3zLPg/Bp Ei+3EmrWa5GCxDdjsWYHJ2TauCW4lA1p9vHA80V+dmddfzRA/hcS2by7i6b0PxMj siUj0MAslkQFjSRF2ZOSom6I5WB8SPJYUP+BRYnobv0G9bvSU6JI95vlGdatauIj 7oEAWAtM+I4bWML/sfsek/P+dp8Lffr0 -----END CERTIFICATE-----Generated at Sat Apr 5 16:44:48 2025 by rpki-client